All MIBs › ZTE-AN-SECURITY-L3-MIB › zxAnSecL3TcpSynFldProtectType
zxAnSecL3TcpSynFldProtectType
Module: ZTE-AN-SECURITY-L3-MIB
OID (symbolic): ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectType
OID (numeric): 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: TCP SYN flooding protection type.
delHalfOpenAndAccelerateTimeout(1) -- Both delHalfOpen(2) and accelerateTimeout(3) will be performed when zxAnSecL3TcpSynFldProtectStatus is defence(3).
delHalfOpen(2) -- TCP half-open connections specified by zxAnSecL3TcpHalfOpenDels will be deleted, this action will be performed automatically and periodically until zxAnSecL3TcpSynFldProtectStatus is not defence(3). when zxAnSecL3TcpSynFldProtectStatus is defence(3).
accelerateTimeout(3) -- The system TCP half-open timeout parameter will be forcely set to the value specified by zxAnSecL3TcpHalfOpenTimeout when zxAnSecL3TcpSynFldProtectStatus is defence(3).
What is zxAnSecL3TcpSynFldProtectType?
This read-write enumerated value selects which TCP SYN-flood countermeasure the device applies once zxAnSecL3TcpSynFldProtectStatus reaches defence(3): delHalfOpen(2) periodically deletes half-open connections per zxAnSecL3TcpHalfOpenDels, accelerateTimeout(3) forces a shorter half-open timeout per zxAnSecL3TcpHalfOpenTimeout, or delHalfOpenAndAccelerateTimeout(1) applies both together. Admins choose the mitigation strategy that best fits their traffic pattern and tolerance for dropping legitimate slow connections during an attack. For example, an admin facing a sustained SYN flood might select accelerateTimeout(3) alone to free up half-open connection slots faster without actively purging entries.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.2 snmpwalk -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectType
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.2.1 snmpget -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectType.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.2.1 i <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> zxAnSecL3TcpSynFldProtectType.1
Start monitoring ZTE access-network platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectType OID value, configure state conditions and alerts, and monitor any ZTE access-network platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3902 | zte | DPI-MIB |
| 1.3.6.1.4.1.3902.1082 | zxAccessNode | ZTE-AN-SMI |
| 1.3.6.1.4.1.3902.1082.70 | zxAnServiceSecurity | ZTE-AN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3902.1082.70.37 | zxAnSecurityL3Mib | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2 | zxAnSecL3Objects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3 | zxAnSecL3TcpObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1 | zxAnSecL3TcpGlobalObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1 | zxAnSecL3TcpSynFloodGlbObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.2 | zxAnSecL3TcpSynFldProtectType | ZTE-AN-SECURITY-L3-MIB |