RADLAN-SECURITY-SUITE

Description: Manages the integrated security feature suite including port, MAC, and protocol-based protections.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

This is a RadLan (an embedded switch-management software vendor whose stack underlies many OEM switches) private enterprise MIB implementing an integrated security-feature suite for detecting and blocking network attacks such as Denial-of-Service, SYN floods, and known viruses/exploits. It exposes a global enable/disable control plus tables of known DoS attack signatures (with per-attack enable flags), attack-detail parameters like protocol and source/destination TCP/UDP ports, and a "martian address" table of reserved/invalid source addresses to filter. This is a security/threat-detection MIB rather than a classic hardware-health MIB, but it lets an administrator confirm the device's built-in attack-mitigation features are actively enabled and correctly configured, itself a software/service-status check on the switch's security posture. It depends on and complements the vendor's underlying port/MAC/protocol security features referenced in its description, and is embedded in many OEM switch platforms that license the RadLan software stack. It is deployed on entry-to-midrange managed Ethernet switches (from various OEMs using RadLan-based firmware) in enterprise or SMB networks requiring baseline DoS/attack protection, and administrators can download the RADLAN-SECURITY-SUITE MIB file directly to load it into their MIB browser.

An administrator would check rlSecuritySuiteGlobalEnable to confirm the security suite is active, then inspect rlSecuritySuiteKnownDoSAttacksTable/Entry to see which individual attacks (via rlSecuritySuiteKnownDoSAttackEnable) are being blocked, and drill into rlSecuritySuiteKnownDoSAttacksDetailsTable for the specific rlSecuritySuiteKnownDoSAttackProtocl and source/destination TCP/UDP ports being matched. Reviewing rlSecuritySuiteMartianAddrAllTable alongside rlSecuritySuiteReservedMartianAddresses would reveal whether spoofed or invalid source addresses are being filtered, and an unexpectedly disabled global flag would explain a sudden increase in attack traffic reaching the switch.

Radlan security suite MIB for blocking DoS attacks, SYN floods, viruses, and Martian addresses on network devices.