EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB

All MIBs › EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB

Organization: Broadcom Inc

Last Updated: 2011-01-26

Category: Domain: Security, VPN and Security, Vendor: EdgeSwitch/Ubiquiti

Description: Ubiquiti EdgeSwitch DoS protection MIB for configuring denial-of-service attack prevention policies and monitoring attack statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB?

EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB is a Broadcom Inc (FastPath switch software, marketed under Ubiquiti EdgeSwitch) proprietary MIB configuring hardware-based Denial-of-Service attack protection. Its objects cover per-attack-type detection-mode flags — same source/destination IP, same source/destination MAC, first-fragment, oversized TCP header, TCP fragment, invalid TCP offset/flags/flag-sequence, TCP SYN, SYN+FIN, FIN+URG+PSH, Layer 4 port match, TCP/UDP port match, and ICMP/ICMPv6 (with configurable max size) and ICMP fragment detection. As a configuration/security MIB it lets an administrator confirm which DoS attack signatures are being filtered in hardware on an EdgeSwitch. It is deployed on Broadcom FastPath-based switches (Ubiquiti EdgeSwitch). Engineers can download the EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Broadcom FastPath-based switches (Ubiquiti EdgeSwitch and OEM variants)

Monitoring Examples

An administrator checks agentSwitchDenialOfServiceTCPSynFinMode to confirm SYN+FIN attack detection is enabled on an EdgeSwitch.

What Can Be Monitored

hardware DoS attack-signature detection configuration

Imported Objects

From EdgeSwitch-REF-MIB

fastPath

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
fastPathDenialOfService	1.3.6.1.4.1.4413.1.1.31			The Ubiquiti Private MIB for EdgeSwitch Denial of Service.
agentSwitchDenialOfServiceGroup	1.3.6.1.4.1.4413.1.1.31.1
INT agentSwitchDenialOfServiceSIPDIPMode	1.3.6.1.4.1.4413.1.1.31.1.1	INTEGER	read-write	Enables or Disables the SIP=DIP Denial of Service protection feature.
INT agentSwitchDenialOfServiceFirstFragMode	1.3.6.1.4.1.4413.1.1.31.1.2	INTEGER	read-write	Enables or Disables the First Fragment Denial of Service protection feature.
I32 agentSwitchDenialOfServiceTCPHdrSize	1.3.6.1.4.1.4413.1.1.31.1.3	Integer32	read-write	Configures the Minimum allowed TCP Header size. This is active if the First Fragment Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceTCPFragMode	1.3.6.1.4.1.4413.1.1.31.1.4	INTEGER	read-write	Enables or Disables the TCP Fragment Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFlagMode	1.3.6.1.4.1.4413.1.1.31.1.5	INTEGER	read-write	Enables or Disables the TCP Flag Denial of Service protection feature.
INT agentSwitchDenialOfServiceL4PortMode	1.3.6.1.4.1.4413.1.1.31.1.6	INTEGER	read-write	Enables or Disables the L4 Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceICMPMode	1.3.6.1.4.1.4413.1.1.31.1.7	INTEGER	read-write	Enables or Disables the ICMP Denial of Service protection feature.
I32 agentSwitchDenialOfServiceICMPSize	1.3.6.1.4.1.4413.1.1.31.1.8	Integer32	read-write	Configures the Maximum allowed ICMP data size. This is active if the ICMP Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceSMACDMACMode	1.3.6.1.4.1.4413.1.1.31.1.9	INTEGER	read-write	Enables or Disables the SMAC=DMAC Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPOffsetMode	1.3.6.1.4.1.4413.1.1.31.1.10	INTEGER	read-write	Enables or Disables the TCP Offset Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFlagSeqMode	1.3.6.1.4.1.4413.1.1.31.1.11	INTEGER	read-write	Enables or Disables the TCP Flag and Sequence Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPPortMode	1.3.6.1.4.1.4413.1.1.31.1.12	INTEGER	read-write	Enables or Disables the TCP Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceUDPPortMode	1.3.6.1.4.1.4413.1.1.31.1.13	INTEGER	read-write	Enables or Disables the UDP Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPSynMode	1.3.6.1.4.1.4413.1.1.31.1.14	INTEGER	read-write	Enables or Disables the TCP Syn Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPSynFinMode	1.3.6.1.4.1.4413.1.1.31.1.15	INTEGER	read-write	Enables or Disables the TCP Syn and Fin Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFinUrgPshMode	1.3.6.1.4.1.4413.1.1.31.1.16	INTEGER	read-write	Enables or Disables the TCP Fin and Urg and Psh Denial of Service protection feature.
I32 agentSwitchDenialOfServiceICMPv6Size	1.3.6.1.4.1.4413.1.1.31.1.18	Integer32	read-write	Configures the Maximum allowed ICMPv6 data size. This is active if the ICMPv6 Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceICMPFragMode	1.3.6.1.4.1.4413.1.1.31.1.19	INTEGER	read-write	Enables or Disables the ICMP Fragment Denial of Service protection feature.
INT agentSwitchDenialOfServiceICMPv6Mode	1.3.6.1.4.1.4413.1.1.31.1.20	INTEGER	read-write	Enables or Disables the ICMPv6 Denial of Service protection feature.

RFC description

Denial of Service protection features including IP spoofing and MAC attack detection.

Start monitoring Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB

What Is EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description