All MIBs › WS-SW-FIREWALL-MIB › wsSwFirewallDosTcpMaxIncompleteCnHigh
wsSwFirewallDosTcpMaxIncompleteCnHigh
Module: WS-SW-FIREWALL-MIB
OID (symbolic): WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnHigh
OID (numeric): 1.3.6.1.4.1.388.14.2.16.1.1.1.1.1
Node type: OBJECT-TYPE
Type: Integer32
Access: read-write
Description: Maximum number of half-open TCP connections in the system after which firewall will start intercepting TCP connections. The configured value will be used by TCP Intercept DoS Attack check to handle SYN Flood Attack.
What is wsSwFirewallDosTcpMaxIncompleteCnHigh?
The number of system-wide half-open TCP connections, 1 to 1000, above which the firewall's TCP Intercept check starts actively intercepting new TCP connections to defend against a SYN flood attack. An admin lowers this value to make the firewall react to SYN floods sooner, at the cost of intercepting legitimate connection bursts more readily.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.388.14.2.16.1.1.1.1.1 snmpwalk -v2c -c public <target> WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnHigh
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.388.14.2.16.1.1.1.1.1.1 snmpget -v2c -c public <target> WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnHigh.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.388.14.2.16.1.1.1.1.1.1 i <value>
Start monitoring Symbol Technologies (Zebra) wireless switches (DoS-check/storm-control threshold and attack-statistics status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnHigh OID value, configure state conditions and alerts, and monitor any Symbol Technologies (Zebra) wireless switches (DoS-check/storm-control threshold and attack-statistics status) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.388 | symbol | SYMBOL-DSSS-ENTERPRISE-PRIVATE-MIB |
| 1.3.6.1.4.1.388.14 | ws | WS-SMI |
| 1.3.6.1.4.1.388.14.2 | wsSw | WS-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.388.14.2.16 | wsSwFirewall | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1 | wsSwFirewallMibModule | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1 | wsSwFirewallMIB | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1.1 | wsSwFirewallDos | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1.1.1 | wsSwFirewallDosScalars | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1.1.1.1 | wsSwFirewallDosTcpMaxIncompleteCnHigh | WS-SW-FIREWALL-MIB |