ZTE-AN-ANTI-DOS-MIB

All MIBs › ZTE-AN-ANTI-DOS-MIB

Organization: ZTE Corporation

Last Updated: 2014-07-24

Category: Network Security, ZTE Access Node (ZTE-AN) Management

Description: Manages ZTE access node anti-DoS attack protection configuration and monitored attack statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZTE-AN-ANTI-DOS-MIB?

ZTE-AN-ANTI-DOS-MIB is a ZTE Corporation proprietary MIB (ZXR10/ZXROS platform family) implementing Anti-DoS traffic rate limiting and blacklisting on ZTE access-network (PON/DSLAM) equipment on ZTE ZXR10 carrier routers/switches. Its objects cover a global enable/diagnosis-log/rate-limit enable set, a global per-interface-type configuration table (protocol type, check interval, rate threshold/limit), a per-interface override table, and a blacklist table recording offending rack/shelf/slot/port-list entries. As a configuration/status MIB it lets an administrator audit and monitor Anti-DoS traffic rate limiting and blacklisting on ZTE access-network (PON/DSLAM) equipment on a ZXR10 platform. It is deployed on ZTE ZXR10 carrier routers/switches. Engineers can download the ZTE-AN-ANTI-DOS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZTE-AN-ANTI-DOS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

ZTE ZXR10 carrier routers/switches

Monitoring Examples

An administrator reviews this MIB's objects to confirm Anti-DoS traffic rate limiting and blacklisting on ZTE access-network (PON/DSLAM) equipment is configured and operating as expected on a ZTE ZXR10 platform.

What Can Be Monitored

Anti-DoS traffic rate limiting and blacklisting on ZTE access-network (PON/DSLAM) equipment

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

RowStatus

From ZTE-AN-IF-MIB

zxAnSubIfIndex

OBJECT-TYPE

From ZTE-AN-SMI

zxAnServiceSecurity

OBJECT-IDENTITY

From ZTE-AN-TC-MIB

ZxAnPortList

OIDs

OID symbolic	OID numeric	Type	Access	Description
zxAnAntiDosMib	1.3.6.1.4.1.3902.1082.70.27			The MIB module for the Anti-Dos management.
zxAnAntiDosGlobalObjects	1.3.6.1.4.1.3902.1082.70.27.1
INT zxAnAntiDosEnable	1.3.6.1.4.1.3902.1082.70.27.1.1	INTEGER	read-write	Enable/disable anti-DoS function.
INT zxAnAntiDosDiagnosisLogEnable	1.3.6.1.4.1.3902.1082.70.27.1.2	INTEGER	read-write	Enable/disable anti-DoS diagnosis log function. Only supports C6XX, not supports C3XX.
INT zxAnAntiDosRateLimitEnable	1.3.6.1.4.1.3902.1082.70.27.1.3	INTEGER	read-write	Enable/disable anti-DoS rate limit. Only supports C6XX, not supports C3XX.
zxAnAntiDosObjects	1.3.6.1.4.1.3902.1082.70.27.2
zxAnAntiDosGlobalIfConfTable	1.3.6.1.4.1.3902.1082.70.27.2.2		not-accessible	Anti-DoS global interface configuration information table. The global interface based anti-DoS configuration will be applied to the interface if the interface based anti-DoS configuration is not given in zxAnAntiDosIfConfTable.
zxAnAntiDosGlobalIfConfEntry	1.3.6.1.4.1.3902.1082.70.27.2.2.1		not-accessible	Anti-DoS global interface configuration information entry.
INT zxAnAntiDosGlbIfConfIfType	1.3.6.1.4.1.3902.1082.70.27.2.2.1.1	INTEGER	not-accessible	Interface type based on global interface. Dsl(1) only supports C3XX, not supports C6XX. Others support C3XX and C6XX.
INT zxAnAntiDosGlbIfConfProtoType	1.3.6.1.4.1.3902.1082.70.27.2.2.1.2	INTEGER	not-accessible	Protocol type based on global interface. Ieee8021x(5) only supports C3XX, not supports C6XX. dhcpv6(6),nd(7),mld(8) only supports C6XX, not supports C3XX. Others support C3XX and C6XX.
I32 zxAnAntiDosGlbIfConfChkInterval	1.3.6.1.4.1.3902.1082.70.27.2.2.1.3	Integer32	read-create	Interval based on global interface to check if the interface in blacklist is still under DoS attack, if not the interface will be removed from blacklist.
I32 zxAnAntiDosGlbIfConfRateThresh	1.3.6.1.4.1.3902.1082.70.27.2.2.1.4	Integer32	read-create	Packet rate threshold based on global interface. If the packet average rate of the interface exceeds this value, the interface will be temporarily blacklisted and an zxAnDosAttackAlarm notification will be generated.
I32 zxAnAntiDosGlbIfConfRateLimit	1.3.6.1.4.1.3902.1082.70.27.2.2.1.5	Integer32	read-create	Packet rate limit in the blacklist based on global interface. The value '0' means discarding all the packets directly.
ROW zxAnAntiDosGlbIfConfRowStatus	1.3.6.1.4.1.3902.1082.70.27.2.2.1.50	RowStatus	read-create	The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnAntiDosGlobalIfConfEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).
zxAnAntiDosIfConfTable	1.3.6.1.4.1.3902.1082.70.27.2.3		not-accessible	Anti-DoS interface configuration information table.
zxAnAntiDosIfConfEntry	1.3.6.1.4.1.3902.1082.70.27.2.3.1		not-accessible	Anti-DoS interface configuration information entry.
INT zxAnAntiDosIfConfProtoType	1.3.6.1.4.1.3902.1082.70.27.2.3.1.1	INTEGER	not-accessible	Protocol type based on interface. Ieee8021x(5) only supports C3XX, not supports C6XX. dhcpv6(6),nd(7),mld(8) only supports C6XX, not supports C3XX. Others support C3XX and C6XX.
I32 zxAnAntiDosIfConfChkInterval	1.3.6.1.4.1.3902.1082.70.27.2.3.1.2	Integer32	read-create	Interval based on interface to check if the interface in blacklist is still under DoS attack, if not the interface will be removed from blacklist.
I32 zxAnAntiDosIfConfRateThresh	1.3.6.1.4.1.3902.1082.70.27.2.3.1.3	Integer32	read-create	Packet rate threshold based on interface. If the packet average rate of the interface exceeds this value, the interface will be temporarily blacklisted and an zxAnDosAttackAlarm notification will be generated.
I32 zxAnAntiDosIfConfRateLimit	1.3.6.1.4.1.3902.1082.70.27.2.3.1.4	Integer32	read-create	Packet rate limit of the interface in the blacklist. The value '0' means discarding all the packets directly.
ROW zxAnAntiDosIfConfRowStatus	1.3.6.1.4.1.3902.1082.70.27.2.3.1.50	RowStatus	read-create	The status of this conceptual row. The supported actions of this conceptual row only include: 'createAndGo' and 'destroy'. To create a row in this table, a manager must set this object to createAndGo(4), and must comply with the multi-variables binding rule described in zxAnAntiDosIfConfEntry. To delete a row in this table, a manager must set this object to destroy(6). To get this object, the agent always returns active(1).
zxAnAntiDosBlacklistTable	1.3.6.1.4.1.3902.1082.70.27.2.4		not-accessible	Anti-DoS blacklist information table.
zxAnAntiDosBlacklistEntry	1.3.6.1.4.1.3902.1082.70.27.2.4.1		not-accessible	Anti-DoS blacklist information entry.
I32 zxAnAntiDosBlacklistRack	1.3.6.1.4.1.3902.1082.70.27.2.4.1.1	Integer32	not-accessible	The rack that contains the port list.
I32 zxAnAntiDosBlacklistShelf	1.3.6.1.4.1.3902.1082.70.27.2.4.1.2	Integer32	not-accessible	The shelf that contains the port list.
I32 zxAnAntiDosBlacklistSlot	1.3.6.1.4.1.3902.1082.70.27.2.4.1.3	Integer32	not-accessible	The slot that contains the port list.
ZXA zxAnAntiDosBlacklistPortList	1.3.6.1.4.1.3902.1082.70.27.2.4.1.4	ZxAnPortList	read-only	The port list in the blacklist.

RFC description

Manages anti-denial-of-service functions with global rate limiting and per-interface configuration.

Start monitoring ZTE ZXR10 carrier routers/switches (Anti-DoS rate-limit/blacklist config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZTE-AN-ANTI-DOS-MIB

What Is ZTE-AN-ANTI-DOS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description