EXTREME-IP-SECURITY-MIB
Extreme IP Security MIB
Main OID:
extremeIpSecurity.1.3.6.1.4.1.1916.1.34
36
Objects
Active
Status
4
Dependencies
Imported Objects
Objects
36 total| Object Name |
|---|
extremeIpSecurityExtreme IP Security MIB MODULE-IDENTITY .1.3.6.1.4.1.1916.1.34 |
extremeIpSecurityTraps OBJECT IDENTIFIER .1.3.6.1.4.1.1916.1.34.1 |
extremeIpSecurityTrapsPrefix OBJECT IDENTIFIER .1.3.6.1.4.1.1916.1.34.1.0 |
extremeIpSecurityViolationFor vlans/ports on which one or more of the IP Security features have been enabled, this trap will be generated when a packet received on that vlan/port is in violation of the configured IP Security protections NOTIFICATION-TYPE .1.3.6.1.4.1.1916.1.34.1.0.1 |
extremeIpSecurityVlanIfIndexThe ifIndex of the VLAN on which the violating packet was received.ro Integer32 .1.3.6.1.4.1.1916.1.34.1.1 |
extremeIpSecurityVlanDescrThe description(name) of the VLAN on which the violating packet was received.ro DisplayString .1.3.6.1.4.1.1916.1.34.1.2 |
extremeIpSecurityPortIfIndexThe ifIndex of the port on which the violating packet was received.ro Integer32 .1.3.6.1.4.1.1916.1.34.1.3 |
extremeIpSecurityIpAddrSource IP address of the violating packetro IpAddress .1.3.6.1.4.1.1916.1.34.1.4 |
extremeIpSecurityMacAddressSource MAC address in the violating packetro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1916.1.34.1.5 |
extremeIpSecurityViolationTypeThe type of IP Security violation that occurred - rogueDhcpServerPacket(1) A rogue DHCP server packet was received. - badIpMacBindingInArpPacket(2) The IP-MAC binding received in the ARP packet does not exist in the DHCP Bindings table. - badIpInArpPacket(3) The Source IP address in the ARP payload is invalid. - badMacInArpPacket(4) One of the MAC addresses in the ARP payload does not match with its counterpart in the ethernet header.ro Enumeration .1.3.6.1.4.1.1916.1.34.1.6 |
extremeIpSecurityAnomalyTraps OBJECT IDENTIFIER .1.3.6.1.4.1.1916.1.34.2 |
extremeIpSecurityAnomalyTrapsPrefix OBJECT IDENTIFIER .1.3.6.1.4.1.1916.1.34.2.0 |
extremeIpSecurityAnomalyIpViolationFor ports on which the protocol anomaly protection IP features has been enabled, this trap will be generated when a packet received on that port if the packet's source IP == destination IP NOTIFICATION-TYPE .1.3.6.1.4.1.1916.1.34.2.0.1 |
extremeIpSecurityAnomalyL4PortViolationFor ports on which the protocol anomaly protection L4port features has been enabled, this trap will be generated when a packet received on that port if 1) the packet is a TCP or UDP packetr. AND 2) its source L4 port == destination port NOTIFICATION-TYPE .1.3.6.1.4.1.1916.1.34.2.0.2 |
extremeIpSecurityAnomalyTcpFlagViolationFor ports on which the protocol anomaly protection TCP flags features has been enabled, this trap will be generated when a TCP packet received on that port if 1) (TCP flag SYN is set) and (its TCP source port < 1024). OR 2) (TCP flag == 0) and (TCP seq # == 0). OR 3) (TCP flag FIN/URG/PSH bits sre set) and (TCP seq # == 0). OR 4) Both TCP iflag SYN and FIN are set NOTIFICATION-TYPE .1.3.6.1.4.1.1916.1.34.2.0.3 |
extremeIpSecurityAnomalyTcpFragmentViolationFor ports on which the protocol anomaly protection TCP fragment features has been enabled, this trap will be generated when a packet received on that port if 1) the packet is a TCP, and its size of the TCP header is less than pre-configured value; or 2) the packet is a TCP and it is a IP fragmented packet (IP offset != 0) NOTIFICATION-TYPE .1.3.6.1.4.1.1916.1.34.2.0.4 |
extremeIpSecurityAnomalyIcmpViolationFor ports on which the protocol anomaly protection ICMP features has been enabled, this trap will be generated when an ICMP packet received on that port if 1) the size of ICMP (IP payload) is large thant pre-configured value; or 2) it is a fragmented IP/ICMP packet (IP offset != 0) NOTIFICATION-TYPE .1.3.6.1.4.1.1916.1.34.2.0.5 |
esAnomalyPortIfIndexThe ifIndex of the port on which the violating packet was received.ro Integer32 .1.3.6.1.4.1.1916.1.34.2.1 |
esAnomalyVlanIfIndexThe ifIndex of the VLAN on which the violating packet was received.ro Integer32 .1.3.6.1.4.1.1916.1.34.2.2 |
esAnomalyVlanDescrThe description(name) of the VLAN on which the violating packet was received.ro DisplayString .1.3.6.1.4.1.1916.1.34.2.3 |
esAnomalySrcMacAddressSource MAC address in the violating packetro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1916.1.34.2.4 |
esAnomalyDestMacAddressDestination MAC address in the violating packetro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1916.1.34.2.5 |
esAnomalySrcIpAddrTypesource IP address type: ipv4 or ipv6ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1916.1.34.2.6 |
esAnomalySrcIpAddrsource IP address in the violating packetro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1916.1.34.2.7 |
esAnomalyDestIpAddrTypedestination IP address type: ipv4 or ipv6ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1916.1.34.2.8 |
esAnomalyDestIpAddrdestination IP address in the violating packetro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1916.1.34.2.9 |
esAnomalyIpProtoIP protocol in the violating packetro IpProtocol .1.3.6.1.4.1.1916.1.34.2.10 |
esAnomalySrcL4Porttcp/udp source port number in the violating packetro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.1916.1.34.2.11 |
esAnomalyDestL4Porttcp/udp destination port in the violating packetro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.1916.1.34.2.12 |
esAnomalyTcpFlagTCP flags in the violating packetro HexOctet .1.3.6.1.4.1.1916.1.34.2.13 |
esAnomalyTcpSeqTCP sequence number in the violating packetro Integer32 .1.3.6.1.4.1.1916.1.34.2.14 |
esAnomalyTcpHdrSizeTCP Header size in the violating packetro Integer32 .1.3.6.1.4.1.1916.1.34.2.15 |
esAnomalyTcpFlagReasonTCP flag anomaly reason codero TcpFlagAnomalyReason .1.3.6.1.4.1.1916.1.34.2.16 |
esAnomalyIcmpReasonICMP anomaly reason codero IcmpAnomalyReason .1.3.6.1.4.1.1916.1.34.2.17 |
esAnomalyVlanTagthe vlan tag in the violating packetro VlanTag .1.3.6.1.4.1.1916.1.34.2.18 |
esAnomalyTcpFragmentReasonTCP fragment anomaly reason codero TcpFragmentAnomalyReason .1.3.6.1.4.1.1916.1.34.2.19 |