DNOS-DENIALOFSERVICE-PRIVATE-MIB

All MIBs › DNOS-DENIALOFSERVICE-PRIVATE-MIB

Organization: Dell, Inc.

Last Updated: 2011-01-26

Category: Domain: Security, Vendor: Dell/DNOS

Description: Manages Denial-of-Service (DoS) prevention policies and attack detection on Dell DNOS switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DNOS-DENIALOFSERVICE-PRIVATE-MIB?

DNOS-DENIALOFSERVICE-PRIVATE-MIB is a Broadcom-authored private MIB used within Dell's DNOS (Dell Network Operating System) switches to manage Denial-of-Service (DoS) attack-prevention policies. It exposes configuration objects to enable or disable specific DoS attack-signature checks and, where implemented, status or counters for detected attack events. Its monitoring value is primarily security/software status: confirming which DoS protections are currently enabled and whether attack-detection counters are incrementing would reveal an active attack or a misconfigured protection profile, rather than providing hardware environmental data. It sits within the Broadcom/Dell DNOS private enterprise MIB tree with no apparent dependency on external IETF security MIBs. It is typically deployed on Dell EMC Networking switches (DNOS-based) needing basic control-plane DoS protection. Engineers can download the DNOS-DENIALOFSERVICE-PRIVATE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DNOS-DENIALOFSERVICE-PRIVATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Dell EMC Networking switch (DNOS-based)

Monitoring Examples

No sample object names were provided for this module; based on the module description, an admin would poll the per-attack-type protection enable/disable settings to confirm which DoS signatures are currently active, and any associated detection/drop counters to see whether the switch is currently being targeted by a recognized attack pattern.

What Can Be Monitored

per-attack-type DoS protection enable state
DoS attack detection/drop counters (where implemented)

Imported Objects

From DELL-REF-MIB

dnOS	OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
fastPathDenialOfService	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31			The Broadcom Private MIB for DNOS Denial of Service.
agentSwitchDenialOfServiceGroup	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1
INT agentSwitchDenialOfServiceSIPDIPMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.1	INTEGER	read-write	Enables or Disables the SIP=DIP Denial of Service protection feature.
INT agentSwitchDenialOfServiceFirstFragMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.2	INTEGER	read-write	Enables or Disables the First Fragment Denial of Service protection feature.
I32 agentSwitchDenialOfServiceTCPHdrSize	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.3	Integer32	read-write	Configures the Minimum allowed TCP Header size. This is active if the First Fragment Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceTCPFragMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.4	INTEGER	read-write	Enables or Disables the TCP Fragment Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFlagMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.5	INTEGER	read-write	Enables or Disables the TCP Flag Denial of Service protection feature.
INT agentSwitchDenialOfServiceL4PortMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.6	INTEGER	read-write	Enables or Disables the L4 Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceICMPMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.7	INTEGER	read-write	Enables or Disables the ICMP Denial of Service protection feature.
I32 agentSwitchDenialOfServiceICMPSize	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.8	Integer32	read-write	Configures the Maximum allowed ICMP data size. This is active if the ICMP Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceSMACDMACMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.9	INTEGER	read-write	Enables or Disables the SMAC=DMAC Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPOffsetMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.10	INTEGER	read-write	Enables or Disables the TCP Offset Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFlagSeqMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.11	INTEGER	read-write	Enables or Disables the TCP Flag and Sequence Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPPortMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.12	INTEGER	read-write	Enables or Disables the TCP Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceUDPPortMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.13	INTEGER	read-write	Enables or Disables the UDP Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPSynMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.14	INTEGER	read-write	Enables or Disables the TCP Syn Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPSynFinMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.15	INTEGER	read-write	Enables or Disables the TCP Syn and Fin Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFinUrgPshMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.16	INTEGER	read-write	Enables or Disables the TCP Fin and Urg and Psh Denial of Service protection feature.
I32 agentSwitchDenialOfServiceICMPv6Size	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.18	Integer32	read-write	Configures the Maximum allowed ICMPv6 data size. This is active if the ICMPv6 Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceICMPFragMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.19	INTEGER	read-write	Enables or Disables the ICMP Fragment Denial of Service protection feature.
INT agentSwitchDenialOfServiceICMPv6Mode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.20	INTEGER	read-write	Enables or Disables the ICMPv6 Denial of Service protection feature.

RFC description

Dell Networking OS vendor-private MIB for denial-of-service (DoS) attack detection and prevention.

Start monitoring Dell EMC Networking switch, DNOS-based (DoS attack prevention) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DNOS-DENIALOFSERVICE-PRIVATE-MIB

What Is DNOS-DENIALOFSERVICE-PRIVATE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description