EXTREME-ENH-DOS-MIB

All MIBs › EXTREME-ENH-DOS-MIB

Organization: Extreme Networks, Inc.

Last Updated: 2004-01-02

Category: Domain: Security, Vendor: Extreme Networks

Description: Provides enhanced Denial-of-Service attack mitigation objects and policy management on Extreme Networks platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EXTREME-ENH-DOS-MIB?

EXTREME-ENH-DOS-MIB is an Extreme Networks proprietary MIB implementing Enhanced DoS Protect, a feature that rate-limits suspicious per-source-IP traffic patterns to mitigate denial-of-service attacks. Its objects cover global rate-limit/IP-FDB-learning/benchmark enable flags and a cache-size setting, a per-port table (trusted flag, alarm state, learn limit/window, aging time, per-feature enable flags, rate-limit threshold/drop-probability/learning-window/protocol), a per-port statistics table (rate-limit-filtered packet count), and threshold-reached/cleared notifications. As a configuration/security-status MIB it lets an administrator confirm DoS-protection thresholds per port and get alerted when a port's threshold is reached. It is deployed on Extreme Networks switches. Engineers can download the EXTREME-ENH-DOS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in EXTREME-ENH-DOS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Extreme Networks switches (Enhanced DoS Protect)

Monitoring Examples

An administrator subscribes to extremeEnhDosThresholdReached to get an immediate alert when a port's DoS-protection rate-limit threshold is crossed on an Extreme Networks switch.

What Can Be Monitored

per-port DoS rate-limiting threshold and filtered-packet counts

Imported Objects

From EXTREME-BASE-MIB

extremeAgent	OBJECT-IDENTITY
extremeV2Traps	OBJECT-IDENTITY

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
extremeEnhDosMib	1.3.6.1.4.1.1916.1.29			Extreme Enhanced Dos protect objects information
extremeEnhDosProtect	1.3.6.1.4.1.1916.1.29.1
T/F extremeEnhDosEnableRateLimit	1.3.6.1.4.1.1916.1.29.1.1	TruthValue	read-write	The Flag indicates whether Enhanced DOS protection with rate limit is enabled or disabled.
T/F extremeEnhDosEnableIpFdb	1.3.6.1.4.1.1916.1.29.1.2	TruthValue	read-write	The Flag indicates whether Enhanced DOS protection against IPFDB thrashing is enabled or disabled.
T/F extremeEnhDosEnableBenchMark	1.3.6.1.4.1.1916.1.29.1.3	TruthValue	read-write	The Flag indicates whether Enhanced DOS protection with benchmarking is enabled or disabled.
INT extremeEnhDosCacheSize	1.3.6.1.4.1.1916.1.29.1.4	INTEGER	read-write	The Enhanced DOS Cache Size. The number of DA/SA pairs
extremeEnhDosPortTable	1.3.6.1.4.1.1916.1.29.1.5		not-accessible	This table contains the port wise listing of Enhanced DOS attributes.
extremeEnhDosPortEntry	1.3.6.1.4.1.1916.1.29.1.5.1		not-accessible	Information about the Dos attributes of a particular port.
INT extremeEnhDosPortIfIndex	1.3.6.1.4.1.1916.1.29.1.5.1.1	INTEGER	read-only	The index for this entry.
T/F extremeEnhDosPortTrusted	1.3.6.1.4.1.1916.1.29.1.5.1.2	TruthValue	read-create	Indicates whether the port is trusted or untrusted.
T/F extremeEnhDosPortAlarmState	1.3.6.1.4.1.1916.1.29.1.5.1.3	TruthValue	read-only	Indicates whether the port is in alarm state or not.
INT extremeEnhDosPortLearnLimit	1.3.6.1.4.1.1916.1.29.1.5.1.4	INTEGER	read-create	The number of packets allowed on the port before an entry is created in the forwarding table.
INT extremeEnhDosPortLearnWindow	1.3.6.1.4.1.1916.1.29.1.5.1.5	INTEGER	read-create	The duration to be considered to reach the threshold for creating an entry in the forwarding table.
INT extremeEnhDosPortAgingTime	1.3.6.1.4.1.1916.1.29.1.5.1.6	INTEGER	read-create	The duration to be considered for aging out entries created on this port.
T/F extremeEnhDosPortRateLimitEnable	1.3.6.1.4.1.1916.1.29.1.5.1.7	TruthValue	read-create	Indicates whether the rate limit is enabled for this port.
T/F extremeEnhDosPortIpFdbEnable	1.3.6.1.4.1.1916.1.29.1.5.1.8	TruthValue	read-create	Indicates whether the DOS protection against IP FDB thrashing is enabled for this port.
T/F extremeEnhDosPortBenchMarkEnable	1.3.6.1.4.1.1916.1.29.1.5.1.9	TruthValue	read-create	Indicates whether the bench marking is enabled for this port.
INT extremeEnhDosPortRateLimitThreshold	1.3.6.1.4.1.1916.1.29.1.5.1.10	INTEGER	read-create	The number of packets allowed on the port within the learning window before the rate limit is applied.
INT extremeEnhDosPortRateLimitDropProbability	1.3.6.1.4.1.1916.1.29.1.5.1.11	INTEGER	read-create	The probability that the packet is discarded after the reaching the threshold.
INT extremeEnhDosPortRateLimitLearningWindow	1.3.6.1.4.1.1916.1.29.1.5.1.12	INTEGER	read-create	The duration to be considered after which the rate limit is applied.
INT extremeEnhDosPortRateLimitProtocol	1.3.6.1.4.1.1916.1.29.1.5.1.13	INTEGER	read-create	The protocol packets to be considered for rate limit filtering.
extremeEnhDosPortStatisticsTable	1.3.6.1.4.1.1916.1.29.1.6		not-accessible	This table contains the port wise listing of DOS statistics.
extremeEnhDosPortStatisticsEntry	1.3.6.1.4.1.1916.1.29.1.6.1		not-accessible	Information about the DOS statistics of a particular port.
INT extremeEnhDosPortStatisticsIfIndex	1.3.6.1.4.1.1916.1.29.1.6.1.1	INTEGER	read-only	The index for this entry.
INT extremeEnhDosPortStatisticsRateLimitFilteredPackets	1.3.6.1.4.1.1916.1.29.1.6.1.2	INTEGER	read-only	The number of packets filetered on this port.
extremeEnhDosTraps	1.3.6.1.4.1.1916.4.11
extremeEnhDosTrapsPrefix	1.3.6.1.4.1.1916.4.11.0
NTF extremeEnhDosThresholdReached	1.3.6.1.4.1.1916.4.11.0.1			The extremeDosThresholdReached notification is generated when the DOS threshold is crossed for any of the ports.
NTF extremeEnhDosThresholdCleared	1.3.6.1.4.1.1916.4.11.0.2			The extremeEnhDosThresholdCleared notification is generated when the DOS threshold is cleared for any of the ports.

RFC description

Extreme Networks vendor-private MIB for enhanced Denial of Service protection and rate limiting configuration.

Start monitoring Extreme Networks switch (Enhanced DoS Protect, per-source rate limiting) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EXTREME-ENH-DOS-MIB

What Is EXTREME-ENH-DOS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description