All MIBs › ZTE-AN-SECURITY-L3-MIB › zxAnSecL3TcpSynFldProtectStatus
zxAnSecL3TcpSynFldProtectStatus
Module: ZTE-AN-SECURITY-L3-MIB
OID (symbolic): ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectStatus
OID (numeric): 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.20
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: TCP SYN flooding protection status. This object will be automatically set as following:
CurrentHoRatio = 100 * zxAnSecL3TcpHalfOpenConns / zxAnSecL3TcpTotalConns Current1MinHoRatio = 100 * zxAnSecL3TcpC1MHalfOpenConns / zxAnSecL3TcpC1MTotalConns
If CurrentHoRatio < zxAnSecL3TcpHalfOpenLoThresh and Current1MinHoRatio < zxAnSecL3TcpC1MHalfOpenLoThresh zxAnSecL3TcpSynFldProtectStatus will be set to safety(1);
If CurrentHoRatio >= zxAnSecL3TcpHalfOpenHiThresh or Current1MinHoRatio >= zxAnSecL3TcpC1MHalfOpenHiThresh zxAnSecL3TcpSynFldProtectStatus will be set to defence(3);
In other cases, zxAnSecL3TcpSynFldProtectStatus will be set to warning(2).
What is zxAnSecL3TcpSynFldProtectStatus?
This read-only enumerated value reports the device's current TCP SYN-flood protection state - safety(1), warning(2), or defence(3) - computed automatically by comparing the live half-open-to-total connection ratios against the configured low and high thresholds for both the overall and 1-minute windows. Admins monitor it as the at-a-glance indicator of whether the device believes it is currently under a SYN-flood attack. For example, seeing zxAnSecL3TcpSynFldProtectStatus jump to defence(3) tells the admin the device has automatically activated its configured SYN-flood countermeasures.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.20 snmpwalk -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectStatus
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.20.1 snmpget -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectStatus.1
Start monitoring ZTE access-network platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectStatus OID value, configure state conditions and alerts, and monitor any ZTE access-network platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3902 | zte | DPI-MIB |
| 1.3.6.1.4.1.3902.1082 | zxAccessNode | ZTE-AN-SMI |
| 1.3.6.1.4.1.3902.1082.70 | zxAnServiceSecurity | ZTE-AN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3902.1082.70.37 | zxAnSecurityL3Mib | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2 | zxAnSecL3Objects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3 | zxAnSecL3TcpObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1 | zxAnSecL3TcpGlobalObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1 | zxAnSecL3TcpSynFloodGlbObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.20 | zxAnSecL3TcpSynFldProtectStatus | ZTE-AN-SECURITY-L3-MIB |