All MIBs › FASTPATH-DENIALOFSERVICE-PRIVATE-MIB › agentSwitchDenialOfServiceTCPFlagSeqMode
agentSwitchDenialOfServiceTCPFlagSeqMode
Module: FASTPATH-DENIALOFSERVICE-PRIVATE-MIB
OID (symbolic): FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagSeqMode
OID (numeric): 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.11
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enables or Disables the TCP Flag and Sequence Denial of Service protection feature.
What is agentSwitchDenialOfServiceTCPFlagSeqMode?
This setting enables or disables protection against TCP packets whose flag combination is inconsistent with their sequence number, another signature used in crafted DoS traffic. An admin enables it to have the switch reject such internally inconsistent TCP packets before they reach hosts. For example, turning this on would drop a packet where the flags and sequence number together don't correspond to any valid TCP state transition.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.11 snmpwalk -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagSeqMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.11.1 snmpget -v2c -c public <target> FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagSeqMode.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.11.1 i <value>
Start monitoring Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the FASTPATH-DENIALOFSERVICE-PRIVATE-MIB::agentSwitchDenialOfServiceTCPFlagSeqMode OID value, configure state conditions and alerts, and monitor any Broadcom FastPath-based Ethernet switch (multi-vendor OEM) (hardware DoS attack protection) from a single console.
OID Breakdown
Upper-level ancestors (15 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.674 | dell | ArrayManager-MIB |
| 1.3.6.1.4.1.674.10895 | dellLan | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000 | dellLanStandard | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2 | dellLanExtension | Dell-Vendor-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132 | lvl7 | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1 | lvl7Products | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1 | fastPath | BROADCOM-REF-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31 | fastPathDenialOfService | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1 | agentSwitchDenialOfServiceGroup | DNOS-DENIALOFSERVICE-PRIVATE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.674.10895.5000.2.6132.1.1.31.1.11 | agentSwitchDenialOfServiceTCPFlagSeqMode | FASTPATH-DENIALOFSERVICE-PRIVATE-MIB |