Problem getting ARP and MAC tables via SNMP from Cisco Catalyst 9300 switches
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-21-2020 01:56 PM
1. SNMP on the switches is configured and working. We use SNMP v2. Switches respond to snmpwalk.
2. We use snmpwalk or snmpbulkwalk to get tables
3. For ARP tables, OID .1.3.6.1.2.1.4.22.1.2 is used
4. For MAC tables, OID .1.3.6.1.2.1.17.4.3.1.2 is used
5. These are not vendor specific OIDs. On other devices (non Cisco) they work correctly.
6. IOS XE 16 different subversions are installed on the switches.
We have two problems:
1. Switches return the ARP table but only 512 entries. Checked by snmwalk ... | wc -l Show command has larger table size.
2. Switches do not return the MAC table - No Such Object available on this agent at this OID
Questions:
1. How to remove the limit on the number of entries in the ARP table?
2. How to allow getting MAC tables by dot1dBridge OID or if it is not possible then which OID to use?
- Labels:
-
Network Management
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-21-2020 02:23 PM
i have not tried it, but look at the Cat 9300 MIB
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-21-2020 05:38 PM
Cisco says that Catalyst 9300 support BRIDGE-MIB. .1.3.6.1.2.1.17.4.3.1.2 = BRIDGE-MIB. But this is not work.
There may be a problem with the restrictions on the switch. But the config is close to default. And there are no obvious limitations.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-18-2025 02:53 PM
I know this topic is a few years old ... but I wanted to chime in.
At least for the "MAC-table" not showing via SNMP: What community-string do you use to request the MAC-table? Cisco uses indexed access for those MIBs. If you use "private" as community and have (just as example) VLAN 50 configured, I would try "private@50" as community string. This should give all the MACs in VLAN 50 as response via SNMP.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2025 03:58 AM
The 512 ARP entry limit is a platform restriction in some IOS XE versions; it can't be changed via config.Use CLI or NETCONF/YANG APIs for full ARP tables
The MAC OID .1.3.6.1.2.1.17.4.3.1.2 may not be supported on newer Cisco switches.
Use CISCO-BRIDGE-EXT-MIB or platform-specific MIBs to retrieve MAC tables.
