All MIBs › WS-SW-FIREWALL-MIB › wsSwFirewallDosTcpMaxIncompleteCnLow
wsSwFirewallDosTcpMaxIncompleteCnLow
Module: WS-SW-FIREWALL-MIB
OID (symbolic): WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnLow
OID (numeric): 1.3.6.1.4.1.388.14.2.16.1.1.1.1.2
Node type: OBJECT-TYPE
Type: Integer32
Access: read-write
Description: Maximum number of half-open TCP connections in the system after which firewall will stop intercepting TCP connections. The configured value will be used by TCP Intercept DoS Attack check to handle SYN Flood Attack.
What is wsSwFirewallDosTcpMaxIncompleteCnLow?
The number of system-wide half-open TCP connections, 1 to 1000, below which the firewall's TCP Intercept check stops intercepting TCP connections after having started due to wsSwFirewallDosTcpMaxIncompleteCnHigh being exceeded. An admin sets this lower than the high threshold to create hysteresis, preventing the firewall from rapidly toggling intercept mode on and off during a borderline SYN flood.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.388.14.2.16.1.1.1.1.2 snmpwalk -v2c -c public <target> WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnLow
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.388.14.2.16.1.1.1.1.2.1 snmpget -v2c -c public <target> WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnLow.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.388.14.2.16.1.1.1.1.2.1 i <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> wsSwFirewallDosTcpMaxIncompleteCnLow.1
Start monitoring Symbol Technologies (Zebra) wireless switches (DoS-check/storm-control threshold and attack-statistics status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the WS-SW-FIREWALL-MIB::wsSwFirewallDosTcpMaxIncompleteCnLow OID value, configure state conditions and alerts, and monitor any Symbol Technologies (Zebra) wireless switches (DoS-check/storm-control threshold and attack-statistics status) from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.388 | symbol | SYMBOL-DSSS-ENTERPRISE-PRIVATE-MIB |
| 1.3.6.1.4.1.388.14 | ws | WS-SMI |
| 1.3.6.1.4.1.388.14.2 | wsSw | WS-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.388.14.2.16 | wsSwFirewall | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1 | wsSwFirewallMibModule | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1 | wsSwFirewallMIB | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1.1 | wsSwFirewallDos | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1.1.1 | wsSwFirewallDosScalars | WS-SW-FIREWALL-MIB |
| 1.3.6.1.4.1.388.14.2.16.1.1.1.1.2 | wsSwFirewallDosTcpMaxIncompleteCnLow | WS-SW-FIREWALL-MIB |