All MIBs › FASTPATH-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceFirstFragMode
agentSwitchDenialOfServiceFirstFragMode
Module: FASTPATH-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode
OID (numeric): 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the First Fragment Denial of Service protection feature.
What is agentSwitchDenialOfServiceFirstFragMode?
This setting enables or disables the switch's First Fragment Denial of Service protection, which inspects the initial fragment of a fragmented packet. When enabled, it works together with the configured minimum TCP header size to catch fragments crafted with abnormally small headers used in fragmentation-based attacks. For example, an admin would enable this alongside a suitable TCP header size threshold to defend against attackers sending undersized first-fragment TCP packets.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.2 snmpwalk -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.2.1 snmpget -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.2.1 i <value>
Start monitoring Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceFirstFragMode OID value, configure state conditions and alerts, and monitor any Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (15 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.674 | dell | ArrayManager-MIB |
| 1.3.6.1.4.1.674.10895 | dellLan | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000 | dellLanStandard | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2 | dellLanExtension | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132 | lvl7 | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1 | lvl7Products | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1 | fastPath | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31 | fastPathDenialOfService | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1 | agentSwitchDenialOfServiceGroup | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.2 | agentSwitchDenialOfServiceFirstFragMode | FASTPATH-DENIALOFSERVICE-PRIVATE-MIB |