All MIBs › ZTE-AN-SECURITY-ANTIATTACK-MIB
Organization: ZTE Corporation
Last Updated: 2017-11-10
Category: Network Security, ZTE Access Node (ZTE-AN) Management
Description: Manages ZTE access node anti-attack security policies to protect control plane from flooding attacks.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ZTE-AN-SECURITY-ANTIATTACK-MIB?
ZTE-AN-SECURITY-ANTIATTACK-MIB is a ZTE vendor-specific MIB (registered under ZTE's zxAnServiceSecurity enterprise subtree) that manages control-plane anti-attack/anti-flooding defenses on ZTE access-node equipment. It exposes global configuration scalars such as zxAnSecAntiAttackEnable, zxAnSecAntiAttackMode (VLAN+source-MAC based or source-IP based classification), zxAnSecAntiAttackBlockDuration, and zxAnSecAntiAttackPktRateThresh, plus whitelist tables (zxAnSecAASrcMacWhiteListTable and zxAnSecAASrcIpWhiteListTable, keyed by VLAN/MAC or IP type/address/prefix with RowStatus-managed rows) that exempt trusted sources from blocking. This is useful for monitoring whether anti-attack protection is enabled, which detection mode and thresholds are configured, and which sources have been whitelisted, helping operators confirm control-plane flood protection is active without inadvertently blocking legitimate management or ARP-next-hop traffic. It depends on ZTE's ZTE-AN-IF-MIB (interface indexing), ZTE-AN-TC-MIB (VLAN types), and INET-ADDRESS-MIB for IP addressing. Engineers hardening ZTE access nodes can consult the ZTE-AN-SECURITY-ANTIATTACK-MIB MIB definitions when configuring flood protection.
IPNetwork Monitor allows you to monitor SNMP objects defined in ZTE-AN-SECURITY-ANTIATTACK-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- ZTE access node (AN) equipment
Monitoring Examples
An operator polls zxAnSecAntiAttackEnable and zxAnSecAntiAttackPktRateThresh to confirm anti-attack is enabled with an appropriate packet-rate threshold, then checks the source MAC/IP whitelist tables after legitimate management traffic gets blocked; a missing whitelist entry for a monitoring station's IP would explain why its packets are being dropped once the configured rate threshold is exceeded.
What Can Be Monitored
- anti-attack enable/disable state
- attack detection mode (VLAN+MAC vs. source IP)
- block duration and packet-rate threshold
- source MAC whitelist entries
- source IP whitelist entries
- rate-limit enable/diagnosis-log flags
Imported Objects
From IF-MIB
| ifIndex | OBJECT-TYPE |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressPrefixLength | |
| InetAddressType |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| MacAddress | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| RowStatus |
From ZTE-AN-IF-MIB
| zxAnSubIfIndex | OBJECT-TYPE |
From ZTE-AN-SMI
| zxAnServiceSecurity | OBJECT-IDENTITY |
From ZTE-AN-TC-MIB
| VlanId |
OIDs
RFC description
Manages anti-attack security with configurable modes, white lists, and attack blocking duration on ZTE access networks.
Start monitoring ZTE access node (AN) equipment (control-plane anti-flood enable/threshold/whitelist status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.