HUAWEI-GTSM-MIB

All MIBs › HUAWEI-GTSM-MIB

Organization: Huawei Technologies co.,Ltd.

Last Updated: 2006-11-13

Category: VPN and Security, Vendor: Huawei

Description: Huawei GTSM (Generalized TTL Security Mechanism) MIB for configuring TTL-based routing protocol security against remote spoofing attacks.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-GTSM-MIB?

HUAWEI-GTSM-MIB is a Huawei proprietary MIB implementing the Generalized TTL Security Mechanism (GTSM, related to RFC 5082), a routing-protocol security feature that rejects packets whose IP TTL falls outside an expected range to defend against remote spoofed-packet attacks on protocols like BGP. Per its module description, it defines a default-action setting for unmatched packets, a policy table for configuring GTSM policies, a BGP peer-group table applying GTSM per peer group, and a statistics table counting packets affected by GTSM enforcement. Its monitoring value is security/fault-oriented rather than hardware-oriented: polling the statistics table lets an operator see how many packets have been dropped for TTL violations, which both confirms GTSM is actively defending the router and can reveal a misconfigured peer sending packets with unexpectedly low TTL. This MIB directly depends on and complements the underlying BGP/routing-protocol configuration on the device, since GTSM policies attach to specific BGP peer groups. It is deployed on Huawei routers and switches running BGP or other protocols in carrier and enterprise networks where protection against TTL-spoofing attacks on routing sessions is required, and administrators can download the HUAWEI-GTSM-MIB file to load it into their MIB browser for GTSM policy monitoring.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-GTSM-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei router
Huawei switch running BGP

Monitoring Examples

No specific object names were provided in sample_objects for this MIB, but per its module description an operator would check the GTSM statistics table to see the count of packets dropped due to TTL mismatches for a given BGP peer group, and check the policy table to confirm which GTSM policy (minimum TTL, hop count) is applied to that peer group. A spike in the drop counter would indicate either an attack attempt or a legitimate peer misconfigured with too many router hops between it and the local device.

What Can Be Monitored

GTSM-dropped packet counts (per description)
GTSM policy configuration per BGP peer group
default action for unmatched packets

Imported Objects

From HUAWEI-MIB

hwDatacomm

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

RowStatus

How to Use in IPNetwork Monitor

Example using hwGTSMStatisticsRcvPacketNumber OID:

Select a Huawei router or switch running BGP (Generalized TTL Security Mechanism) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hwGTSMStatisticsRcvPacketNumber into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of received packets of specific slot. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hwGTSMModule	1.3.6.1.4.1.2011.5.25.126			The HUAWEI-GTSM-MIB contains all the objects that manages GTSM, it mainly contains the following five parts. 1) Default action that is used to deal with the received packets when no GTSM policy matches. 2) Policy table that is used to get or set the GTSM policy. 3) BGP peer group table that is used to get or set the GTSM policy for BGP peer group. 4) Statistics table that is used to compute the number of the packets containing received packets, passing packets and dropped packets. 5) Global configuration clear statistics table that is used to clear all statistics. The table can be used any time when users want to initialize the counter.
hwGTSM	1.3.6.1.4.1.2011.5.25.126.1
INT hwGTSMDefaultAction	1.3.6.1.4.1.2011.5.25.126.1.1	INTEGER	read-write	The object specifies the default action when no matching policy exists. Default value is pass.
hwGTSMPolicyTable	1.3.6.1.4.1.2011.5.25.126.1.2		not-accessible	Information about GTSM policies. This object is used to get GTSM policy(policies), create a new policy, modify or delete GTSM policy (policies).
hwGTSMPolicyEntry	1.3.6.1.4.1.2011.5.25.126.1.2.1		not-accessible	Information about GTSM policies,it used to get gtsm policy(policies),to create a new policy,to modify or to delete gtsm policy(policies).
I32 hwGTSMvrfIndex	1.3.6.1.4.1.2011.5.25.126.1.2.1.1	Integer32	not-accessible	The index of VPN Routing and Forwarding table.
IPt hwGTSMPolicyAddressType	1.3.6.1.4.1.2011.5.25.126.1.2.1.2	InetAddressType	not-accessible	The type of Internet address by where the packets received and will go.
I32 hwGTSMPolicyProtocol	1.3.6.1.4.1.2011.5.25.126.1.2.1.3	Integer32	not-accessible	The number of protocol.
IP hwGTSMPolicySourceIpAddress	1.3.6.1.4.1.2011.5.25.126.1.2.1.4	InetAddress	not-accessible	Source IP address in the GTSM policy that will be used to check the matching of source IP address in the received packets.
IP hwGTSMPolicyDestIpAddress	1.3.6.1.4.1.2011.5.25.126.1.2.1.5	InetAddress	not-accessible	Destination IP address in the GTSM policy that will be used to check the matching of destination IP address in the received packets.
I32 hwGTSMPolicySourcePort	1.3.6.1.4.1.2011.5.25.126.1.2.1.6	Integer32	not-accessible	Source port number in the GTSM policy that will be used to check the matching of source port number in the received packets.
I32 hwGTSMPolicyDestPort	1.3.6.1.4.1.2011.5.25.126.1.2.1.7	Integer32	not-accessible	Destination port number in the GTSM policy that will be used to check the matching of destination port number in the received packets.
I32 hwGTSMPolicyTTLMin	1.3.6.1.4.1.2011.5.25.126.1.2.1.11	Integer32	read-create	The minimum TTL in the policy table. The minimum TTL is compared with the TTL in the packets to check whether the minimum TTL is between the minimum TTL and maximum TTL, and thus check the validity of the received packets.
I32 hwGTSMPolicyTTLMax	1.3.6.1.4.1.2011.5.25.126.1.2.1.12	Integer32	read-only	The maximum TTL in policy table that is compared with the TTL in the packets to check whether it is between the minimum TTL and maximum TTL ,and thus check the validity of the received packets. Default value is 255.
ROW hwGTSMPolicyRowStatus	1.3.6.1.4.1.2011.5.25.126.1.2.1.51	RowStatus	read-create	The operating state of the row.
hwGTSMBgpPeergroupTable	1.3.6.1.4.1.2011.5.25.126.1.3		not-accessible	The table of BGP peer group policies. The table contains all the BGP peer group policies.
hwGTSMBgpPeergroupEntry	1.3.6.1.4.1.2011.5.25.126.1.3.1		not-accessible	Information about BGP peer group policies. This table is used to get BGP peer group policy (policies), create a policy, modify or delete BGP peer group policy (policies).
OCT hwGTSMBgpPeergroupName	1.3.6.1.4.1.2011.5.25.126.1.3.1.1	OCTET STRING	not-accessible	Peer group name in the BGP policy table that is compared with the peer group name to decide whether to apply this policy.
I32 hwGTSMBgpPeergroupTTLMin	1.3.6.1.4.1.2011.5.25.126.1.3.1.11	Integer32	read-create	The minimum TTL in policy table that is compared with the TTL in the packets to check whether it is between the minimum TTL and maximum TTL, and thus check the validity of the received packets.
I32 hwGTSMBgpPeergroupTTLMax	1.3.6.1.4.1.2011.5.25.126.1.3.1.12	Integer32	read-only	The maximum TTL in policy table that is compared with the TTL in the packets to check whether it is between the minimum TTL and maximum TTL, and check the validity of the received packets. Default value is 255.
ROW hwGTSMBgpPeergroupRowStatus	1.3.6.1.4.1.2011.5.25.126.1.3.1.51	RowStatus	read-create	The operating state of the row.
hwGTSMStatisticsTable	1.3.6.1.4.1.2011.5.25.126.1.4		not-accessible	The table of GTSM Statistics table. The table contains the number of the packets containing received packets, passed packets and discarded packets.
hwGTSMStatisticsEntry	1.3.6.1.4.1.2011.5.25.126.1.4.1		not-accessible	The information of GTSM Statistics,it only can be read.
I32 hwGTSMSlotIndex	1.3.6.1.4.1.2011.5.25.126.1.4.1.1	Integer32	not-accessible	The Index of Slot which receives the packets.
C64 hwGTSMStatisticsRcvPacketNumberEx	1.3.6.1.4.1.2011.5.25.126.1.4.1.11	Counter64	read-only	The total number of received packets of specific slot.
C64 hwGTSMStatisticsPassPacketNumber	1.3.6.1.4.1.2011.5.25.126.1.4.1.12	Counter64	read-only	The total number of packets that have been transferred to the up layer after packets of specific slot are received.
C64 hwGTSMStatisticsDropPacketNumber	1.3.6.1.4.1.2011.5.25.126.1.4.1.13	Counter64	read-only	The total number of packets that do not match the specific GTSM policy when packets of specific slot are received.
hwGTSMGlobalConfigTable	1.3.6.1.4.1.2011.5.25.126.1.5		not-accessible	The table of GTSM global configuration table. The table contains all information you have operated to the statistics table.
hwGTSMGlobalConfigEntry	1.3.6.1.4.1.2011.5.25.126.1.5.1		not-accessible	The information of GTSM global configuration table.The table is used to clear all statistics, you can use this table any time when you want to initialize the counter.
INT hwGTSMGlobalConfigClearStatistics	1.3.6.1.4.1.2011.5.25.126.1.5.1.11	INTEGER	read-write	It is used to clear the statistics of the GTSM global configuration table.
INT hwGTSMGlobalConfigLogDroppedPacket	1.3.6.1.4.1.2011.5.25.126.1.5.1.12	INTEGER	read-write	It is used to decide whether to log the dropped packets.
hwGTSMStatisticsInfoTable	1.3.6.1.4.1.2011.5.25.126.1.6		not-accessible	The table of GTSM Statistics Information. The table contains the number of the packets containing received packets, passed packets and discarded packets.
hwGTSMStatisticsInfoEntry	1.3.6.1.4.1.2011.5.25.126.1.6.1		not-accessible	The information of GTSM Statistics,it only can be read.
I32 hwGTSMSlotNum	1.3.6.1.4.1.2011.5.25.126.1.6.1.1	Integer32	not-accessible	The Index of Slot which receives the packets.
C64 hwGTSMStatisticsReceivePacketNum	1.3.6.1.4.1.2011.5.25.126.1.6.1.11	Counter64	read-only	The total number of received packets of specific slot.
C64 hwGTSMStatisticsPassPacketNum	1.3.6.1.4.1.2011.5.25.126.1.6.1.12	Counter64	read-only	The total number of packets that have been transferred to the up layer after packets of specific slot are received.
C64 hwGTSMStatisticsDropPacketNum	1.3.6.1.4.1.2011.5.25.126.1.6.1.13	Counter64	read-only	The total number of packets that do not match the specific GTSM policy when packets of specific slot are received.
hwGTSMGlobalConfigInfoTable	1.3.6.1.4.1.2011.5.25.126.1.7		not-accessible	The table of GTSM global configuration table. The table contains all information you have operated to the statistics table.
hwGTSMGlobalConfigInfoEntry	1.3.6.1.4.1.2011.5.25.126.1.7.1		not-accessible	The information of GTSM global configuration table.The table is used to clear all statistics, you can use this table any time when you want to initialize the counter.
INT hwGTSMGlobalConfigClearStatisticsInfo	1.3.6.1.4.1.2011.5.25.126.1.7.1.11	INTEGER	read-write	It is used to clear the statistics of the GTSM global configuration table.
INT hwGTSMGlobalConfigLogDroppedPacketInfo	1.3.6.1.4.1.2011.5.25.126.1.7.1.12	INTEGER	read-write	It is used to decide whether to log the dropped packets.
hwGTSMConformance	1.3.6.1.4.1.2011.5.25.126.2
hwGTSMCompliances	1.3.6.1.4.1.2011.5.25.126.2.1
hwGTSMCompliance	1.3.6.1.4.1.2011.5.25.126.2.1.1			The compliance statement for systems supporting this module.
hwGTSMGroups	1.3.6.1.4.1.2011.5.25.126.2.2
hwGTSMDefaultActionGroup	1.3.6.1.4.1.2011.5.25.126.2.2.1			The default action group.
hwGTSMPolicyGroup	1.3.6.1.4.1.2011.5.25.126.2.2.2			The GTSM policy group.
hwGTSMBgpPeergroupGroup	1.3.6.1.4.1.2011.5.25.126.2.2.3			The GTSM BGP peer group.
hwGTSMStatisticsGroup	1.3.6.1.4.1.2011.5.25.126.2.2.4			The GTSM statistics group.
hwGTSMGlobalConfigGroup	1.3.6.1.4.1.2011.5.25.126.2.2.5			The GTSM global configuration group.
hwGTSMStatisticsInfoGroup	1.3.6.1.4.1.2011.5.25.126.2.2.6			The GTSM statistics group.
hwGTSMGlobalConfigInfoGroup	1.3.6.1.4.1.2011.5.25.126.2.2.7			The GTSM global configuration group.

RFC description

Manages Generalized TTL Security Mechanism (GTSM) policies for BGP peer protection.

Start monitoring Huawei router or switch running BGP (Generalized TTL Security Mechanism) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-GTSM-MIB