Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryChassis (1.3.6.1.4.1.25506.2.217.1.1.1)	accessible-for-notify	Unsigned32	Unsigned32	Chassis number for the notification.	As per the MIB.

hh3cARPTrapEntrySlot (1.3.6.1.4.1.25506.2.217.1.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntrySlot (1.3.6.1.4.1.25506.2.217.1.1.2)	accessible-for-notify	Unsigned32	Unsigned32	Slot number for the notification.	As per the MIB.

hh3cARPTrapEntryIfName (1.3.6.1.4.1.25506.2.217.1.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryIfName (1.3.6.1.4.1.25506.2.217.1.1.3)	accessible-for-notify	DisplayString	OCTET STRING (0..255)	Interface name for the notification.	As per the MIB.

hh3cARPTrapEntryThreshold (1.3.6.1.4.1.25506.2.217.1.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryThreshold (1.3.6.1.4.1.25506.2.217.1.1.4)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Alarm threshold.	As per the MIB.

hh3cARPTrapDynamicEntryNum (1.3.6.1.4.1.25506.2.217.1.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDynamicEntryNum (1.3.6.1.4.1.25506.2.217.1.1.5)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Number of dynamic ARP entries.	As per the MIB.

hh3cARPTrapStaticEntryNum (1.3.6.1.4.1.25506.2.217.1.1.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapStaticEntryNum (1.3.6.1.4.1.25506.2.217.1.1.6)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Number of static ARP entries.	As per the MIB.

hh3cARPTrapOtherEntryNum (1.3.6.1.4.1.25506.2.217.1.1.7)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapOtherEntryNum (1.3.6.1.4.1.25506.2.217.1.1.7)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Number of other ARP entries.	As per the MIB.

hh3cARPTrapSuppEntryNum (1.3.6.1.4.1.25506.2.217.1.1.8)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSuppEntryNum (1.3.6.1.4.1.25506.2.217.1.1.8)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Number of ARP suppression entries.	As per the MIB.

hh3cARPTrapLocalConflictIf (1.3.6.1.4.1.25506.2.217.2.1.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalConflictIf (1.3.6.1.4.1.25506.2.217.2.1.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Interface that receives the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalConflictMac (1.3.6.1.4.1.25506.2.217.2.1.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalConflictMac (1.3.6.1.4.1.25506.2.217.2.1.1.2)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalConflictIP (1.3.6.1.4.1.25506.2.217.2.1.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalConflictIP (1.3.6.1.4.1.25506.2.217.2.1.1.3)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalSrcMac (1.3.6.1.4.1.25506.2.217.2.1.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalSrcMac (1.3.6.1.4.1.25506.2.217.2.1.1.4)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalSrcIp (1.3.6.1.4.1.25506.2.217.2.1.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalSrcIp (1.3.6.1.4.1.25506.2.217.2.1.1.5)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalDstMac (1.3.6.1.4.1.25506.2.217.2.1.1.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalDstMac (1.3.6.1.4.1.25506.2.217.2.1.1.6)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Target MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalDstIP (1.3.6.1.4.1.25506.2.217.2.1.1.7)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalDstIP (1.3.6.1.4.1.25506.2.217.2.1.1.7)	accessible-for-notify	IpAddress	Standard MIB values.	Target IP address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.1.1.8)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.1.1.8)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Outer VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.1.1.9)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.1.1.9)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Inner VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalInboundIf (1.3.6.1.4.1.25506.2.217.2.1.1.10)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalInboundIf (1.3.6.1.4.1.25506.2.217.2.1.1.10)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	As per the MIB.

hh3cARPTrapMoveUserIP (1.3.6.1.4.1.25506.2.217.2.2.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveUserIP (1.3.6.1.4.1.25506.2.217.2.2.1.1)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the ARP packet whose port changes.	As per the MIB.

hh3cARPTrapMoveUserMAC (1.3.6.1.4.1.25506.2.217.2.2.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveUserMAC (1.3.6.1.4.1.25506.2.217.2.2.1.2)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the ARP packet whose port changes.	As per the MIB.

hh3cARPTrapMoveLocalIf (1.3.6.1.4.1.25506.2.217.2.2.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveLocalIf (1.3.6.1.4.1.25506.2.217.2.2.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the port before migration.	As per the MIB.

hh3cARPTrapMoveLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.4)	accessible-for-notify	INTEGER	Interger32(1..2147483647)	Outer VLAN of the ARP packet before port migration.	As per the MIB.

hh3cARPTrapMoveLocalCeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveLocalCeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.5)	accessible-for-notify	INTEGER	Interger32(1..2147483647)	Inner VLAN of the ARP packet before port migration.	As per the MIB.

hh3cARPTrapMoveRemoteIF (1.3.6.1.4.1.25506.2.217.2.2.1.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveRemoteIF (1.3.6.1.4.1.25506.2.217.2.2.1.6)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Name of the port after migration.	As per the MIB.

hh3cARPTrapMoveRemotePeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.7)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveRemotePeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.7)	accessible-for-notify	INTEGER	Interger32(1..2147483647)	Outer VLAN of the ARP packet after port migration.	As per the MIB.

hh3cARPTrapMoveRemoteCeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.8)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveRemoteCeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.8)	accessible-for-notify	INTEGER	Interger32(1..2147483647)	Inner VLAN of the ARP packet after port migration.	As per the MIB.

hh3cARPTrapUIPCPRcvMac (1.3.6.1.4.1.25506.2.217.2.3.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvMac (1.3.6.1.4.1.25506.2.217.2.3.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapUIPCPRcvPVid (1.3.6.1.4.1.25506.2.217.2.3.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvPVid (1.3.6.1.4.1.25506.2.217.2.3.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the local interface on which the conflict occurs.	As per the MIB.

hh3cARPTrapUIPCPRcvCVid (1.3.6.1.4.1.25506.2.217.2.3.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvCVid (1.3.6.1.4.1.25506.2.217.2.3.1.3)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the local interface on which the conflict occurs.	As per the MIB.

hh3cARPTrapUIPCPRcvIf (1.3.6.1.4.1.25506.2.217.2.3.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvIf (1.3.6.1.4.1.25506.2.217.2.3.1.4)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Local interface on which the conflict occurs.	As per the MIB.

hh3cARPTrapUIPCPLocalMac (1.3.6.1.4.1.25506.2.217.2.3.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalMac (1.3.6.1.4.1.25506.2.217.2.3.1.5)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	MAC address in the local ARP entry.	As per the MIB.

hh3cARPTrapUIPCPLocalPVid (1.3.6.1.4.1.25506.2.217.2.3.1.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalPVid (1.3.6.1.4.1.25506.2.217.2.3.1.6)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapUIPCPLocalCVid (1.3.6.1.4.1.25506.2.217.2.3.1.7)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalCVid (1.3.6.1.4.1.25506.2.217.2.3.1.7)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapUIPCPLocalIf (1.3.6.1.4.1.25506.2.217.2.3.1.8)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalIf (1.3.6.1.4.1.25506.2.217.2.3.1.8)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the interface that receives the ARP packet.	As per the MIB.

hh3cARPTrapUIPCPIpAddr (1.3.6.1.4.1.25506.2.217.2.3.1.9)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPIpAddr (1.3.6.1.4.1.25506.2.217.2.3.1.9)	accessible-for-notify	IpAddress	Standard MIB values.	IP address in the local ARP entry.	As per the MIB.

hh3cARPTrapAckIfName (1.3.6.1.4.1.25506.2.217.2.4.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapAckIfName (1.3.6.1.4.1.25506.2.217.2.4.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Interface that receives the packet.	As per the MIB.

hh3cARPTrapAckSourceIP (1.3.6.1.4.1.25506.2.217.2.4.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapAckSourceIP (1.3.6.1.4.1.25506.2.217.2.4.1.2)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the received ARP packet.	As per the MIB.

hh3cARPTrapSpeedLimitChassis (1.3.6.1.4.1.25506.2.217.2.5.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitChassis (1.3.6.1.4.1.25506.2.217.2.5.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis that sends ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitSlot (1.3.6.1.4.1.25506.2.217.2.5.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitSlot (1.3.6.1.4.1.25506.2.217.2.5.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number for the ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitSupValue (1.3.6.1.4.1.25506.2.217.2.5.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitSupValue (1.3.6.1.4.1.25506.2.217.2.5.1.3)	accessible-for-notify	Unsigned32	Standard MIB values.	Sending rate limit (in pps) for ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitCurValue (1.3.6.1.4.1.25506.2.217.2.5.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitCurValue (1.3.6.1.4.1.25506.2.217.2.5.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	Current sending rate (in pps) for ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitSupType (1.3.6.1.4.1.25506.2.217.2.5.1.5)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapSpeedLimitSupType (1.3.6.1.4.1.25506.2.217.2.5.1.5)

accessible-for-notify

INTEGER

packet(1)

miss(2)

Rate limit type.

As per the MIB.

hh3cARPTrapPktValidCheckIf (1.3.6.1.4.1.25506.2.217.2.6.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckIf (1.3.6.1.4.1.25506.2.217.2.6.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the interface that receives the ARP packet.	As per the MIB.

hh3cARPTrapPktValidCheckMac (1.3.6.1.4.1.25506.2.217.2.6.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckMac (1.3.6.1.4.1.25506.2.217.2.6.1.2)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the ARP packet.	As per the MIB.

hh3cARPTrapPktValidCheckIp (1.3.6.1.4.1.25506.2.217.2.6.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckIp (1.3.6.1.4.1.25506.2.217.2.6.1.3)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the ARP packet.	As per the MIB.

hh3cARPTrapPktValidCheckVlan (1.3.6.1.4.1.25506.2.217.2.6.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckVlan (1.3.6.1.4.1.25506.2.217.2.6.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	VLAN ID for the ARP packet.	As per the MIB.

hh3cARPTrapPktValidtCheckSvlan (1.3.6.1.4.1.25506.2.217.2.6.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidtCheckSvlan (1.3.6.1.4.1.25506.2.217.2.6.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	Service VLAN ID for the ARP packet.	As per the MIB.

hh3cARPTrapGateWayCheckIf (1.3.6.1.4.1.25506.2.217.2.7.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapGateWayCheckIf (1.3.6.1.4.1.25506.2.217.2.7.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the interface that receives the ARP attack packet.	As per the MIB.

hh3cARPTrapGateWayCheckSlot (1.3.6.1.4.1.25506.2.217.2.7.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapGateWayCheckSlot (1.3.6.1.4.1.25506.2.217.2.7.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number of the interface module that receives the ARP attack packet.	As per the MIB.

hh3cARPTrapGateWayCheckIp (1.3.6.1.4.1.25506.2.217.2.7.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapGateWayCheckIp (1.3.6.1.4.1.25506.2.217.2.7.1.3)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the received ARP attack packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktChassis (1.3.6.1.4.1.25506.2.217.2.8.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktChassis (1.3.6.1.4.1.25506.2.217.2.8.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis in which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktSlot (1.3.6.1.4.1.25506.2.217.2.8.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktSlot (1.3.6.1.4.1.25506.2.217.2.8.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the slot on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktIfName

(1.3.6.1.4.1.25506.2.217.2.8.1.3)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropVlanPktIfName

(1.3.6.1.4.1.25506.2.217.2.8.1.3)

accessible-for-notify

OCTET STRING

OCTET STRING (0..255)

Interface on which ARP attack detection drops a packet.

As per the MIB.

hh3cARPTrapDtcDropVlanPktVlanId (1.3.6.1.4.1.25506.2.217.2.8.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktVlanId (1.3.6.1.4.1.25506.2.217.2.8.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the VLAN on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktServId (1.3.6.1.4.1.25506.2.217.2.8.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktServId (1.3.6.1.4.1.25506.2.217.2.8.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the service where ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktType (1.3.6.1.4.1.25506.2.217.2.8.1.6)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropVlanPktType (1.3.6.1.4.1.25506.2.217.2.8.1.6)

accessible-for-notify

INTEGER

sourceMacInvalidDrop (1)

destMacInvalidDrop (2)

ipInvalidDrop (3)

ipcimNobindingDrop (4)

Reason why ARP attack detection drops a packet.

As per the MIB.

hh3cARPTrapDtcDropVsiPktChassis (1.3.6.1.4.1.25506.2.217.2.9.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktChassis (1.3.6.1.4.1.25506.2.217.2.9.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis in which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVsiPktSlot (1.3.6.1.4.1.25506.2.217.2.9.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktSlot (1.3.6.1.4.1.25506.2.217.2.9.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the slot on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVsiPktIfName (1.3.6.1.4.1.25506.2.217.2.9.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktIfName (1.3.6.1.4.1.25506.2.217.2.9.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface on which ARP attack detection drops a packet	As per the MIB.

hh3cARPTrapDtcDropVsiPktVsiId (1.3.6.1.4.1.25506.2.217.2.9.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktVsiId (1.3.6.1.4.1.25506.2.217.2.9.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the VLAN on which ARP attack detection drops a packet	As per the MIB.

hh3cARPTrapDtcDropVsiPktServId (1.3.6.1.4.1.25506.2.217.2.9.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktServId (1.3.6.1.4.1.25506.2.217.2.9.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the service where ARP attack detection drops a packet	As per the MIB.

hh3cARPTrapDtcDropVsiPktType (1.3.6.1.4.1.25506.2.217.2.9.1.6)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropVsiPktType (1.3.6.1.4.1.25506.2.217.2.9.1.6)

accessible-for-notify

INTEGER

sourceMacInvalidDrop (1)

destMacInvalidDrop (2)

ipInvalidDrop (3)

ipcimNobindingDrop (4)

Reason why ARP attack detection drops a packet

As per the MIB.

hh3cARPTrapDtcDropIfPktChassis (1.3.6.1.4.1.25506.2.217.2.10.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktChassis (1.3.6.1.4.1.25506.2.217.2.10.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis in which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktSlot (1.3.6.1.4.1.25506.2.217.2.10.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktSlot (1.3.6.1.4.1.25506.2.217.2.10.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the slot on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktIfName (1.3.6.1.4.1.25506.2.217.2.10.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktIfName (1.3.6.1.4.1.25506.2.217.2.10.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktVsiId (1.3.6.1.4.1.25506.2.217.2.10.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktVsiId (1.3.6.1.4.1.25506.2.217.2.10.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the VLAN on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktServId (1.3.6.1.4.1.25506.2.217.2.10.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktServId (1.3.6.1.4.1.25506.2.217.2.10.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the service where ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktType (1.3.6.1.4.1.25506.2.217.2.10.1.6)

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropIfPktType (1.3.6.1.4.1.25506.2.217.2.10.1.6)

accessible-for-notify

INTEGER

sourceMacInvalidDrop (1)

destMacInvalidDrop (2)

ipInvalidDrop (3)

ipcimNobindingDrop (4)

Reason why ARP attack detection drops a packet.

As per the MIB.

hh3cARPTrapMacMismatchChassis (1.3.6.1.4.1.25506.2.217.2.11.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchChassis (1.3.6.1.4.1.25506.2.217.2.11.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Chassis number for the MAC address inconsistency.	As per the MIB.

hh3cARPTrapMacMismatchSlot (1.3.6.1.4.1.25506.2.217.2.11.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchSlot (1.3.6.1.4.1.25506.2.217.2.11.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number for the MAC address inconsistency.	As per the MIB.

hh3cARPTrapMacMismatchIfName (1.3.6.1.4.1.25506.2.217.2.11.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchIfName (1.3.6.1.4.1.25506.2.217.2.11.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface name for the MAC address inconsistency.	As per the MIB.

hh3cARPTrapMacMismatchIP (1.3.6.1.4.1.25506.2.217.2.11.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchIP (1.3.6.1.4.1.25506.2.217.2.11.1.4)	accessible-for-notify	IpAddress	Standard MIB values.	IP address in the static ARP entry.	As per the MIB.

hh3cARPTrapMacMismatchVrf (1.3.6.1.4.1.25506.2.217.2.11.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchVrf (1.3.6.1.4.1.25506.2.217.2.11.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	VPN instance for the static ARP entry.	As per the MIB.

hh3cARPTrapMacMismatchMac (1.3.6.1.4.1.25506.2.217.2.11.1.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchMac (1.3.6.1.4.1.25506.2.217.2.11.1.6)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	MAC address in the static ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckChassis (1.3.6.1.4.1.25506.2.217.2.12.1.1)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckChassis (1.3.6.1.4.1.25506.2.217.2.12.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Chassis number for the ARP entry check.	As per the MIB.

hh3cARPTrapEntryCheckSlot (1.3.6.1.4.1.25506.2.217.2.12.1.2)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckSlot (1.3.6.1.4.1.25506.2.217.2.12.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number for the ARP entry check.	As per the MIB.

hh3cARPTrapEntryCheckIfName (1.3.6.1.4.1.25506.2.217.2.12.1.3)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckIfName (1.3.6.1.4.1.25506.2.217.2.12.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface name for the ARP entry check.	As per the MIB.

hh3cARPTrapEntryCheckIP (1.3.6.1.4.1.25506.2.217.2.12.1.4)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckIP (1.3.6.1.4.1.25506.2.217.2.12.1.4)	accessible-for-notify	IpAddress	Standard MIB values.	IP address in the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckMac (1.3.6.1.4.1.25506.2.217.2.12.1.5)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckMac (1.3.6.1.4.1.25506.2.217.2.12.1.5)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	MAC address in the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckPeVlan (1.3.6.1.4.1.25506.2.217.2.12.1.6)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckPeVlan (1.3.6.1.4.1.25506.2.217.2.12.1.6)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Inner VLAN of the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckCeVlan (1.3.6.1.4.1.25506.2.217.2.12.1.7)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckCeVlan (1.3.6.1.4.1.25506.2.217.2.12.1.7)	accessible-for-notify	INTEGER	Integer32 (1..2147483647)	Outer VLAN of the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckPortIfName (1.3.6.1.4.1.25506.2.217.2.12.1.8)

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckPortIfName (1.3.6.1.4.1.25506.2.217.2.12.1.8)	accessible-for-notify	DisplayString	OCTET STRING (0..255)	Interface name for the original ARP entry.	As per the MIB.

Notifications

hh3cARPTrapThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.1	The number of global ARP entries exceeded the alarm threshold.	Error	Minor	1.3.6.1.4.1.25506.2.217.1.0.2 (hh3cARPTrapThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by the device exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP entries continues to increase, the device might not learn new ARP entries because of insufficient resources, which causes service interruption.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.6 (hh3cARPTrapStaticEntryNum)	Number of static ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.7 (hh3cARPTrapOtherEntryNum)	Number of other ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

1.Execute the display arp all command to compare the numbers of static and dynamic ARP entries.

- If the number of static ARP entries is larger, go to step 2.

- If the number of dynamic ARP entries is larger, go to step 3.

2.Based on the network planning and service deployment, check whether the static ARP entries are necessary.

- If the static ARP entries are necessary, go to step 3.

- If the static ARP entries are not necessary, execute the undo arp command to delete specified ARP entries or execute the reset arp static command to clear all static ARP entries. Make sure the operation does not affect services.

3.Execute the arp max-learning-number command to set a larger dynamic ARP learning limit for the device. Execute the arp max-learning-num command to set larger dynamic ARP learning limits for interfaces.

4.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.2	The number of ARP entries dropped below the alarm threshold.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by the device drops below the alarm threshold (60% of the upper entry limit).

System impact

The device can learn ARP entries normally. No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.6 (hh3cARPTrapStaticEntryNum)	Number of static ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.7 (hh3cARPTrapOtherEntryNum)	Number of other ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

No action is required.

hh3cARPTrapSlotThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.3	The number of ARP entries on the card exceeded the alarm threshold.	Error	Minor	1.3.6.1.4.1.25506.2.217.1.0.4 (hh3cARPTrapSlotThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by a card exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP entries on the card continues to increase, the card might not learn new ARP entries because of insufficient resources, which causes service interruption.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.1 (hh3cARPTrapEntryChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.2 (hh3cARPTrapEntrySlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

1.Execute the display arp command to view dynamic ARP entries on the card.

2.Based on the network planning and service deployment, check whether the dynamic ARP entries are necessary.

- If the dynamic ARP entries are necessary, go to step 3.

- If the dynamic ARP entries are not necessary, execute the undo arp command to delete specified ARP entries. Make sure the operation does not affect services.

3.Execute the arp max-learning-number command to set a larger dynamic ARP learning limit for the card.

4.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapSlotThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.4	The number of ARP entries on the card dropped below the alarm threshold.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by a card drops below the alarm threshold (60% of the upper entry limit).

System impact

The card can learn ARP entries normally. No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.1 (hh3cARPTrapEntryChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.2 (hh3cARPTrapEntrySlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

No action is required.

hh3cARPTrapIfThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.5	The number of ARP entries on the interface exceeded the alarm threshold.	Error	Minor	1.3.6.1.4.1.25506.2.217.1.0.6 (hh3cARPTrapIfThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by an interface exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP entries on the interface continues to increase, the interface might not learn new ARP entries because of insufficient resources, which causes service interruption.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.3 (hh3cARPTrapEntryIfName)	Interface name.	N/A	DisplayString	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

1.Execute the display arp command to view the dynamic ARP entries on the interface.

2.Based on the network planning and service deployment, check whether the dynamic ARP entries are necessary.

- If the dynamic ARP entries are necessary, go to step 3.

- If the dynamic ARP entries are not necessary, execute the undo arp command to delete specified ARP entries. Make sure the operation does not affect services.

3.Execute the arp max-learning-num command to set a larger dynamic ARP learning limit for the interface.

4.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapIfThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.6	The number of ARP entries on the interface dropped below the alarm threshold.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by an interface drops below the alarm threshold (60% of the upper entry limit).

System impact

The interface can learn ARP entries normally. No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.3 (hh3cARPTrapEntryIfName)	Interface name.	N/A	DisplayString	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

No action is required.

hh3cARPTrapSuppThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.7	The number of ARP suppression entries on the device exceeded the alarm threshold.	Error	Minor	1.3.6.1.4.1.25506.2.217.1.0.8 (hh3cARPTrapSuppThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP suppression entries learned by the device exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP suppression entries on the interface continues to increase, the device might not learn new ARP suppression entries because of insufficient resources, which causes service interruption.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.8 (hh3cARPTrapSuppEntryNum)	Number of ARP suppression entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

1.Execute the display arp suppression xconnect-group command to view ARP suppression entries.

2.Based on the network planning and service deployment, check whether the ARP suppression entries are necessary.

- If the ARP suppression entries are necessary, go to step 3.

- If the ARP suppression entries are not necessary, execute the reset arp suppression xconnect-group command to clear ARP suppression entries.

3.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapSuppThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.8	The number of ARP suppression entries on the device dropped below the alarm threshold.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the number of ARP suppression entries learned by the device drops below the alarm threshold (60% of the upper entry limit).

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.1.1.8 (hh3cARPTrapSuppEntryNum)	Number of ARP suppression entries.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

No action is required.

hh3cARPTrapMACConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.1	The sender MAC address in the received ARP packet and the MAC address of the local device conflicted.	Error	Major	1.3.6.1.4.1.25506.2.217.2.1.0.2 (hh3cARPTrapMACConflictResume)	OFF

Notification triggers

This notification is generated when the sender MAC address in the received ARP packet is the same as the MAC address of the local device.

This notification might be generated when the following events occur:

An endpoint on the network has the same MAC address as that of the local device.

The network has a loop.

System impact

The conflict might cause service interruption.

Status control

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.5 (hh3cARPTrapLocalSrcIp)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

1.Configure STP to check whether the network has a loop.

2.Check whether another device on the network has the same MAC address as that of the local device.

- If you can identify the device that has the same MAC address, change the MAC address of the device.

- If you cannot identify the device that has the same MAC address, change the MAC address of the corresponding interface.

Make sure the operation does not affect services.

3.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapMACConflictResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.2	The condition that the sender MAC address in the received ARP packet and the MAC address of the local device conflicted was cleared.	Recovery	Major	N/A (N/A)	OFF

Notification triggers

This notification is generated when the interface does not receive any ARP packet in which the sender MAC address is the same as the interface MAC address within 3 minutes.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.5 (hh3cARPTrapLocalSrcIp)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

No action is required.

hh3cARPTrapMACIPConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.3	The sender MAC and IP addresses in the received ARP packet and the MAC and IP addresses of the local device conflicted.	Error	Major	1.3.6.1.4.1.25506.2.217.2.1.0.4 (hh3cARPTrapMACIPConflictResume)	OFF

Notification triggers

This notification is generated when the sender MAC and IP addresses in the received ARP packet are the same as the MAC and IP addresses of the local device.

This notification might be generated when the following events occur:

The network has an ARP packet attack.

The network has a loop.

System impact

The conflict might cause service interruption.

Status control

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.6 (hh3cARPTrapLocalDstMac)	Target MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.7 (hh3cARPTrapLocalDstIP)	Target IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

1.Configure STP to check whether the network has a loop.

2.If the network does not have any loop, identify the source through capturing packets, and then edit the IP and MAC addresses of the device that sends the ARP packet.

3.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapMACIPConflictResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.4	The condition that the sender MAC and IP addresses in the received ARP packet and the MAC and IP addresses of the local device conflicted was cleared.	Recovery	Major	N/A (N/A)	OFF

Notification triggers

This notification is generated when the interface does not receive any ARP packet in which the sender IP and MAC addresses are the same as the interface IP and MAC addresses within 3 minutes.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.6 (hh3cARPTrapLocalDstMac)	Target MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.7 (hh3cARPTrapLocalDstIP)	Target IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

No action is required.

hh3cARPTrapIPConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.5	The sender IP address in the received ARP packet and the IP address of the local device conflicted.	Error	Major	1.3.6.1.4.1.25506.2.217.2.1.0.6 (hh3cARPTrapIPConflictResume)	OFF

Notification triggers

This notification is generated when the sender IP address in the ARP packet is the same as that of the local device.

This notification might be generated when the following events occur:

Another device on the network has the same IP address as that of the local device.

The network has an ARP packet attack that forges the sender IP address.

System impact

The gateway information of the user might be edited by the attacker, which causes an ARP packet attack. As a result, user services might be interrupted.

Status control

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.4 (hh3cARPTrapLocalSrcMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

1.Check whether another device on the network has the same IP address as that of the local device.

- If you can identify the device that has the same IP address, change the IP address of the device.

- If you cannot identify the device that has the same IP address, change the IP address of the corresponding interface. Make sure the operation does not affect services.

2.Check whether an ARP packet attack exists on the network and identify the attack source through capturing packets.

3.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapIPConflictResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.6	The condition that the sender IP address in the received ARP packet and the IP address of the local device conflicted was cleared.	Recovery	Major	N/A (N/A)	OFF

Notification triggers

This notification is generated when the interface does not receive any ARP packet in which the sender IP address is the same as the interface IP address within 3 minutes.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.4 (hh3cARPTrapLocalSrcMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	INTEGER	Integer32 (1..2147483647)

Recommended action

No action is required.

hh3cARPTrapHostMoveAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.2.0.1	The access port for a host changed.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.2.0.1 (hh3cARPTrapHostMoveResume)	OFF

Notification triggers

This notification is generated when the user port migrates after you enable recording user port migrations.

System impact

The user port migration might cause service interruption. Too many user port migrations might degrade the device performance.

Status control

CLI: Use the snmp-agent trap enable arp user-move command.

OFF

CLI: Use the undo snmp-agent trap enable arp user-move command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.2.1.1 (hh3cARPTrapMoveUserIP)	Sender IP address in the ARP packet whose port changes.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.2 (hh3cARPTrapMoveUserMAC)	Sender MAC address in the ARP packet whose port changes.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.2.1.3 (hh3cARPTrapMoveLocalIf)	Name of the port before migration.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.2.1.4 (hh3cARPTrapMoveLocalPeVlan)	Outer VLAN of the ARP packet before port migration.	N/A	INTEGER	Interger32(1..2147483647)
1.3.6.1.4.1.25506.2.217.2.2.1.5 (hh3cARPTrapMoveLocalCeVlan)	Inner VLAN of the ARP packet before port migration.	N/A	INTEGER	Interger32(1..2147483647)
1.3.6.1.4.1.25506.2.217.2.2.1.6 (hh3cARPTrapMoveRemoteIF)	Name of the port after migration.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.2.1.7 (hh3cARPTrapMoveRemotePeVlan)	Outer VLAN of the ARP packet after port migration.	N/A	INTEGER	Interger32(1..2147483647)
1.3.6.1.4.1.25506.2.217.2.2.1.8 (hh3cARPTrapMoveRemoteCeVlan)	Inner VLAN of the ARP packet after port migration.	N/A	INTEGER	Interger32(1..2147483647)

Recommended action

1.Check whether the user port migration is reasonable.

2.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapHostMoveResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.2.0.2	The condition that the access port for a host changed was cleared.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the access port for the user does not change within 3 minutes.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp user-move command.

OFF

CLI: Use the undo snmp-agent trap enable arp user-move command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.2.1.1 (hh3cARPTrapMoveUserIP)	Sender IP address in the ARP packet whose port changes.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.2 (hh3cARPTrapMoveUserMAC)	Sender MAC address in the ARP packet whose port changes.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.2.1.3 (hh3cARPTrapMoveLocalIf)	Name of the port before migration.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.2.1.4 (hh3cARPTrapMoveLocalPeVlan)	Outer VLAN of the ARP packet before port migration.	N/A	INTEGER	Interger32(1..2147483647)
1.3.6.1.4.1.25506.2.217.2.2.1.5 (hh3cARPTrapMoveLocalCeVlan)	Inner VLAN of the ARP packet before port migration.	N/A	INTEGER	Interger32(1..2147483647)
1.3.6.1.4.1.25506.2.217.2.2.1.6 (hh3cARPTrapMoveRemoteIF)	Name of the port after migration.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.2.1.7 (hh3cARPTrapMoveRemotePeVlan)	Outer VLAN of the ARP packet after port migration.	N/A	INTEGER	Interger32(1..2147483647)
1.3.6.1.4.1.25506.2.217.2.2.1.8 (hh3cARPTrapMoveRemoteCeVlan)	Inner VLAN of the ARP packet after port migration.	N/A	INTEGER	Interger32(1..2147483647)

Recommended action

No action is required.

hh3cARPTrapUserIpConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.3.0.1	User IP address conflicted.	Error	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when a user IP address conflict occurs. The conflict occurs if an incoming ARP packet has the same sender IP address as an existing ARP entry but a different sender MAC address.

System impact

The network might have conflicting IP addresses, which causes route oscillation, service interruption, or traffic interruption.

Status control

CLI: Use the snmp-agent trap enable arp user-ip-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp user-ip-conflict command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.3.1.1 (hh3cARPTrapUIPCPRcvMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.3.1.2 (hh3cARPTrapUIPCPRcvPVid)	Outer VLAN of the local interface on which the conflict occurs.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.3 (hh3cARPTrapUIPCPRcvCVid)	Inner VLAN of the local interface on which the conflict occurs.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.4 (hh3cARPTrapUIPCPRcvIf)	Local interface on which the conflict occurs.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.3.1.5 (hh3cARPTrapUIPCPLocalMac)	MAC address in the local ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.3.1.6 (hh3cARPTrapUIPCPLocalPVid)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.7 (hh3cARPTrapUIPCPLocalCVid)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.8 (hh3cARPTrapUIPCPLocalIf)	Name of the interface that receives the ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.3.1.9 (hh3cARPTrapUIPCPIpAddr)	IP address in the local ARP entry.	N/A	IpAddress	Standard MIB values.

Recommended action

1.Check whether another device on the network has the same IP address as that of the local device.

- If you can identify the device that has the same IP address, change the IP address of the device.

- If you cannot identify the device that has the same IP address, change the IP address of the corresponding interface. Make sure the operation does not affect services.

2.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapAckStrictCheckAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.4.0.1	The received ARP packet was not the ARP reply to the ARP request sent by the device.	Error	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the following conditions are met:

You enable ARP active acknowledgement in strict mode on the device.

When the device receives an ARP reply, it does not send any ARP request to the sender IP address in the reply within the probe interval.

System impact

Some normal ARP replies and ARP requests might be dropped, which affects normal services.

Status control

CLI: Use the snmp-agent trap enable arp active-ack command.

OFF

CLI: Use the undo snmp-agent trap enable arp active-ack command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.4.1.1 (hh3cARPTrapAckIfName)	Interface that receives the ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.4.1.2 (hh3cARPTrapAckSourceIP)	Sender IP address in the received ARP packet.	N/A	IpAddress	Standard MIB values.

Recommended action

1.Check whether an ARP packet attack exists on the network and identify the attack source through capturing packets.

2.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapSpeedLimitAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.5.0.1	The sending rate of ARP packets or ARP Miss messages exceeded the alarm threshold.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.5.0.2 (hh3cARPTrapSpeedLimitResume)	OFF

Notification triggers

This notification is generated when the sending rate of ARP packets or ARP Miss messages exceeds the alarm threshold.

System impact

Some normal ARP packets might be dropped, which causes traffic interruption.

Status control

CLI: Use the snmp-agent trap enable arp rate-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp rate-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.5.1.1 (hh3cARPTrapSpeedLimitChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.2 (hh3cARPTrapSpeedLimitSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.3 (hh3cARPTrapSpeedLimitSupValue)	Sending rate limit (in pps) for ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.4 (hh3cARPTrapSpeedLimitCurValue)	Current sending rate (in pps) of ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.5 (hh3cARPTrapSpeedLimitSupType)	Rate limit type.	N/A	INTEGER	packet(1), miss(2)

Recommended action

1.Check whether an ARP packet attack exists on the network. Identify the source for the IP packets with unresolvable destination IP addresses through capturing packets and check whether the source is reasonable.

2.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapSpeedLimitResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.5.0.2	The sending rate of ARP packets or ARP Miss messages dropped below 60% of the alarm threshold.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the sending rate of ARP packets or ARP Miss messages drops below 60% of the alarm threshold.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp rate-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp rate-limit command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.5.1.1 (hh3cARPTrapSpeedLimitChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.2 (hh3cARPTrapSpeedLimitSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.3 (hh3cARPTrapSpeedLimitSupValue)	Sending rate limit (in pps) for ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.4 (hh3cARPTrapSpeedLimitCurValue)	Current sending rate (in pps) of ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.5 (hh3cARPTrapSpeedLimitSupType)	Rate limit type.	N/A	INTEGER	packet(1), miss(2)

Recommended action

No action is required.

hh3cARPTrapPacketValidCheckAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.6.0.1	The device received an invalid ARP packet.	Error	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the device receives an invalid ARP packet.

System impact

An ARP packet attack might exists on the network, which affects device operation.

Status control

CLI: Use the snmp-agent trap enable arp packet-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp packet-check command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.6.1.1 (hh3cARPTrapPktValidCheckIf)	Name of the interface that receives the ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.6.1.2 (hh3cARPTrapPktValidCheckMac)	Sender MAC address in the ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.6.1.3 (hh3cARPTrapPktValidCheckIp)	Sender IP address in the ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.6.1.4 (hh3cARPTrapPktValidCheckVlan)	VLAN ID of the ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.6.1.5 (hh3cARPTrapPktValidtCheckSvlan)	Service VLAN ID of the ARP packet.	N/A	Unsigned32	Standard MIB values.

Recommended action

1.Check whether an ARP packet attack exists on the network.

- If the notification is generated continuously, identify the attack source through capturing packets.

- If the notification is not generated continuously, no action is required.

2.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapGatewayCheckAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.7.0.1	The device received an ARP packet in which the sender IP address is the same as the gateway IP address.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.7.0.1 (hh3cARPTrapGatewayCheckResume)	OFF

Notification triggers

This notification is generated when the device receives an ARP packet in which the sender IP address is the same as the gateway IP address.

System impact

The network might have a device which forges the gateway. This might affect normal services.

Status control

CLI: Use the snmp-agent trap enable arp gateway-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp gateway-check command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.7.1.1 (hh3cARPTrapGateWayCheckIf)	Interface that receives the ARP attack packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.7.1.2 (hh3cARPTrapGateWayCheckSlot)	Slot number of the interface module that receives the ARP attack packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.7.1.3 (hh3cARPTrapGateWayCheckIp)	Sender IP address in the ARP attack packet.	N/A	IpAddress	Standard MIB values.

Recommended action

1.Check whether another device on the network has the same IP address as the gateway IP address.

- If the device that has the same IP address as the gateway IP address exists, change the IP address of the device.

- If the device that has the same IP address as the gateway IP address does not exist, an attack might exist. As a best practice, identify the attack source through capturing packets.

2.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

hh3cARPTrapGatewayCheckResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.7.0.2	The condition that the device received an ARP packet in which the sender IP address is the same as the gateway IP address was cleared.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the device does not receive any ARP packets in which the sender IP address is the same as the gateway IP address within 3 minutes.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp gateway-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp gateway-check command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.7.1.1 (hh3cARPTrapGateWayCheckIf)	Interface that receives the ARP attack packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.7.1.2 (hh3cARPTrapGateWayCheckSlot)	Slot number of the interface module that receives the ARP attack packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.7.1.3 (hh3cARPTrapGateWayCheckIp)	Sender IP address in the ARP packet.	N/A	IpAddress	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapDtcDropVlanPktAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.8.0.1	ARP attack detection dropped a packet on a VLAN interface.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when ARP attack detection drops a packet on a VLAN interface.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp detection-drop command.

OFF

CLI: Use the undo snmp-agent trap enable arp detection-drop command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.8.1.1 (hh3cARPTrapDtcDropVlanPktChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.2 (hh3cARPTrapDtcDropVlanPktSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.3 (hh3cARPTrapDtcDropVlanPktIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.8.1.4 (hh3cARPTrapDtcDropVlanPktVlanId)	VLAN ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.5 (hh3cARPTrapDtcDropVlanPktServId)	Service ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.6 (hh3cARPTrapDtcDropVlanPktType)	Reason why ARP attack detection drops a packet.	N/A	INTEGER	sourceMacInvalidDrop (1), destMacInvalidDrop (2), ipInvalidDrop (3), ipcimNobindingDrop (4)

Recommended action

No action is required.

hh3cARPTrapDtcDropVsiPktAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.9.0.1	ARP attack detection dropped a packet on a VSI interface.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when ARP attack detection drops a packet on a VSI interface.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp detection-drop command.

OFF

CLI: Use the undo snmp-agent trap enable arp detection-drop command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.9.1.1 (hh3cARPTrapDtcDropVsiPktChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.2 (hh3cARPTrapDtcDropVsiPktSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.3 (hh3cARPTrapDtcDropVsiPktIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.9.1.4 (hh3cARPTrapDtcDropVsiPktVlanId)	VLAN ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.5 (hh3cARPTrapDtcDropVsiPktServId)	Service ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.6 (hh3cARPTrapDtcDropVsiPktType)	Reason why ARP attack detection drops a packet.	N/A	INTEGER	sourceMacInvalidDrop (1), destMacInvalidDrop (2), ipInvalidDrop (3), ipcimNobindingDrop (4)

Recommended action

No action is required.

hh3cARPTrapDtcDropIfPktAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.10.0.1	ARP attack detection dropped a packet on a Layer 2 Ethernet interface.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when ARP attack detection drops a packet on a Layer 2 Ethernet interface.

System impact

No negative impact on services.

Status control

CLI: Use the snmp-agent trap enable arp detection-drop command.

OFF

CLI: Use the undo snmp-agent trap enable arp detection-drop command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.10.1.1 (hh3cARPTrapDtcDropIfPktChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.2 (hh3cARPTrapDtcDropIfPktSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.3 (hh3cARPTrapDtcDropIfPktIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.10.1.4 (hh3cARPTrapDtcDropIfPktVlanId)	VLAN ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.5 (hh3cARPTrapDtcDropIfPktServId)	Service ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.6 (hh3cARPTrapDtcDropIfPktType)	Reason why ARP attack detection drops a packet.	N/A	INTEGER	sourceMacInvalidDrop (1), destMacInvalidDrop (2), ipInvalidDrop (3), ipcimNobindingDrop (4)

Recommended action

No action is required.

hh3cARPTrapMacMismatch

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.11.0.1	The MAC address in the static ARP entry was inconsistent with the actual MAC address.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.11.0.1 (hh3cARPTrapMacMismatchResume)	OFF

Notification triggers

This notification is generated when the MAC address in the static ARP entry is inconsistent with the MAC address in the received ARP packet.

System impact

The short static ARP entry cannot be resolved, which affects normal services.

Status control

CLI: Use the snmp-agent trap enable arp mac-mismatch command.

OFF

CLI: Use the undo snmp-agent trap enable arp mac-mismatch command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.11.1.1 (hh3cARPTrapMacMismatchChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.2 (hh3cARPTrapMacMismatchSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.3 (hh3cARPTrapMacMismatchIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.11.1.4 (hh3cARPTrapMacMismatchIP)	IP address in the static ARP entry.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.5 (hh3cARPTrapMacMismatchVrf)	VPN instance for the static ARP entry.	N/A	N/A	N/A
1.3.6.1.4.1.25506.2.217.2.11.1.6 (hh3cARPTrapMacMismatchMac)	MAC address in the static ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)

Recommended action

Check whether the MAC address in the ARP packet is correct.

● If the MAC address is correct, edit the static ARP entry.

● If the MAC address is incorrect, the ARP packet is invalid and no action is required.

hh3cARPTrapMacMismatchResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.11.0.2	The MAC address in the static ARP entry is consistent with the actual MAC address.	Recovery	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the MAC address in the static ARP entry is consistent with the MAC address in the received ARP packet.

System impact

The short static ARP entry is resolved and services become normal.

Status control

CLI: Use the snmp-agent trap enable arp mac-mismatch command.

OFF

CLI: Use the undo snmp-agent trap enable arp mac-mismatch command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.11.1.1 (hh3cARPTrapMacMismatchChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.2 (hh3cARPTrapMacMismatchSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.3 (hh3cARPTrapMacMismatchIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.11.1.4 (hh3cARPTrapMacMismatchIP)	IP address in the static ARP entry.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.5 (hh3cARPTrapMacMismatchVrf)	VPN instance for the static ARP entry.	N/A	N/A	N/A
1.3.6.1.4.1.25506.2.217.2.11.1.6 (hh3cARPTrapMacMismatchMac)	MAC address in the static ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)

Recommended action

No action is required.

hh3cARPTrapEntryCheck

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.12.0.2	The device received an ARP packet which edited an existing ARP entry.	Informational	Warning	N/A (N/A)	OFF

Notification triggers

This notification is generated when the device receives an ARP packet in which the information is inconsistent with the existing ARP entry.

System impact

User spoofing exists on the network, which affects normal services.

Status control

CLI: Use the snmp-agent trap enable arp entry-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-check command.

Object

OID (object name)	Description	Index	Type	Value range
1.3.6.1.4.1.25506.2.217.2.12.1.1 (hh3cARPTrapEntryCheckChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.2 (hh3cARPTrapEntryCheckSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.3 (hh3cARPTrapEntryCheckIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.12.1.4 (hh3cARPTrapEntryCheckIP)	IP address in the original ARP entry.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.5 (hh3cARPTrapEntryCheckMac)	MAC address in the modified ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.12.1.6 (hh3cARPTrapEntryCheckPeVlan)	Inner VLAN of the modified ARP entry.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.12.1.7 (hh3cARPTrapEntryCheckCeVlan)	Outer VLAN of the modified ARP entry.	N/A	INTEGER	Integer32 (1..2147483647)
1.3.6.1.4.1.25506.2.217.2.12.1.8 (hh3cARPTrapEntryCheckPortIfName)	Interface name in the modified ARP entry.	N/A	DisplayString	OCTET STRING (0..255)

Recommended action

1.Check whether the ARP entry change is reasonable.

- If the change is reasonable, no action is required.

- If the change is unreasonable, identify the ARP packet source through the MAC address. Check whether an ARP packet attack exists and take attack prevention measures.

2.If the issue persists, collect configuration files and alarm information, and then contact Technical Support for help.

08-Layer 3 - IP Services

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact

Status control

Object

Recommended action

Basic information

Notification triggers

System impact