309 lines
9.7 KiB
Plaintext
309 lines
9.7 KiB
Plaintext
|
|
||
|
|
EXTREME-ENH-DOS-MIB DEFINITIONS ::= BEGIN
|
||
|
|
|
||
|
|
IMPORTS
|
||
|
|
MODULE-IDENTITY FROM SNMPv2-SMI
|
||
|
|
OBJECT-TYPE FROM SNMPv2-SMI
|
||
|
|
DisplayString FROM RFC1213-MIB
|
||
|
|
TimeTicks FROM SNMPv2-SMI
|
||
|
|
TruthValue, RowStatus FROM SNMPv2-TC
|
||
|
|
extremeAgent FROM EXTREME-BASE-MIB
|
||
|
|
extremeV2Traps FROM EXTREME-BASE-MIB;
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
extremeEnhDosMib MODULE-IDENTITY
|
||
|
|
LAST-UPDATED "0401020000Z"
|
||
|
|
ORGANIZATION "Extreme Networks, Inc."
|
||
|
|
CONTACT-INFO "www.extremenetworks.com"
|
||
|
|
DESCRIPTION "Extreme Enhanced Dos protect objects information"
|
||
|
|
::= { extremeAgent 29 }
|
||
|
|
|
||
|
|
extremeEnhDosProtect OBJECT IDENTIFIER ::= { extremeEnhDosMib 1 }
|
||
|
|
|
||
|
|
|
||
|
|
extremeEnhDosEnableRateLimit OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The Flag indicates whether Enhanced DOS protection with rate limit is enabled or disabled."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosProtect 1 }
|
||
|
|
|
||
|
|
extremeEnhDosEnableIpFdb OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The Flag indicates whether Enhanced DOS protection against IPFDB thrashing is enabled or disabled."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosProtect 2 }
|
||
|
|
|
||
|
|
extremeEnhDosEnableBenchMark OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The Flag indicates whether Enhanced DOS protection with benchmarking is enabled or disabled."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosProtect 3 }
|
||
|
|
|
||
|
|
extremeEnhDosCacheSize OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(100..262144)
|
||
|
|
MAX-ACCESS read-write
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The Enhanced DOS Cache Size. The number of DA/SA pairs"
|
||
|
|
DEFVAL { 262144 }
|
||
|
|
::= { extremeEnhDosProtect 4 }
|
||
|
|
|
||
|
|
|
||
|
|
-------------- The DOS Port Table ------------------------------
|
||
|
|
|
||
|
|
extremeEnhDosPortTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF ExtremeEnhDosPortEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the port wise listing of Enhanced DOS attributes."
|
||
|
|
::= { extremeEnhDosProtect 5 }
|
||
|
|
|
||
|
|
extremeEnhDosPortEntry OBJECT-TYPE
|
||
|
|
SYNTAX ExtremeEnhDosPortEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Information about the Dos attributes of a particular port."
|
||
|
|
INDEX { extremeEnhDosPortIfIndex }
|
||
|
|
::= { extremeEnhDosPortTable 1 }
|
||
|
|
|
||
|
|
ExtremeEnhDosPortEntry ::= SEQUENCE {
|
||
|
|
extremeEnhDosPortIfIndex INTEGER,
|
||
|
|
extremeEnhDosPortTrusted TruthValue,
|
||
|
|
extremeEnhDosPortAlarmState TruthValue,
|
||
|
|
extremeEnhDosPortLearnLimit INTEGER,
|
||
|
|
extremeEnhDosPortLearnWindow INTEGER,
|
||
|
|
extremeEnhDosPortAgingTime INTEGER,
|
||
|
|
extremeEnhDosPortRateLimitEnable TruthValue,
|
||
|
|
extremeEnhDosPortIpFdbEnable TruthValue,
|
||
|
|
extremeEnhDosPortBenchMarkEnable TruthValue,
|
||
|
|
extremeEnhDosPortRateLimitThreshold INTEGER,
|
||
|
|
extremeEnhDosPortRateLimitDropProbability INTEGER,
|
||
|
|
extremeEnhDosPortRateLimitLearningWindow INTEGER,
|
||
|
|
extremeEnhDosPortRateLimitProtocol INTEGER
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
extremeEnhDosPortIfIndex OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The index for this entry."
|
||
|
|
::= { extremeEnhDosPortEntry 1 }
|
||
|
|
|
||
|
|
extremeEnhDosPortTrusted OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Indicates whether the port is trusted or untrusted."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosPortEntry 2 }
|
||
|
|
|
||
|
|
extremeEnhDosPortAlarmState OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Indicates whether the port is in alarm state or not."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosPortEntry 3 }
|
||
|
|
|
||
|
|
extremeEnhDosPortLearnLimit OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(1..1953125)
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The number of packets allowed on the port before an entry is
|
||
|
|
created in the forwarding table."
|
||
|
|
DEFVAL { 100 }
|
||
|
|
::= { extremeEnhDosPortEntry 4 }
|
||
|
|
|
||
|
|
extremeEnhDosPortLearnWindow OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(1..300)
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The duration to be considered to reach the threshold for creating an entry
|
||
|
|
in the forwarding table."
|
||
|
|
DEFVAL { 60 }
|
||
|
|
::= { extremeEnhDosPortEntry 5 }
|
||
|
|
|
||
|
|
extremeEnhDosPortAgingTime OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(1..300)
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The duration to be considered for aging out entries created on this port."
|
||
|
|
DEFVAL { 30 }
|
||
|
|
::= { extremeEnhDosPortEntry 6 }
|
||
|
|
|
||
|
|
extremeEnhDosPortRateLimitEnable OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Indicates whether the rate limit is enabled for this port."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosPortEntry 7 }
|
||
|
|
|
||
|
|
extremeEnhDosPortIpFdbEnable OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Indicates whether the DOS protection against IP FDB thrashing is enabled for this port."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosPortEntry 8 }
|
||
|
|
|
||
|
|
|
||
|
|
extremeEnhDosPortBenchMarkEnable OBJECT-TYPE
|
||
|
|
SYNTAX TruthValue
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Indicates whether the bench marking is enabled for this port."
|
||
|
|
DEFVAL { false }
|
||
|
|
::= { extremeEnhDosPortEntry 9 }
|
||
|
|
|
||
|
|
extremeEnhDosPortRateLimitThreshold OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(100..1953125)
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The number of packets allowed on the port within the learning window before the rate limit is applied."
|
||
|
|
DEFVAL { 100 }
|
||
|
|
::= { extremeEnhDosPortEntry 10 }
|
||
|
|
|
||
|
|
extremeEnhDosPortRateLimitDropProbability OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(5..100)
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The probability that the packet is discarded after the reaching the threshold."
|
||
|
|
DEFVAL { 50 }
|
||
|
|
::= { extremeEnhDosPortEntry 11 }
|
||
|
|
|
||
|
|
|
||
|
|
extremeEnhDosPortRateLimitLearningWindow OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER(1..300)
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The duration to be considered after which the rate limit is applied."
|
||
|
|
DEFVAL { 60 }
|
||
|
|
::= { extremeEnhDosPortEntry 12 }
|
||
|
|
|
||
|
|
extremeEnhDosPortRateLimitProtocol OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER {
|
||
|
|
icmp (1),
|
||
|
|
all (2)
|
||
|
|
}
|
||
|
|
MAX-ACCESS read-create
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The protocol packets to be considered for rate limit filtering."
|
||
|
|
DEFVAL { icmp }
|
||
|
|
::= { extremeEnhDosPortEntry 13 }
|
||
|
|
|
||
|
|
|
||
|
|
------- The DOS Port Statistics Table (READ-ONLY)-----------------
|
||
|
|
|
||
|
|
extremeEnhDosPortStatisticsTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF ExtremeEnhDosPortStatisticsEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"This table contains the port wise listing of DOS statistics."
|
||
|
|
::= { extremeEnhDosProtect 6 }
|
||
|
|
|
||
|
|
extremeEnhDosPortStatisticsEntry OBJECT-TYPE
|
||
|
|
SYNTAX ExtremeEnhDosPortStatisticsEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Information about the DOS statistics of a particular port."
|
||
|
|
INDEX { extremeEnhDosPortStatisticsIfIndex }
|
||
|
|
::= { extremeEnhDosPortStatisticsTable 1 }
|
||
|
|
|
||
|
|
ExtremeEnhDosPortStatisticsEntry ::= SEQUENCE {
|
||
|
|
extremeEnhDosPortStatisticsIfIndex INTEGER,
|
||
|
|
extremeEnhDosPortStatisticsRateLimitFilteredPackets INTEGER
|
||
|
|
}
|
||
|
|
|
||
|
|
extremeEnhDosPortStatisticsIfIndex OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The index for this entry."
|
||
|
|
::= { extremeEnhDosPortStatisticsEntry 1 }
|
||
|
|
|
||
|
|
extremeEnhDosPortStatisticsRateLimitFilteredPackets OBJECT-TYPE
|
||
|
|
SYNTAX INTEGER
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The number of packets filetered on this port."
|
||
|
|
::= { extremeEnhDosPortStatisticsEntry 2 }
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
--TRAPS MIB Definitions for ENHDOS
|
||
|
|
|
||
|
|
-- extremeEnhDosThresholdReached TRAP-TYPE
|
||
|
|
-- ENTERPRISE extremenetworks
|
||
|
|
-- VARIABLES {extremeEnhDosPortIfIndex,extremeEnhDosPortRateLimitThreshold}
|
||
|
|
-- DESCRIPTION
|
||
|
|
-- "The extremeDosThresholdReached notification is generated when the
|
||
|
|
-- DOS threshold is crossed"
|
||
|
|
-- ::= 25
|
||
|
|
|
||
|
|
-- extremeEnhDosThresholdCleared TRAP-TYPE
|
||
|
|
-- ENTERPRISE extremenetworks
|
||
|
|
-- VARIABLES {extremeEnhDosPortIfIndex,extremeEnhDosPortRateLimitThreshold}
|
||
|
|
-- DESCRIPTION
|
||
|
|
-- "The extremeDosThresholdCleared notification is generated when the
|
||
|
|
-- DOS threshold is Cleared"
|
||
|
|
-- ::= 26
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
extremeEnhDosTraps OBJECT IDENTIFIER
|
||
|
|
::= { extremeV2Traps 11 }
|
||
|
|
|
||
|
|
extremeEnhDosTrapsPrefix OBJECT IDENTIFIER
|
||
|
|
::= { extremeEnhDosTraps 0 }
|
||
|
|
|
||
|
|
extremeEnhDosThresholdReached NOTIFICATION-TYPE
|
||
|
|
OBJECTS { extremeEnhDosPortIfIndex,
|
||
|
|
extremeEnhDosPortRateLimitThreshold }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The extremeDosThresholdReached notification is generated when
|
||
|
|
the DOS threshold is crossed for any of the ports."
|
||
|
|
::= { extremeEnhDosTrapsPrefix 1 }
|
||
|
|
|
||
|
|
extremeEnhDosThresholdCleared NOTIFICATION-TYPE
|
||
|
|
OBJECTS { extremeEnhDosPortIfIndex,
|
||
|
|
extremeEnhDosPortRateLimitThreshold }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The extremeEnhDosThresholdCleared notification is generated when
|
||
|
|
the DOS threshold is cleared for any of the ports."
|
||
|
|
::= { extremeEnhDosTrapsPrefix 2 }
|
||
|
|
END
|