Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryChassis (1.3.6.1.4.1.25506.2.217.1.1.1)	accessible-for-notify	Unsigned32	Unsigned32	Chassis number for the notification.	As per the MIB.

hh3cARPTrapEntrySlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntrySlot (1.3.6.1.4.1.25506.2.217.1.1.2)	accessible-for-notify	Unsigned32	Unsigned32	Slot number for the notification.	As per the MIB.

hh3cARPTrapEntryIfName

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryIfName (1.3.6.1.4.1.25506.2.217.1.1.3)	accessible-for-notify	DisplayString	OCTET STRING (0..255)	Interface name for the notification.	As per the MIB.

hh3cARPTrapEntryThreshold

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryThreshold (1.3.6.1.4.1.25506.2.217.1.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	Alarm threshold.	As per the MIB.

hh3cARPTrapDynamicEntryNum

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDynamicEntryNum (1.3.6.1.4.1.25506.2.217.1.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of dynamic ARP entries.	As per the MIB.

hh3cARPTrapStaticEntryNum

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapStaticEntryNum (1.3.6.1.4.1.25506.2.217.1.1.6)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of static ARP entries.	As per the MIB.

hh3cARPTrapOtherEntryNum

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapOtherEntryNum (1.3.6.1.4.1.25506.2.217.1.1.7)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of other ARP entries.	As per the MIB.

hh3cARPTrapSuppEntryNum

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSuppEntryNum (1.3.6.1.4.1.25506.2.217.1.1.8)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of ARP suppression entries.	As per the MIB.

hh3cARPTrapLocalConflictIf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalConflictIf (1.3.6.1.4.1.25506.2.217.2.1.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Interface that receives the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalConflictMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalConflictMac (1.3.6.1.4.1.25506.2.217.2.1.1.2)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalConflictIP

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalConflictIP (1.3.6.1.4.1.25506.2.217.2.1.1.3)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalSrcMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalSrcMac (1.3.6.1.4.1.25506.2.217.2.1.1.4)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalSrcIp

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalSrcIp (1.3.6.1.4.1.25506.2.217.2.1.1.5)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalDstMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalDstMac (1.3.6.1.4.1.25506.2.217.2.1.1.6)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Target MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalDstIP

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalDstIP (1.3.6.1.4.1.25506.2.217.2.1.1.7)	accessible-for-notify	IpAddress	Standard MIB values.	Target IP address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalPeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.1.1.8)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalCeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalCeVlan (1.3.6.1.4.1.25506.2.217.2.1.1.9)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapLocalInboundIf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapLocalInboundIf (1.3.6.1.4.1.25506.2.217.2.1.1.10)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	As per the MIB.

hh3cARPTrapMoveUserIP

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveUserIP (1.3.6.1.4.1.25506.2.217.2.2.1.1)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the ARP packet whose port changes.	As per the MIB.

hh3cARPTrapMoveUserMAC

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveUserMAC (1.3.6.1.4.1.25506.2.217.2.2.1.2)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the ARP packet whose port changes.	As per the MIB.

hh3cARPTrapMoveLocalIf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveLocalIf (1.3.6.1.4.1.25506.2.217.2.2.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the port before migration.	As per the MIB.

hh3cARPTrapMoveLocalPeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveLocalPeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the ARP packet before port migration.	As per the MIB.

hh3cARPTrapMoveLocalCeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveLocalCeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the ARP packet before port migration.	As per the MIB.

hh3cARPTrapMoveRemoteIF

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveRemoteIF (1.3.6.1.4.1.25506.2.217.2.2.1.6)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the port after migration.	As per the MIB.

hh3cARPTrapMoveRemotePeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveRemotePeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.7)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the ARP packet after port migration.	As per the MIB.

hh3cARPTrapMoveRemoteCeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMoveRemoteCeVlan (1.3.6.1.4.1.25506.2.217.2.2.1.8)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the ARP packet after port migration.	As per the MIB.

hh3cARPTrapUIPCPRcvMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvMac (1.3.6.1.4.1.25506.2.217.2.3.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the conflicting ARP packet.	As per the MIB.

hh3cARPTrapUIPCPRcvPVid

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvPVid (1.3.6.1.4.1.25506.2.217.2.3.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the local interface on which the conflict occurs.	As per the MIB.

hh3cARPTrapUIPCPRcvCVid

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvCVid (1.3.6.1.4.1.25506.2.217.2.3.1.3)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the local interface on which the conflict occurs.	As per the MIB.

hh3cARPTrapUIPCPRcvIf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPRcvIf (1.3.6.1.4.1.25506.2.217.2.3.1.4)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Local interface on which the conflict occurs.	As per the MIB.

hh3cARPTrapUIPCPLocalMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalMac (1.3.6.1.4.1.25506.2.217.2.3.1.5)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	MAC address in the local ARP entry.	As per the MIB.

hh3cARPTrapUIPCPLocalPVid

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalPVid (1.3.6.1.4.1.25506.2.217.2.3.1.6)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapUIPCPLocalCVid

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalCVid (1.3.6.1.4.1.25506.2.217.2.3.1.7)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the conflicting ARP packet.	As per the MIB.

hh3cARPTrapUIPCPLocalIf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPLocalIf (1.3.6.1.4.1.25506.2.217.2.3.1.8)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the interface that receives the ARP packet.	As per the MIB.

hh3cARPTrapUIPCPIpAddr

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapUIPCPIpAddr (1.3.6.1.4.1.25506.2.217.2.3.1.9)	accessible-for-notify	IpAddress	Standard MIB values.	IP address in the local ARP entry.	As per the MIB.

hh3cARPTrapAckIfName

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapAckIfName (1.3.6.1.4.1.25506.2.217.2.4.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface that receives the packet.	As per the MIB.

hh3cARPTrapAckSourceIP

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapAckSourceIP (1.3.6.1.4.1.25506.2.217.2.4.1.2)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the received ARP packet.	As per the MIB.

hh3cARPTrapSpeedLimitChassis

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitChassis (1.3.6.1.4.1.25506.2.217.2.5.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis that sends ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitSlot (1.3.6.1.4.1.25506.2.217.2.5.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number for the ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitSupValue

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitSupValue (1.3.6.1.4.1.25506.2.217.2.5.1.3)	accessible-for-notify	Unsigned32	Standard MIB values.	Sending rate limit (in pps) for ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitCurValue

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitCurValue (1.3.6.1.4.1.25506.2.217.2.5.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	Current sending rate (in pps) for ARP packets or ARP Miss messages.	As per the MIB.

hh3cARPTrapSpeedLimitSupType

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapSpeedLimitSupType (1.3.6.1.4.1.25506.2.217.2.5.1.5)	accessible-for-notify	INTEGER	packet(1) miss(2)	Rate limit type.	As per the MIB.

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapSpeedLimitSupType (1.3.6.1.4.1.25506.2.217.2.5.1.5)

accessible-for-notify

INTEGER

packet(1)

miss(2)

Rate limit type.

As per the MIB.

hh3cARPTrapPktValidCheckIf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckIf (1.3.6.1.4.1.25506.2.217.2.6.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the interface that receives the ARP packet.	As per the MIB.

hh3cARPTrapPktValidCheckMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckMac (1.3.6.1.4.1.25506.2.217.2.6.1.2)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	Sender MAC address in the ARP packet.	As per the MIB.

hh3cARPTrapPktValidCheckIp

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckIp (1.3.6.1.4.1.25506.2.217.2.6.1.3)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the ARP packet.	As per the MIB.

hh3cARPTrapPktValidCheckVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidCheckVlan (1.3.6.1.4.1.25506.2.217.2.6.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	VLAN ID for the ARP packet.	As per the MIB.

hh3cARPTrapPktValidtCheckSvlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktValidtCheckSvlan (1.3.6.1.4.1.25506.2.217.2.6.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	Service VLAN ID for the ARP packet.	As per the MIB.

hh3cARPTrapGatewayCheckIf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapGatewayCheckIf (1.3.6.1.4.1.25506.2.217.2.7.1.1)	accessible-for-notify	OCTET STRING	OCTET STRING (1..47)	Name of the interface that receives the ARP attack packet.	As per the MIB.

hh3cARPTrapGatewayCheckSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapGatewayCheckSlot (1.3.6.1.4.1.25506.2.217.2.7.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number of the interface module that receives the ARP attack packet.	As per the MIB.

hh3cARPTrapGatewayCheckIp

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapGatewayCheckIp (1.3.6.1.4.1.25506.2.217.2.7.1.3)	accessible-for-notify	IpAddress	Standard MIB values.	Sender IP address in the received ARP attack packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktChassis

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktChassis (1.3.6.1.4.1.25506.2.217.2.8.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis in which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktSlot (1.3.6.1.4.1.25506.2.217.2.8.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the slot on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktIfName

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropVlanPktIfName

(1.3.6.1.4.1.25506.2.217.2.8.1.3)

accessible-for-notify

OCTET STRING

OCTET STRING (0..255)

Interface on which ARP attack detection drops a packet.

As per the MIB.

hh3cARPTrapDtcDropVlanPktVlanId

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktVlanId (1.3.6.1.4.1.25506.2.217.2.8.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the VLAN on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktServId

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVlanPktServId (1.3.6.1.4.1.25506.2.217.2.8.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the service where ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVlanPktType

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropVlanPktType (1.3.6.1.4.1.25506.2.217.2.8.1.6)

accessible-for-notify

INTEGER

sourceMacInvalidDrop (1)

destMacInvalidDrop (2)

ipInvalidDrop (3)

ipcimNobindingDrop (4)

Reason why ARP attack detection drops a packet.

As per the MIB.

hh3cARPTrapDtcDropVsiPktChassis

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktChassis (1.3.6.1.4.1.25506.2.217.2.9.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis in which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVsiPktSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktSlot (1.3.6.1.4.1.25506.2.217.2.9.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the slot on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropVsiPktIfName

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktIfName (1.3.6.1.4.1.25506.2.217.2.9.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface on which ARP attack detection drops a packet	As per the MIB.

hh3cARPTrapDtcDropVsiPktVlanId

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktVlanId (1.3.6.1.4.1.25506.2.217.2.9.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the VLAN on which ARP attack detection drops a packet	As per the MIB.

hh3cARPTrapDtcDropVsiPktServId

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropVsiPktServId (1.3.6.1.4.1.25506.2.217.2.9.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the service where ARP attack detection drops a packet	As per the MIB.

hh3cARPTrapDtcDropVsiPktType

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropVsiPktType (1.3.6.1.4.1.25506.2.217.2.9.1.6)

accessible-for-notify

INTEGER

sourceMacInvalidDrop (1)

destMacInvalidDrop (2)

ipInvalidDrop (3)

ipcimNobindingDrop (4)

Reason why ARP attack detection drops a packet

As per the MIB.

hh3cARPTrapDtcDropIfPktChassis

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktChassis (1.3.6.1.4.1.25506.2.217.2.10.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the chassis in which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktSlot (1.3.6.1.4.1.25506.2.217.2.10.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of the slot on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktIfName

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktIfName (1.3.6.1.4.1.25506.2.217.2.10.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktVlanId

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktVlanId (1.3.6.1.4.1.25506.2.217.2.10.1.4)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the VLAN on which ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktServId

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapDtcDropIfPktServId (1.3.6.1.4.1.25506.2.217.2.10.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	ID of the service where ARP attack detection drops a packet.	As per the MIB.

hh3cARPTrapDtcDropIfPktType

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cARPTrapDtcDropIfPktType (1.3.6.1.4.1.25506.2.217.2.10.1.6)

accessible-for-notify

INTEGER

sourceMacInvalidDrop (1)

destMacInvalidDrop (2)

ipInvalidDrop (3)

ipcimNobindingDrop (4)

Reason why ARP attack detection drops a packet.

As per the MIB.

hh3cARPTrapMacMismatchChassis

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchChassis (1.3.6.1.4.1.25506.2.217.2.11.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Chassis number for the MAC address inconsistency.	As per the MIB.

hh3cARPTrapMacMismatchSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchSlot (1.3.6.1.4.1.25506.2.217.2.11.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number for the MAC address inconsistency.	As per the MIB.

hh3cARPTrapMacMismatchIfName

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchIfName (1.3.6.1.4.1.25506.2.217.2.11.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface name for the MAC address inconsistency.	As per the MIB.

hh3cARPTrapMacMismatchIP

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchIP (1.3.6.1.4.1.25506.2.217.2.11.1.4)	accessible-for-notify	IpAddress	Standard MIB values.	IP address in the static ARP entry.	As per the MIB.

hh3cARPTrapMacMismatchVrf

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchVrf (1.3.6.1.4.1.25506.2.217.2.11.1.5)	accessible-for-notify	Unsigned32	Standard MIB values.	VPN instance for the static ARP entry.	As per the MIB.

hh3cARPTrapMacMismatchMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapMacMismatchMac (1.3.6.1.4.1.25506.2.217.2.11.1.6)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	MAC address in the static ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckChassis

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckChassis (1.3.6.1.4.1.25506.2.217.2.12.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Chassis number for the ARP entry check.	As per the MIB.

hh3cARPTrapEntryCheckSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckSlot (1.3.6.1.4.1.25506.2.217.2.12.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number for the ARP entry check.	As per the MIB.

hh3cARPTrapEntryCheckIfName

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckIfName (1.3.6.1.4.1.25506.2.217.2.12.1.3)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface name for the ARP entry check.	As per the MIB.

hh3cARPTrapEntryCheckIP

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckIP (1.3.6.1.4.1.25506.2.217.2.12.1.4)	accessible-for-notify	IpAddress	Standard MIB values.	IP address in the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckMac

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckMac (1.3.6.1.4.1.25506.2.217.2.12.1.5)	accessible-for-notify	OCTET STRING	OCTET STRING (1..15)	MAC address in the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckPeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckPeVlan (1.3.6.1.4.1.25506.2.217.2.12.1.6)	accessible-for-notify	Unsigned32	Standard MIB values.	Inner VLAN of the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckCeVlan

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckCeVlan (1.3.6.1.4.1.25506.2.217.2.12.1.7)	accessible-for-notify	Unsigned32	Standard MIB values.	Outer VLAN of the original ARP entry.	As per the MIB.

hh3cARPTrapEntryCheckPortIfName

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapEntryCheckPortIfName (1.3.6.1.4.1.25506.2.217.2.12.1.8)	accessible-for-notify	OCTET STRING	OCTET STRING (0..255)	Interface name for the original ARP entry.	As per the MIB.

hh3cARPTrapPktQueChassis

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktQueChassis (1.3.6.1.4.1.25506.2.217.2.13.1.1)	accessible-for-notify	Unsigned32	Standard MIB values.	Chassis number for the ARP packet queue.	As per the MIB.

hh3cARPTrapPktQueSlot

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktQueSlot (1.3.6.1.4.1.25506.2.217.2.13.1.2)	accessible-for-notify	Unsigned32	Standard MIB values.	Slot number of the card where the ARP packet queue resides.	As per the MIB.

hh3cARPTrapPktQueNum

Object (OID)	Access	Syntax	Value range	Description	Implementation
hh3cARPTrapPktQueNum (1.3.6.1.4.1.25506.2.217.2.13.1.3)	accessible-for-notify	Unsigned32	Standard MIB values.	Number of packets cached in the ARP packet queue.	As per the MIB.

Notifications

hh3cARPTrapThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.1	The number of global ARP entries exceeded the alarm threshold.	Error	Warning	1.3.6.1.4.1.25506.2.217.1.0.2 (hh3cARPTrapThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by the device exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP entries continues to increase, the device might not learn new ARP entries because of insufficient resources, which causes service interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.6 (hh3cARPTrapStaticEntryNum)	Number of static ARP entries.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.7 (hh3cARPTrapOtherEntryNum)	Number of other ARP entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

1. Execute the display arp all command to compare the numbers of static and dynamic ARP entries.

¡ If the number of static ARP entries is larger, go to step 2.

¡ If the number of dynamic ARP entries is larger, go to step 3.

2. Based on the network planning and service deployment, Identify whether the static ARP entries are necessary.

¡ If the static ARP entries are necessary, go to step 3.

¡ If the static ARP entries are not necessary, execute the undo arp command to delete specified ARP entries or execute the reset arp static command to clear all static ARP entries. Make sure the operation does not affect services.

3. Execute the arp max-learning-number command to set a larger dynamic ARP learning limit for the device. Execute the arp max-learning-num command to set larger dynamic ARP learning limits for interfaces.

4. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.2	The number of ARP entries dropped below the alarm threshold.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by the device drops below the alarm threshold (60% of the upper entry limit).

System impact

The device can learn ARP entries normally. No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.6 (hh3cARPTrapStaticEntryNum)	Number of static ARP entries.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.7 (hh3cARPTrapOtherEntryNum)	Number of other ARP entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapSlotThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.3	The number of ARP entries on the card exceeded the alarm threshold.	Error	Warning	1.3.6.1.4.1.25506.2.217.1.0.4(hh3cARPTrapSlotThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by a card exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP entries on the card continues to increase, the card might not learn new ARP entries because of insufficient resources, which causes service interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.1 (hh3cARPTrapEntryChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.2 (hh3cARPTrapEntrySlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

1. Execute the display arp command to view dynamic ARP entries on the card.

2. Based on the network planning and service deployment, Identify whether the dynamic ARP entries are necessary.

¡ If the dynamic ARP entries are necessary, go to step 3.

¡ If the dynamic ARP entries are not necessary, execute the undo arp command to delete specified ARP entries. Make sure the operation does not affect services.

3. Execute the arp max-learning-number command to set a larger dynamic ARP learning limit for the card.

4. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapSlotThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.4	The number of ARP entries on the card dropped below the alarm threshold.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by a card drops below the alarm threshold (60% of the upper entry limit).

System impact

The card can learn ARP entries normally. No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.1 (hh3cARPTrapEntryChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.2 (hh3cARPTrapEntrySlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapIfThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.5	The number of ARP entries on the interface exceeded the alarm threshold.	Error	Warning	1.3.6.1.4.1.25506.2.217.1.0.6(hh3cARPTrapIfThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by an interface exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP entries on the interface continues to increase, the interface might not learn new ARP entries because of insufficient resources, which causes service interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.3 (hh3cARPTrapEntryIfName)	Interface name.	N/A	DisplayString	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

1. Execute the display arp command to view the dynamic ARP entries on the interface.

2. Based on the network planning and service deployment, Identify whether the dynamic ARP entries are necessary.

¡ If the dynamic ARP entries are necessary, go to step 3.

¡ If the dynamic ARP entries are not necessary, execute the undo arp command to delete specified ARP entries. Make sure the operation does not affect services.

3. Execute the arp max-learning-num command to set a larger dynamic ARP learning limit for the interface.

4. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapIfThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.6	The number of ARP entries on the interface dropped below the alarm threshold.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the number of ARP entries learned by an interface drops below the alarm threshold (60% of the upper entry limit).

System impact

The interface can learn ARP entries normally. No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.3 (hh3cARPTrapEntryIfName)	Interface name.	N/A	DisplayString	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.5 (hh3cARPTrapDynamicEntryNum)	Number of dynamic ARP entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapSuppThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.7	The number of ARP suppression entries on the device exceeded the alarm threshold.	Error	Warning	1.3.6.1.4.1.25506.2.217.1.0.8(hh3cARPTrapSuppThresholdResume)	OFF

Notification triggers

This notification is generated when the number of ARP suppression entries learned by the device exceeds the alarm threshold (80% of the upper entry limit).

System impact

If the number of ARP suppression entries on the interface continues to increase, the device might not learn new ARP suppression entries because of insufficient resources, which causes service interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.8 (hh3cARPTrapSuppEntryNum)	Number of ARP suppression entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

1. Execute the display arp suppression xconnect-group command to view ARP suppression entries.

2. Based on the network planning and service deployment, Identify whether the ARP suppression entries are necessary.

¡ If the ARP suppression entries are necessary, go to step 3.

¡ If the ARP suppression entries are not necessary, execute the reset arp suppression xconnect-group command to clear ARP suppression entries.

3. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapSuppThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.1.0.8	The number of ARP suppression entries on the device dropped below the alarm threshold.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the number of ARP suppression entries learned by the device drops below the alarm threshold (60% of the upper entry limit).

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.1.1.4 (hh3cARPTrapEntryThreshold)	Alarm threshold.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.1.1.8 (hh3cARPTrapSuppEntryNum)	Number of ARP suppression entries.	N/A	Unsigned32	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapMACConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.1	The sender MAC address in the received ARP packet and the MAC address of the local device conflicted.	Error	Major	1.3.6.1.4.1.25506.2.217.2.1.0.2(hh3cARPTrapMACConflictResume)	OFF

Notification triggers

This notification is generated when the sender MAC address in the received ARP packet is the same as the MAC address of the local device.

This notification might be generated when the following events occur:

· An endpoint on the network has the same MAC address as that of the local device.

· The network has a loop.

System impact

The conflict might cause service interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.5 (hh3cARPTrapLocalSrcIp)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

1. Configure STP to Identify whether the network has a loop.

2. Identify whether another device on the network has the same MAC address as that of the local device.

¡ If you can identify the device that has the same MAC address, change the MAC address of the device.

¡ If you cannot identify the device that has the same MAC address, change the MAC address of the corresponding interface.

Make sure the operation does not affect services.

3. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapMACConflictResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.2	The condition that the sender MAC address in the received ARP packet and the MAC address of the local device conflicted was cleared.	Recovery	Major	N/A	OFF

Notification triggers

This notification is generated when the interface does not receive any ARP packet in which the sender MAC address is the same as the interface MAC address within 3 minutes.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.5 (hh3cARPTrapLocalSrcIp)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

No action is required.

hh3cARPTrapMACIPConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.3	The sender MAC and IP addresses in the received ARP packet and the MAC and IP addresses of the local device conflicted.	Error	Major	1.3.6.1.4.1.25506.2.217.2.1.0.4(hh3cARPTrapMACIPConflictResume)	OFF

Notification triggers

This notification is generated when the sender MAC and IP addresses in the received ARP packet are the same as the MAC and IP addresses of the local device.

This notification might be generated when the following events occur:

· The network has an ARP packet attack.

· The network has a loop.

System impact

The conflict might cause service interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.6 (hh3cARPTrapLocalDstMac)	Target MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.7 (hh3cARPTrapLocalDstIP)	Target IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

1. Configure STP to Identify whether the network has a loop.

2. If the network does not have any loop, identify the source through capturing packets, and then edit the IP and MAC addresses of the device that sends the ARP packet.

3. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapMACIPConflictResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.4	The condition that the sender MAC and IP addresses in the received ARP packet and the MAC and IP addresses of the local device conflicted was cleared.	Recovery	Major	N/A	OFF

Notification triggers

This notification is generated when the interface does not receive any ARP packet in which the sender IP and MAC addresses are the same as the interface IP and MAC addresses within 3 minutes.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.2 (hh3cARPTrapLocalConflictMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.6 (hh3cARPTrapLocalDstMac)	Target MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.7 (hh3cARPTrapLocalDstIP)	Target IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.10 (hh3cARPTrapLocalInboundIf)	Physical interface corresponding to the VLAN interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)

Recommended action

No action is required.

hh3cARPTrapIPConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.5	The sender IP address in the received ARP packet and the IP address of the local device conflicted.	Error	Major	1.3.6.1.4.1.25506.2.217.2.1.0.6(hh3cARPTrapIPConflictResume)	OFF

Notification triggers

This notification is generated when the sender IP address in the ARP packet is the same as that of the local device.

This notification might be generated when the following events occur:

· Another device on the network has the same IP address as that of the local device.

· The network has an ARP packet attack that forges the sender IP address.

System impact

The gateway information of the user might be edited by the attacker, which causes an ARP packet attack. As a result, user services might be interrupted.

Status control

ON

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.4 (hh3cARPTrapLocalSrcMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.

Recommended action

1. Identify whether another device on the network has the same IP address as that of the local device.

¡ If you can identify the device that has the same IP address, change the IP address of the device.

¡ If you cannot identify the device that has the same IP address, change the IP address of the corresponding interface. Make sure the operation does not affect services.

2. Identify whether an ARP packet attack exists on the network and identify the attack source through capturing packets.

3. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapIPConflictResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.1.0.6	The condition that the sender IP address in the received ARP packet and the IP address of the local device conflicted was cleared.	Recovery	Major	N/A	OFF

Notification triggers

This notification is generated when the interface does not receive any ARP packet in which the sender IP address is the same as the interface IP address within 3 minutes.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp local-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp local-conflict command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.1.1.1 (hh3cARPTrapLocalConflictIf)	Interface that receives the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.1.1.3 (hh3cARPTrapLocalConflictIP)	Sender IP address in the conflicting ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.4 (hh3cARPTrapLocalSrcMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.1.1.8 (hh3cARPTrapLocalPeVlan)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.1.1.9 (hh3cARPTrapLocalCeVlan)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapHostMoveAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.2.0.1	The access port for a host changed.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.2.0.2(hh3cARPTrapHostMoveResume)	OFF

Notification triggers

This notification is generated when the user port migrates after you enable recording user port migrations.

System impact

The user port migration might cause service interruption. Too many user port migrations might degrade the device performance.

Status control

ON

CLI: Use the snmp-agent trap enable arp user-move command.

OFF

CLI: Use the undo snmp-agent trap enable arp user-move command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.2.1.1 (hh3cARPTrapMoveUserIP)	Sender IP address in the ARP packet whose port changes.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.2 (hh3cARPTrapMoveUserMAC)	Sender MAC address in the ARP packet whose port changes.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.2.1.3 (hh3cARPTrapMoveLocalIf)	Name of the port before migration.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.2.1.4 (hh3cARPTrapMoveLocalPeVlan)	Outer VLAN of the ARP packet before port migration.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.5 (hh3cARPTrapMoveLocalCeVlan)	Inner VLAN of the ARP packet before port migration.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.6 (hh3cARPTrapMoveRemoteIF)	Name of the port after migration.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.2.1.7 (hh3cARPTrapMoveRemotePeVlan)	Outer VLAN of the ARP packet after port migration.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.8 (hh3cARPTrapMoveRemoteCeVlan)	Inner VLAN of the ARP packet after port migration.	N/A	Unsigned32	Standard MIB values.

Recommended action

1. Identify whether the user port migration is reasonable.

2. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapHostMoveResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.2.0.2	The condition that the access port for a host changed was cleared.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the access port for the user does not change within 3 minutes.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp user-move command.

OFF

CLI: Use the undo snmp-agent trap enable arp user-move command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.2.1.1 (hh3cARPTrapMoveUserIP)	Sender IP address in the ARP packet whose port changes.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.2 (hh3cARPTrapMoveUserMAC)	Sender MAC address in the ARP packet whose port changes.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.2.1.3 (hh3cARPTrapMoveLocalIf)	Name of the port before migration.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.2.1.4 (hh3cARPTrapMoveLocalPeVlan)	Outer VLAN of the ARP packet before port migration.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.5 (hh3cARPTrapMoveLocalCeVlan)	Inner VLAN of the ARP packet before port migration.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.6 (hh3cARPTrapMoveRemoteIF)	Name of the port after migration.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.2.1.7 (hh3cARPTrapMoveRemotePeVlan)	Outer VLAN of the ARP packet after port migration.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.2.1.8 (hh3cARPTrapMoveRemoteCeVlan)	Inner VLAN of the ARP packet after port migration.	N/A	Unsigned32	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapUserIpConflictAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.3.0.1	User IP address conflicted.	Error	Warning	N/A	OFF

Notification triggers

This notification is generated when a user IP address conflict occurs. The conflict occurs if an incoming ARP packet has the same sender IP address as an existing ARP entry but a different sender MAC address.

System impact

The network might have conflicting IP addresses, which causes route oscillation, service interruption, or traffic interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp user-ip-conflict command.

OFF

CLI: Use the undo snmp-agent trap enable arp user-ip-conflict command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.3.1.1 (hh3cARPTrapUIPCPRcvMac)	Sender MAC address in the conflicting ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.3.1.2 (hh3cARPTrapUIPCPRcvPVid)	Outer VLAN of the local interface on which the conflict occurs.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.3 (hh3cARPTrapUIPCPRcvCVid)	Inner VLAN of the local interface on which the conflict occurs.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.4 (hh3cARPTrapUIPCPRcvIf)	Local interface on which the conflict occurs.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.3.1.5 (hh3cARPTrapUIPCPLocalMac)	MAC address in the local ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.3.1.6 (hh3cARPTrapUIPCPLocalPVid)	Outer VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.7 (hh3cARPTrapUIPCPLocalCVid)	Inner VLAN of the conflicting ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.3.1.8 (hh3cARPTrapUIPCPLocalIf)	Name of the interface that receives the ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.3.1.9 (hh3cARPTrapUIPCPIpAddr)	IP address in the local ARP entry.	N/A	IpAddress	Standard MIB values.

Recommended action

1. Identify whether another device on the network has the same IP address as that of the local device.

¡ If you can identify the device that has the same IP address, change the IP address of the device.

¡ If you cannot identify the device that has the same IP address, change the IP address of the corresponding interface. Make sure the operation does not affect services.

2. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapAckStrictCheckAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.4.0.1	The received ARP packet was not the ARP reply to the ARP request sent by the device.	Error	Warning	N/A	OFF

Notification triggers

This notification is generated when the following conditions are met:

· You enable ARP active acknowledgement in strict mode on the device.

· When the device receives an ARP reply, it does not send any ARP request to the sender IP address in the reply within the probe interval.

System impact

Some normal ARP replies and ARP requests might be dropped, which affects normal services.

Status control

ON

CLI: Use the snmp-agent trap enable arp active-ack command.

OFF

CLI: Use the undo snmp-agent trap enable arp active-ack command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.4.1.1 (hh3cARPTrapAckIfName)	Interface that receives the ARP packet.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.4.1.2 (hh3cARPTrapAckSourceIP)	Sender IP address in the received ARP packet.	N/A	IpAddress	Standard MIB values.

Recommended action

1. Identify whether an ARP packet attack exists on the network and identify the attack source through capturing packets.

2. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapSpeedLimitAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.5.0.1	The sending rate of ARP packets or ARP Miss messages exceeded the alarm threshold.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.5.0.2(hh3cARPTrapSpeedLimitResume)	OFF

Notification triggers

This notification is generated when the sending rate of ARP packets or ARP Miss messages exceeds the alarm threshold.

System impact

Some normal ARP packets might be dropped, which causes traffic interruption.

Status control

ON

CLI: Use the snmp-agent trap enable arp rate-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp rate-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.5.1.1 (hh3cARPTrapSpeedLimitChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.2 (hh3cARPTrapSpeedLimitSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.3 (hh3cARPTrapSpeedLimitSupValue)	Sending rate limit (in pps) for ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.4 (hh3cARPTrapSpeedLimitCurValue)	Current sending rate (in pps) of ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.5 (hh3cARPTrapSpeedLimitSupType)	Rate limit type.	N/A	INTEGER	packet(1) miss(2)

Recommended action

1. Identify whether an ARP packet attack exists on the network. Identify the source for the IP packets with unresolvable destination IP addresses through capturing packets and Identify whether the source is reasonable.

2. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapSpeedLimitResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.5.0.2	The sending rate of ARP packets or ARP Miss messages dropped below 60% of the alarm threshold.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the sending rate of ARP packets or ARP Miss messages drops below 60% of the alarm threshold.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp rate-limit command.

OFF

CLI: Use the undo snmp-agent trap enable arp rate-limit command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.5.1.1 (hh3cARPTrapSpeedLimitChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.2 (hh3cARPTrapSpeedLimitSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.3 (hh3cARPTrapSpeedLimitSupValue)	Sending rate limit (in pps) for ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.4 (hh3cARPTrapSpeedLimitCurValue)	Current sending rate (in pps) of ARP packets or ARP Miss messages.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.5.1.5 (hh3cARPTrapSpeedLimitSupType)	Rate limit type.	N/A	INTEGER	packet(1) miss(2)

Recommended action

No action is required.

hh3cARPTrapPacketValidCheckAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.6.0.1	The device received an invalid ARP packet.	Error	Warning	N/A	OFF

Notification triggers

This notification is generated when the device receives an invalid ARP packet.

System impact

An ARP packet attack might exists on the network, which affects device operation.

Status control

ON

CLI: Use the snmp-agent trap enable arp packet-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp packet-check command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.6.1.1 (hh3cARPTrapPktValidCheckIf)	Name of the interface that receives the ARP packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.6.1.2 (hh3cARPTrapPktValidCheckMac)	Sender MAC address in the ARP packet.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.6.1.3 (hh3cARPTrapPktValidCheckIp)	Sender IP address in the ARP packet.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.6.1.4 (hh3cARPTrapPktValidCheckVlan)	VLAN ID of the ARP packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.6.1.5 (hh3cARPTrapPktValidtCheckSvlan)	Service VLAN ID of the ARP packet.	N/A	Unsigned32	Standard MIB values.

Recommended action

1. Identify whether an ARP packet attack exists on the network.

¡ If the notification is generated continuously, identify the attack source through capturing packets.

¡ If the notification is not generated continuously, no action is required.

2. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapGatewayCheckAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.7.0.1	The device received an ARP packet in which the sender IP address is the same as the gateway IP address.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.7.0.2( hh3cARPTrapGatewayCheckResume)	OFF

Notification triggers

This notification is generated when the device receives an ARP packet in which the sender IP address is the same as the gateway IP address.

System impact

The network might have a device which forges the gateway. This might affect normal services.

Status control

ON

CLI: Use the snmp-agent trap enable arp gateway-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp gateway-check command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.7.1.1 (hh3cARPTrapGatewayCheckIf)	Interface that receives the ARP attack packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.7.1.2 (hh3cARPTrapGatewayCheckSlot)	Slot number of the interface module that receives the ARP attack packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.7.1.3 (hh3cARPTrapGatewayCheckIp)	Sender IP address in the ARP attack packet.	N/A	IpAddress	Standard MIB values.

Recommended action

1. Identify whether another device on the network has the same IP address as the gateway IP address.

¡ If the device that has the same IP address as the gateway IP address exists, change the IP address of the device.

¡ If the device that has the same IP address as the gateway IP address does not exist, an attack might exist. As a best practice, identify the attack source through capturing packets.

2. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapGatewayCheckResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.7.0.2	The condition that the device received an ARP packet in which the sender IP address is the same as the gateway IP address was cleared.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the device does not receive any ARP packets in which the sender IP address is the same as the gateway IP address within 3 minutes.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp gateway-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp gateway-check command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.7.1.1 (hh3cARPTrapGatewayCheckIf)	Interface that receives the ARP attack packet.	N/A	OCTET STRING	OCTET STRING (1..47)
1.3.6.1.4.1.25506.2.217.2.7.1.2 (hh3cARPTrapGatewayCheckSlot)	Slot number of the interface module that receives the ARP attack packet.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.7.1.3 (hh3cARPTrapGatewayCheckIp)	Sender IP address in the ARP packet.	N/A	IpAddress	Standard MIB values.

Recommended action

No action is required.

hh3cARPTrapDtcDropVlanPktAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.8.0.1	ARP attack detection dropped a packet on a VLAN interface.	Informational	Warning	N/A	OFF

Notification triggers

This notification is generated when ARP attack detection drops a packet on a VLAN interface.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp detection-drop command.

OFF

CLI: Use the undo snmp-agent trap enable arp detection-drop command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.8.1.1 (hh3cARPTrapDtcDropVlanPktChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.2 (hh3cARPTrapDtcDropVlanPktSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.3 (hh3cARPTrapDtcDropVlanPktIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.8.1.4 (hh3cARPTrapDtcDropVlanPktVlanId)	VLAN ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.5 (hh3cARPTrapDtcDropVlanPktServId)	Service ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.8.1.6 (hh3cARPTrapDtcDropVlanPktType)	Reason why ARP attack detection drops a packet.	N/A	INTEGER	sourceMacInvalidDrop (1) destMacInvalidDrop (2) ipInvalidDrop (3) ipcimNobindingDrop (4)

Recommended action

No action is required.

hh3cARPTrapDtcDropVsiPktAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.9.0.1	ARP attack detection dropped a packet on a VSI interface.	Informational	Warning	N/A	OFF

Notification triggers

This notification is generated when ARP attack detection drops a packet on a VSI interface.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp detection-drop command.

OFF

CLI: Use the undo snmp-agent trap enable arp detection-drop command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.9.1.1 (hh3cARPTrapDtcDropVsiPktChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.2 (hh3cARPTrapDtcDropVsiPktSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.3 (hh3cARPTrapDtcDropVsiPktIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.9.1.4 (hh3cARPTrapDtcDropVsiPktVlanId)	VLAN ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.5 (hh3cARPTrapDtcDropVsiPktServId)	Service ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.9.1.6 (hh3cARPTrapDtcDropVsiPktType)	Reason why ARP attack detection drops a packet.	N/A	INTEGER	sourceMacInvalidDrop (1) destMacInvalidDrop (2) ipInvalidDrop (3) ipcimNobindingDrop (4)

Recommended action

No action is required.

hh3cARPTrapDtcDropIfPktAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.10.0.1	ARP attack detection dropped a packet on a Layer 2 Ethernet interface.	Informational	Warning	N/A	OFF

Notification triggers

This notification is generated when ARP attack detection drops a packet on a Layer 2 Ethernet interface.

System impact

No negative impact on services.

Status control

ON

CLI: Use the snmp-agent trap enable arp detection-drop command.

OFF

CLI: Use the undo snmp-agent trap enable arp detection-drop command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.10.1.1 (hh3cARPTrapDtcDropIfPktChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.2 (hh3cARPTrapDtcDropIfPktSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.3 (hh3cARPTrapDtcDropIfPktIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.10.1.4 (hh3cARPTrapDtcDropIfPktVlanId)	VLAN ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.5 (hh3cARPTrapDtcDropIfPktServId)	Service ID.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.10.1.6 (hh3cARPTrapDtcDropIfPktType)	Reason why ARP attack detection drops a packet.	N/A	INTEGER	sourceMacInvalidDrop (1) destMacInvalidDrop (2) ipInvalidDrop (3) ipcimNobindingDrop (4)

Recommended action

No action is required.

hh3cARPTrapMacMismatchAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.11.0.1	The MAC address in the static ARP entry was inconsistent with the actual MAC address.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.11.0.1(hh3cARPTrapMacMismatchResume)	OFF

Notification triggers

This notification is generated when the MAC address in the static ARP entry is inconsistent with the MAC address in the received ARP packet.

System impact

The short static ARP entry cannot be resolved, which affects normal services.

Status control

ON

CLI: Use the snmp-agent trap enable arp mac-mismatch command.

OFF

CLI: Use the undo snmp-agent trap enable arp mac-mismatch command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.11.1.1 (hh3cARPTrapMacMismatchChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.2 (hh3cARPTrapMacMismatchSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.3 (hh3cARPTrapMacMismatchIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.11.1.4 (hh3cARPTrapMacMismatchIP)	IP address in the static ARP entry.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.5 (hh3cARPTrapMacMismatchVrf)	VPN instance for the static ARP entry.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.6 (hh3cARPTrapMacMismatchMac)	MAC address in the static ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)

Recommended action

Identify whether the MAC address in the ARP packet is correct.

· If the MAC address is correct, edit the static ARP entry.

· If the MAC address is incorrect, the ARP packet is invalid and no action is required.

hh3cARPTrapMacMismatchResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.11.0.2	The MAC address in the static ARP entry is consistent with the actual MAC address.	Recovery	Warning	N/A	OFF

Notification triggers

This notification is generated when the MAC address in the static ARP entry is consistent with the MAC address in the received ARP packet.

System impact

The short static ARP entry is resolved and services become normal.

Status control

ON

CLI: Use the snmp-agent trap enable arp mac-mismatch command.

OFF

CLI: Use the undo snmp-agent trap enable arp mac-mismatch command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.11.1.1 (hh3cARPTrapMacMismatchChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.2 (hh3cARPTrapMacMismatchSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.3 (hh3cARPTrapMacMismatchIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.11.1.4 (hh3cARPTrapMacMismatchIP)	IP address in the static ARP entry.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.5 (hh3cARPTrapMacMismatchVrf)	VPN instance for the static ARP entry.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.11.1.6 (hh3cARPTrapMacMismatchMac)	MAC address in the static ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)

Recommended action

No action is required.

hh3cARPTrapEntryCheckAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.12.0.1	The device received an ARP packet which edited an existing ARP entry.	Informational	Warning	N/A	OFF

Notification triggers

This notification is generated when the device receives an ARP packet in which the information is inconsistent with the existing ARP entry.

System impact

User spoofing exists on the network, which affects normal services.

Status control

ON

CLI: Use the snmp-agent trap enable arp entry-check command.

OFF

CLI: Use the undo snmp-agent trap enable arp entry-check command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.12.1.1 (hh3cARPTrapEntryCheckChassis)	Chassis number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.2 (hh3cARPTrapEntryCheckSlot)	Slot number.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.3 (hh3cARPTrapEntryCheckIfName)	Interface name.	N/A	OCTET STRING	OCTET STRING (0..255)
1.3.6.1.4.1.25506.2.217.2.12.1.4 (hh3cARPTrapEntryCheckIP)	IP address in the original ARP entry.	N/A	IpAddress	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.5 (hh3cARPTrapEntryCheckMac)	MAC address in the modified ARP entry.	N/A	OCTET STRING	OCTET STRING (1..15)
1.3.6.1.4.1.25506.2.217.2.12.1.6 (hh3cARPTrapEntryCheckPeVlan)	Inner VLAN of the modified ARP entry.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.7 (hh3cARPTrapEntryCheckCeVlan)	Outer VLAN of the modified ARP entry.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.12.1.8 (hh3cARPTrapEntryCheckPortIfName)	Interface name in the modified ARP entry.	N/A	OCTET STRING	OCTET STRING (0..255)

Recommended action

1. Identify whether the ARP entry change is reasonable.

¡ If the change is reasonable, no action is required.

¡ If the change is unreasonable, identify the ARP packet source through the MAC address. Identify whether an ARP packet attack exists and take attack prevention measures.

2. If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapPktQueThresholdAlarm

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.13.0.1	The number of packets cached in the ARP packet queue exceeded the threshold.	Error	Warning	1.3.6.1.4.1.25506.2.217.2.13.0.2( hh3cARPTrapPktQueThresholdResume)	ON

Notification triggers

This notification is generated when the number of packets cached in the ARP packet queue exceeds 4K.

System impact

The network might have an ARP attack, which affects normal service operation.

Status control

ON

CLI: Use the snmp-agent trap enable arp pkt-threshold command.

OFF

CLI: Use the undo snmp-agent trap enable arp pkt-threshold command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.13.1.1 (hh3cARPTrapPktQueChassis)	Chassis number for the ARP packet queue.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.13.1.2 (hh3cARPTrapPktQueSlot)	Slot number of the card where the ARP packet queue resides.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.13.1.3 (hh3cARPTrapPktQueNum)	Number of packets cached in the ARP packet queue.	N/A	Unsigned32	Standard MIB values.

Recommended action

· Identify whether the network has an ARP attack and identify the attack source by capturing packets if an ARP attack exists.

· If the issue persists, collect configuration files and alarm information, and then contact H3C Support for help.

hh3cARPTrapPktQueThresholdResume

Basic information

OID	Event	Type	Severity	Recovery notification	Default status
1.3.6.1.4.1.25506.2.217.2.13.0.2	The number of packets cached in the ARP packet queue dropped below the threshold.	Recovery	Warning	N/A	ON

Notification triggers

This notification is generated when the number of packets cached in the ARP packet queue drops below 3K.

System impact

No negative impact on the system.

Status control

ON

CLI: Use the snmp-agent trap enable arp pkt-threshold command.

OFF

CLI: Use the undo snmp-agent trap enable arp pkt-threshold command.

Objects

OID (object name)	Description	Index nodes	Type	Value range
1.3.6.1.4.1.25506.2.217.2.13.1.1 (hh3cARPTrapPktQueChassis)	Chassis number for the ARP packet queue.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.13.1.2 (hh3cARPTrapPktQueSlot)	Slot number of the card where the ARP packet queue resides.	N/A	Unsigned32	Standard MIB values.
1.3.6.1.4.1.25506.2.217.2.13.1.3 (hh3cARPTrapPktQueNum)	Number of packets cached in the ARP packet queue.	N/A	Unsigned32	Standard MIB values.

Recommended action

No action is required.

05-Layer 3 - IP Services

Basic information

Notification triggers

System impact

Status control

ON

OFF

Objects

Recommended action

Basic information

Notification triggers

System impact

Status control

ON

OFF

Objects

Recommended action

Basic information

Notification triggers

System impact

Status control

ON

OFF

Objects

Recommended action

Basic information

Notification triggers

System impact

Status control

ON

OFF

Objects

Recommended action

Basic information

Notification triggers

System impact

Status control

ON

OFF

Objects

Recommended action

Basic information

Notification triggers

System impact

Status control

ON

OFF

Objects

Recommended action

Basic information

Notification triggers

System impact