MIBs Depot

DLINKSW-DOS-PREVENT-MIB

Registered at
1.3.6.1.4.1.171.14.59
Last updated
2013-05-30 00:00
Organization
D-Link Corp.
Revisions
2013-05-30 00:00
Namespace
dlink
Source file
DLINKSW-DOS-PREVENT-MIB
Digest
sha256:b5c00916c5e65f846ada8ea71a73b1da99c48247477e0a69efdcf81642745591

Description

This MIB contains managed objects for the DOS Protection application of the device.

Contact

D-Link Corporation Postal: No. 289, Sinhu 3rd Rd., Neihu District, Taipei City 114, Taiwan, R.O.C Tel: +886-2-66000123 E-mail: tsd@dlink.com.tw

Imports

FromSymbols
DLINK-ID-REC-MIBdlinkIndustrialCommon
IF-MIBInterfaceIndexOrZero
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter64, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

DLINK-ID-REC-MIB
DLINKSW-DOS-PREVENT-MIB
IANAifType-MIB
IF-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
DosAttackType
TEXTUAL-CONVENTION
This data type indicates a well-known DoS type which can be detected. Note that a particular agent may support only certain DoS attack types. Thus, the valid values of this object are project dependent. An agent may respond with an error (e.g., 'inconsistentValue ') to a management SET operation which attempts to modify the value to one which is not supported by the managed device.
current

Objects

NameOIDSyntaxAccessStatus
dDosPrevMIBNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.59.0
dDosPrevMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.59.1
dDosPrevGlobalNotifsEnabled
OBJECT-TYPE
Set to 'true' to enable global SNMP notification for DoS prevention feature. Setting the object to 'false' will disable SNMP notifications.
1.3.6.1.4.1.171.14.59.1.1TruthValueread-writecurrent
dDosPrevNotifyInfo
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.59.1.2
dDosPrevNotiInfoDropFramesCount
OBJECT-TYPE
This object indicates the total dropped packets due to DoS attack in the past 5 minutes.
1.3.6.1.4.1.171.14.59.1.2.1Counter64accessible-for-notifycurrent
dDosPrevNotiInfoDropIpAddr
OBJECT-TYPE
If the DoS packet is from the end station, represent the IP address of attacker; otherwise represent the router's IP.
1.3.6.1.4.1.171.14.59.1.2.2IpAddressaccessible-for-notifycurrent
dDosPrevNotiInfoDropPortNumber
OBJECT-TYPE
This object indicates the attacked port number.
1.3.6.1.4.1.171.14.59.1.2.3INTEGERaccessible-for-notifycurrent
dDosPrevCtrlTable
OBJECT-TYPE
A table includes the settings of all DoS prevention types supported by the Switch. Note: the special attack type 'all' is not included in this table.
1.3.6.1.4.1.171.14.59.1.3not-accessiblecurrent
dDosPrevCtrlEntry
OBJECT-TYPE
A single entry in the DoS prevention control table.
1.3.6.1.4.1.171.14.59.1.3.1not-accessiblecurrent
dDoSPrevCtrlAttackType
OBJECT-TYPE
This object indicates the DoS attack type.
1.3.6.1.4.1.171.14.59.1.3.1.1DosAttackTypenot-accessiblecurrent
dDoSPrevCtrlEnabled
OBJECT-TYPE
This object indicates the state of the DoS attack type. Setting this object to 'false' will reset other columnar objects in the same row.
1.3.6.1.4.1.171.14.59.1.3.1.2TruthValueread-writecurrent
dDoSPrevCtrlActionType
OBJECT-TYPE
This object indicates the action for the DoS prevention type. If this object is set to 'redirect' and dDoSPrevCtrlEnabled is 'true', the configuration will not take effect until a valid redirect port (dDoSPrevCtrlRedirectPort) is specified. If redirect port is not valid, the switch behaves same as 'drop' is set.
1.3.6.1.4.1.171.14.59.1.3.1.3INTEGER {drop(1), redirect(2)}read-writecurrent
dDoSPrevCtrlRedirectPort
OBJECT-TYPE
This object indicates the port to which the attacking packet will be redirected. A value of 0 means redirect port is unspecified. This object can only be modified for entries whose value of dDoSPrevCtrlEnabled is 'true' and dDoSPrevCtrlActionType is 'redirect'. Otherwise, inconsistentValue error will be returned.
1.3.6.1.4.1.171.14.59.1.3.1.4InterfaceIndexOrZeroread-writecurrent
dDoSPrevCtrlRedirectPriority
OBJECT-TYPE
This object configures the priority for the redirected attacking packets. Valid priority values are from 0 to 7. A value of 8 indicates that the original priority will not be changed when the packet is redirected. This object can only be modified for entries whose value of dDoSPrevCtrlEnabled is 'true', dDoSPrevCtrlActionType is 'redirect' and dDoSPrevCtrlRedirectPort is specified. Otherwise, inconsistentValue error will be returned.
1.3.6.1.4.1.171.14.59.1.3.1.5INTEGER (0..8)read-writecurrent
dDoSPrevCtrlRedirectRateLimit
OBJECT-TYPE
This object indicates the rate-limit (kilobit per second) for redirecting DoS attacking packets. The valid range and granularity is project dependent. A value of 0 indicates that there is no limit for redirecting DoS attacking packets. This object can only be modified for entries whose value of dDoSPrevCtrlEnabled is 'true', dDoSPrevCtrlActionType is 'redirect' and dDoSPrevCtrlRedirectPort is specified. Otherwise, inconsistentValue error will be returned.
1.3.6.1.4.1.171.14.59.1.3.1.6Unsigned32 (0..100000000)read-writecurrent
dDoSPrevCounterTable
OBJECT-TYPE
The table contains the counters of DoS prevention types supported by the Switch. This table only contains one entry of attack type is 'all' if per DoS-type counters is not supported.
1.3.6.1.4.1.171.14.59.1.4not-accessiblecurrent
dDoSPrevCounterEntry
OBJECT-TYPE
A single entry in the DoS prevention counter table.
1.3.6.1.4.1.171.14.59.1.4.1not-accessiblecurrent
dDoSPrevCounterAttackType
OBJECT-TYPE
This object indicates the DoS attack type.
1.3.6.1.4.1.171.14.59.1.4.1.1DosAttackTypenot-accessiblecurrent
dDoSPrevCounterFrameCount
OBJECT-TYPE
This object indicates the number of frames detected for the DoS attack prevention type.
1.3.6.1.4.1.171.14.59.1.4.1.2Counter64read-onlycurrent
dDoSPrevCounterClearCounter
OBJECT-TYPE
This object is used to reset the counter of the specific attack type when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.59.1.4.1.3INTEGER {clear(1), noOp(2)}read-createcurrent
dDosPrevMIBConformance
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.59.2
dDosPrevMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.59.2.1
dDosPrevMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.59.2.2

Notifications

NameOIDStatus
dDosPreveAttackDetected
NOTIFICATION-TYPE
This trap is sent when dDosPrevGlobalNotifsEnabled is 'true' and the DoS attack occurs in the past 5 minutes.
1.3.6.1.4.1.171.14.59.0.1current
dDosPreveAttackDetectedPacket
NOTIFICATION-TYPE
This trap is sent when dDosPrevGlobalNotifsEnabled is 'true' and the DoS attack occurs to detect the dropped attack packets.
1.3.6.1.4.1.171.14.59.0.2current

Conformance

NameOIDStatus
dDosPrevMIBCompliance
MODULE-COMPLIANCE
The compliance statement for the DoS Prevention MIB.
1.3.6.1.4.1.171.14.59.2.1.1current
dDosPrevBasicGroup
OBJECT-GROUP
The collection of objects provides basic control for DoS Prevention.
1.3.6.1.4.1.171.14.59.2.2.1current
dDosPrevActionRedirectCtrlGroup
OBJECT-GROUP
The collection of objects provides the advanced action control for DoS Prevention.
1.3.6.1.4.1.171.14.59.2.2.2current
dDosPrevNotifyObjectGroup
OBJECT-GROUP
The collection of objects provides the control and information of DoS notifications.
1.3.6.1.4.1.171.14.59.2.2.3current
dDosPrevNotificationsGroup
NOTIFICATION-GROUP
The collection of objects provides DoS notifications.
1.3.6.1.4.1.171.14.59.2.2.4current