-- *****************************************************************************
-- Juniper-DOS-PROTECTION-MIB
--
-- Juniper Networks Enterprise MIB
-- DOS Protection MIB
--
-- Copyright (c) 2005-2006 Juniper Networks, Inc.
-- Copyright (c) 2008 Juniper Networks, Inc.
-- All Rights Reserved.
-- *****************************************************************************Juniper-DOS-PROTECTION-MIB DEFINITIONS::=BEGINIMPORTSMODULE-IDENTITY,OBJECT-TYPE,NOTIFICATION-TYPE,Counter32,Unsigned32FROM SNMPv2-SMI
JuniEnable
FROM Juniper-TC
TEXTUAL-CONVENTION,TruthValue,DisplayString,RowStatusFROM SNMPv2-TC
MODULE-COMPLIANCE,OBJECT-GROUP,NOTIFICATION-GROUPFROM SNMPv2-CONF
InterfaceIndexFROM IF-MIB
juniMibs
FROM Juniper-MIBs;juniDosProtectionMIB MODULE-IDENTITYLAST-UPDATED"200805060000Z"-- 06-May-2008 00:00ORGANIZATION"Juniper Networks, Inc."CONTACT-INFO" Juniper Networks, Inc.
Postal: 10 Technology Park Drive
Westford, MA 01886-3146
USA
Tel: +1 978 589 5800
Email: mib@Juniper.net"DESCRIPTION"The DOS Protection MIB for the Juniper E-Series product family.
This MIB contains managed objects for the DOS Protection
application. Management objects are provided to control and
monitor the DOS protection application."-- Revision HistoryREVISION"200805060000Z"-- 06-May-2008 00:00 JUNOSe 8.1DESCRIPTION"Updated JuniDosProtectionProtocolType TEXTUAL-CONVENTION "REVISION"200607010000Z"-- 01-Jul-2006 00:00 JUNOSe 8.1DESCRIPTION"Added Dos-Protection-Group support"REVISION"200608180400Z"-- 18-Aug-2006 00:00 AM EDT - JUNOSe 8.0DESCRIPTION"Added MPLS Lsp Ping support."REVISION"200608171926Z"-- 17-Aug-2006 03:26 PM EDT - JUNOSe 7.3DESCRIPTION"Added new protocol type, atmDynamicIfPppData, to manage in
JuniDosProtectionProtocolType."REVISION"200601010500Z"-- 01-Jan-2006 00:00 AM EST - JUNOSe 7.3DESCRIPTION"Initial version of this MIB module."::={ juniMibs 80}-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Textual conventions
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++JuniDosProtectionProtocolType ::=TEXTUAL-CONVENTION
STATUScurrentDESCRIPTION"The control protocols that are supported by the DOS protection
application."SYNTAXINTEGER{pppEchoRequest(0),ppEchoReply(1),pppEchoReplyFast(2),pppControl(3),atmControl(4),atmOam(5),atmDynamicIf(6),atmInverseArp(7),frameRelayControl(8),frameRelayArp(9),pppoeControl(10),pppoePppConfig(11),ethernetArpMiss(12),ethernetArp(13),ethernetFcBasedArp(14),ethernetLacp(15),ethernetDynamicIf(16),
slepSlarp(17),slepSlarpReplyFast(18),mplsTtlOnReceive(19),mplsTtlOnTransmit(20),mplsMtuExceeded(21),itmL2tpControl(22),flisInPayload(23),flisInPayloadUpdateTable(24),dhcpExternal(25),ipOsi(26),ipTtlExpired(27),ipOptionsOther(28),ipOptionsRouterAlert(29),ipMulticastBroadcastOther(30),ipMulticastDhcpSc(31),ipMulticastControlSc(32),ipMulticastControlIc(33),ipMulticastVrrp(34),ipMulticastCacheMiss(35),ipMulticastCacheMissAutoReply(36),
ipMulticastWrongIf(37),ipLocalDhcpSc(38),ipLocalDhcpIc(39),ipLocalIcmpEcho(40),ipLocalIcmpOther(41),ipLocalLDP(42),ipLocalBgp(43),ipLocalOspf(44),ipLocalRsvp(45),ipLocalPim(46),ipLocalCops(47),ipLocalL2tpControlSc(48),ipLocalL2tpControlIc(49),ipLocalOther(50),ipLocalDemuxMiss(51),ipRouteToSrpEthernet(52),ipRouteNoRoute(53),ipNormalPathMtu(54),ipNeighborDiscovery(55),ipNeighborDiscoveryMiss(56),
ipSearchError(57),ipMld(58),ipLocalPimAssert(59),ipLocalBfd(60),ipFastBfd(61),ipLocalFastBfd(62),ipIke(63),ipReassembly(64),ipLocalIcmpFragment(65),ipLocalFragment(66),ipAppClassifierHttpRedirect(67),ipMulticastDhcpIc(68),dhcpTesterIc(69),atmDynamicIfPppData(70),ipLocalLspPing(71)}JuniDosProtectionPriorityType ::=TEXTUAL-CONVENTIONSTATUScurrentDESCRIPTION"The control priorities that are supported by the DOS protection
application."SYNTAXINTEGER{hiGreenFcIc(0),
hiYellowFcIc(1),loGreenFcIc(2),loYellowFcIc(3),hiGreenFcSc(4),hiYellowFcSc(5),loGreenFcSc(6),loYellowFcSc(7)}JuniDosProtectionProtocolState ::=TEXTUAL-CONVENTIONSTATUScurrentDESCRIPTION"The current state of a protocol."SYNTAXINTEGER{ok(1),inTrouble(2)}JuniDosProtectionScfdsTableOverflowState ::=TEXTUAL-CONVENTIONSTATUScurrentDESCRIPTION"The current state of the suspicious flow table."SYNTAXINTEGER{notOverflowingOrGrouping(1),grouping(2),overflowing(3)}
JuniDosProtectionProtocolPriorityType ::=TEXTUAL-CONVENTIONSTATUScurrentDESCRIPTION"The control priorities that are supported by the DOS protection
application for each control processor"SYNTAXINTEGER{hiGreen(0),hiYellow(1),loGreen(2),loYellow(3),dataPath(4)}JuniDosProtectionProtocolCannedType ::=TEXTUAL-CONVENTIONSTATUScurrentDESCRIPTION"The available canned dos-protection-groups which can be used
to set defaults into a user specified group."SYNTAXINTEGER{default(0),enetAccess(1),atmAccess(2),frame(3),uplink(4)}JuniDosProtectionLayerId ::=TEXTUAL-CONVENTION
STATUScurrentDESCRIPTION"The available interface types for which a profile entry
may be defined."SYNTAXINTEGER{ip(0),ppp(1),ethernet(6),atm1483(11),pppoe(17),bridge1483(19),vlan(35),ipv6(50)}JuniDosProtectionControlProcessorDestination ::=TEXTUAL-CONVENTIONSTATUScurrentDESCRIPTION"The available control processors to which a control
protocol may be directed."SYNTAXINTEGER{ic(0),sc(1),dataPath(2)}-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Managed objects
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniDosProtectionObjects OBJECTIDENTIFIER::={ juniDosProtectionMIB 1}juniDosProtectionScfdsGroup OBJECTIDENTIFIER::={ juniDosProtectionObjects 1}juniDosProtectionDpgGroup OBJECTIDENTIFIER::={ juniDosProtectionObjects 2}--
-- scalars
--juniDosProtectionScfdsGlobalState OBJECT-TYPESYNTAX JuniEnable
MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"Controls whether the suspicious control flow detection system is
enabled or disabled. Setting the value to enable(1) enables the
suspicious control flow detection system. Setting the value to
disable(0) disables the system.
When read this object returns the current state of the system."DEFVAL{ enable }::={ juniDosProtectionScfdsGroup 1}juniDosProtectionScfdsGlobalGrouping OBJECT-TYPESYNTAX JuniEnable
MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"When set to enable(1), the suspicious flow control system will
group flows when resources are unavailable to treat each
suspicious flow individually. When set to disable(0), this feature
will be inhibited and the suspicious control flow system may not
recognize all suspicious flows during a resource shortage.
When read this object will return the current state of the object."DEFVAL{ enable }::={ juniDosProtectionScfdsGroup 2}juniDosProtectionScfdsGlobalClearAll OBJECT-TYPESYNTAXINTEGER{ok(0),clear(1)}MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"When set to clear(1), the suspicious control flow detection system
is cleared. When set to ok(0), there is no effect and the
suspicious control flow detection system is unchanged.
By clearing the suspicious control flow detection system all flows
are removed from the suspicious flow table.
When read, always returns a value of ok(0)."::={ juniDosProtectionScfdsGroup 3}juniDosProtectionScfdsGlobalDiscontinuityTime OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The sysUpTime at which the counters were last re-initialized on
any slot due to a restart."::={ juniDosProtectionScfdsGroup 4}juniDosProtectionScfdsGlobalTableOverflowState OBJECT-TYPESYNTAX JuniDosProtectionScfdsTableOverflowState
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Indicates whether any module in the system is in under a resource
shortage situation. A value of notOverflowingOrGrouping(1) indicates
that there is no resource shortage on any module. A value of
grouping(2) or overflowing(3) indicates that at least one module
is suffering from a resource shortage, and has acted according to the
state of the juniDosProtectionScfdsGlobalGrouping object."::={ juniDosProtectionScfdsGroup 5}--
-- global counters
--juniDosProtectionScfdsGlobalCurrentSuspiciousFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of flows currently marked as suspicious."::={ juniDosProtectionScfdsGroup 6}juniDosProtectionScfdsGlobalNumberSuspiciousFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of suspicious flows seen since system restart."::={ juniDosProtectionScfdsGroup 7}juniDosProtectionScfdsGlobalCurrentSuspiciousFlowGroups OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of flow groups currently marked as suspicious."::={ juniDosProtectionScfdsGroup 8}juniDosProtectionScfdsGlobalNumberSuspiciousFlowGroups OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of suspicius flow groups seen since system restart."::={ juniDosProtectionScfdsGroup 9}juniDosProtectionScfdsGlobalCurrentFalseNegativeFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of flows currently falsely considered suspicious.
A false negative indicates that the flow was seen as possibly
suspicious, but did not pass all the tests to be considered
suspicious. This is a normal condition of the system."::={ juniDosProtectionScfdsGroup 10}juniDosProtectionScfdsGlobalNumberFalseNegativeFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of flows falsely considered possibly suspicious
seen since system restart."::={ juniDosProtectionScfdsGroup 11}juniDosProtectionScfdsGlobalNumberTableOverflows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The total number of times the system had a table overflow on any slot."::={ juniDosProtectionScfdsGroup 12}--
-- protocol table
--juniDosProtectionScfdsProtocolTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionScfdsProtocolEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for the DOS protection control protocols."::={ juniDosProtectionScfdsGroup 13}juniDosProtectionScfdsProtocolEntry OBJECT-TYPESYNTAX JuniDosProtectionScfdsProtocolEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for an individual DOS protection control
protocol."INDEX{ juniDosProtectionScfdsProtocolIndex }::={ juniDosProtectionScfdsProtocolTable 1}
JuniDosProtectionScfdsProtocolEntry ::=SEQUENCE{
juniDosProtectionScfdsProtocolIndex JuniDosProtectionProtocolType,
juniDosProtectionScfdsProtocolThreshold Unsigned32,
juniDosProtectionScfdsProtocolLowThreshold Unsigned32,
juniDosProtectionScfdsProtocolBackoffTime Unsigned32,
juniDosProtectionScfdsProtocolState JuniDosProtectionProtocolState,
juniDosProtectionScfdsProtocolTransitions Counter32}juniDosProtectionScfdsProtocolIndex OBJECT-TYPESYNTAX JuniDosProtectionProtocolType
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The control protocol value for this entry."::={ juniDosProtectionScfdsProtocolEntry 1}juniDosProtectionScfdsProtocolThreshold OBJECT-TYPESYNTAXUnsigned32(0|3..65535)
MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The threshold in packets per second for this control protocol.
This is the rate at which a flow for this protocol is considered
suspicious. Setting this object to zero will have the affect of
excusing this protocol from suspicious control flow detection."::={ juniDosProtectionScfdsProtocolEntry 2}juniDosProtectionScfdsProtocolLowThreshold OBJECT-TYPESYNTAXUnsigned32(0|1..32767)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The low threshold in packets per second for this control protocol .
This is the rate at which a flow must fall below to in order return
to the normal state, after having been marked suspicious. A
low threshold of zero disables this functionality."::={ juniDosProtectionScfdsProtocolEntry 3}juniDosProtectionScfdsProtocolBackoffTime OBJECT-TYPESYNTAXUnsigned32(0|10..1000)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The backoff time in seconds. A flow which is considered suspicious will
be returned to normal after this amount of time regardless of the current
rate of the flow. A backoff time of 0 disables this functionality."DEFVAL{300}::={ juniDosProtectionScfdsProtocolEntry 4}juniDosProtectionScfdsProtocolState OBJECT-TYPESYNTAX JuniDosProtectionProtocolState
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The current state of the protocol. This object will return inTrouble(2)
if any module in the system has reported that the protocol is currently
being watched for suspicious flows. If no module reports that this protocol
is being watched this object will return ok(1).
A protocol is in trouble on a module when the sum of the rate for all
flows for the protocol is over the limit for that protocol."::={ juniDosProtectionScfdsProtocolEntry 5}juniDosProtectionScfdsProtocolTransitions OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of transitions to 'inTrouble' that this control protocol
has made."::={ juniDosProtectionScfdsProtocolEntry 6}--
-- dos protection groups
--juniDosProtectionDpgTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionDpgEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for a dos-protection-group. A
dos-protection-group defines a set of parameters that
manage the handling of control protocols on the
router."::={ juniDosProtectionDpgGroup 1}juniDosProtectionDpgEntry OBJECT-TYPESYNTAX JuniDosProtectionDpgEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for an individual dos-protection-group."INDEX{ juniDosProtectionDpgIndex }::={ juniDosProtectionDpgTable 1}
JuniDosProtectionDpgEntry ::=SEQUENCE{
juniDosProtectionDpgIndex DisplayString,
juniDosProtectionDpgRowStatus RowStatus,
juniDosProtectionDpgCanned
JuniDosProtectionProtocolCannedType,
juniDosProtectionDpgRevert INTEGER,
juniDosProtectionDpgModified TruthValue,
juniDosProtectionDpgReferences INTEGER}
juniDosProtectionDpgIndex OBJECT-TYPESYNTAXDisplayString(SIZE(1..32))MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The dos-protection-group-name for this entry."::={ juniDosProtectionDpgEntry 1}juniDosProtectionDpgRowStatus OBJECT-TYPESYNTAXRowStatusMAX-ACCESSread-createSTATUScurrentDESCRIPTION"Controls creation/deletion of entries in this table.
Only the values 'createAndGo' and 'destroy' may be SET.
When read this always returns a value of active"::={ juniDosProtectionDpgEntry 2}juniDosProtectionDpgCanned OBJECT-TYPESYNTAX JuniDosProtectionProtocolCannedType
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"Sets the default values based for the dos-protection-group
based on the values from the canned group. Can only be used
to set a different group. Using the current group will result
in no changes to the dos-protection-group."DEFVAL{ default }::={ juniDosProtectionDpgEntry 3}juniDosProtectionDpgRevert OBJECT-TYPESYNTAXINTEGER{no-revert(0),revert(1)}MAX-ACCESSread-createSTATUScurrentDESCRIPTION"Revert this dos-protection-group to the canned values of the
associated canned group by setting this object to
revert(1). Reading this object will always return a value
of no-revert(1)"::={ juniDosProtectionDpgEntry 4}juniDosProtectionDpgModified OBJECT-TYPESYNTAXTruthValueMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"When true is returned, some protocol or priority associated
with this dos-protection-group, has been modified from the
canned values associated with the group. When false is returned
all settings associated with this dos-protection-group are
at the defaults for the associated canned group."::={ juniDosProtectionDpgEntry 5}juniDosProtectionDpgReferences OBJECT-TYPESYNTAXINTEGERMAX-ACCESSread-onlySTATUScurrent
DESCRIPTION"The number of references for this dos-protection-group.
References include the number of interfaces currently
associated with the group, as well as the number of profile
references."::={ juniDosProtectionDpgEntry 6}--
-- dpg protocol information
--juniDosProtectionDpgProtocolTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionDpgProtocolEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for the dos-protection-group control protocol
table."::={ juniDosProtectionDpgGroup 2}juniDosProtectionDpgProtocolEntry OBJECT-TYPESYNTAX JuniDosProtectionDpgProtocolEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for an individual dos-protection-group control
protocol entry."INDEX{ juniDosProtectionDpgProtocolName,
juniDosProtectionDpgProtocolProtocol }::={ juniDosProtectionDpgProtocolTable 1}
JuniDosProtectionDpgProtocolEntry ::=SEQUENCE{
juniDosProtectionDpgProtocolName DisplayString,
juniDosProtectionDpgProtocolProtocol JuniDosProtectionProtocolType,
juniDosProtectionDpgProtocolBurst Unsigned32,
juniDosProtectionDpgProtocolDropProbability Unsigned32,
juniDosProtectionDpgProtocolRate Unsigned32,
juniDosProtectionDpgProtocolSkipPriorityRateLimiter
JuniEnable,
juniDosProtectionDpgProtocolWeight Unsigned32,
juniDosProtectionDpgProtocolPriority
JuniDosProtectionProtocolPriorityType,
juniDosProtectionDpgProtocolModified TruthValue,
juniDosProtectionDpgProtocolDestination
JuniDosProtectionControlProcessorDestination}juniDosProtectionDpgProtocolName OBJECT-TYPESYNTAXDisplayString(SIZE(1..32))MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The dos-protection-group name for this entry."::={ juniDosProtectionDpgProtocolEntry 1}juniDosProtectionDpgProtocolProtocol OBJECT-TYPESYNTAX JuniDosProtectionProtocolType
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION
"The dos-protection-group control protocol for this entry."::={ juniDosProtectionDpgProtocolEntry 2}juniDosProtectionDpgProtocolBurst OBJECT-TYPESYNTAXUnsigned32(0|32..65535)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The burst in packets for this control protocol in this
dos-protection-group."::={ juniDosProtectionDpgProtocolEntry 3}juniDosProtectionDpgProtocolDropProbability OBJECT-TYPESYNTAXUnsigned32(10..100)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The drop probability for suspect packets for this
control protocol in this dos-protection-group. This is
probability that a packet belonging to a suspicious
flow will be dropped. A drop probability of less than
100 indicates that the user wishes to have some
packets from a suspect flow reach the control
processor."::={ juniDosProtectionDpgProtocolEntry 4}juniDosProtectionDpgProtocolRate OBJECT-TYPESYNTAXUnsigned32(0|64..65535)
MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The rate in packets per second for this control protocol in
this dos-protection-group."::={ juniDosProtectionDpgProtocolEntry 5}juniDosProtectionDpgProtocolSkipPriorityRateLimiter OBJECT-TYPESYNTAX JuniEnable
MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"When set to enable, this control protocol in this
dos-protection-group will skip the priority rate limiter.
When set to disable, the protocol will not skip the priority
rate-limiter."::={ juniDosProtectionDpgProtocolEntry 6}juniDosProtectionDpgProtocolWeight OBJECT-TYPESYNTAXUnsigned32(100..500)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The weight of this control protocol against others of the
same priority in this dos-protection-group. The weight
is used to determine the minimum rate and burst
for the protocol within the priority group."DEFVAL{100}::={ juniDosProtectionDpgProtocolEntry 7}juniDosProtectionDpgProtocolPriority OBJECT-TYPESYNTAX JuniDosProtectionProtocolPriorityType
MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The priority for the control protocol. Packets of this control
protocol on interfaces referencing this dos-protection-group will
be categorized into the priority indicated."::={ juniDosProtectionDpgProtocolEntry 8}juniDosProtectionDpgProtocolModified OBJECT-TYPESYNTAXTruthValueMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"When true is returned, the values for this control protocol
in this dos-protection-group have been modified from the
canned values associated with the group. When false is returned
all settings associated with this control protocol in this
dos-protection-group are at the defaults for the associated
canned group."::={ juniDosProtectionDpgProtocolEntry 9}juniDosProtectionDpgProtocolDestination OBJECT-TYPESYNTAX JuniDosProtectionControlProcessorDestination
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The destination processor for packets of this control protocol."
::={ juniDosProtectionDpgProtocolEntry 10}--
-- dpg priority information
--juniDosProtectionDpgPriorityTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionDpgPriorityEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for a dos-protection-group priority table."::={ juniDosProtectionDpgGroup 3}juniDosProtectionDpgPriorityEntry OBJECT-TYPESYNTAX JuniDosProtectionDpgPriorityEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for an individual dos-protection-group priority
table"INDEX{ juniDosProtectionDpgPriorityName,
juniDosProtectionDpgPriorityPriority }::={ juniDosProtectionDpgPriorityTable 1}
JuniDosProtectionDpgPriorityEntry ::=SEQUENCE{
juniDosProtectionDpgPriorityName DisplayString,
juniDosProtectionDpgPriorityPriority JuniDosProtectionPriorityType,
juniDosProtectionDpgPriorityBurst Unsigned32,
juniDosProtectionDpgPriorityOverSubscriptionFactor
Unsigned32,
juniDosProtectionDpgPriorityRate Unsigned32,
juniDosProtectionDpgPriorityModified TruthValue}juniDosProtectionDpgPriorityName OBJECT-TYPESYNTAXDisplayString(SIZE(1..32))MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The dos-proteciton-group name for this entry."::={ juniDosProtectionDpgPriorityEntry 1}juniDosProtectionDpgPriorityPriority OBJECT-TYPESYNTAX JuniDosProtectionPriorityType
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The priority for this entry."::={ juniDosProtectionDpgPriorityEntry 2}juniDosProtectionDpgPriorityBurst OBJECT-TYPESYNTAXUnsigned32(0|32..65535)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The burst in packets for this priority in this
dos-protection-group."::={ juniDosProtectionDpgPriorityEntry 3}juniDosProtectionDpgPriorityOverSubscriptionFactor OBJECT-TYPESYNTAXUnsigned32(100..1000)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The over-subscription factor for this priority in this
dos-protection-group. This is used when calculating
the minimum rates for control protocols that use this priority."::={ juniDosProtectionDpgPriorityEntry 4}juniDosProtectionDpgPriorityRate OBJECT-TYPESYNTAXUnsigned32(0|64..65535)MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"The rate in packets per second for this priority in
this dos-protection-group."::={ juniDosProtectionDpgPriorityEntry 5}juniDosProtectionDpgPriorityModified OBJECT-TYPESYNTAXTruthValueMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"When true is returned, the values for this priority
in this dos-protection-group have been modified from the
canned values associated with the group. When false is returned
all settings associated with this priority in this
dos-protection-group are at the defaults for the associated
canned group."::={ juniDosProtectionDpgPriorityEntry 6}--
-- attachment table
--juniDosProtectionDpgAttachTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionDpgAttachEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for the DOS protection attachment table."::={ juniDosProtectionDpgGroup 4}juniDosProtectionDpgAttachEntry OBJECT-TYPESYNTAX JuniDosProtectionDpgAttachEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for an individual DOS protection attachment entry."INDEX{ juniDosProtectionDpgAttachIndex }::={ juniDosProtectionDpgAttachTable 1}
JuniDosProtectionDpgAttachEntry ::=SEQUENCE{
juniDosProtectionDpgAttachIndex InterfaceIndex,
juniDosProtectionDpgAttachRowStatus RowStatus,
juniDosProtectionDpgAttachName DisplayString,
juniDosProtectionDpgAttachConfigured TruthValue}juniDosProtectionDpgAttachIndex OBJECT-TYPESYNTAXInterfaceIndexMAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The interface index for the attachment."::={ juniDosProtectionDpgAttachEntry 1}juniDosProtectionDpgAttachRowStatus OBJECT-TYPESYNTAXRowStatusMAX-ACCESSread-createSTATUScurrentDESCRIPTION"Controls creation/deletion of entries in this table. Only the
values 'createAndGo' and 'destroy' may be SET.
When read this always returns a value of active"::={ juniDosProtectionDpgAttachEntry 2}juniDosProtectionDpgAttachName OBJECT-TYPESYNTAXDisplayString(SIZE(1..32))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The dos-protection-group for this entry. This is the
dos-protection-group that is use by the interface."::={ juniDosProtectionDpgAttachEntry 3}juniDosProtectionDpgAttachConfigured OBJECT-TYPESYNTAXTruthValueMAX-ACCESSread-createSTATUScurrentDESCRIPTION"Indicates the configured status of the attachment. This object
returns true when the attachment was statically
configured, and returns false when the attachment
was made via a profile attachment."::={ juniDosProtectionDpgAttachEntry 4}--
-- profile table
--juniDosProtectionDpgProfileTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionDpgProfileEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for the DOS protection profile table."::={ juniDosProtectionDpgGroup 5}juniDosProtectionDpgProfileEntry OBJECT-TYPESYNTAX JuniDosProtectionDpgProfileEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for an individual DOS protection profile entry."INDEX{ juniDosProtectionDpgProfileProfileId,
juniDosProtectionDpgProfileLayerId}
::={ juniDosProtectionDpgProfileTable 1}
JuniDosProtectionDpgProfileEntry ::=SEQUENCE{
juniDosProtectionDpgProfileProfileId Unsigned32,
juniDosProtectionDpgProfileLayerId JuniDosProtectionLayerId,
juniDosProtectionDpgProfileRowStatus RowStatus,
juniDosProtectionDpgProfileName DisplayString}juniDosProtectionDpgProfileProfileId OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The profile ID for the profile entry. The profile ID
identifies which profile is being accessed. A value for this
identifier is determined by locating or creating a profile name
in the juniProfileNameTable"::={ juniDosProtectionDpgProfileEntry 1}juniDosProtectionDpgProfileLayerId OBJECT-TYPESYNTAX JuniDosProtectionLayerId
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The layer ID for the profile entry. The layer ID indicates
which interface type is being accessed."::={ juniDosProtectionDpgProfileEntry 2}juniDosProtectionDpgProfileRowStatus OBJECT-TYPESYNTAXRowStatus
MAX-ACCESSread-createSTATUScurrentDESCRIPTION"Controls creation/deletion of entries in this table. Only the
values 'createAndGo' and 'destroy' may be SET. When read this
always returns a value of active"::={ juniDosProtectionDpgProfileEntry 3}juniDosProtectionDpgProfileName OBJECT-TYPESYNTAXDisplayString(SIZE(1..32))MAX-ACCESSread-createSTATUScurrentDESCRIPTION"The dos-protection-group that is associated with this
profile/interface-type. This profile will be attached
when dynamic instances of the interface type are
created that reference the specific profile."::={ juniDosProtectionDpgProfileEntry 4}-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Notifications
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++--juniDosProtectionTraps OBJECT IDENTIFIER ::= { juniDosProtectionMIB 0 }
--juniDosProtectionTrapControl OBJECT IDENTIFIER ::= { juniDosProtectionMIB 2 }
--juniDosProtectionScfdsTraps OBJECT IDENTIFIER ::= { juniDosProtectionTraps 0 }-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Conformance information
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniDosProtectionMIBConformance OBJECTIDENTIFIER::={ juniDosProtectionMIB 4}
juniDosProtectionMIBCompliances OBJECTIDENTIFIER::={ juniDosProtectionMIBConformance 1}juniDosProtectionMIBGroups OBJECTIDENTIFIER::={ juniDosProtectionMIBConformance 2}juniDosProtectionCompliance MODULE-COMPLIANCESTATUSobsoleteDESCRIPTION"The compliance statement for entities which implement the Juniper
Dos Protection MIB. This was made obsolete with the addition of
dos-protection-groups."MODULE-- this moduleMANDATORY-GROUPS{
juniDosProtectionGroup }::={ juniDosProtectionMIBCompliances 1}juniDosProtectionCompliance2 MODULE-COMPLIANCESTATUScurrentDESCRIPTION"The compliance statement for entities which implement the Juniper
Dos Protection MIB."MODULE-- this moduleMANDATORY-GROUPS{
juniDosProtectionGroup2 }::={ juniDosProtectionMIBCompliances 2}-- Junos x.y--
-- units of conformance
--juniDosProtectionGroup OBJECT-GROUP
OBJECTS{juniDosProtectionScfdsGlobalState,
juniDosProtectionScfdsGlobalGrouping,
juniDosProtectionScfdsGlobalClearAll,
juniDosProtectionScfdsGlobalDiscontinuityTime,
juniDosProtectionScfdsGlobalTableOverflowState,
juniDosProtectionScfdsGlobalCurrentSuspiciousFlows,
juniDosProtectionScfdsGlobalNumberSuspiciousFlows,
juniDosProtectionScfdsGlobalCurrentSuspiciousFlowGroups,
juniDosProtectionScfdsGlobalNumberSuspiciousFlowGroups,
juniDosProtectionScfdsGlobalCurrentFalseNegativeFlows,
juniDosProtectionScfdsGlobalNumberFalseNegativeFlows,
juniDosProtectionScfdsGlobalNumberTableOverflows,
juniDosProtectionScfdsProtocolThreshold,
juniDosProtectionScfdsProtocolLowThreshold,
juniDosProtectionScfdsProtocolBackoffTime,
juniDosProtectionScfdsProtocolState,
juniDosProtectionScfdsProtocolTransitions }STATUSobsoleteDESCRIPTION"A collection of objects providing management of DOS protection
application in a Juniper product. This object became obsolete
with the addition of dos-protection-groups."::={ juniDosProtectionMIBGroups 1}juniDosProtectionGroup2 OBJECT-GROUPOBJECTS{juniDosProtectionScfdsGlobalState,
juniDosProtectionScfdsGlobalGrouping,
juniDosProtectionScfdsGlobalClearAll,
juniDosProtectionScfdsGlobalDiscontinuityTime,
juniDosProtectionScfdsGlobalTableOverflowState,
juniDosProtectionScfdsGlobalCurrentSuspiciousFlows,
juniDosProtectionScfdsGlobalNumberSuspiciousFlows,
juniDosProtectionScfdsGlobalCurrentSuspiciousFlowGroups,
juniDosProtectionScfdsGlobalNumberSuspiciousFlowGroups,
juniDosProtectionScfdsGlobalCurrentFalseNegativeFlows,
juniDosProtectionScfdsGlobalNumberFalseNegativeFlows,
juniDosProtectionScfdsGlobalNumberTableOverflows,
juniDosProtectionScfdsProtocolThreshold,
juniDosProtectionScfdsProtocolLowThreshold,
juniDosProtectionScfdsProtocolBackoffTime,
juniDosProtectionScfdsProtocolState,
juniDosProtectionScfdsProtocolTransitions,
juniDosProtectionDpgRowStatus,
juniDosProtectionDpgCanned,
juniDosProtectionDpgRevert,
juniDosProtectionDpgModified,
juniDosProtectionDpgReferences,
juniDosProtectionDpgProtocolBurst,
juniDosProtectionDpgProtocolDropProbability,
juniDosProtectionDpgProtocolRate,
juniDosProtectionDpgProtocolSkipPriorityRateLimiter,
juniDosProtectionDpgProtocolWeight,
juniDosProtectionDpgProtocolModified,
juniDosProtectionDpgPriorityBurst,
juniDosProtectionDpgPriorityOverSubscriptionFactor,
juniDosProtectionDpgPriorityRate,
juniDosProtectionDpgPriorityModified,
juniDosProtectionDpgAttachRowStatus,
juniDosProtectionDpgAttachName,
juniDosProtectionDpgProfileRowStatus,
juniDosProtectionDpgProfileName }STATUScurrentDESCRIPTION"A collection of objects providing management of DOS protection
application in a Juniper product."::={ juniDosProtectionMIBGroups 2}END