FASTPATH-DENIALOFSERVICE-PRIVATE-MIB

All MIBs › FASTPATH-DENIALOFSERVICE-PRIVATE-MIB

Organization: Broadcom Corporation

Last Updated: 2007-05-23

Category: Domain: Security, VPN and Security, Vendor: Dell/DNOS

Description: Broadcom FastPath MIB for Denial-of-Service (DoS) attack prevention configuration and filtering policies on FastPath switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is FASTPATH-DENIALOFSERVICE-PRIVATE-MIB?

FASTPATH-DENIALOFSERVICE-PRIVATE-MIB is a Broadcom Corporation proprietary MIB configuring hardware-based Denial-of-Service attack protection on FastPath-family switches. Its objects cover per-attack-type detection-mode flags — same source/destination IP, same source/destination MAC, first-fragment, oversized TCP header, TCP fragment, invalid TCP offset/flags/flag-sequence, TCP SYN, SYN+FIN, FIN+URG+PSH, Layer 4 port match, TCP/UDP port match, and ICMP/ICMPv6 (with configurable max size) and ICMP fragment detection. As a configuration/security MIB it lets an administrator confirm which DoS attack signatures are filtered in hardware on a FastPath switch. It is deployed on Broadcom FastPath-family managed switches. Engineers can download the FASTPATH-DENIALOFSERVICE-PRIVATE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in FASTPATH-DENIALOFSERVICE-PRIVATE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Broadcom FastPath-family managed switches

Monitoring Examples

An administrator checks agentSwitchDenialOfServiceTCPSynMode to confirm SYN-flood detection is enabled on a FastPath-family switch.

What Can Be Monitored

hardware DoS attack-signature detection configuration

Imported Objects

From BROADCOM-REF-MIB

fastPath

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
fastPathDenialOfService	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31			The Broadcom Private MIB for FASTPATH Denial of Service.
agentSwitchDenialOfServiceGroup	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1
INT agentSwitchDenialOfServiceSIPDIPMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.1	INTEGER	read-write	Enables or Disables the SIP=DIP Denial of Service protection feature.
INT agentSwitchDenialOfServiceFirstFragMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.2	INTEGER	read-write	Enables or Disables the First Fragment Denial of Service protection feature.
I32 agentSwitchDenialOfServiceTCPHdrSize	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.3	Integer32	read-write	Configures the Minimum allowed TCP Header size. This is active if the First Fragment Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceTCPFragMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.4	INTEGER	read-write	Enables or Disables the TCP Fragment Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFlagMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.5	INTEGER	read-write	Enables or Disables the TCP Flag Denial of Service protection feature.
INT agentSwitchDenialOfServiceL4PortMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.6	INTEGER	read-write	Enables or Disables the L4 Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceICMPMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.7	INTEGER	read-write	Enables or Disables the ICMP Denial of Service protection feature.
I32 agentSwitchDenialOfServiceICMPSize	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.8	Integer32	read-write	Configures the Maximum allowed ICMP data size. This is active if the ICMP Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceSMACDMACMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.9	INTEGER	read-write	Enables or Disables the SMAC=DMAC Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPOffsetMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.10	INTEGER	read-write	Enables or Disables the TCP Offset Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFlagSeqMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.11	INTEGER	read-write	Enables or Disables the TCP Flag and Sequence Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPPortMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.12	INTEGER	read-write	Enables or Disables the TCP Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceUDPPortMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.13	INTEGER	read-write	Enables or Disables the UDP Port Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPSynMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.14	INTEGER	read-write	Enables or Disables the TCP Syn Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPSynFinMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.15	INTEGER	read-write	Enables or Disables the TCP Syn and Fin Denial of Service protection feature.
INT agentSwitchDenialOfServiceTCPFinUrgPshMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.16	INTEGER	read-write	Enables or Disables the TCP Fin and Urg and Psh Denial of Service protection feature.
I32 agentSwitchDenialOfServiceICMPv6Size	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.18	Integer32	read-write	Configures the Maximum allowed ICMPv6 data size. This is active if the ICMPv6 Denial of Service protection feature is enabled.
INT agentSwitchDenialOfServiceICMPFragMode	1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.19	INTEGER	read-write	Enables or Disables the ICMP Fragment Denial of Service protection feature.

RFC description

Dell/Extreme Networks vendor-private MIB for denial-of-service attack detection and mitigation on FastPath switches.

Start monitoring Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download FASTPATH-DENIALOFSERVICE-PRIVATE-MIB

What Is FASTPATH-DENIALOFSERVICE-PRIVATE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description