1127 lines
35 KiB
Plaintext
1127 lines
35 KiB
Plaintext
-- *****************************************************************************
|
|
-- Juniper-DOS-PROTECTION-MIB
|
|
--
|
|
-- Juniper Networks Enterprise MIB
|
|
-- DOS Protection MIB
|
|
--
|
|
-- Copyright (c) 2005-2006 Juniper Networks, Inc.
|
|
-- Copyright (c) 2008 Juniper Networks, Inc.
|
|
-- Copyright (c) 2009 Juniper Networks, Inc.
|
|
-- All Rights Reserved.
|
|
-- *****************************************************************************
|
|
|
|
Juniper-DOS-PROTECTION-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, Counter32,
|
|
Unsigned32
|
|
FROM SNMPv2-SMI
|
|
JuniEnable
|
|
FROM Juniper-TC
|
|
TEXTUAL-CONVENTION, TruthValue, DisplayString, RowStatus
|
|
FROM SNMPv2-TC
|
|
MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP
|
|
FROM SNMPv2-CONF
|
|
InterfaceIndex
|
|
FROM IF-MIB
|
|
juniMibs
|
|
FROM Juniper-MIBs;
|
|
|
|
juniDosProtectionMIB MODULE-IDENTITY
|
|
LAST-UPDATED "200805060000Z" -- 06-May-2008 00:00
|
|
ORGANIZATION "Juniper Networks, Inc."
|
|
CONTACT-INFO
|
|
" Juniper Networks, Inc.
|
|
Postal: 10 Technology Park Drive
|
|
Westford, MA 01886-3146
|
|
USA
|
|
Tel: +1 978 589 5800
|
|
Email: mib@Juniper.net"
|
|
DESCRIPTION
|
|
"The DOS Protection MIB for the Juniper E-Series product family.
|
|
This MIB contains managed objects for the DOS Protection
|
|
application. Management objects are provided to control and
|
|
monitor the DOS protection application."
|
|
-- Revision History
|
|
REVISION "200805060000Z" -- 06-May-2008 00:00 JUNOSe 8.1
|
|
DESCRIPTION
|
|
"Updated JuniDosProtectionProtocolType TEXTUAL-CONVENTION "
|
|
REVISION "200607010000Z" -- 01-Jul-2006 00:00 JUNOSe 8.1
|
|
DESCRIPTION
|
|
"Added Dos-Protection-Group support"
|
|
REVISION "200608180400Z" -- 18-Aug-2006 00:00 AM EDT - JUNOSe 8.0
|
|
DESCRIPTION
|
|
"Added MPLS Lsp Ping support."
|
|
REVISION "200608171926Z" -- 17-Aug-2006 03:26 PM EDT - JUNOSe 7.3
|
|
DESCRIPTION
|
|
"Added new protocol type, atmDynamicIfPppData, to manage in
|
|
JuniDosProtectionProtocolType."
|
|
REVISION "200601010500Z" -- 01-Jan-2006 00:00 AM EST - JUNOSe 7.3
|
|
DESCRIPTION
|
|
"Initial version of this MIB module."
|
|
::= { juniMibs 80 }
|
|
|
|
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
-- Textual conventions
|
|
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
JuniDosProtectionProtocolType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The control protocols that are supported by the DOS protection
|
|
application."
|
|
|
|
SYNTAX INTEGER {
|
|
pppEchoRequest(0),
|
|
ppEchoReply(1),
|
|
pppEchoReplyFast(2),
|
|
pppControl(3),
|
|
atmControl(4),
|
|
atmOam(5),
|
|
atmDynamicIf(6),
|
|
atmInverseArp(7),
|
|
frameRelayControl(8),
|
|
frameRelayArp(9),
|
|
pppoeControl(10),
|
|
pppoePppConfig(11),
|
|
ethernetArpMiss(12),
|
|
ethernetArp(13),
|
|
ethernetFcBasedArp(14),
|
|
ethernetLacp(15),
|
|
ethernetOam(16),
|
|
ethernetDynamicIf(17),
|
|
ethernetPppTerminate(18),
|
|
slepSlarp(19),
|
|
slepSlarpReplyFast(20),
|
|
mplsTtlOnReceive(21),
|
|
mplsTtlOnTransmit(22),
|
|
mplsMtuExceeded(23),
|
|
itmL2tpControl(24),
|
|
flisInPayload(25),
|
|
flisInPayloadUpdateTable(26),
|
|
dhcpExternal(27),
|
|
ipOsi(28),
|
|
ipTtlExpired(29),
|
|
ipOptionsOther(30),
|
|
ipOptionsRouterAlert(31),
|
|
ipMulticastBroadcastOther(32),
|
|
ipMulticastDhcpSc(33),
|
|
ipMulticastControlSc(34),
|
|
ipMulticastControlIc(35),
|
|
ipMulticastVrrp(36),
|
|
ipMulticastCacheMiss(37),
|
|
ipMulticastCacheMissAutoReply(38),
|
|
ipMulticastWrongIf(39),
|
|
ipLocalDhcpSc(40),
|
|
ipLocalDhcpIc(41),
|
|
ipLocalIcmpEcho(42),
|
|
ipLocalIcmpOther(43),
|
|
ipLocalLDP(44),
|
|
ipLocalBgp(45),
|
|
ipLocalOspf(46),
|
|
ipLocalRsvp(47),
|
|
ipLocalPim(48),
|
|
ipLocalCops(49),
|
|
ipLocalL2tpControlSc(50),
|
|
ipLocalL2tpControlIc(51),
|
|
ipLocalOther(52),
|
|
ipLocalDemuxMiss(53),
|
|
ipRouteToSrpEthernet(54),
|
|
ipRouteNoRoute(55),
|
|
ipNormalPathMtu(56),
|
|
ipNeighborDiscovery(57),
|
|
ipNeighborDiscoveryMiss(58),
|
|
ipSearchError(59),
|
|
ipMld(60),
|
|
ipLocalPimAssert(61),
|
|
ipLocalBfd(62),
|
|
ipFastBfd(63),
|
|
ipLocalFastBfd(64),
|
|
ipIke(65),
|
|
ipReassembly(66),
|
|
ipLocalIcmpFragment(67),
|
|
ipLocalFragment(68),
|
|
ipAppClassifierHttpRedirect(69),
|
|
ipMulticastDhcpIc(70),
|
|
dhcpTesterIc(71),
|
|
atmDynamicIfPppData(72),
|
|
ipLocalLspPing(73) }
|
|
|
|
|
|
JuniDosProtectionPriorityType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The control priorities that are supported by the DOS protection
|
|
application."
|
|
|
|
SYNTAX INTEGER {
|
|
hiGreenFcIc(0),
|
|
hiYellowFcIc(1),
|
|
loGreenFcIc(2),
|
|
loYellowFcIc(3),
|
|
hiGreenFcSc(4),
|
|
hiYellowFcSc(5),
|
|
loGreenFcSc(6),
|
|
loYellowFcSc(7) }
|
|
|
|
JuniDosProtectionProtocolState ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current state of a protocol."
|
|
|
|
SYNTAX INTEGER {
|
|
ok(1),
|
|
inTrouble(2) }
|
|
|
|
JuniDosProtectionScfdsTableOverflowState ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current state of the suspicious flow table."
|
|
|
|
SYNTAX INTEGER {
|
|
notOverflowingOrGrouping(1),
|
|
grouping(2),
|
|
overflowing(3) }
|
|
|
|
JuniDosProtectionProtocolPriorityType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The control priorities that are supported by the DOS protection
|
|
application for each control processor"
|
|
|
|
SYNTAX INTEGER {
|
|
hiGreen(0),
|
|
hiYellow(1),
|
|
loGreen(2),
|
|
loYellow(3),
|
|
dataPath(4) }
|
|
|
|
JuniDosProtectionProtocolCannedType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The available canned dos-protection-groups which can be used
|
|
to set defaults into a user specified group."
|
|
|
|
SYNTAX INTEGER {
|
|
default(0),
|
|
enetAccess(1),
|
|
atmAccess(2),
|
|
frame(3),
|
|
uplink(4)
|
|
}
|
|
|
|
JuniDosProtectionLayerId ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The available interface types for which a profile entry
|
|
may be defined."
|
|
|
|
SYNTAX INTEGER {
|
|
ip(0),
|
|
ppp(1),
|
|
ethernet(6),
|
|
atm1483(11),
|
|
pppoe(17),
|
|
bridge1483(19),
|
|
vlan(35),
|
|
ipv6(50)
|
|
}
|
|
|
|
JuniDosProtectionControlProcessorDestination ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The available control processors to which a control
|
|
protocol may be directed."
|
|
|
|
SYNTAX INTEGER {
|
|
ic(0),
|
|
sc(1),
|
|
dataPath(2)
|
|
}
|
|
|
|
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
-- Managed objects
|
|
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
juniDosProtectionObjects OBJECT IDENTIFIER ::= { juniDosProtectionMIB 1 }
|
|
juniDosProtectionScfdsGroup OBJECT IDENTIFIER ::= { juniDosProtectionObjects 1 }
|
|
juniDosProtectionDpgGroup OBJECT IDENTIFIER ::= { juniDosProtectionObjects 2 }
|
|
|
|
--
|
|
-- scalars
|
|
--
|
|
juniDosProtectionScfdsGlobalState OBJECT-TYPE
|
|
SYNTAX JuniEnable
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls whether the suspicious control flow detection system is
|
|
enabled or disabled. Setting the value to enable(1) enables the
|
|
suspicious control flow detection system. Setting the value to
|
|
disable(0) disables the system.
|
|
|
|
When read this object returns the current state of the system."
|
|
DEFVAL { enable }
|
|
|
|
::= { juniDosProtectionScfdsGroup 1 }
|
|
|
|
juniDosProtectionScfdsGlobalGrouping OBJECT-TYPE
|
|
SYNTAX JuniEnable
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When set to enable(1), the suspicious flow control system will
|
|
group flows when resources are unavailable to treat each
|
|
suspicious flow individually. When set to disable(0), this feature
|
|
will be inhibited and the suspicious control flow system may not
|
|
recognize all suspicious flows during a resource shortage.
|
|
|
|
When read this object will return the current state of the object."
|
|
DEFVAL { enable }
|
|
|
|
::= { juniDosProtectionScfdsGroup 2 }
|
|
|
|
juniDosProtectionScfdsGlobalClearAll OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
ok(0),
|
|
clear(1) }
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When set to clear(1), the suspicious control flow detection system
|
|
is cleared. When set to ok(0), there is no effect and the
|
|
suspicious control flow detection system is unchanged.
|
|
|
|
By clearing the suspicious control flow detection system all flows
|
|
are removed from the suspicious flow table.
|
|
|
|
When read, always returns a value of ok(0)."
|
|
|
|
::= { juniDosProtectionScfdsGroup 3 }
|
|
|
|
juniDosProtectionScfdsGlobalDiscontinuityTime OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The sysUpTime at which the counters were last re-initialized on
|
|
any slot due to a restart."
|
|
|
|
::= { juniDosProtectionScfdsGroup 4 }
|
|
|
|
juniDosProtectionScfdsGlobalTableOverflowState OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionScfdsTableOverflowState
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates whether any module in the system is in under a resource
|
|
shortage situation. A value of notOverflowingOrGrouping(1) indicates
|
|
that there is no resource shortage on any module. A value of
|
|
grouping(2) or overflowing(3) indicates that at least one module
|
|
is suffering from a resource shortage, and has acted according to the
|
|
state of the juniDosProtectionScfdsGlobalGrouping object."
|
|
|
|
::= { juniDosProtectionScfdsGroup 5 }
|
|
|
|
--
|
|
-- global counters
|
|
--
|
|
|
|
juniDosProtectionScfdsGlobalCurrentSuspiciousFlows OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of flows currently marked as suspicious."
|
|
|
|
::= { juniDosProtectionScfdsGroup 6 }
|
|
|
|
juniDosProtectionScfdsGlobalNumberSuspiciousFlows OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of suspicious flows seen since system restart."
|
|
|
|
::= { juniDosProtectionScfdsGroup 7 }
|
|
|
|
juniDosProtectionScfdsGlobalCurrentSuspiciousFlowGroups OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of flow groups currently marked as suspicious."
|
|
|
|
::= { juniDosProtectionScfdsGroup 8 }
|
|
|
|
juniDosProtectionScfdsGlobalNumberSuspiciousFlowGroups OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of suspicius flow groups seen since system restart."
|
|
|
|
::= { juniDosProtectionScfdsGroup 9 }
|
|
|
|
|
|
juniDosProtectionScfdsGlobalCurrentFalseNegativeFlows OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of flows currently falsely considered suspicious.
|
|
A false negative indicates that the flow was seen as possibly
|
|
suspicious, but did not pass all the tests to be considered
|
|
suspicious. This is a normal condition of the system."
|
|
|
|
::= { juniDosProtectionScfdsGroup 10 }
|
|
|
|
juniDosProtectionScfdsGlobalNumberFalseNegativeFlows OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of flows falsely considered possibly suspicious
|
|
seen since system restart."
|
|
|
|
::= { juniDosProtectionScfdsGroup 11 }
|
|
|
|
juniDosProtectionScfdsGlobalNumberTableOverflows OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of times the system had a table overflow on any slot."
|
|
|
|
::= { juniDosProtectionScfdsGroup 12 }
|
|
|
|
|
|
--
|
|
-- protocol table
|
|
--
|
|
|
|
juniDosProtectionScfdsProtocolTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF JuniDosProtectionScfdsProtocolEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for the DOS protection control protocols."
|
|
|
|
::= { juniDosProtectionScfdsGroup 13 }
|
|
|
|
juniDosProtectionScfdsProtocolEntry OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionScfdsProtocolEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for an individual DOS protection control
|
|
protocol."
|
|
|
|
INDEX { juniDosProtectionScfdsProtocolIndex }
|
|
|
|
::= { juniDosProtectionScfdsProtocolTable 1 }
|
|
|
|
JuniDosProtectionScfdsProtocolEntry ::= SEQUENCE {
|
|
juniDosProtectionScfdsProtocolIndex JuniDosProtectionProtocolType,
|
|
juniDosProtectionScfdsProtocolThreshold Unsigned32,
|
|
juniDosProtectionScfdsProtocolLowThreshold Unsigned32,
|
|
juniDosProtectionScfdsProtocolBackoffTime Unsigned32,
|
|
juniDosProtectionScfdsProtocolState JuniDosProtectionProtocolState,
|
|
juniDosProtectionScfdsProtocolTransitions Counter32}
|
|
|
|
juniDosProtectionScfdsProtocolIndex OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionProtocolType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The control protocol value for this entry."
|
|
|
|
::= { juniDosProtectionScfdsProtocolEntry 1 }
|
|
|
|
juniDosProtectionScfdsProtocolThreshold OBJECT-TYPE
|
|
SYNTAX Unsigned32(0|3..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The threshold in packets per second for this control protocol.
|
|
This is the rate at which a flow for this protocol is considered
|
|
suspicious. Setting this object to zero will have the affect of
|
|
excusing this protocol from suspicious control flow detection."
|
|
|
|
::= { juniDosProtectionScfdsProtocolEntry 2 }
|
|
|
|
juniDosProtectionScfdsProtocolLowThreshold OBJECT-TYPE
|
|
SYNTAX Unsigned32(0|1..32767)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The low threshold in packets per second for this control protocol .
|
|
This is the rate at which a flow must fall below to in order return
|
|
to the normal state, after having been marked suspicious. A
|
|
low threshold of zero disables this functionality."
|
|
|
|
::= { juniDosProtectionScfdsProtocolEntry 3 }
|
|
|
|
juniDosProtectionScfdsProtocolBackoffTime OBJECT-TYPE
|
|
SYNTAX Unsigned32(0|10..1000)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The backoff time in seconds. A flow which is considered suspicious will
|
|
be returned to normal after this amount of time regardless of the current
|
|
rate of the flow. A backoff time of 0 disables this functionality."
|
|
DEFVAL { 300 }
|
|
|
|
::= { juniDosProtectionScfdsProtocolEntry 4 }
|
|
|
|
juniDosProtectionScfdsProtocolState OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionProtocolState
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The current state of the protocol. This object will return inTrouble(2)
|
|
if any module in the system has reported that the protocol is currently
|
|
being watched for suspicious flows. If no module reports that this protocol
|
|
is being watched this object will return ok(1).
|
|
|
|
A protocol is in trouble on a module when the sum of the rate for all
|
|
flows for the protocol is over the limit for that protocol."
|
|
|
|
::= { juniDosProtectionScfdsProtocolEntry 5 }
|
|
|
|
juniDosProtectionScfdsProtocolTransitions OBJECT-TYPE
|
|
SYNTAX Counter32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of transitions to 'inTrouble' that this control protocol
|
|
has made."
|
|
|
|
::= { juniDosProtectionScfdsProtocolEntry 6 }
|
|
|
|
--
|
|
-- dos protection groups
|
|
--
|
|
|
|
juniDosProtectionDpgTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF JuniDosProtectionDpgEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for a dos-protection-group. A
|
|
dos-protection-group defines a set of parameters that
|
|
manage the handling of control protocols on the
|
|
router."
|
|
|
|
::= { juniDosProtectionDpgGroup 1 }
|
|
|
|
juniDosProtectionDpgEntry OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionDpgEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for an individual dos-protection-group."
|
|
|
|
INDEX { juniDosProtectionDpgIndex }
|
|
|
|
::= { juniDosProtectionDpgTable 1 }
|
|
|
|
JuniDosProtectionDpgEntry ::= SEQUENCE {
|
|
juniDosProtectionDpgIndex DisplayString,
|
|
juniDosProtectionDpgRowStatus RowStatus,
|
|
juniDosProtectionDpgCanned
|
|
JuniDosProtectionProtocolCannedType,
|
|
juniDosProtectionDpgRevert INTEGER,
|
|
juniDosProtectionDpgModified TruthValue,
|
|
juniDosProtectionDpgReferences INTEGER}
|
|
|
|
juniDosProtectionDpgIndex OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..32))
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The dos-protection-group-name for this entry."
|
|
|
|
::= { juniDosProtectionDpgEntry 1 }
|
|
|
|
juniDosProtectionDpgRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls creation/deletion of entries in this table.
|
|
Only the values 'createAndGo' and 'destroy' may be SET.
|
|
When read this always returns a value of active"
|
|
|
|
::= { juniDosProtectionDpgEntry 2 }
|
|
|
|
juniDosProtectionDpgCanned OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionProtocolCannedType
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sets the default values based for the dos-protection-group
|
|
based on the values from the canned group. Can only be used
|
|
to set a different group. Using the current group will result
|
|
in no changes to the dos-protection-group."
|
|
DEFVAL { default }
|
|
|
|
::= { juniDosProtectionDpgEntry 3 }
|
|
|
|
juniDosProtectionDpgRevert OBJECT-TYPE
|
|
SYNTAX INTEGER {
|
|
no-revert(0),
|
|
revert(1) }
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Revert this dos-protection-group to the canned values of the
|
|
associated canned group by setting this object to
|
|
revert(1). Reading this object will always return a value
|
|
of no-revert(1)"
|
|
|
|
::= { juniDosProtectionDpgEntry 4 }
|
|
|
|
juniDosProtectionDpgModified OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When true is returned, some protocol or priority associated
|
|
with this dos-protection-group, has been modified from the
|
|
canned values associated with the group. When false is returned
|
|
all settings associated with this dos-protection-group are
|
|
at the defaults for the associated canned group."
|
|
|
|
::= { juniDosProtectionDpgEntry 5 }
|
|
|
|
juniDosProtectionDpgReferences OBJECT-TYPE
|
|
SYNTAX INTEGER
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The number of references for this dos-protection-group.
|
|
References include the number of interfaces currently
|
|
associated with the group, as well as the number of profile
|
|
references."
|
|
|
|
::= { juniDosProtectionDpgEntry 6 }
|
|
--
|
|
-- dpg protocol information
|
|
--
|
|
|
|
juniDosProtectionDpgProtocolTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF JuniDosProtectionDpgProtocolEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for the dos-protection-group control protocol
|
|
table."
|
|
|
|
::= { juniDosProtectionDpgGroup 2 }
|
|
|
|
juniDosProtectionDpgProtocolEntry OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionDpgProtocolEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for an individual dos-protection-group control
|
|
protocol entry."
|
|
|
|
INDEX { juniDosProtectionDpgProtocolName,
|
|
juniDosProtectionDpgProtocolProtocol }
|
|
|
|
::= { juniDosProtectionDpgProtocolTable 1 }
|
|
|
|
JuniDosProtectionDpgProtocolEntry ::= SEQUENCE {
|
|
juniDosProtectionDpgProtocolName DisplayString,
|
|
juniDosProtectionDpgProtocolProtocol JuniDosProtectionProtocolType,
|
|
juniDosProtectionDpgProtocolBurst Unsigned32,
|
|
juniDosProtectionDpgProtocolDropProbability Unsigned32,
|
|
juniDosProtectionDpgProtocolRate Unsigned32,
|
|
juniDosProtectionDpgProtocolSkipPriorityRateLimiter
|
|
JuniEnable,
|
|
juniDosProtectionDpgProtocolWeight Unsigned32,
|
|
juniDosProtectionDpgProtocolPriority
|
|
JuniDosProtectionProtocolPriorityType,
|
|
juniDosProtectionDpgProtocolModified TruthValue,
|
|
juniDosProtectionDpgProtocolDestination
|
|
JuniDosProtectionControlProcessorDestination}
|
|
|
|
|
|
juniDosProtectionDpgProtocolName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..32))
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The dos-protection-group name for this entry."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 1 }
|
|
|
|
juniDosProtectionDpgProtocolProtocol OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionProtocolType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The dos-protection-group control protocol for this entry."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 2 }
|
|
|
|
juniDosProtectionDpgProtocolBurst OBJECT-TYPE
|
|
SYNTAX Unsigned32(0|32..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The burst in packets for this control protocol in this
|
|
dos-protection-group."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 3 }
|
|
|
|
juniDosProtectionDpgProtocolDropProbability OBJECT-TYPE
|
|
SYNTAX Unsigned32(10..100)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The drop probability for suspect packets for this
|
|
control protocol in this dos-protection-group. This is
|
|
probability that a packet belonging to a suspicious
|
|
flow will be dropped. A drop probability of less than
|
|
100 indicates that the user wishes to have some
|
|
packets from a suspect flow reach the control
|
|
processor."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 4 }
|
|
|
|
juniDosProtectionDpgProtocolRate OBJECT-TYPE
|
|
SYNTAX Unsigned32(0|64..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The rate in packets per second for this control protocol in
|
|
this dos-protection-group."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 5 }
|
|
|
|
juniDosProtectionDpgProtocolSkipPriorityRateLimiter OBJECT-TYPE
|
|
SYNTAX JuniEnable
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When set to enable, this control protocol in this
|
|
dos-protection-group will skip the priority rate limiter.
|
|
When set to disable, the protocol will not skip the priority
|
|
rate-limiter."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 6 }
|
|
|
|
juniDosProtectionDpgProtocolWeight OBJECT-TYPE
|
|
SYNTAX Unsigned32(100..500)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The weight of this control protocol against others of the
|
|
same priority in this dos-protection-group. The weight
|
|
is used to determine the minimum rate and burst
|
|
for the protocol within the priority group."
|
|
DEFVAL { 100 }
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 7 }
|
|
|
|
juniDosProtectionDpgProtocolPriority OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionProtocolPriorityType
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The priority for the control protocol. Packets of this control
|
|
protocol on interfaces referencing this dos-protection-group will
|
|
be categorized into the priority indicated."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 8 }
|
|
|
|
juniDosProtectionDpgProtocolModified OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When true is returned, the values for this control protocol
|
|
in this dos-protection-group have been modified from the
|
|
canned values associated with the group. When false is returned
|
|
all settings associated with this control protocol in this
|
|
dos-protection-group are at the defaults for the associated
|
|
canned group."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 9 }
|
|
|
|
juniDosProtectionDpgProtocolDestination OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionControlProcessorDestination
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The destination processor for packets of this control protocol."
|
|
|
|
::= { juniDosProtectionDpgProtocolEntry 10 }
|
|
|
|
--
|
|
-- dpg priority information
|
|
--
|
|
|
|
juniDosProtectionDpgPriorityTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF JuniDosProtectionDpgPriorityEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for a dos-protection-group priority table."
|
|
|
|
::= { juniDosProtectionDpgGroup 3 }
|
|
|
|
juniDosProtectionDpgPriorityEntry OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionDpgPriorityEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for an individual dos-protection-group priority
|
|
table"
|
|
|
|
INDEX { juniDosProtectionDpgPriorityName,
|
|
juniDosProtectionDpgPriorityPriority }
|
|
|
|
::= { juniDosProtectionDpgPriorityTable 1 }
|
|
|
|
JuniDosProtectionDpgPriorityEntry ::= SEQUENCE {
|
|
juniDosProtectionDpgPriorityName DisplayString,
|
|
juniDosProtectionDpgPriorityPriority JuniDosProtectionPriorityType,
|
|
juniDosProtectionDpgPriorityBurst Unsigned32,
|
|
juniDosProtectionDpgPriorityOverSubscriptionFactor
|
|
Unsigned32,
|
|
juniDosProtectionDpgPriorityRate Unsigned32,
|
|
juniDosProtectionDpgPriorityModified TruthValue}
|
|
|
|
|
|
juniDosProtectionDpgPriorityName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..32))
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The dos-proteciton-group name for this entry."
|
|
|
|
::= { juniDosProtectionDpgPriorityEntry 1 }
|
|
|
|
juniDosProtectionDpgPriorityPriority OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionPriorityType
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The priority for this entry."
|
|
|
|
::= { juniDosProtectionDpgPriorityEntry 2 }
|
|
|
|
juniDosProtectionDpgPriorityBurst OBJECT-TYPE
|
|
SYNTAX Unsigned32(0|32..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The burst in packets for this priority in this
|
|
dos-protection-group."
|
|
|
|
::= { juniDosProtectionDpgPriorityEntry 3 }
|
|
|
|
juniDosProtectionDpgPriorityOverSubscriptionFactor OBJECT-TYPE
|
|
SYNTAX Unsigned32(100..1000)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The over-subscription factor for this priority in this
|
|
dos-protection-group. This is used when calculating
|
|
the minimum rates for control protocols that use this priority."
|
|
|
|
::= { juniDosProtectionDpgPriorityEntry 4 }
|
|
|
|
juniDosProtectionDpgPriorityRate OBJECT-TYPE
|
|
SYNTAX Unsigned32(0|64..65535)
|
|
MAX-ACCESS read-write
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The rate in packets per second for this priority in
|
|
this dos-protection-group."
|
|
|
|
::= { juniDosProtectionDpgPriorityEntry 5 }
|
|
|
|
juniDosProtectionDpgPriorityModified OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"When true is returned, the values for this priority
|
|
in this dos-protection-group have been modified from the
|
|
canned values associated with the group. When false is returned
|
|
all settings associated with this priority in this
|
|
dos-protection-group are at the defaults for the associated
|
|
canned group."
|
|
|
|
::= { juniDosProtectionDpgPriorityEntry 6 }
|
|
|
|
|
|
--
|
|
-- attachment table
|
|
--
|
|
|
|
juniDosProtectionDpgAttachTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF JuniDosProtectionDpgAttachEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for the DOS protection attachment table."
|
|
|
|
::= { juniDosProtectionDpgGroup 4 }
|
|
|
|
juniDosProtectionDpgAttachEntry OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionDpgAttachEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for an individual DOS protection attachment entry."
|
|
|
|
INDEX { juniDosProtectionDpgAttachIndex }
|
|
|
|
::= { juniDosProtectionDpgAttachTable 1 }
|
|
|
|
JuniDosProtectionDpgAttachEntry ::= SEQUENCE {
|
|
juniDosProtectionDpgAttachIndex InterfaceIndex,
|
|
juniDosProtectionDpgAttachRowStatus RowStatus,
|
|
juniDosProtectionDpgAttachName DisplayString,
|
|
juniDosProtectionDpgAttachConfigured TruthValue}
|
|
|
|
juniDosProtectionDpgAttachIndex OBJECT-TYPE
|
|
SYNTAX InterfaceIndex
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The interface index for the attachment."
|
|
|
|
::= { juniDosProtectionDpgAttachEntry 1 }
|
|
|
|
juniDosProtectionDpgAttachRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls creation/deletion of entries in this table. Only the
|
|
values 'createAndGo' and 'destroy' may be SET.
|
|
When read this always returns a value of active"
|
|
|
|
::= { juniDosProtectionDpgAttachEntry 2 }
|
|
|
|
juniDosProtectionDpgAttachName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..32))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The dos-protection-group for this entry. This is the
|
|
dos-protection-group that is use by the interface."
|
|
|
|
::= { juniDosProtectionDpgAttachEntry 3 }
|
|
|
|
juniDosProtectionDpgAttachConfigured OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates the configured status of the attachment. This object
|
|
returns true when the attachment was statically
|
|
configured, and returns false when the attachment
|
|
was made via a profile attachment."
|
|
|
|
::= { juniDosProtectionDpgAttachEntry 4 }
|
|
--
|
|
-- profile table
|
|
--
|
|
juniDosProtectionDpgProfileTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF JuniDosProtectionDpgProfileEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for the DOS protection profile table."
|
|
|
|
::= { juniDosProtectionDpgGroup 5 }
|
|
|
|
juniDosProtectionDpgProfileEntry OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionDpgProfileEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The information for an individual DOS protection profile entry."
|
|
|
|
INDEX { juniDosProtectionDpgProfileProfileId,
|
|
juniDosProtectionDpgProfileLayerId}
|
|
|
|
::= { juniDosProtectionDpgProfileTable 1 }
|
|
|
|
|
|
JuniDosProtectionDpgProfileEntry ::= SEQUENCE {
|
|
juniDosProtectionDpgProfileProfileId Unsigned32,
|
|
juniDosProtectionDpgProfileLayerId JuniDosProtectionLayerId,
|
|
juniDosProtectionDpgProfileRowStatus RowStatus,
|
|
juniDosProtectionDpgProfileName DisplayString }
|
|
|
|
juniDosProtectionDpgProfileProfileId OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The profile ID for the profile entry. The profile ID
|
|
identifies which profile is being accessed. A value for this
|
|
identifier is determined by locating or creating a profile name
|
|
in the juniProfileNameTable"
|
|
|
|
::= { juniDosProtectionDpgProfileEntry 1 }
|
|
|
|
juniDosProtectionDpgProfileLayerId OBJECT-TYPE
|
|
SYNTAX JuniDosProtectionLayerId
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The layer ID for the profile entry. The layer ID indicates
|
|
which interface type is being accessed."
|
|
|
|
::= { juniDosProtectionDpgProfileEntry 2 }
|
|
|
|
juniDosProtectionDpgProfileRowStatus OBJECT-TYPE
|
|
SYNTAX RowStatus
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Controls creation/deletion of entries in this table. Only the
|
|
values 'createAndGo' and 'destroy' may be SET. When read this
|
|
always returns a value of active"
|
|
|
|
::= { juniDosProtectionDpgProfileEntry 3 }
|
|
|
|
juniDosProtectionDpgProfileName OBJECT-TYPE
|
|
SYNTAX DisplayString (SIZE(1..32))
|
|
MAX-ACCESS read-create
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The dos-protection-group that is associated with this
|
|
profile/interface-type. This profile will be attached
|
|
when dynamic instances of the interface type are
|
|
created that reference the specific profile."
|
|
|
|
::= { juniDosProtectionDpgProfileEntry 4 }
|
|
|
|
|
|
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
-- Notifications
|
|
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
--juniDosProtectionTraps OBJECT IDENTIFIER ::= { juniDosProtectionMIB 0 }
|
|
--juniDosProtectionTrapControl OBJECT IDENTIFIER ::= { juniDosProtectionMIB 2 }
|
|
--juniDosProtectionScfdsTraps OBJECT IDENTIFIER ::= { juniDosProtectionTraps 0 }
|
|
|
|
|
|
|
|
|
|
|
|
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
-- Conformance information
|
|
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
juniDosProtectionMIBConformance OBJECT IDENTIFIER ::= { juniDosProtectionMIB 4 }
|
|
juniDosProtectionMIBCompliances OBJECT IDENTIFIER ::= { juniDosProtectionMIBConformance 1 }
|
|
juniDosProtectionMIBGroups OBJECT IDENTIFIER ::= { juniDosProtectionMIBConformance 2 }
|
|
|
|
|
|
juniDosProtectionCompliance MODULE-COMPLIANCE
|
|
STATUS obsolete
|
|
DESCRIPTION
|
|
"The compliance statement for entities which implement the Juniper
|
|
Dos Protection MIB. This was made obsolete with the addition of
|
|
dos-protection-groups."
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS {
|
|
juniDosProtectionGroup }
|
|
::= { juniDosProtectionMIBCompliances 1 }
|
|
|
|
juniDosProtectionCompliance2 MODULE-COMPLIANCE
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The compliance statement for entities which implement the Juniper
|
|
Dos Protection MIB."
|
|
MODULE -- this module
|
|
MANDATORY-GROUPS {
|
|
juniDosProtectionGroup2 }
|
|
::= { juniDosProtectionMIBCompliances 2 } -- Junos x.y
|
|
|
|
--
|
|
-- units of conformance
|
|
--
|
|
juniDosProtectionGroup OBJECT-GROUP
|
|
OBJECTS {juniDosProtectionScfdsGlobalState,
|
|
juniDosProtectionScfdsGlobalGrouping,
|
|
juniDosProtectionScfdsGlobalClearAll,
|
|
juniDosProtectionScfdsGlobalDiscontinuityTime,
|
|
juniDosProtectionScfdsGlobalTableOverflowState,
|
|
juniDosProtectionScfdsGlobalCurrentSuspiciousFlows,
|
|
juniDosProtectionScfdsGlobalNumberSuspiciousFlows,
|
|
juniDosProtectionScfdsGlobalCurrentSuspiciousFlowGroups,
|
|
juniDosProtectionScfdsGlobalNumberSuspiciousFlowGroups,
|
|
juniDosProtectionScfdsGlobalCurrentFalseNegativeFlows,
|
|
juniDosProtectionScfdsGlobalNumberFalseNegativeFlows,
|
|
juniDosProtectionScfdsGlobalNumberTableOverflows,
|
|
juniDosProtectionScfdsProtocolThreshold,
|
|
juniDosProtectionScfdsProtocolLowThreshold,
|
|
juniDosProtectionScfdsProtocolBackoffTime,
|
|
juniDosProtectionScfdsProtocolState,
|
|
juniDosProtectionScfdsProtocolTransitions }
|
|
STATUS obsolete
|
|
DESCRIPTION
|
|
"A collection of objects providing management of DOS protection
|
|
application in a Juniper product. This object became obsolete
|
|
with the addition of dos-protection-groups."
|
|
|
|
::= { juniDosProtectionMIBGroups 1 }
|
|
|
|
juniDosProtectionGroup2 OBJECT-GROUP
|
|
OBJECTS {juniDosProtectionScfdsGlobalState,
|
|
juniDosProtectionScfdsGlobalGrouping,
|
|
juniDosProtectionScfdsGlobalClearAll,
|
|
juniDosProtectionScfdsGlobalDiscontinuityTime,
|
|
juniDosProtectionScfdsGlobalTableOverflowState,
|
|
juniDosProtectionScfdsGlobalCurrentSuspiciousFlows,
|
|
juniDosProtectionScfdsGlobalNumberSuspiciousFlows,
|
|
juniDosProtectionScfdsGlobalCurrentSuspiciousFlowGroups,
|
|
juniDosProtectionScfdsGlobalNumberSuspiciousFlowGroups,
|
|
juniDosProtectionScfdsGlobalCurrentFalseNegativeFlows,
|
|
juniDosProtectionScfdsGlobalNumberFalseNegativeFlows,
|
|
juniDosProtectionScfdsGlobalNumberTableOverflows,
|
|
juniDosProtectionScfdsProtocolThreshold,
|
|
juniDosProtectionScfdsProtocolLowThreshold,
|
|
juniDosProtectionScfdsProtocolBackoffTime,
|
|
juniDosProtectionScfdsProtocolState,
|
|
juniDosProtectionScfdsProtocolTransitions,
|
|
juniDosProtectionDpgRowStatus,
|
|
juniDosProtectionDpgCanned,
|
|
juniDosProtectionDpgRevert,
|
|
juniDosProtectionDpgModified,
|
|
juniDosProtectionDpgReferences,
|
|
juniDosProtectionDpgProtocolBurst,
|
|
juniDosProtectionDpgProtocolDropProbability,
|
|
juniDosProtectionDpgProtocolRate,
|
|
juniDosProtectionDpgProtocolSkipPriorityRateLimiter,
|
|
juniDosProtectionDpgProtocolWeight,
|
|
juniDosProtectionDpgProtocolModified,
|
|
juniDosProtectionDpgPriorityBurst,
|
|
juniDosProtectionDpgPriorityOverSubscriptionFactor,
|
|
juniDosProtectionDpgPriorityRate,
|
|
juniDosProtectionDpgPriorityModified,
|
|
juniDosProtectionDpgAttachRowStatus,
|
|
juniDosProtectionDpgAttachName,
|
|
juniDosProtectionDpgProfileRowStatus,
|
|
juniDosProtectionDpgProfileName }
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A collection of objects providing management of DOS protection
|
|
application in a Juniper product."
|
|
|
|
::= { juniDosProtectionMIBGroups 2 }
|
|
END
|