All MIBs › FASTPATH-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceTCPFlagMode
agentSwitchDenialOfServiceTCPFlagMode
Module: FASTPATH-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagMode
OID (numeric): 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.5
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the TCP Flag Denial of Service protection feature.
What is agentSwitchDenialOfServiceTCPFlagMode?
This setting enables or disables the switch's TCP Flag Denial of Service protection, which checks for invalid or nonsensical combinations of TCP flags. An admin enables it to filter out crafted packets, such as ones with no flags set at all, that attackers use to probe or destabilize TCP stacks. For example, with this feature on, the switch would drop a TCP segment arriving with all control flags cleared.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.5 snmpwalk -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.5.1 snmpget -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.5.1 i <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> agentSwitchDenialOfServiceTCPFlagMode.1
Start monitoring Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagMode OID value, configure state conditions and alerts, and monitor any Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (15 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.674 | dell | ArrayManager-MIB |
| 1.3.6.1.4.1.674.10895 | dellLan | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000 | dellLanStandard | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2 | dellLanExtension | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132 | lvl7 | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1 | lvl7Products | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1 | fastPath | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31 | fastPathDenialOfService | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1 | agentSwitchDenialOfServiceGroup | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.5 | agentSwitchDenialOfServiceTCPFlagMode | FASTPATH-DENIALOFSERVICE-PRIVATE-MIB |