TIARA-DOS-MIB

Description: Covers denial-of-service prevention policy configuration on Tiara Networks WAN routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

TIARA-DOS-MIB is a vendor-specific SNMP module for Tiara Networks WAN routers that configures denial-of-service (DoS) prevention policy, covering protections against ping floods, ICMP abuse, and incomplete/half-open TCP connections. It exposes per-Ethernet-interface DoS status along with a table tracking incomplete TCP connections including their source and destination IP addresses. Its monitoring relevance centers on security/fault status: statusDeosEth reports whether DoS protection is currently active or triggered on a given Ethernet interface, while the incomplete-TCP table gives visibility into potential SYN-flood attack activity by exposing per-connection source/destination addresses, functioning as an early-warning tool for an in-progress attack rather than general hardware health. It builds on the base Tiara enterprise MIB tree and likely correlates with standard interface indexing conventions, though it is a fully vendor-specific security module. It is deployed on Tiara WAN routers at network edges where DoS mitigation is enabled, monitored by a security-aware NMS watching for spikes in incomplete connections. Engineers can download the TIARA-DOS-MIB file directly to load it into their MIB browser.

An operator would poll tiaraDeosEthTable's statusDeosEth (indexed by ethNum) to confirm DoS protection is enabled and not currently in an alarmed state on a given interface. A sudden spike in entries within tiaraIncompleteTcpTable, walked via tcpIncompleteIndex with srcIpAddress and destIpAddress populated, would indicate an active SYN-flood attempt targeting the router. tiaraDeosPing and tiaraDeosIcmp settings would be checked to confirm ICMP/ping flood thresholds are configured as expected for the current threat posture.

Manages Tiara Networks WAN router denial-of-service prevention policy configuration.