DLINKSW-DOS-PREVENT-MIB

File: DLINKSW-DOS-PREVENT-MIB.mib (15855 bytes)

Imported modules

SNMPv2-TC SNMPv2-SMI SNMPv2-CONF
IF-MIB DLINK-ID-REC-MIB

Imported symbols

TEXTUAL-CONVENTION MODULE-IDENTITY OBJECT-TYPE
Unsigned32 Counter64 IpAddress
TruthValue MODULE-COMPLIANCE OBJECT-GROUP
InterfaceIndexOrZero dlinkIndustrialCommon

Defined Types

DosAttackType  
This data type indicates a well-known DoS type which can be detected. Note that a particular agent may support only certain DoS attack types. Thus, the valid values of this object are project dependent. An agent may respond with an error (e.g., 'inconsistentValue ') to a management SET operation which attempts to modify the value to one which is not supported by the managed device.
TEXTUAL-CONVENTION    
  INTEGER landAttack(1), blatAttack(2), smurfAttack(3), tcpNullScan(4), tcpXmasScan(5), tcpSynFin(6), tcpSynSrcPortLess1024(7), arpMacSaMismatch(8), fraggleAttack(9), icmpRedirectAttack(10), icmpUnreachableAttack(11), ipRouteRecordAttack(12), ipSourceRouteAttack(13), pingDeathAttack(14), tcpFlagSynRst(15), tcpOverMacMcbc(16), tcpSynWithData(17), tcpTinyFragAttack(18), tcpUdpPortZero(19), tracertAttack(20), winNukeAttack(21), pingFlood(22), synFlood(23), teardrop(24), all(999)  

DDosPrevCtrlEntry  
SEQUENCE    
  dDoSPrevCtrlAttackType DosAttackType
  dDoSPrevCtrlEnabled TruthValue
  dDoSPrevCtrlActionType INTEGER
  dDoSPrevCtrlRedirectPort InterfaceIndexOrZero
  dDoSPrevCtrlRedirectPriority INTEGER
  dDoSPrevCtrlRedirectRateLimit Unsigned32

DDoSPrevCounterEntry  
SEQUENCE    
  dDoSPrevCounterAttackType DosAttackType
  dDoSPrevCounterFrameCount Counter64
  dDoSPrevCounterClearCounter INTEGER

Defined Values

dlinkSwDosPrevMIB 1.3.6.1.4.1.171.14.59
This MIB contains managed objects for the DOS Protection application of the device.
MODULE-IDENTITY    

dDosPrevMIBNotifications 1.3.6.1.4.1.171.14.59.0
OBJECT IDENTIFIER    

dDosPrevMIBObjects 1.3.6.1.4.1.171.14.59.1
OBJECT IDENTIFIER    

dDosPrevMIBConformance 1.3.6.1.4.1.171.14.59.2
OBJECT IDENTIFIER    

dDosPrevGlobalNotifsEnabled 1.3.6.1.4.1.171.14.59.1.1
Set to 'true' to enable global SNMP notification for DoS prevention feature. Setting the object to 'false' will disable SNMP notifications.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

dDosPrevNotifyInfo 1.3.6.1.4.1.171.14.59.1.2
OBJECT IDENTIFIER    

dDosPrevNotiInfoDropFramesCount 1.3.6.1.4.1.171.14.59.1.2.1
This object indicates the total dropped packets due to DoS attack in the past 5 minutes.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Counter64  

dDosPrevNotiInfoDropIpAddr 1.3.6.1.4.1.171.14.59.1.2.2
If the DoS packet is from the end station, represent the IP address of attacker; otherwise represent the router's IP.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  IpAddress  

dDosPrevNotiInfoDropPortNumber 1.3.6.1.4.1.171.14.59.1.2.3
This object indicates the attacked port number.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  INTEGER  

dDosPrevCtrlTable 1.3.6.1.4.1.171.14.59.1.3
A table includes the settings of all DoS prevention types supported by the Switch. Note: the special attack type 'all' is not included in this table.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DDosPrevCtrlEntry

dDosPrevCtrlEntry 1.3.6.1.4.1.171.14.59.1.3.1
A single entry in the DoS prevention control table.
Status: current Access: not-accessible
OBJECT-TYPE    
  DDosPrevCtrlEntry  

dDoSPrevCtrlAttackType 1.3.6.1.4.1.171.14.59.1.3.1.1
This object indicates the DoS attack type.
Status: current Access: not-accessible
OBJECT-TYPE    
  DosAttackType  

dDoSPrevCtrlEnabled 1.3.6.1.4.1.171.14.59.1.3.1.2
This object indicates the state of the DoS attack type. Setting this object to 'false' will reset other columnar objects in the same row.
Status: current Access: read-write
OBJECT-TYPE    
  TruthValue  

dDoSPrevCtrlActionType 1.3.6.1.4.1.171.14.59.1.3.1.3
This object indicates the action for the DoS prevention type. If this object is set to 'redirect' and dDoSPrevCtrlEnabled is 'true', the configuration will not take effect until a valid redirect port (dDoSPrevCtrlRedirectPort) is specified. If redirect port is not valid, the switch behaves same as 'drop' is set.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER drop(1), redirect(2)  

dDoSPrevCtrlRedirectPort 1.3.6.1.4.1.171.14.59.1.3.1.4
This object indicates the port to which the attacking packet will be redirected. A value of 0 means redirect port is unspecified. This object can only be modified for entries whose value of dDoSPrevCtrlEnabled is 'true' and dDoSPrevCtrlActionType is 'redirect'. Otherwise, inconsistentValue error will be returned.
Status: current Access: read-write
OBJECT-TYPE    
  InterfaceIndexOrZero  

dDoSPrevCtrlRedirectPriority 1.3.6.1.4.1.171.14.59.1.3.1.5
This object configures the priority for the redirected attacking packets. Valid priority values are from 0 to 7. A value of 8 indicates that the original priority will not be changed when the packet is redirected. This object can only be modified for entries whose value of dDoSPrevCtrlEnabled is 'true', dDoSPrevCtrlActionType is 'redirect' and dDoSPrevCtrlRedirectPort is specified. Otherwise, inconsistentValue error will be returned.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER 0..8  

dDoSPrevCtrlRedirectRateLimit 1.3.6.1.4.1.171.14.59.1.3.1.6
This object indicates the rate-limit (kilobit per second) for redirecting DoS attacking packets. The valid range and granularity is project dependent. A value of 0 indicates that there is no limit for redirecting DoS attacking packets. This object can only be modified for entries whose value of dDoSPrevCtrlEnabled is 'true', dDoSPrevCtrlActionType is 'redirect' and dDoSPrevCtrlRedirectPort is specified. Otherwise, inconsistentValue error will be returned.
Status: current Access: read-write
OBJECT-TYPE    
  Unsigned32 0..100000000  

dDoSPrevCounterTable 1.3.6.1.4.1.171.14.59.1.4
The table contains the counters of DoS prevention types supported by the Switch. This table only contains one entry of attack type is 'all' if per DoS-type counters is not supported.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    DDoSPrevCounterEntry

dDoSPrevCounterEntry 1.3.6.1.4.1.171.14.59.1.4.1
A single entry in the DoS prevention counter table.
Status: current Access: not-accessible
OBJECT-TYPE    
  DDoSPrevCounterEntry  

dDoSPrevCounterAttackType 1.3.6.1.4.1.171.14.59.1.4.1.1
This object indicates the DoS attack type.
Status: current Access: not-accessible
OBJECT-TYPE    
  DosAttackType  

dDoSPrevCounterFrameCount 1.3.6.1.4.1.171.14.59.1.4.1.2
This object indicates the number of frames detected for the DoS attack prevention type.
Status: current Access: read-only
OBJECT-TYPE    
  Counter64  

dDoSPrevCounterClearCounter 1.3.6.1.4.1.171.14.59.1.4.1.3
This object is used to reset the counter of the specific attack type when set to 'clear'. No action is taken if this object is set to 'noOp'. When read, the value 'noOp' is returned.
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER clear(1), noOp(2)  

dDosPreveAttackDetected 1.3.6.1.4.1.171.14.59.0.1
This trap is sent when dDosPrevGlobalNotifsEnabled is 'true' and the DoS attack occurs in the past 5 minutes.
Status: current Access: read-create
NOTIFICATION-TYPE    

dDosPreveAttackDetectedPacket 1.3.6.1.4.1.171.14.59.0.2
This trap is sent when dDosPrevGlobalNotifsEnabled is 'true' and the DoS attack occurs to detect the dropped attack packets.
Status: current Access: read-create
NOTIFICATION-TYPE    

dDosPrevMIBCompliances 1.3.6.1.4.1.171.14.59.2.1
OBJECT IDENTIFIER    

dDosPrevMIBGroups 1.3.6.1.4.1.171.14.59.2.2
OBJECT IDENTIFIER    

dDosPrevMIBCompliance 1.3.6.1.4.1.171.14.59.2.1.1
The compliance statement for the DoS Prevention MIB.
Status: current Access: read-create
MODULE-COMPLIANCE    

dDosPrevBasicGroup 1.3.6.1.4.1.171.14.59.2.2.1
The collection of objects provides basic control for DoS Prevention.
Status: current Access: read-create
OBJECT-GROUP    

dDosPrevActionRedirectCtrlGroup 1.3.6.1.4.1.171.14.59.2.2.2
The collection of objects provides the advanced action control for DoS Prevention.
Status: current Access: read-create
OBJECT-GROUP    

dDosPrevNotifyObjectGroup 1.3.6.1.4.1.171.14.59.2.2.3
The collection of objects provides the control and information of DoS notifications.
Status: current Access: read-create
OBJECT-GROUP    

dDosPrevNotificationsGroup 1.3.6.1.4.1.171.14.59.2.2.4
The collection of objects provides DoS notifications.
Status: current Access: read-create
NOTIFICATION-GROUP