All MIBs › SECURITY-MANAGEMENT-MIB › secTcpSynCkiCfgState
secTcpSynCkiCfgState
Module: SECURITY-MANAGEMENT-MIB
OID (symbolic): SECURITY-MANAGEMENT-MIB::secTcpSynCkiCfgState
OID (numeric): 1.3.6.1.4.1.6889.2.1.14.1.2.2
Node type: OBJECT-TYPE
Type: OnOffType
Access: read-write
Description: Controls and monitors the configuration state of the TCP SYN cookies defense mechanism.
The operational state of the SYN cookies can change only after reset, if the configuration state was changed and the running configuration was saved to the startup configuration before the reset.
Use secTcpSynCkiOpState to monitor the SYN cookies operational state.
When the SYN cookies feature is turned on, it helps protect the local host from SYN attacks (a type of DoS attack).
What is secTcpSynCkiCfgState?
Turns TCP SYN cookies on or off to protect the device from SYN-flood attacks; the change only takes effect after you save the running configuration and reset the device, so check secTcpSynCkiOpState afterward to confirm it applied.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.6889.2.1.14.1.2.2 snmpwalk -v2c -c public <target> SECURITY-MANAGEMENT-MIB::secTcpSynCkiCfgState
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.6889.2.1.14.1.2.2.1 snmpget -v2c -c public <target> SECURITY-MANAGEMENT-MIB::secTcpSynCkiCfgState.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.6889.2.1.14.1.2.2.1 s <value>
Start monitoring Avaya media gateways/switches, e.g. G450/G700 series (secured-mode/management-protocol/DoS-defense status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the SECURITY-MANAGEMENT-MIB::secTcpSynCkiCfgState OID value, configure state conditions and alerts, and monitor any Avaya media gateways/switches, e.g. G450/G700 series (secured-mode/management-protocol/DoS-defense status) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.6889 | avaya | AV-APPLICATION-ENABLEMENT-SERVICES-MIB |
| 1.3.6.1.4.1.6889.2 | mibs | AV-APPLICATION-ENABLEMENT-SERVICES-MIB |
| 1.3.6.1.4.1.6889.2.1 | lsg | AVAYAGEN-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.6889.2.1.14 | avayaSecurity | SECURITY-MANAGEMENT-MIB |
| 1.3.6.1.4.1.6889.2.1.14.1 | secMngModule | SECURITY-MANAGEMENT-MIB |
| 1.3.6.1.4.1.6889.2.1.14.1.2 | secTcpSynCookies | SECURITY-MANAGEMENT-MIB |
| 1.3.6.1.4.1.6889.2.1.14.1.2.2 | secTcpSynCkiCfgState | SECURITY-MANAGEMENT-MIB |