MIBs Depot

DOS-PREV-MIB

Registered at
1.3.6.1.4.1.171.12.59
Last updated
2011-01-24 00:00
Organization
D-Link Corp.
Namespace
dlink
Source file
DOS-PREV-MIB
Digest
sha256:d6ea29603670157424b7ca4d7cd2a70a63bdb964f296d25ff13ff6c3424dec2f

Description

The MIB module for configuring the DoS prevention settings of the device.

Contact

http://support.dlink.com

Imports

FromSymbols
DLINK-ID-REC-MIBdlink-common-mgmt
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMIInteger32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

DLINK-ID-REC-MIB
DOS-PREV-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
swDoSCtrl
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.59.1
swDoSTrapLog
OBJECT-TYPE
This object indicates the status of the DoS prevention trap log.
1.3.6.1.4.1.171.12.59.1.1INTEGER {enable(1), disable(2), other(3)}read-writecurrent
swDoSClearCounters
OBJECT-TYPE
This object clears the DoS prevention frame counters.
1.3.6.1.4.1.171.12.59.1.2INTEGER {land-attack(1), blat-attack(2), smurf-attack(3), tcp-null-scan(4), tcp-xmascan(5), tcp-synfin(6), tcp-syn-srcport-less-1024(7), all(8), other(9), arp-mac-sa-mismatch(10), fraggle-attack(11), icmp-redirect-attack(12), icmp-unreachable-attack(13), ip-route-record-attac(14), ip-source-route-attack(15), ping-death-attack(16), tcp-flag-synrst(17), tcp-over-mac-mcbc(18), tcp-syn-with-data(19), tcp-tiny-frag-attack(20), tcpudp-port-zero(21), tracert-attack(22), winnuke-attack(23)}read-writecurrent
swDoSCtrlTable
OBJECT-TYPE
A table that holds the DoS prevention settings of the device.
1.3.6.1.4.1.171.12.59.1.3not-accessiblecurrent
swDoSCtrlEntry
OBJECT-TYPE
A list of DoS prevention settings of the device.
1.3.6.1.4.1.171.12.59.1.3.1not-accessiblecurrent
swDoSCtrlType
OBJECT-TYPE
This object indicates the DoS prevention type.
1.3.6.1.4.1.171.12.59.1.3.1.1INTEGER {land-attack(1), blat-attack(2), smurf-attack(3), tcp-null-scan(4), tcp-xmascan(5), tcp-synfin(6), tcp-syn-srcport-less-1024(7), arp-mac-sa-mismatch(10), fraggle-attack(11), icmp-redirect-attack(12), icmp-unreachable-attack(13), ip-route-record-attac(14), ip-source-route-attack(15), ping-death-attack(16), tcp-flag-synrst(17), tcp-over-mac-mcbc(18), tcp-syn-with-data(19), tcp-tiny-frag-attack(20), tcpudp-port-zero(21), tracert-attack(22), winnuke-attack(23)}read-onlycurrent
swDoSCtrlState
OBJECT-TYPE
This object indicates the status of the DoS prevention type.
1.3.6.1.4.1.171.12.59.1.3.1.2INTEGER {enable(1), disable(2)}read-writecurrent
swDoSCtrlActionType
OBJECT-TYPE
This object indicates the action for the DoS prevention type. If this object is set to 'mirror' and swDoSCtrlState is set to 'enable', the configuration will not take effect until a valid mirror port is specified. If mirror port is not valid the behavior will be the same as 'drop'
1.3.6.1.4.1.171.12.59.1.3.1.3INTEGER {drop(1), mirror(2)}read-writecurrent
swDoSCtrlMirrorPort
OBJECT-TYPE
This object indicates the port to which the attack packet will be forwarded. A value of 0 means that the DoS prevention action type is either not set to 'mirror'. or the 'mirror' DoS action is not active. When swDoSCtrlActionType is set to 'mirror' with swDoSCtrlState set to 'enable', setting this value to a valid port number will activate the 'mirror' DoS action.
1.3.6.1.4.1.171.12.59.1.3.1.4INTEGER (0..65535)read-writecurrent
swDoSCtrlMirrorPriority
OBJECT-TYPE
This object configures the priority of the detected packet. Valid priority values are from 0 to 7. The value 8 indicates that there will be no change in the priority of the DoS attack packet as it is forwarded to the mirror port. A valid mirror port must first be specified in order to set this value.
1.3.6.1.4.1.171.12.59.1.3.1.5INTEGER (0..8)read-writecurrent
swDoSCtrlMirrorRxRate
OBJECT-TYPE
This object indicates the rate of reception of DoS attack packets. The valid values are 64 to 1024000. A value of 0 indicates that the rate has no limit. The default value is 0. A valid mirror port must first be specified in order to set this value.
1.3.6.1.4.1.171.12.59.1.3.1.6INTEGER (0..1024000)read-writecurrent
swDoSCtrlFrameCount
OBJECT-TYPE
This object indicates the number of frames detected under the DoS prevention type. A valid mirror port must first be specified in order to set this value.
1.3.6.1.4.1.171.12.59.1.3.1.7INTEGERread-onlycurrent
swDoSTrapState
OBJECT-TYPE
This object indicates the status of the DoS prevention trap.
1.3.6.1.4.1.171.12.59.1.4INTEGER {enabled(1), disabled(2)}read-writecurrent
swDoSLogState
OBJECT-TYPE
This object indicates the status of the DoS prevention log.
1.3.6.1.4.1.171.12.59.1.5INTEGER {enabled(1), disabled(2)}read-writecurrent
swDoSFunctionVersion
OBJECT-TYPE
This object indicates the function version.
1.3.6.1.4.1.171.12.59.1.6DisplayString (SIZE(0..128))read-onlycurrent
swDoSNotify
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.59.4
swDoSNotifyPrefix
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.59.4.0
swDoSNotifyVarBindings
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.59.4.1
swDoSNotifyVarIpAddr
OBJECT-TYPE
If the DoS packet is from the end station, represent the IP address of attacker; otherwise represent the router's IP
1.3.6.1.4.1.171.12.59.4.1.1IpAddressaccessible-for-notifycurrent
swDoSNotifyVarPortNumber
OBJECT-TYPE
This object indicates the attacked portNum with a string, For example, if the device is in standalone mode, and the port number is 23, the string should be 23. If the device is in stack mode, and the unit ID is 2, and the port number is 3, the string should be 2:3.
1.3.6.1.4.1.171.12.59.4.1.2DisplayStringaccessible-for-notifycurrent

Notifications

NameOIDStatus
swDoSAttackDetected
NOTIFICATION-TYPE
This trap is sent when the specific DoS packet is received and trap is enabled.
1.3.6.1.4.1.171.12.59.4.0.1current