All MIBs › EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceTCPFinUrgPshMode
agentSwitchDenialOfServiceTCPFinUrgPshMode
Module: EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode
OID (numeric): 1.3.6.1.4.1.4413.1.1.31.1.16
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the TCP Fin and Urg and Psh Denial of Service protection feature.
What is agentSwitchDenialOfServiceTCPFinUrgPshMode?
This read-write switch enables or disables the "TCP Fin, Urg, and Psh" Denial-of-Service protection feature, which detects TCP packets with the FIN, URG, and PSH flags all set together. Admins enable it because this specific flag combination rarely if ever occurs in legitimate traffic and is commonly used for OS fingerprinting or firewall-evasion scans. For example, with this enabled, a crafted packet carrying FIN, URG, and PSH flags together, used to probe the switch or hosts behind it, would be identified and dropped rather than forwarded.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.4413.1.1.31.1.16 snmpwalk -v2c -c public <target> EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.4413.1.1.31.1.16.1 snmpget -v2c -c public <target> EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.4413.1.1.31.1.16.1 i <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> agentSwitchDenialOfServiceTCPFinUrgPshMode.1
Start monitoring Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode OID value, configure state conditions and alerts, and monitor any Ubiquiti EdgeSwitch (Broadcom FastPath-based) switch (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.4413 | broadcom | BASP-Config-MIB |
| 1.3.6.1.4.1.4413.1 | enet | BASP-Config-MIB |
| 1.3.6.1.4.1.4413.1.1 | fastPath | EdgeSwitch-REF-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.4413.1.1.31 | fastPathDenialOfService | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.4413.1.1.31.1 | agentSwitchDenialOfServiceGroup | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.4413.1.1.31.1.16 | agentSwitchDenialOfServiceTCPFinUrgPshMode | EdgeSwitch-DENIALOFSERVICE-PRIVATE-MIB |