All MIBs › CISCOSB-SECURITY-SUITE › rlSecuritySuiteDenySynFinTcp
rlSecuritySuiteDenySynFinTcp
Module: CISCOSB-SECURITY-SUITE
OID (symbolic): CISCOSB-SECURITY-SUITE::rlSecuritySuiteDenySynFinTcp
OID (numeric): 1.3.6.1.4.1.9.6.1.101.120.9
Node type: OBJECT-TYPE
Type: RlSecuritySuiteDenySynFinTcp
Access: read-write
Description: This scalar globally enable or disable dropping of tcp packets with both SYN and FIN flags enabled.
What is rlSecuritySuiteDenySynFinTcp?
This read-write field globally enables or disables dropping TCP packets that have both the SYN and FIN flags set simultaneously. Admins care because that flag combination is a well-known scanning and firewall-evasion technique, and blocking it closes off a common reconnaissance method. For example, an admin enables this so a port scanner crafting packets with both SYN and FIN set has those probe packets silently dropped by the switch.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.120.9 snmpwalk -v2c -c public <target> CISCOSB-SECURITY-SUITE::rlSecuritySuiteDenySynFinTcp
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.120.9.1 snmpget -v2c -c public <target> CISCOSB-SECURITY-SUITE::rlSecuritySuiteDenySynFinTcp.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.6.1.101.120.9.1 s <value>
Start monitoring Cisco Small Business switch/router with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCOSB-SECURITY-SUITE::rlSecuritySuiteDenySynFinTcp OID value, configure state conditions and alerts, and monitor any Cisco Small Business switch/router from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.6 | otherEnterprises | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1 | ciscoSB | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1.101 | switch001 | CISCOSB-MIB |
| 1.3.6.1.4.1.9.6.1.101.120 | rlSecuritySuiteMib | CISCOSB-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.6.1.101.120.9 | rlSecuritySuiteDenySynFinTcp | CISCOSB-SECURITY-SUITE |