All MIBs › FASTPATH-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceTCPFinUrgPshMode
agentSwitchDenialOfServiceTCPFinUrgPshMode
Module: FASTPATH-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode
OID (numeric): 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.16
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the TCP Fin and Urg and Psh Denial of Service protection feature.
What is agentSwitchDenialOfServiceTCPFinUrgPshMode?
This setting enables or disables protection against TCP packets with the FIN, URG, and PSH flags all set together without ACK, a pattern known as a "Xmas tree" scan or DoS probe. An admin enables it to have the switch drop these anomalous packets rather than forward them into the network. For example, enabling this feature causes a port scanner's Xmas-tree probe packets to be silently discarded at the switch.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.16 snmpwalk -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.16.1 snmpget -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.16.1 i <value>
Start monitoring Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFinUrgPshMode OID value, configure state conditions and alerts, and monitor any Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (15 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.674 | dell | ArrayManager-MIB |
| 1.3.6.1.4.1.674.10895 | dellLan | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000 | dellLanStandard | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2 | dellLanExtension | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132 | lvl7 | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1 | lvl7Products | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1 | fastPath | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31 | fastPathDenialOfService | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1 | agentSwitchDenialOfServiceGroup | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.16 | agentSwitchDenialOfServiceTCPFinUrgPshMode | FASTPATH-DENIALOFSERVICE-PRIVATE-MIB |