All MIBs › EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceFirstFragMode
agentSwitchDenialOfServiceFirstFragMode
Module: EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode
OID (numeric): 1.3.6.1.4.1.4413.1.1.31.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the First Fragment Denial of Service protection feature.
What is agentSwitchDenialOfServiceFirstFragMode?
This read-write switch enables or disables the "First Fragment" Denial-of-Service protection feature, which inspects the header size of the first fragment of a fragmented TCP packet. Admins enable it together with agentSwitchDenialOfServiceTCPHdrSize to reject the first fragment if its declared header is smaller than the configured minimum, a technique used to block fragmentation-based evasion or DoS attacks. For example, with this enabled and the minimum header size set to 20 bytes, a crafted first-fragment packet with an undersized TCP header would be dropped by the switch.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.4413.1.1.31.1.2 snmpwalk -v2c -c public <target> EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.4413.1.1.31.1.2.1 snmpget -v2c -c public <target> EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.4413.1.1.31.1.2.1 i <value>
Start monitoring Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode OID value, configure state conditions and alerts, and monitor any Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.4413 | broadcom | BASP-Config-MIB |
| 1.3.6.1.4.1.4413.1 | enet | BASP-Config-MIB |
| 1.3.6.1.4.1.4413.1.1 | fastPath | EdgeSwitch-REF-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.4413.1.1.31 | fastPathDenialOfService | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.4413.1.1.31.1 | agentSwitchDenialOfServiceGroup | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.4413.1.1.31.1.2 | agentSwitchDenialOfServiceFirstFragMode | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |