mibs/junose/broken/Juniper-DOS-PROTECTION-PLATFORM-MIB
-- *****************************************************************************
-- Juniper-DOS-PROTECTION-PLATFORM-MIB
--
-- Juniper Networks Enterprise MIB
-- DOS Protection MIB (platform)
--
-- Copyright (c) 2005-2006 Juniper Networks, Inc.
-- All Rights Reserved.
-- *****************************************************************************
Juniper-DOS-PROTECTION-PLATFORM-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, Counter32,
Unsigned32, Integer32
FROM SNMPv2-SMI
JuniEnable
FROM Juniper-TC
TEXTUAL-CONVENTION, TruthValue, MacAddress, DisplayString
FROM SNMPv2-TC
MODULE-COMPLIANCE, OBJECT-GROUP, NOTIFICATION-GROUP
FROM SNMPv2-CONF
InterfaceIndex
FROM IF-MIB
juniMibs
FROM Juniper-MIBs
JuniDosProtectionProtocolType, JuniDosProtectionPriorityType, JuniDosProtectionProtocolState,
JuniDosProtectionScfdsTableOverflowState
FROM Juniper-DOS-PROTECTION-MIB;
juniDosProtectionPlatformMIB MODULE-IDENTITY
LAST-UPDATED "200607010000Z" -- 01-Jul-2006 00:00
ORGANIZATION "Juniper Networks, Inc."
CONTACT-INFO
" Juniper Networks, Inc.
Postal: 10 Technology Park Drive
Westford, MA 01886-3146
USA
Tel: +1 978 589 5800
Email: mib@Juniper.net"
DESCRIPTION
"The DOS Protection MIB for the Juniper E-Series product family.
This MIB contains managed objects for the DOS Protection
application, which are platform specific. Management objects are
provided to control and monitor the DOS protection application."
REVISION "200607010000Z" -- 01-Jul-2006 00:00 JUNOSe -.-
DESCRIPTION
"Added dos-protection-group support and added MAC address
to flow traps."
REVISION "200601010000Z" -- 01-Jan-2006 00:00 JUNOSe 7.3
DESCRIPTION
"Initial version of this MIB module."
::= { juniMibs 81 }
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Managed objects
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
juniDosProtectionPlatformObjects OBJECT IDENTIFIER ::= { juniDosProtectionPlatformMIB 1 }
juniDosProtectionPlatformScfdsGroup OBJECT IDENTIFIER ::= { juniDosProtectionPlatformObjects 1 }
juniDosProtectionPlatformDpgGroup OBJECT IDENTIFIER ::= { juniDosProtectionPlatformObjects 2 }
--
-- slot based table for protocol state
--
juniDosProtectionScfdsSlotProtocolTable OBJECT-TYPE
SYNTAX SEQUENCE OF JuniDosProtectionScfdsSlotProtocolEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The information for the DOS protection control protocols
for a specific slot."
::= { juniDosProtectionPlatformScfdsGroup 1 }
juniDosProtectionScfdsSlotProtocolEntry OBJECT-TYPE
SYNTAX JuniDosProtectionScfdsSlotProtocolEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The information for an individual control protocol on
a specific slot."
INDEX { juniDosProtectionScfdsSlotProtocolSlot,
juniDosProtectionScfdsSlotProtocolIndex }
::= { juniDosProtectionScfdsSlotProtocolTable 1 }
JuniDosProtectionScfdsSlotProtocolEntry ::= SEQUENCE {
juniDosProtectionScfdsSlotProtocolSlot Unsigned32,
juniDosProtectionScfdsSlotProtocolIndex JuniDosProtectionProtocolType,
juniDosProtectionScfdsSlotProtocolState JuniDosProtectionProtocolState,
juniDosProtectionScfdsSlotProtocolTransitions Counter32}
juniDosProtectionScfdsSlotProtocolSlot OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The slot value for the entry."
::= { juniDosProtectionScfdsSlotProtocolEntry 1 }
juniDosProtectionScfdsSlotProtocolIndex OBJECT-TYPE
SYNTAX JuniDosProtectionProtocolType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The control protocol value for the entry."
::= { juniDosProtectionScfdsSlotProtocolEntry 2 }
juniDosProtectionScfdsSlotProtocolState OBJECT-TYPE
SYNTAX JuniDosProtectionProtocolState
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current state of the protocol. This object will return inTrouble(2)
if the specific slot referenced is reporting that the protocol is currently
being watched for suspicious flows. If the module is not reporting that
this protocol is being watched this object will return ok(1).
A protocol is in trouble for a slot when the sum of the rate of all flows
for the protocol is over the limit for that protocol."
::= { juniDosProtectionScfdsSlotProtocolEntry 3 }
juniDosProtectionScfdsSlotProtocolTransitions OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of transitions to 'inTrouble' that this control protocol
has made for this slot."
::= { juniDosProtectionScfdsSlotProtocolEntry 4 }
--
-- slot based flow table
--
juniDosProtectionScfdsSlotFlowTable OBJECT-TYPE
SYNTAX SEQUENCE OF JuniDosProtectionScfdsSlotFlowEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION
"Information about suspicious control flows."
::= { juniDosProtectionPlatformScfdsGroup 2 }
juniDosProtectionScfdsSlotFlowEntry OBJECT-TYPE
SYNTAX JuniDosProtectionScfdsSlotFlowEntry
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION
"Information about a suspicious control flow."
INDEX { juniDosProtectionScfdsSlotFlowSlot,
juniDosProtectionScfdsSlotFlowIfIndex,
juniDosProtectionScfdsSlotFlowGroupId,
juniDosProtectionScfdsSlotFlowProtocol }
::= { juniDosProtectionScfdsSlotFlowTable 1 }
JuniDosProtectionScfdsSlotFlowEntry ::= SEQUENCE {
juniDosProtectionScfdsSlotFlowSlot Unsigned32,
juniDosProtectionScfdsSlotFlowIfIndex InterfaceIndex,
juniDosProtectionScfdsSlotFlowGroupId Unsigned32,
juniDosProtectionScfdsSlotFlowProtocol JuniDosProtectionProtocolType,
juniDosProtectionScfdsSlotFlowRate Unsigned32,
juniDosProtectionScfdsSlotFlowPeakRate Unsigned32,
juniDosProtectionScfdsSlotFlowTimeFlagged Unsigned32,
juniDosProtectionScfdsSlotFlowIngressSlot Integer32,
juniDosProtectionScfdsSlotFlowGroup TruthValue,
juniDosProtectionScfdsSlotFlowClearEntry INTEGER}
juniDosProtectionScfdsSlotFlowSlot OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION
"The slot value for the flow."
::= { juniDosProtectionScfdsSlotFlowEntry 1 }
juniDosProtectionScfdsSlotFlowIfIndex OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION
"The ifIndex value for the flow. For group flows, this value
will be zero."
::= { juniDosProtectionScfdsSlotFlowEntry 2 }
juniDosProtectionScfdsSlotFlowGroupId OBJECT-TYPE
SYNTAX Unsigned32(0..15)
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION
"The group id for the flow. The group id will be zero for an individual
flow. It is non-zero when the entry represents a group of flows."
::= { juniDosProtectionScfdsSlotFlowEntry 3 }
juniDosProtectionScfdsSlotFlowProtocol OBJECT-TYPE
SYNTAX JuniDosProtectionProtocolType
MAX-ACCESS not-accessible
STATUS obsolete
DESCRIPTION
"The control protocol for the flow."
::= { juniDosProtectionScfdsSlotFlowEntry 4 }
juniDosProtectionScfdsSlotFlowRate OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"The current rate in packets per second for the flow."
::= { juniDosProtectionScfdsSlotFlowEntry 5 }
juniDosProtectionScfdsSlotFlowPeakRate OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"The peak rate in packets per second for the flow."
::= { juniDosProtectionScfdsSlotFlowEntry 6 }
juniDosProtectionScfdsSlotFlowTimeFlagged OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"The sysUpTime value for the time when the flow was
determined to be suspicious."
::= { juniDosProtectionScfdsSlotFlowEntry 7 }
juniDosProtectionScfdsSlotFlowIngressSlot OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"For control flow that are monitored on the egress
processor in the forwarding path, this value will
indicate the possible ingress slot for data stream that
is possibly causing this suspicious flow control. This
object will report -1 when it is undefined"
::= { juniDosProtectionScfdsSlotFlowEntry 8 }
juniDosProtectionScfdsSlotFlowGroup OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS obsolete
DESCRIPTION
"Indicates whether the flow is a group flow or not. A value of
true(1) indicates that the flow represents a group of flows.
A value of false(2) indicates that the flow is an individual flow."
::= { juniDosProtectionScfdsSlotFlowEntry 9 }
juniDosProtectionScfdsSlotFlowClearEntry OBJECT-TYPE
SYNTAX INTEGER {
ok(0),
clear(1) }
MAX-ACCESS read-write
STATUS obsolete
DESCRIPTION
"When set to clear(1), the suspicious control flow
is removed from the suspicious control flow table. When set to
ok(0), there is no effect and the suspicious control flow
is unchanged.
When read, always returns a value of ok(0)."
::= { juniDosProtectionScfdsSlotFlowEntry 10 }
--
-- slot based flow table (with MAC address)
--
juniDosProtectionScfdsSlotFlowMacTable OBJECT-TYPE
SYNTAX SEQUENCE OF JuniDosProtectionScfdsSlotFlowMacEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Information about suspicious control flows."
::= { juniDosProtectionPlatformScfdsGroup 4 }
juniDosProtectionScfdsSlotFlowMacEntry OBJECT-TYPE
SYNTAX JuniDosProtectionScfdsSlotFlowMacEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Information about a suspicious control flow."
INDEX { juniDosProtectionScfdsSlotFlowMacSlot,
juniDosProtectionScfdsSlotFlowMacIfIndex,
juniDosProtectionScfdsSlotFlowMacGroupId,
juniDosProtectionScfdsSlotFlowMacProtocol,
juniDosProtectionScfdsSlotFlowMacSrcMac}
::= { juniDosProtectionScfdsSlotFlowMacTable 1 }
JuniDosProtectionScfdsSlotFlowMacEntry ::= SEQUENCE {
juniDosProtectionScfdsSlotFlowMacSlot Unsigned32,
juniDosProtectionScfdsSlotFlowMacIfIndex InterfaceIndex,
juniDosProtectionScfdsSlotFlowMacGroupId Unsigned32,
juniDosProtectionScfdsSlotFlowMacProtocol JuniDosProtectionProtocolType,
juniDosProtectionScfdsSlotFlowMacSrcMac MacAddress,
juniDosProtectionScfdsSlotFlowMacRate Unsigned32,
juniDosProtectionScfdsSlotFlowMacPeakRate Unsigned32,
juniDosProtectionScfdsSlotFlowMacTimeFlagged Unsigned32,
juniDosProtectionScfdsSlotFlowMacIngressSlot Integer32,
juniDosProtectionScfdsSlotFlowMacGroup TruthValue,
juniDosProtectionScfdsSlotFlowMacClearEntry INTEGER}
juniDosProtectionScfdsSlotFlowMacSlot OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The slot value for the flow."
::= { juniDosProtectionScfdsSlotFlowMacEntry 1 }
juniDosProtectionScfdsSlotFlowMacIfIndex OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The ifIndex value for the flow. For group flows, this value
will be zero."
::= { juniDosProtectionScfdsSlotFlowMacEntry 2 }
juniDosProtectionScfdsSlotFlowMacGroupId OBJECT-TYPE
SYNTAX Unsigned32(0..15)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The group id for the flow. The group id will be zero for an individual
flow. It is non-zero when the entry represents a group of flows."
::= { juniDosProtectionScfdsSlotFlowMacEntry 3 }
juniDosProtectionScfdsSlotFlowMacProtocol OBJECT-TYPE
SYNTAX JuniDosProtectionProtocolType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The control protocol for the flow."
::= { juniDosProtectionScfdsSlotFlowMacEntry 4 }
juniDosProtectionScfdsSlotFlowMacSrcMac OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The source MAC address for the flow. A null
source MAC address indicates that no source
physical address was available."
::= { juniDosProtectionScfdsSlotFlowMacEntry 5 }
juniDosProtectionScfdsSlotFlowMacRate OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The current rate in packets per second for the flow."
::= { juniDosProtectionScfdsSlotFlowMacEntry 6 }
juniDosProtectionScfdsSlotFlowMacPeakRate OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The peak rate in packets per second for the flow."
::= { juniDosProtectionScfdsSlotFlowMacEntry 7 }
juniDosProtectionScfdsSlotFlowMacTimeFlagged OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The sysUpTime value for the time when the flow was
determined to be suspicious."
::= { juniDosProtectionScfdsSlotFlowMacEntry 8 }
juniDosProtectionScfdsSlotFlowMacIngressSlot OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"For control flow that are monitored on the egress
processor in the forwarding path, this value will
indicate the possible ingress slot for data stream that
is possibly causing this suspicious flow control. This
object will report -1 when it is undefined"
::= { juniDosProtectionScfdsSlotFlowMacEntry 9 }
juniDosProtectionScfdsSlotFlowMacGroup OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether the flow is a group flow or not. A value of
true(1) indicates that the flow represents a group of flows.
A value of false(0) indicates that the flow is an individual flow."
::= { juniDosProtectionScfdsSlotFlowMacEntry 10 }
juniDosProtectionScfdsSlotFlowMacClearEntry OBJECT-TYPE
SYNTAX INTEGER {
ok(0),
clear(1) }
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When set to clear(1), the suspicious control flow
is removed from the suspicious control flow table. When set to
ok(0), there is no effect and the suspicious control flow
is unchanged.
When read, always returns a value of ok(0)."
::= { juniDosProtectionScfdsSlotFlowMacEntry 11 }
--
-- per slot information
--
juniDosProtectionScfdsSlotTable OBJECT-TYPE
SYNTAX SEQUENCE OF JuniDosProtectionScfdsSlotEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The suspicious control flow information for each slot."
::= { juniDosProtectionPlatformScfdsGroup 3 }
juniDosProtectionScfdsSlotEntry OBJECT-TYPE
SYNTAX JuniDosProtectionScfdsSlotEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The information for a specific slot."
INDEX { juniDosProtectionScfdsSlotFlowSlot }
::= { juniDosProtectionScfdsSlotTable 1 }
JuniDosProtectionScfdsSlotEntry ::= SEQUENCE {
juniDosProtectionScfdsSlotSlot Unsigned32,
juniDosProtectionScfdsSlotClearAll INTEGER,
juniDosProtectionScfdsSlotDiscontinuityTime Unsigned32,
juniDosProtectionScfdsSlotTableOverflowState
JuniDosProtectionScfdsTableOverflowState,
juniDosProtectionScfdsSlotCurrentSuspiciousFlows Counter32,
juniDosProtectionScfdsSlotNumberSuspiciousFlows Counter32,
juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups Counter32,
juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups Counter32,
juniDosProtectionScfdsSlotCurrentFalseNegativeFlows Counter32,
juniDosProtectionScfdsSlotNumberFalseNegativeFlows Counter32,
juniDosProtectionScfdsSlotOverflows Counter32}
juniDosProtectionScfdsSlotSlot OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The slot value for this entry."
::= { juniDosProtectionScfdsSlotEntry 1 }
juniDosProtectionScfdsSlotClearAll OBJECT-TYPE
SYNTAX INTEGER {
ok(0),
clear(1) }
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"When set to clear(1), the suspicious control flow detection system
is cleared for this slot. When set to ok(0), there is no effect and the
suspicious control flow detection system is unchanged.
By clearing the suspicious control flow detection system all flows
on the slot are removed from the suspicious flow table.
When read, always returns a value of ok(0)."
::= { juniDosProtectionScfdsSlotEntry 2 }
juniDosProtectionScfdsSlotDiscontinuityTime OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The sysUpTime at which the counters were re-adjusted due to
slot restart."
::= { juniDosProtectionScfdsSlotEntry 3 }
juniDosProtectionScfdsSlotTableOverflowState OBJECT-TYPE
SYNTAX JuniDosProtectionScfdsTableOverflowState
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates whether this slot is under a resource
shortage situation. A value of notOverflowingOrGrouping(1) indicates
that there is no resource shortage on the slot. A value of
grouping(2) or overflowing(3) indicates that this module
is suffering from a resource shortage and has acted according to the
state of the juniDosProtectionScfdsGlobalGrouping object."
::= { juniDosProtectionScfdsSlotEntry 4 }
juniDosProtectionScfdsSlotCurrentSuspiciousFlows OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of flows currently marked as suspicious for this slot."
::= { juniDosProtectionScfdsSlotEntry 5 }
juniDosProtectionScfdsSlotNumberSuspiciousFlows OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of suspicious flows seen on this slot, since slot restart"
::= { juniDosProtectionScfdsSlotEntry 6 }
juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of suspicius flow groups seen on this slot since slot
restart."
::= { juniDosProtectionScfdsSlotEntry 7 }
juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of flows currently falsely considered suspicious for
this slot."
::= { juniDosProtectionScfdsSlotEntry 8 }
juniDosProtectionScfdsSlotCurrentFalseNegativeFlows OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of flows currently falsely considered suspicious on
this slot."
::= { juniDosProtectionScfdsSlotEntry 9 }
juniDosProtectionScfdsSlotNumberFalseNegativeFlows OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of suspicious flows seen on this slot, since this
slot restart."
::= { juniDosProtectionScfdsSlotEntry 10 }
juniDosProtectionScfdsSlotOverflows OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of times this slot has had a table overflow."
::= { juniDosProtectionScfdsSlotEntry 11 }
--
-- dos protection group slot info
--
juniDosProtectionDpgSlotRateTable OBJECT-TYPE
SYNTAX SEQUENCE OF JuniDosProtectionDpgSlotRateEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table provides information about the calculated minimum
rates (as well as the maximum rates) for each dos-protection-group
control protocol for each line module."
::= { juniDosProtectionPlatformDpgGroup 1 }
juniDosProtectionDpgSlotRateEntry OBJECT-TYPE
SYNTAX JuniDosProtectionDpgSlotRateEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The rates for an individual dos-protection-group on an line
module for a control protocol."
INDEX { juniDosProtectionDpgSlotRateSlot,
juniDosProtectionDpgSlotRateDpgName,
juniDosProtectionDpgSlotRateProtocol}
::= { juniDosProtectionDpgSlotRateTable 1 }
JuniDosProtectionDpgSlotRateEntry ::= SEQUENCE {
juniDosProtectionDpgSlotRateSlot Unsigned32,
juniDosProtectionDpgSlotRateDpgName DisplayString,
juniDosProtectionDpgSlotRateProtocol JuniDosProtectionProtocolType,
juniDosProtectionDpgSlotRateMinRate Unsigned32,
juniDosProtectionDpgSlotRateMaxRate Unsigned32,
juniDosProtectionDpgSlotRateMinBurst Unsigned32,
juniDosProtectionDpgSlotRateMaxBurst Unsigned32}
juniDosProtectionDpgSlotRateSlot OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The slot value for this entry."
::= { juniDosProtectionDpgSlotRateEntry 1 }
juniDosProtectionDpgSlotRateDpgName OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..32))
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The dos-protection-group name for this entry."
::= { juniDosProtectionDpgSlotRateEntry 2 }
juniDosProtectionDpgSlotRateProtocol OBJECT-TYPE
SYNTAX JuniDosProtectionProtocolType
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The control protocol for this entry."
::= { juniDosProtectionDpgSlotRateEntry 3 }
juniDosProtectionDpgSlotRateMinRate OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The minimum rate for this control protocol on this slot for this
dos-protection-group. This value is calculated based on the
priority rate and oversubscription as well as the control protocol
weight"
::= { juniDosProtectionDpgSlotRateEntry 4 }
juniDosProtectionDpgSlotRateMaxRate OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum rate for this protocol on this slot for this
dos-protection-group. This is equivalent to the configured
rate for the dos-protection-group"
::= { juniDosProtectionDpgSlotRateEntry 5 }
juniDosProtectionDpgSlotRateMinBurst OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The minimum burst for this control protocol on this slot for this
dos-protection-group. This value is calculated based on the
priority burst and oversubscription as well as the control protocol
weight"
::= { juniDosProtectionDpgSlotRateEntry 6 }
juniDosProtectionDpgSlotRateMaxBurst OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The maximum burst for this protocol on this slot for this
dos-protection-group. This is equivalent to the configured
burst for the dos-protection-group"
::= { juniDosProtectionDpgSlotRateEntry 7 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Notifications
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
juniDosProtectionPlatformTraps OBJECT IDENTIFIER ::= { juniDosProtectionPlatformMIB 0 }
juniDosProtectionPlatformTrapControl OBJECT IDENTIFIER ::= { juniDosProtectionPlatformMIB 2 }
juniDosProtectionPlatformScfdsTraps OBJECT IDENTIFIER ::= { juniDosProtectionPlatformTraps 0 }
juniDosProtectionScfdsSlot OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The slot value."
::= { juniDosProtectionPlatformTrapControl 1 }
juniDosProtectionPriority OBJECT-TYPE
SYNTAX JuniDosProtectionPriorityType
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The control priority value."
::= { juniDosProtectionPlatformTrapControl 2 }
juniDosProtectionProtocol OBJECT-TYPE
SYNTAX JuniDosProtectionProtocolType
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The control protocol value."
::= { juniDosProtectionPlatformTrapControl 3 }
juniDosProtectionIfIndex OBJECT-TYPE
SYNTAX InterfaceIndex
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The ifIndex value."
::= { juniDosProtectionPlatformTrapControl 4 }
juniDosProtectionGroupId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The group id value."
::= { juniDosProtectionPlatformTrapControl 5 }
juniDosProtectionSrcPhysAddr OBJECT-TYPE
SYNTAX MacAddress (SIZE(6))
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The source physical MAC address."
::= { juniDosProtectionPlatformTrapControl 6 }
juniDosProtectionScfdsFlowRate OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"The flow rate at the creation time."
::= { juniDosProtectionPlatformTrapControl 7 }
---
--- traps
---
juniDosProtectionScfdsSuspiciousControlFlow NOTIFICATION-TYPE
OBJECTS { juniDosProtectionIfIndex,
juniDosProtectionProtocol }
STATUS obsolete
DESCRIPTION
"This trap will be generated when a control flow becomes
suspicious."
::= { juniDosProtectionPlatformScfdsTraps 1 }
juniDosProtectionScfdsNonSuspiciousControlFlow NOTIFICATION-TYPE
OBJECTS { juniDosProtectionIfIndex,
juniDosProtectionProtocol }
STATUS obsolete
DESCRIPTION
"This trap will be generated when a control flow becomes
no longer suspicious"
::= { juniDosProtectionPlatformScfdsTraps 2 }
juniDosProtectionScfdsSuspiciousControlFlowGroup NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot,
juniDosProtectionGroupId,
juniDosProtectionProtocol }
STATUS current
DESCRIPTION
"This trap will be generated when a control flow that
represents a group becomes suspicious."
::= { juniDosProtectionPlatformScfdsTraps 3 }
juniDosProtectionScfdsNonSuspiciousControlFlowGroup NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot,
juniDosProtectionGroupId,
juniDosProtectionProtocol }
STATUS current
DESCRIPTION
"This trap will be generated when a control flow that
represents a group becomes no longer suspicious."
::= { juniDosProtectionPlatformScfdsTraps 4 }
juniDosProtectionScfdsTableFull NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot }
STATUS current
DESCRIPTION
"This trap will be generated when the suspicious flow
control table becomes full on a slot."
::= { juniDosProtectionPlatformScfdsTraps 5 }
juniDosProtectionScfdsTableNotFull NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot }
STATUS current
DESCRIPTION
"This trap will be generated when the suspicious flow
control table is no longer full on a slot."
::= { juniDosProtectionPlatformScfdsTraps 6 }
juniDosProtectionScfdsGroupingInUse NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot }
STATUS current
DESCRIPTION
"This trap will be generated when the suspicious flow
control system begins to group flow controls on a slot,
due to the suspicious flow control table being full."
::= { juniDosProtectionPlatformScfdsTraps 7 }
juniDosProtectionScfdsSuspiciousProtocol NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot,
juniDosProtectionProtocol }
STATUS current
DESCRIPTION
"This trap will be generated when a control protocol
becomes suspicious on a slot, and therefore the suspicious
control flow system begins to watch flows of this
control protocol type."
::= { juniDosProtectionPlatformScfdsTraps 8 }
juniDosProtectionScfdsNonSuspiciousProtocol NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot,
juniDosProtectionProtocol }
STATUS current
DESCRIPTION
"This trap will be generated when a control protocol
becomes no longer suspicious on a slot, and therefore the suspicious
control flow system will no longer watch flows of this
control protocol type."
::= { juniDosProtectionPlatformScfdsTraps 9 }
juniDosProtectionScfdsSuspiciousPriority NOTIFICATION-TYPE
OBJECTS {juniDosProtectionScfdsSlot,
juniDosProtectionPriority }
STATUS current
DESCRIPTION
"This trap will be generated when a control priority
becomes suspicious on a slot."
::= { juniDosProtectionPlatformScfdsTraps 10 }
juniDosProtectionScfdsNonSuspiciousPriority NOTIFICATION-TYPE
OBJECTS { juniDosProtectionScfdsSlot,
juniDosProtectionPriority }
STATUS current
DESCRIPTION
"This trap will be generated when a control priority
becomes no longer suspicious on a slot."
::= { juniDosProtectionPlatformScfdsTraps 11 }
juniDosProtectionScfdsSuspiciousControlFlowMac NOTIFICATION-TYPE
OBJECTS { juniDosProtectionIfIndex,
juniDosProtectionProtocol,
juniDosProtectionSrcPhysAddr,
juniDosProtectionScfdsFlowRate}
STATUS current
DESCRIPTION
"This trap will be generated when a control flow becomes
suspicious."
::= { juniDosProtectionPlatformScfdsTraps 12 }
juniDosProtectionScfdsNonSuspiciousControlFlowMac NOTIFICATION-TYPE
OBJECTS { juniDosProtectionIfIndex,
juniDosProtectionProtocol,
juniDosProtectionSrcPhysAddr}
STATUS obsolete
DESCRIPTION
"This trap will be generated when a control flow becomes
no longer suspicious"
::= { juniDosProtectionPlatformScfdsTraps 13 }
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Conformance information
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
juniDosProtectionPlatformMIBConformance OBJECT IDENTIFIER ::= { juniDosProtectionPlatformMIB 4 }
juniDosProtectionPlatformMIBCompliances OBJECT IDENTIFIER ::= { juniDosProtectionPlatformMIBConformance 1 }
juniDosProtectionPlatformMIBGroups OBJECT IDENTIFIER ::= { juniDosProtectionPlatformMIBConformance 2 }
juniDosProtectionCompliance MODULE-COMPLIANCE
STATUS obsolete
DESCRIPTION
"The compliance statement for entities which implement the Juniper Dos
Protection Platform specific MIB. Obsoleted with the addition of
dos-protection groups."
MODULE -- this module
MANDATORY-GROUPS {
juniDosProtectionPlatformGroup,
juniDosProtectionPlatformNotificationGroup }
::= { juniDosProtectionPlatformMIBCompliances 1 }
juniDosProtectionCompliance2 MODULE-COMPLIANCE
STATUS current
DESCRIPTION
"The compliance statement for entities which implement the Juniper Dos
Protection Platform specific MIB."
MODULE -- this module
MANDATORY-GROUPS {
juniDosProtectionPlatformGroup1,
juniDosProtectionPlatformNotificationGroup1 }
::= { juniDosProtectionPlatformMIBCompliances 2 }
--
-- units of conformance
--
juniDosProtectionGroup OBJECT-GROUP
OBJECTS {juniDosProtectionScfdsSlotProtocolState,
juniDosProtectionScfdsSlotProtocolTransitions,
juniDosProtectionScfdsSlotFlowRate,
juniDosProtectionScfdsSlotFlowPeakRate,
juniDosProtectionScfdsSlotFlowTimeFlagged,
juniDosProtectionScfdsSlotFlowClearEntry,
juniDosProtectionScfdsSlotFlowIngressSlot,
juniDosProtectionScfdsSlotFlowGroup,
juniDosProtectionScfdsSlotDiscontinuityTime,
juniDosProtectionScfdsSlotTableOverflowState,
juniDosProtectionScfdsSlotCurrentSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentFalseNegativeFlows,
juniDosProtectionScfdsSlotNumberFalseNegativeFlows,
juniDosProtectionScfdsSlotOverflows }
STATUS current
DESCRIPTION
"A collection of objects providing management of platform
specific aspects of the DOS protection application in a
Juniper product. This became obsolete with the addition
of MAC address in the flow table and the addition of
dos-protection-groups."
::= { juniDosProtectionPlatformMIBGroups 1 }
juniDosProtectionNotificationGroup NOTIFICATION-GROUP
NOTIFICATIONS {
juniDosProtectionScfdsSuspiciousControlFlow,
juniDosProtectionScfdsNonSuspiciousControlFlow,
juniDosProtectionScfdsSuspiciousControlFlowGroup,
juniDosProtectionScfdsNonSuspiciousControlFlowGroup,
juniDosProtectionScfdsTableFull,
juniDosProtectionScfdsTableNotFull,
juniDosProtectionScfdsGroupingInUse,
juniDosProtectionScfdsSuspiciousProtocol,
juniDosProtectionScfdsNonSuspiciousProtocol,
juniDosProtectionScfdsSuspiciousPriority,
juniDosProtectionScfdsNonSuspiciousPriority }
STATUS current
DESCRIPTION
"Collection of objects for DOS protection application
notifications in a Juniper product.This became obsolete with the
addition of MAC address in flow traps."
::= { juniDosProtectionPlatformMIBGroups 2 }
juniDosProtectionGroup1 OBJECT-GROUP
OBJECTS {juniDosProtectionScfdsSlotProtocolState,
juniDosProtectionScfdsSlotProtocolTransitions,
juniDosProtectionScfdsSlotFlowMacRate,
juniDosProtectionScfdsSlotFlowMacPeakRate,
juniDosProtectionScfdsSlotFlowMacTimeFlagged,
juniDosProtectionScfdsSlotFlowMacClearEntry,
juniDosProtectionScfdsSlotFlowMacIngressSlot,
juniDosProtectionScfdsSlotFlowMacGroup,
juniDosProtectionScfdsSlotDiscontinuityTime,
juniDosProtectionScfdsSlotTableOverflowState,
juniDosProtectionScfdsSlotCurrentSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentFalseNegativeFlows,
juniDosProtectionScfdsSlotNumberFalseNegativeFlows,
juniDosProtectionScfdsSlotOverflows,
juniDosProtectionDpgSlotRateMinRate,
juniDosProtectionDpgSlotRateMaxRate,
juniDosProtectionDpgSlotRateMinBurst,
juniDosProtectionDpgSlotRateMaxBurst }
STATUS current
DESCRIPTION
"A collection of objects providing management of platform
specific aspects of the DOS protection application in a
Juniper product."
::= { juniDosProtectionPlatformMIBGroups 3 }
juniDosProtectionNotificationGroup1 NOTIFICATION-GROUP
NOTIFICATIONS {
juniDosProtectionScfdsSuspiciousControlFlowMac,
juniDosProtectionScfdsNonSuspiciousControlFlowMac,
juniDosProtectionScfdsSuspiciousControlFlowGroup,
juniDosProtectionScfdsNonSuspiciousControlFlowGroup,
juniDosProtectionScfdsTableFull,
juniDosProtectionScfdsTableNotFull,
juniDosProtectionScfdsGroupingInUse,
juniDosProtectionScfdsSuspiciousProtocol,
juniDosProtectionScfdsNonSuspiciousProtocol,
juniDosProtectionScfdsSuspiciousPriority,
juniDosProtectionScfdsNonSuspiciousPriority }
STATUS current
DESCRIPTION
"Collection of objects for DOS protection application
notifications in a Juniper product."
::= { juniDosProtectionPlatformMIBGroups 4 }
END