All MIBs › CISCOSB-SECURITY-SUITE › rlSecuritySuiteSynProtectionMode
rlSecuritySuiteSynProtectionMode
Module: CISCOSB-SECURITY-SUITE
OID (symbolic): CISCOSB-SECURITY-SUITE::rlSecuritySuiteSynProtectionMode
OID (numeric): 1.3.6.1.4.1.9.6.1.101.120.10
Node type: OBJECT-TYPE
Type: RlSecuritySuiteSynProtectionMode
Access: read-write
Description: This scalar globally set protection mode on TCP SYN traffic. Disabled - the system doesn't support protection against TCP SYN attack. Report - the system doesn't support protection against TCP SYN attack,but reports about it. Block - the systems supports protection against TCP SYN attack by blocking this traffic on the port.
What is rlSecuritySuiteSynProtectionMode?
This read-write field selects how the device responds to a detected TCP SYN flood: ignore it, merely report it, or actively block it. Admins care because it lets them choose between passive visibility and active mitigation depending on how much risk they're willing to tolerate on a given port. For example, an admin sets this to Block on an externally facing port so once SYN flood thresholds are exceeded, that port's SYN traffic gets automatically blocked rather than just logged.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.120.10 snmpwalk -v2c -c public <target> CISCOSB-SECURITY-SUITE::rlSecuritySuiteSynProtectionMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.120.10.1 snmpget -v2c -c public <target> CISCOSB-SECURITY-SUITE::rlSecuritySuiteSynProtectionMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.6.1.101.120.10.1 s <value>
Start monitoring Cisco Small Business switch/router with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCOSB-SECURITY-SUITE::rlSecuritySuiteSynProtectionMode OID value, configure state conditions and alerts, and monitor any Cisco Small Business switch/router from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.6 | otherEnterprises | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1 | ciscoSB | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1.101 | switch001 | CISCOSB-MIB |
| 1.3.6.1.4.1.9.6.1.101.120 | rlSecuritySuiteMib | CISCOSB-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.6.1.101.120.10 | rlSecuritySuiteSynProtectionMode | CISCOSB-SECURITY-SUITE |