All MIBs › EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceSMACDMACMode
agentSwitchDenialOfServiceSMACDMACMode
Module: EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceSMACDMACMode
OID (numeric): 1.3.6.1.4.1.4413.1.1.31.1.9
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the SMAC=DMAC Denial of Service protection feature.
What is agentSwitchDenialOfServiceSMACDMACMode?
This read-write switch enables or disables the "SMAC=DMAC" Denial-of-Service protection feature, which targets frames whose source MAC address matches their destination MAC address. Admins turn this on to block a Layer 2 analogue of the SIP=DIP spoofing attack, since a frame claiming to be sent from and to the same MAC address is invalid and often used to confuse network stacks. For example, enabling this feature on an access switch causes it to drop a crafted frame where both the source and destination MAC fields are set to the same address, rather than passing it upstream.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.4413.1.1.31.1.9 snmpwalk -v2c -c public <target> EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceSMACDMACMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.4413.1.1.31.1.9.1 snmpget -v2c -c public <target> EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceSMACDMACMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.4413.1.1.31.1.9.1 i <value>
Start monitoring Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceSMACDMACMode OID value, configure state conditions and alerts, and monitor any Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.4413 | broadcom | BASP-Config-MIB |
| 1.3.6.1.4.1.4413.1 | enet | BASP-Config-MIB |
| 1.3.6.1.4.1.4413.1.1 | fastPath | EdgeSwitch-REF-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.4413.1.1.31 | fastPathDenialOfService | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.4413.1.1.31.1 | agentSwitchDenialOfServiceGroup | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.4413.1.1.31.1.9 | agentSwitchDenialOfServiceSMACDMACMode | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |