ZTE-AN-SECURITY-ANTIATTACK-MIB

File: ZTE-AN-SECURITY-ANTIATTACK-MIB.mib (11588 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC IF-MIB
ZTE-AN-IF-MIB ZTE-AN-TC-MIB INET-ADDRESS-MIB
ZTE-AN-SMI

Imported symbols

OBJECT-TYPE MODULE-IDENTITY Integer32
NOTIFICATION-TYPE RowStatus MacAddress
ifIndex zxAnSubIfIndex VlanId
InetAddress InetAddressType InetAddressPrefixLength
zxAnServiceSecurity

Defined Types

ZxAnSecAASrcMacWhiteListEntry  
SEQUENCE    
  zxAnSecAASrcMacWLVid VlanId
  zxAnSecAASrcMacWLMac MacAddress
  zxAnSecAASrcMacWLRowStatus RowStatus

ZxAnSecAASrcIpWhiteListEntry  
SEQUENCE    
  zxAnSecAASrcIpWLIpType InetAddressType
  zxAnSecAASrcIpWLIp InetAddress
  zxAnSecAASrcIpWLIpPrefixLen InetAddressPrefixLength
  zxAnSecAASrcIpWLRowStatus RowStatus

Defined Values

zxAnSecurityAntiAttackMib 1.3.6.1.4.1.3902.1082.70.28
The MIB module for the management of anti-attack.
MODULE-IDENTITY    

zxAnSecAntiAttackGlobalObjects 1.3.6.1.4.1.3902.1082.70.28.1
OBJECT IDENTIFIER    

zxAnSecAntiAttackObjects 1.3.6.1.4.1.3902.1082.70.28.2
OBJECT IDENTIFIER    

zxAnSecAAWhiteListObjects 1.3.6.1.4.1.3902.1082.70.28.2.1
OBJECT IDENTIFIER    

zxAnSecAAWhiteListGlobalObjects 1.3.6.1.4.1.3902.1082.70.28.2.1.1
OBJECT IDENTIFIER    

zxAnSecAntiAttackEnable 1.3.6.1.4.1.3902.1082.70.28.1.2
Enable/disable anti-attack.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

zxAnSecAntiAttackMode 1.3.6.1.4.1.3902.1082.70.28.1.3
Mode of anti-attack. vlanAndSrcMac(1) - system will identify attack based on VLAN and source MAC address. srcIp(2) - system will identify attack based on source IP address.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER vlanAndSrcMac(1), srcIp(2)  

zxAnSecAntiAttackBlockDuration 1.3.6.1.4.1.3902.1082.70.28.1.4
Blocking duration for the source MAC or source IP address in the black list.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 10..86400  

zxAnSecAntiAttackPktRateThresh 1.3.6.1.4.1.3902.1082.70.28.1.5
Packet rate threshold. If packet average rate during zxAnSecAntiAttackBlockDuration is over zxAnSecAntiAttackPktRateThresh, system will put the source MAC or source IP address of packet into black list and raise alarm. If packet average rate during zxAnSecAntiAttackBlockDuration is below zxAnSecAntiAttackPktRateThresh, system will remove the source MAC or source IP address of packet from black list and restore alarm.
Status: current Access: read-write
OBJECT-TYPE    
  Integer32 10..1000  

zxAnSecAntiAttackDiagnosisLogEn 1.3.6.1.4.1.3902.1082.70.28.1.6
Enable/disable anti-attack diagnosis log. Only supports C6XX, not supports C3XX.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

zxAnSecAntiAttackRateLimitEnable 1.3.6.1.4.1.3902.1082.70.28.1.7
Enable/disable anti-attack rate limit. Only supports C6XX, not supports C3XX.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

zxAnSecAntiAttackWhiteListAction 1.3.6.1.4.1.3902.1082.70.28.2.1.1.1
Batch adding all next hops with ARP to white list when it is set to '1'. When get this variable, always return 1.
Status: current Access: read-write
OBJECT-TYPE    
  INTEGER batchAddNextHops(1)  

zxAnSecAASrcMacWhiteListTable 1.3.6.1.4.1.3902.1082.70.28.2.1.2
Source MAC white list table.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    ZxAnSecAASrcMacWhiteListEntry

zxAnSecAASrcMacWhiteListEntry 1.3.6.1.4.1.3902.1082.70.28.2.1.2.1
An entry of zxAnSecAASrcMacWhiteListTable.
Status: current Access: not-accessible
OBJECT-TYPE    
  ZxAnSecAASrcMacWhiteListEntry  

zxAnSecAASrcMacWLVid 1.3.6.1.4.1.3902.1082.70.28.2.1.2.1.1
VLAN ID that the attack packet comes from.
Status: current Access: not-accessible
OBJECT-TYPE    
  VlanId  

zxAnSecAASrcMacWLMac 1.3.6.1.4.1.3902.1082.70.28.2.1.2.1.2
Source MAC address of packet that will be put into white list or removed from white list.
Status: current Access: not-accessible
OBJECT-TYPE    
  MacAddress  

zxAnSecAASrcMacWLRowStatus 1.3.6.1.4.1.3902.1082.70.28.2.1.2.1.50
The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnSecAASrcMacWhiteListEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

zxAnSecAASrcIpWhiteListTable 1.3.6.1.4.1.3902.1082.70.28.2.1.3
Source IP white list table.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    ZxAnSecAASrcIpWhiteListEntry

zxAnSecAASrcIpWhiteListEntry 1.3.6.1.4.1.3902.1082.70.28.2.1.3.1
An entry of zxAnSecAASrcIpWhiteListTable.
Status: current Access: not-accessible
OBJECT-TYPE    
  ZxAnSecAASrcIpWhiteListEntry  

zxAnSecAASrcIpWLIpType 1.3.6.1.4.1.3902.1082.70.28.2.1.3.1.1
Source IP address type.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddressType  

zxAnSecAASrcIpWLIp 1.3.6.1.4.1.3902.1082.70.28.2.1.3.1.2
Source IP address of packet that will be put into white list or removed from white list.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddress  

zxAnSecAASrcIpWLIpPrefixLen 1.3.6.1.4.1.3902.1082.70.28.2.1.3.1.3
Source IP address prefix length.
Status: current Access: not-accessible
OBJECT-TYPE    
  InetAddressPrefixLength  

zxAnSecAASrcIpWLRowStatus 1.3.6.1.4.1.3902.1082.70.28.2.1.3.1.50
The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in ZxAnSecAASrcIpWhiteListEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus