All MIBs › ZTE-AN-SECURITY-L3-MIB › zxAnSecL3TcpHalfOpenTimeout
zxAnSecL3TcpHalfOpenTimeout
Module: ZTE-AN-SECURITY-L3-MIB
OID (symbolic): ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpHalfOpenTimeout
OID (numeric): 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.3
Node type: OBJECT-TYPE
Type: Integer32
Access: read-write
Description: Timeout of TCP half-open (SYN-RCVD) status. This object will be activated when zxAnSecL3TcpSynFldProtectStatus is defence(3).
What is zxAnSecL3TcpHalfOpenTimeout?
This read-write integer, in seconds, sets how long a TCP connection may remain in the half-open SYN-RCVD state before being timed out, and this shortened timeout is enforced only once zxAnSecL3TcpSynFldProtectStatus reaches defence(3). Admins lower this value to more aggressively clear out suspicious half-open connections during an active SYN-flood attack. For example, reducing zxAnSecL3TcpHalfOpenTimeout from the 30-second default to 5 seconds would make the device abandon unanswered SYN-ACKs much faster once under attack.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.3 snmpwalk -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpHalfOpenTimeout
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.3.1 snmpget -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpHalfOpenTimeout.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.3.1 i <value>
Start monitoring ZTE access-network platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpHalfOpenTimeout OID value, configure state conditions and alerts, and monitor any ZTE access-network platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3902 | zte | DPI-MIB |
| 1.3.6.1.4.1.3902.1082 | zxAccessNode | ZTE-AN-SMI |
| 1.3.6.1.4.1.3902.1082.70 | zxAnServiceSecurity | ZTE-AN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3902.1082.70.37 | zxAnSecurityL3Mib | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2 | zxAnSecL3Objects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3 | zxAnSecL3TcpObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1 | zxAnSecL3TcpGlobalObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1 | zxAnSecL3TcpSynFloodGlbObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.3 | zxAnSecL3TcpHalfOpenTimeout | ZTE-AN-SECURITY-L3-MIB |