All MIBs › HP-SWITCH-BASIC-CONFIG-MIB › hpSwitchAclIpv4DenyFragmentedTcpHeader
hpSwitchAclIpv4DenyFragmentedTcpHeader
Module: HP-SWITCH-BASIC-CONFIG-MIB
OID (symbolic): HP-SWITCH-BASIC-CONFIG-MIB::hpSwitchAclIpv4DenyFragmentedTcpHeader
OID (numeric): 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1.3.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Configure the device to drop all IPv4 packets containing a fragmented TCP header.
What is hpSwitchAclIpv4DenyFragmentedTcpHeader?
Setting this to 'enable(1)' makes the switch drop all IPv4 packets whose TCP header is fragmented, a common evasion technique against ACL inspection; the default is 'disable(2)'. Admins enable this on switches exposed to untrusted traffic to close off a class of ACL-bypass attacks.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1.3.2 snmpwalk -v2c -c public <target> HP-SWITCH-BASIC-CONFIG-MIB::hpSwitchAclIpv4DenyFragmentedTcpHeader
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1.3.2.1 snmpget -v2c -c public <target> HP-SWITCH-BASIC-CONFIG-MIB::hpSwitchAclIpv4DenyFragmentedTcpHeader.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1.3.2.1 i <value>
Start monitoring HP Networking switch (basic config, CLI aliases, ACL/IGMP-proxy) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HP-SWITCH-BASIC-CONFIG-MIB::hpSwitchAclIpv4DenyFragmentedTcpHeader OID value, configure state conditions and alerts, and monitor any HP Networking switch (basic config, CLI aliases, ACL/IGMP-proxy) from a single console.
OID Breakdown
Upper-level ancestors (14 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.11 | hp | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2 | nm | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2.14 | icf | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11 | hpicfObjects | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5 | hpicfSwitch | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1 | hpSwitch | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1.7 | hpConfig | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1.7.1 | hpSwitchConfig | CONFIG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29 | hpSwitchBasicConfigMIB | HP-SWITCH-BASIC-CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1 | hpSwitchBasicConfigObjects | HP-SWITCH-BASIC-CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1.3 | hpSwitchACLConfig | HP-SWITCH-BASIC-CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1.7.1.29.1.3.2 | hpSwitchAclIpv4DenyFragmentedTcpHeader | HP-SWITCH-BASIC-CONFIG-MIB |