Juniper-DOS-PROTECTION-MIB
AI MIB Summary
The Juniper-DOS-PROTECTION-MIB enables management of Denial-of-Service (DoS) mitigation policies and real-time traffic statistics on Juniper E-Series routers via SNMP. It provides specific counters and control objects to monitor attack signatures, blocked session rates, and the operational state of the DoS protection engine.
The DOS Protection MIB for the Juniper E-Series product family. This MIB contains managed objects for the DOS Protection application. Management objects are provided to control and monitor the DOS protection application.
Main OID:
juniDosProtectionMIB.1.3.6.1.4.1.4874.2.2.80
71
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
71 total| Object Name |
|---|
juniDosProtectionMIBThe DOS Protection MIB for the Juniper E-Series product family. This MIB contains managed objects for the DOS Protection application. Management objects are provided to control and monitor the DOS protection application. MODULE-IDENTITY .1.3.6.1.4.1.4874.2.2.80 |
juniDosProtectionObjects OBJECT IDENTIFIER .1.3.6.1.4.1.4874.2.2.80.1 |
juniDosProtectionScfdsGroup OBJECT IDENTIFIER .1.3.6.1.4.1.4874.2.2.80.1.1 |
juniDosProtectionScfdsGlobalStateControls whether the suspicious control flow detection system is enabled or disabled. Setting the value to enable(1) enables the suspicious control flow detection system. Setting the value to disable(0) disables the system. When read this object returns the current state of the system.rw JuniEnable (Juniper-TC) .1.3.6.1.4.1.4874.2.2.80.1.1.1 |
juniDosProtectionScfdsGlobalGroupingWhen set to enable(1), the suspicious flow control system will group flows when resources are unavailable to treat each suspicious flow individually. When set to disable(0), this feature will be inhibited and the suspicious control flow system may not recognize all suspicious flows during a resource shortage. When read this object will return the current state of the object.rw JuniEnable (Juniper-TC) .1.3.6.1.4.1.4874.2.2.80.1.1.2 |
juniDosProtectionScfdsGlobalClearAllWhen set to clear(1), the suspicious control flow detection system is cleared. When set to ok(0), there is no effect and the suspicious control flow detection system is unchanged. By clearing the suspicious control flow detection system all flows are removed from the suspicious flow table. When read, always returns a value of ok(0).rw Enumeration .1.3.6.1.4.1.4874.2.2.80.1.1.3 |
juniDosProtectionScfdsGlobalDiscontinuityTimeThe sysUpTime at which the counters were last re-initialized on any slot due to a restart.ro Unsigned32 .1.3.6.1.4.1.4874.2.2.80.1.1.4 |
juniDosProtectionScfdsGlobalTableOverflowStateIndicates whether any module in the system is in under a resource shortage situation. A value of notOverflowingOrGrouping(1) indicates that there is no resource shortage on any module. A value of grouping(2) or overflowing(3) indicates that at least one module is suffering from a resource shortage, and has acted according to the state of the juniDosProtectionScfdsGlobalGrouping object.ro JuniDosProtectionScfdsTableOverflowState .1.3.6.1.4.1.4874.2.2.80.1.1.5 |
juniDosProtectionScfdsGlobalCurrentSuspiciousFlowsThe number of flows currently marked as suspicious.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.6 |
juniDosProtectionScfdsGlobalNumberSuspiciousFlowsThe number of suspicious flows seen since system restart.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.7 |
juniDosProtectionScfdsGlobalCurrentSuspiciousFlowGroupsThe number of flow groups currently marked as suspicious.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.8 |
juniDosProtectionScfdsGlobalNumberSuspiciousFlowGroupsThe number of suspicius flow groups seen since system restart.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.9 |
juniDosProtectionScfdsGlobalCurrentFalseNegativeFlowsThe number of flows currently falsely considered suspicious. A false negative indicates that the flow was seen as possibly suspicious, but did not pass all the tests to be considered suspicious. This is a normal condition of the system.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.10 |
juniDosProtectionScfdsGlobalNumberFalseNegativeFlowsThe number of flows falsely considered possibly suspicious seen since system restart.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.11 |
juniDosProtectionScfdsGlobalNumberTableOverflowsThe total number of times the system had a table overflow on any slot.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.12 |
juniDosProtectionScfdsProtocolTableThe information for the DOS protection control protocols. SEQUENCE OF JuniDosProtectionScfdsProtocolEntry .1.3.6.1.4.1.4874.2.2.80.1.1.13 |
juniDosProtectionScfdsProtocolEntryThe information for an individual DOS protection control protocol. JuniDosProtectionScfdsProtocolEntry .1.3.6.1.4.1.4874.2.2.80.1.1.13.1 |
juniDosProtectionScfdsProtocolIndexThe control protocol value for this entry. JuniDosProtectionProtocolType .1.3.6.1.4.1.4874.2.2.80.1.1.13.1.1 |
juniDosProtectionScfdsProtocolThresholdThe threshold in packets per second for this control protocol. This is the rate at which a flow for this protocol is considered suspicious. Setting this object to zero will have the affect of excusing this protocol from suspicious control flow detection.rw Unsigned32(0|3..65535) .1.3.6.1.4.1.4874.2.2.80.1.1.13.1.2 |
juniDosProtectionScfdsProtocolLowThresholdThe low threshold in packets per second for this control protocol . This is the rate at which a flow must fall below to in order return to the normal state, after having been marked suspicious. A low threshold of zero disables this functionality.rw Unsigned32(0|1..32767) .1.3.6.1.4.1.4874.2.2.80.1.1.13.1.3 |
juniDosProtectionScfdsProtocolBackoffTimeThe backoff time in seconds. A flow which is considered suspicious will be returned to normal after this amount of time regardless of the current rate of the flow. A backoff time of 0 disables this functionality.rw Unsigned32(0|10..1000) .1.3.6.1.4.1.4874.2.2.80.1.1.13.1.4 |
juniDosProtectionScfdsProtocolStateThe current state of the protocol. This object will return inTrouble(2) if any module in the system has reported that the protocol is currently being watched for suspicious flows. If no module reports that this protocol is being watched this object will return ok(1). A protocol is in trouble on a module when the sum of the rate for all flows for the protocol is over the limit for that protocol.ro JuniDosProtectionProtocolState .1.3.6.1.4.1.4874.2.2.80.1.1.13.1.5 |
juniDosProtectionScfdsProtocolTransitionsThe number of transitions to 'inTrouble' that this control protocol has made.ro Counter32 .1.3.6.1.4.1.4874.2.2.80.1.1.13.1.6 |
juniDosProtectionDpgGroup OBJECT IDENTIFIER .1.3.6.1.4.1.4874.2.2.80.1.2 |
juniDosProtectionDpgTableThe information for a dos-protection-group. A dos-protection-group defines a set of parameters that manage the handling of control protocols on the router. SEQUENCE OF JuniDosProtectionDpgEntry .1.3.6.1.4.1.4874.2.2.80.1.2.1 |
juniDosProtectionDpgEntryThe information for an individual dos-protection-group. JuniDosProtectionDpgEntry .1.3.6.1.4.1.4874.2.2.80.1.2.1.1 |
juniDosProtectionDpgIndexThe dos-protection-group-name for this entry. DisplayString .1.3.6.1.4.1.4874.2.2.80.1.2.1.1.1 |
juniDosProtectionDpgRowStatusControls creation/deletion of entries in this table. Only the values 'createAndGo' and 'destroy' may be SET. When read this always returns a value of activerw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.1.1.2 |
juniDosProtectionDpgCannedSets the default values based for the dos-protection-group based on the values from the canned group. Can only be used to set a different group. Using the current group will result in no changes to the dos-protection-group.rw JuniDosProtectionProtocolCannedType .1.3.6.1.4.1.4874.2.2.80.1.2.1.1.3 |
juniDosProtectionDpgRevertRevert this dos-protection-group to the canned values of the associated canned group by setting this object to revert(1). Reading this object will always return a value of no-revert(1)rw Enumeration .1.3.6.1.4.1.4874.2.2.80.1.2.1.1.4 |
juniDosProtectionDpgModifiedWhen true is returned, some protocol or priority associated with this dos-protection-group, has been modified from the canned values associated with the group. When false is returned all settings associated with this dos-protection-group are at the defaults for the associated canned group.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.1.1.5 |
juniDosProtectionDpgReferencesThe number of references for this dos-protection-group. References include the number of interfaces currently associated with the group, as well as the number of profile references.ro INTEGER .1.3.6.1.4.1.4874.2.2.80.1.2.1.1.6 |
juniDosProtectionDpgProtocolTableThe information for the dos-protection-group control protocol table. SEQUENCE OF JuniDosProtectionDpgProtocolEntry .1.3.6.1.4.1.4874.2.2.80.1.2.2 |
juniDosProtectionDpgProtocolEntryThe information for an individual dos-protection-group control protocol entry. JuniDosProtectionDpgProtocolEntry .1.3.6.1.4.1.4874.2.2.80.1.2.2.1 |
juniDosProtectionDpgProtocolNameThe dos-protection-group name for this entry. DisplayString .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.1 |
juniDosProtectionDpgProtocolProtocolThe dos-protection-group control protocol for this entry. JuniDosProtectionProtocolType .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.2 |
juniDosProtectionDpgProtocolBurstThe burst in packets for this control protocol in this dos-protection-group.rw Unsigned32(0|32..65535) .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.3 |
juniDosProtectionDpgProtocolDropProbabilityThe drop probability for suspect packets for this control protocol in this dos-protection-group. This is probability that a packet belonging to a suspicious flow will be dropped. A drop probability of less than 100 indicates that the user wishes to have some packets from a suspect flow reach the control processor.rw Unsigned32 .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.4 |
juniDosProtectionDpgProtocolRateThe rate in packets per second for this control protocol in this dos-protection-group.rw Unsigned32(0|64..65535) .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.5 |
juniDosProtectionDpgProtocolSkipPriorityRateLimiterWhen set to enable, this control protocol in this dos-protection-group will skip the priority rate limiter. When set to disable, the protocol will not skip the priority rate-limiter.rw JuniEnable (Juniper-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.6 |
juniDosProtectionDpgProtocolWeightThe weight of this control protocol against others of the same priority in this dos-protection-group. The weight is used to determine the minimum rate and burst for the protocol within the priority group.rw Unsigned32 .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.7 |
juniDosProtectionDpgProtocolPriorityThe priority for the control protocol. Packets of this control protocol on interfaces referencing this dos-protection-group will be categorized into the priority indicated.rw JuniDosProtectionProtocolPriorityType .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.8 |
juniDosProtectionDpgProtocolModifiedWhen true is returned, the values for this control protocol in this dos-protection-group have been modified from the canned values associated with the group. When false is returned all settings associated with this control protocol in this dos-protection-group are at the defaults for the associated canned group.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.9 |
juniDosProtectionDpgProtocolDestinationThe destination processor for packets of this control protocol.ro JuniDosProtectionControlProcessorDestination .1.3.6.1.4.1.4874.2.2.80.1.2.2.1.10 |
juniDosProtectionDpgPriorityTableThe information for a dos-protection-group priority table. SEQUENCE OF JuniDosProtectionDpgPriorityEntry .1.3.6.1.4.1.4874.2.2.80.1.2.3 |
juniDosProtectionDpgPriorityEntryThe information for an individual dos-protection-group priority table JuniDosProtectionDpgPriorityEntry .1.3.6.1.4.1.4874.2.2.80.1.2.3.1 |
juniDosProtectionDpgPriorityNameThe dos-proteciton-group name for this entry. DisplayString .1.3.6.1.4.1.4874.2.2.80.1.2.3.1.1 |
juniDosProtectionDpgPriorityPriorityThe priority for this entry. JuniDosProtectionPriorityType .1.3.6.1.4.1.4874.2.2.80.1.2.3.1.2 |
juniDosProtectionDpgPriorityBurstThe burst in packets for this priority in this dos-protection-group.rw Unsigned32(0|32..65535) .1.3.6.1.4.1.4874.2.2.80.1.2.3.1.3 |
juniDosProtectionDpgPriorityOverSubscriptionFactorThe over-subscription factor for this priority in this dos-protection-group. This is used when calculating the minimum rates for control protocols that use this priority.rw Unsigned32 .1.3.6.1.4.1.4874.2.2.80.1.2.3.1.4 |
juniDosProtectionDpgPriorityRateThe rate in packets per second for this priority in this dos-protection-group.rw Unsigned32(0|64..65535) .1.3.6.1.4.1.4874.2.2.80.1.2.3.1.5 |
juniDosProtectionDpgPriorityModifiedWhen true is returned, the values for this priority in this dos-protection-group have been modified from the canned values associated with the group. When false is returned all settings associated with this priority in this dos-protection-group are at the defaults for the associated canned group.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.3.1.6 |
juniDosProtectionDpgAttachTableThe information for the DOS protection attachment table. SEQUENCE OF JuniDosProtectionDpgAttachEntry .1.3.6.1.4.1.4874.2.2.80.1.2.4 |
juniDosProtectionDpgAttachEntryThe information for an individual DOS protection attachment entry. JuniDosProtectionDpgAttachEntry .1.3.6.1.4.1.4874.2.2.80.1.2.4.1 |
juniDosProtectionDpgAttachIndexThe interface index for the attachment. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.4874.2.2.80.1.2.4.1.1 |
juniDosProtectionDpgAttachRowStatusControls creation/deletion of entries in this table. Only the values 'createAndGo' and 'destroy' may be SET. When read this always returns a value of activerw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.4.1.2 |
juniDosProtectionDpgAttachNameThe dos-protection-group for this entry. This is the dos-protection-group that is use by the interface.rw DisplayString .1.3.6.1.4.1.4874.2.2.80.1.2.4.1.3 |
juniDosProtectionDpgAttachConfiguredIndicates the configured status of the attachment. This object returns true when the attachment was statically configured, and returns false when the attachment was made via a profile attachment.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.4.1.4 |
juniDosProtectionDpgProfileTableThe information for the DOS protection profile table. SEQUENCE OF JuniDosProtectionDpgProfileEntry .1.3.6.1.4.1.4874.2.2.80.1.2.5 |
juniDosProtectionDpgProfileEntryThe information for an individual DOS protection profile entry. JuniDosProtectionDpgProfileEntry .1.3.6.1.4.1.4874.2.2.80.1.2.5.1 |
juniDosProtectionDpgProfileProfileIdThe profile ID for the profile entry. The profile ID identifies which profile is being accessed. A value for this identifier is determined by locating or creating a profile name in the juniProfileNameTable Unsigned32 .1.3.6.1.4.1.4874.2.2.80.1.2.5.1.1 |
juniDosProtectionDpgProfileLayerIdThe layer ID for the profile entry. The layer ID indicates which interface type is being accessed. JuniDosProtectionLayerId .1.3.6.1.4.1.4874.2.2.80.1.2.5.1.2 |
juniDosProtectionDpgProfileRowStatusControls creation/deletion of entries in this table. Only the values 'createAndGo' and 'destroy' may be SET. When read this always returns a value of activerw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.4874.2.2.80.1.2.5.1.3 |
juniDosProtectionDpgProfileNameThe dos-protection-group that is associated with this profile/interface-type. This profile will be attached when dynamic instances of the interface type are created that reference the specific profile.rw DisplayString .1.3.6.1.4.1.4874.2.2.80.1.2.5.1.4 |
juniDosProtectionMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.4874.2.2.80.4 |
juniDosProtectionMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.4874.2.2.80.4.1 |
juniDosProtectionComplianceThe compliance statement for entities which implement the Juniper Dos Protection MIB. This was made obsolete with the addition of dos-protection-groups.obsolete Unknown .1.3.6.1.4.1.4874.2.2.80.4.1.1 |
juniDosProtectionCompliance2The compliance statement for entities which implement the Juniper Dos Protection MIB. Unknown .1.3.6.1.4.1.4874.2.2.80.4.1.2 |
juniDosProtectionMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.4874.2.2.80.4.2 |
juniDosProtectionGroupA collection of objects providing management of DOS protection application in a Juniper product. This object became obsolete with the addition of dos-protection-groups.obsolete Unknown .1.3.6.1.4.1.4874.2.2.80.4.2.1 |
juniDosProtectionGroup2A collection of objects providing management of DOS protection application in a Juniper product. Unknown .1.3.6.1.4.1.4874.2.2.80.4.2.2 |