-- *****************************************************************************
-- Juniper-DOS-PROTECTION-PLATFORM-MIB
--
-- Juniper Networks Enterprise MIB
-- DOS Protection MIB (platform)
--
-- Copyright (c) 2005-2006 Juniper Networks, Inc.
-- All Rights Reserved.
-- *****************************************************************************Juniper-DOS-PROTECTION-PLATFORM-MIB DEFINITIONS::=BEGINIMPORTSMODULE-IDENTITY,OBJECT-TYPE,NOTIFICATION-TYPE,Counter32,Unsigned32,Integer32
FROM SNMPv2-SMI
JuniEnable
FROM Juniper-TC
TEXTUAL-CONVENTION,TruthValue,MacAddress,DisplayStringFROM SNMPv2-TC
MODULE-COMPLIANCE,OBJECT-GROUP,NOTIFICATION-GROUPFROM SNMPv2-CONF
InterfaceIndexFROM IF-MIB
juniMibs
FROM Juniper-MIBs
JuniDosProtectionProtocolType, JuniDosProtectionPriorityType, JuniDosProtectionProtocolState,
JuniDosProtectionScfdsTableOverflowState
FROM Juniper-DOS-PROTECTION-MIB;juniDosProtectionPlatformMIB MODULE-IDENTITYLAST-UPDATED"200607010000Z"-- 01-Jul-2006 00:00ORGANIZATION"Juniper Networks, Inc."CONTACT-INFO" Juniper Networks, Inc.
Postal: 10 Technology Park Drive
Westford, MA 01886-3146
USA
Tel: +1 978 589 5800
Email: mib@Juniper.net"DESCRIPTION"The DOS Protection MIB for the Juniper E-Series product family.
This MIB contains managed objects for the DOS Protection
application, which are platform specific. Management objects are
provided to control and monitor the DOS protection application."REVISION"200607010000Z"-- 01-Jul-2006 00:00 JUNOSe -.-
DESCRIPTION"Added dos-protection-group support and added MAC address
to flow traps."REVISION"200601010000Z"-- 01-Jan-2006 00:00 JUNOSe 7.3DESCRIPTION"Initial version of this MIB module."::={ juniMibs 81}-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Managed objects
-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniDosProtectionPlatformObjects OBJECTIDENTIFIER::={ juniDosProtectionPlatformMIB 1}juniDosProtectionPlatformScfdsGroup OBJECTIDENTIFIER::={ juniDosProtectionPlatformObjects 1}juniDosProtectionPlatformDpgGroup OBJECTIDENTIFIER::={ juniDosProtectionPlatformObjects 2}--
-- slot based table for protocol state
--juniDosProtectionScfdsSlotProtocolTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionScfdsSlotProtocolEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for the DOS protection control protocols
for a specific slot."
::={ juniDosProtectionPlatformScfdsGroup 1}juniDosProtectionScfdsSlotProtocolEntry OBJECT-TYPESYNTAX JuniDosProtectionScfdsSlotProtocolEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for an individual control protocol on
a specific slot."INDEX{ juniDosProtectionScfdsSlotProtocolSlot,
juniDosProtectionScfdsSlotProtocolIndex }::={ juniDosProtectionScfdsSlotProtocolTable 1}
JuniDosProtectionScfdsSlotProtocolEntry ::=SEQUENCE{
juniDosProtectionScfdsSlotProtocolSlot Unsigned32,
juniDosProtectionScfdsSlotProtocolIndex JuniDosProtectionProtocolType,
juniDosProtectionScfdsSlotProtocolState JuniDosProtectionProtocolState,
juniDosProtectionScfdsSlotProtocolTransitions Counter32}juniDosProtectionScfdsSlotProtocolSlot OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The slot value for the entry."::={ juniDosProtectionScfdsSlotProtocolEntry 1}juniDosProtectionScfdsSlotProtocolIndex OBJECT-TYPE
SYNTAX JuniDosProtectionProtocolType
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The control protocol value for the entry."::={ juniDosProtectionScfdsSlotProtocolEntry 2}juniDosProtectionScfdsSlotProtocolState OBJECT-TYPESYNTAX JuniDosProtectionProtocolState
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The current state of the protocol. This object will return inTrouble(2)
if the specific slot referenced is reporting that the protocol is currently
being watched for suspicious flows. If the module is not reporting that
this protocol is being watched this object will return ok(1).
A protocol is in trouble for a slot when the sum of the rate of all flows
for the protocol is over the limit for that protocol."::={ juniDosProtectionScfdsSlotProtocolEntry 3}juniDosProtectionScfdsSlotProtocolTransitions OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of transitions to 'inTrouble' that this control protocol
has made for this slot."::={ juniDosProtectionScfdsSlotProtocolEntry 4}
--
-- slot based flow table
--juniDosProtectionScfdsSlotFlowTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionScfdsSlotFlowEntry
MAX-ACCESSnot-accessibleSTATUSobsoleteDESCRIPTION"Information about suspicious control flows."::={ juniDosProtectionPlatformScfdsGroup 2}juniDosProtectionScfdsSlotFlowEntry OBJECT-TYPESYNTAX JuniDosProtectionScfdsSlotFlowEntry
MAX-ACCESSnot-accessibleSTATUSobsoleteDESCRIPTION"Information about a suspicious control flow."INDEX{ juniDosProtectionScfdsSlotFlowSlot,
juniDosProtectionScfdsSlotFlowIfIndex,
juniDosProtectionScfdsSlotFlowGroupId,
juniDosProtectionScfdsSlotFlowProtocol }::={ juniDosProtectionScfdsSlotFlowTable 1}
JuniDosProtectionScfdsSlotFlowEntry ::=SEQUENCE{
juniDosProtectionScfdsSlotFlowSlot Unsigned32,
juniDosProtectionScfdsSlotFlowIfIndex InterfaceIndex,
juniDosProtectionScfdsSlotFlowGroupId Unsigned32,
juniDosProtectionScfdsSlotFlowProtocol JuniDosProtectionProtocolType,
juniDosProtectionScfdsSlotFlowRate Unsigned32,
juniDosProtectionScfdsSlotFlowPeakRate Unsigned32,
juniDosProtectionScfdsSlotFlowTimeFlagged Unsigned32,
juniDosProtectionScfdsSlotFlowIngressSlot Integer32,
juniDosProtectionScfdsSlotFlowGroup TruthValue,
juniDosProtectionScfdsSlotFlowClearEntry INTEGER}juniDosProtectionScfdsSlotFlowSlot OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSnot-accessibleSTATUSobsoleteDESCRIPTION"The slot value for the flow."::={ juniDosProtectionScfdsSlotFlowEntry 1}juniDosProtectionScfdsSlotFlowIfIndex OBJECT-TYPESYNTAXInterfaceIndexMAX-ACCESSnot-accessibleSTATUSobsoleteDESCRIPTION"The ifIndex value for the flow. For group flows, this value
will be zero."::={ juniDosProtectionScfdsSlotFlowEntry 2}juniDosProtectionScfdsSlotFlowGroupId OBJECT-TYPESYNTAXUnsigned32(0..15)
MAX-ACCESSnot-accessibleSTATUSobsoleteDESCRIPTION"The group id for the flow. The group id will be zero for an individual
flow. It is non-zero when the entry represents a group of flows."::={ juniDosProtectionScfdsSlotFlowEntry 3}juniDosProtectionScfdsSlotFlowProtocol OBJECT-TYPESYNTAX JuniDosProtectionProtocolType
MAX-ACCESSnot-accessibleSTATUSobsoleteDESCRIPTION"The control protocol for the flow."::={ juniDosProtectionScfdsSlotFlowEntry 4}juniDosProtectionScfdsSlotFlowRate OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUSobsoleteDESCRIPTION"The current rate in packets per second for the flow."::={ juniDosProtectionScfdsSlotFlowEntry 5}juniDosProtectionScfdsSlotFlowPeakRate OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUSobsolete
DESCRIPTION"The peak rate in packets per second for the flow."::={ juniDosProtectionScfdsSlotFlowEntry 6}juniDosProtectionScfdsSlotFlowTimeFlagged OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUSobsoleteDESCRIPTION"The sysUpTime value for the time when the flow was
determined to be suspicious."::={ juniDosProtectionScfdsSlotFlowEntry 7}juniDosProtectionScfdsSlotFlowIngressSlot OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUSobsoleteDESCRIPTION"For control flow that are monitored on the egress
processor in the forwarding path, this value will
indicate the possible ingress slot for data stream that
is possibly causing this suspicious flow control. This
object will report -1 when it is undefined"::={ juniDosProtectionScfdsSlotFlowEntry 8}juniDosProtectionScfdsSlotFlowGroup OBJECT-TYPESYNTAXTruthValueMAX-ACCESSread-onlySTATUSobsoleteDESCRIPTION"Indicates whether the flow is a group flow or not. A value of
true(1) indicates that the flow represents a group of flows.
A value of false(2) indicates that the flow is an individual flow."::={ juniDosProtectionScfdsSlotFlowEntry 9}juniDosProtectionScfdsSlotFlowClearEntry OBJECT-TYPESYNTAXINTEGER{ok(0),clear(1)}MAX-ACCESSread-writeSTATUSobsoleteDESCRIPTION"When set to clear(1), the suspicious control flow
is removed from the suspicious control flow table. When set to
ok(0), there is no effect and the suspicious control flow
is unchanged.
When read, always returns a value of ok(0)."::={ juniDosProtectionScfdsSlotFlowEntry 10}--
-- slot based flow table (with MAC address)
--juniDosProtectionScfdsSlotFlowMacTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionScfdsSlotFlowMacEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Information about suspicious control flows."::={ juniDosProtectionPlatformScfdsGroup 4}juniDosProtectionScfdsSlotFlowMacEntry OBJECT-TYPESYNTAX JuniDosProtectionScfdsSlotFlowMacEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"Information about a suspicious control flow."INDEX{ juniDosProtectionScfdsSlotFlowMacSlot,
juniDosProtectionScfdsSlotFlowMacIfIndex,
juniDosProtectionScfdsSlotFlowMacGroupId,
juniDosProtectionScfdsSlotFlowMacProtocol,
juniDosProtectionScfdsSlotFlowMacSrcMac}::={ juniDosProtectionScfdsSlotFlowMacTable 1}
JuniDosProtectionScfdsSlotFlowMacEntry ::=SEQUENCE{
juniDosProtectionScfdsSlotFlowMacSlot Unsigned32,
juniDosProtectionScfdsSlotFlowMacIfIndex InterfaceIndex,
juniDosProtectionScfdsSlotFlowMacGroupId Unsigned32,
juniDosProtectionScfdsSlotFlowMacProtocol JuniDosProtectionProtocolType,
juniDosProtectionScfdsSlotFlowMacSrcMac MacAddress,
juniDosProtectionScfdsSlotFlowMacRate Unsigned32,
juniDosProtectionScfdsSlotFlowMacPeakRate Unsigned32,
juniDosProtectionScfdsSlotFlowMacTimeFlagged Unsigned32,
juniDosProtectionScfdsSlotFlowMacIngressSlot Integer32,
juniDosProtectionScfdsSlotFlowMacGroup TruthValue,
juniDosProtectionScfdsSlotFlowMacClearEntry INTEGER}juniDosProtectionScfdsSlotFlowMacSlot OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The slot value for the flow."::={ juniDosProtectionScfdsSlotFlowMacEntry 1}juniDosProtectionScfdsSlotFlowMacIfIndex OBJECT-TYPESYNTAXInterfaceIndexMAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The ifIndex value for the flow. For group flows, this value
will be zero."::={ juniDosProtectionScfdsSlotFlowMacEntry 2}juniDosProtectionScfdsSlotFlowMacGroupId OBJECT-TYPESYNTAXUnsigned32(0..15)MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The group id for the flow. The group id will be zero for an individual
flow. It is non-zero when the entry represents a group of flows."
::={ juniDosProtectionScfdsSlotFlowMacEntry 3}juniDosProtectionScfdsSlotFlowMacProtocol OBJECT-TYPESYNTAX JuniDosProtectionProtocolType
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The control protocol for the flow."::={ juniDosProtectionScfdsSlotFlowMacEntry 4}juniDosProtectionScfdsSlotFlowMacSrcMac OBJECT-TYPESYNTAXMacAddressMAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The source MAC address for the flow. A null
source MAC address indicates that no source
physical address was available."::={ juniDosProtectionScfdsSlotFlowMacEntry 5}juniDosProtectionScfdsSlotFlowMacRate OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The current rate in packets per second for the flow."::={ juniDosProtectionScfdsSlotFlowMacEntry 6}juniDosProtectionScfdsSlotFlowMacPeakRate OBJECT-TYPE
SYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The peak rate in packets per second for the flow."::={ juniDosProtectionScfdsSlotFlowMacEntry 7}juniDosProtectionScfdsSlotFlowMacTimeFlagged OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The sysUpTime value for the time when the flow was
determined to be suspicious."::={ juniDosProtectionScfdsSlotFlowMacEntry 8}juniDosProtectionScfdsSlotFlowMacIngressSlot OBJECT-TYPESYNTAXInteger32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"For control flow that are monitored on the egress
processor in the forwarding path, this value will
indicate the possible ingress slot for data stream that
is possibly causing this suspicious flow control. This
object will report -1 when it is undefined"::={ juniDosProtectionScfdsSlotFlowMacEntry 9}juniDosProtectionScfdsSlotFlowMacGroup OBJECT-TYPESYNTAXTruthValueMAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Indicates whether the flow is a group flow or not. A value of
true(1) indicates that the flow represents a group of flows.
A value of false(0) indicates that the flow is an individual flow."::={ juniDosProtectionScfdsSlotFlowMacEntry 10}juniDosProtectionScfdsSlotFlowMacClearEntry OBJECT-TYPESYNTAXINTEGER{ok(0),clear(1)}MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"When set to clear(1), the suspicious control flow
is removed from the suspicious control flow table. When set to
ok(0), there is no effect and the suspicious control flow
is unchanged.
When read, always returns a value of ok(0)."::={ juniDosProtectionScfdsSlotFlowMacEntry 11}--
-- per slot information
--juniDosProtectionScfdsSlotTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionScfdsSlotEntry
MAX-ACCESSnot-accessibleSTATUScurrent
DESCRIPTION"The suspicious control flow information for each slot."::={ juniDosProtectionPlatformScfdsGroup 3}juniDosProtectionScfdsSlotEntry OBJECT-TYPESYNTAX JuniDosProtectionScfdsSlotEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The information for a specific slot."INDEX{ juniDosProtectionScfdsSlotFlowSlot }::={ juniDosProtectionScfdsSlotTable 1}
JuniDosProtectionScfdsSlotEntry ::=SEQUENCE{
juniDosProtectionScfdsSlotSlot Unsigned32,
juniDosProtectionScfdsSlotClearAll INTEGER,
juniDosProtectionScfdsSlotDiscontinuityTime Unsigned32,
juniDosProtectionScfdsSlotTableOverflowState
JuniDosProtectionScfdsTableOverflowState,
juniDosProtectionScfdsSlotCurrentSuspiciousFlows Counter32,
juniDosProtectionScfdsSlotNumberSuspiciousFlows Counter32,
juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups Counter32,
juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups Counter32,
juniDosProtectionScfdsSlotCurrentFalseNegativeFlows Counter32,
juniDosProtectionScfdsSlotNumberFalseNegativeFlows Counter32,
juniDosProtectionScfdsSlotOverflows Counter32}juniDosProtectionScfdsSlotSlot OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The slot value for this entry."::={ juniDosProtectionScfdsSlotEntry 1}juniDosProtectionScfdsSlotClearAll OBJECT-TYPESYNTAXINTEGER{ok(0),clear(1)}MAX-ACCESSread-writeSTATUScurrentDESCRIPTION"When set to clear(1), the suspicious control flow detection system
is cleared for this slot. When set to ok(0), there is no effect and the
suspicious control flow detection system is unchanged.
By clearing the suspicious control flow detection system all flows
on the slot are removed from the suspicious flow table.
When read, always returns a value of ok(0)."::={ juniDosProtectionScfdsSlotEntry 2}juniDosProtectionScfdsSlotDiscontinuityTime OBJECT-TYPE
SYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The sysUpTime at which the counters were re-adjusted due to
slot restart."::={ juniDosProtectionScfdsSlotEntry 3}juniDosProtectionScfdsSlotTableOverflowState OBJECT-TYPESYNTAX JuniDosProtectionScfdsTableOverflowState
MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"Indicates whether this slot is under a resource
shortage situation. A value of notOverflowingOrGrouping(1) indicates
that there is no resource shortage on the slot. A value of
grouping(2) or overflowing(3) indicates that this module
is suffering from a resource shortage and has acted according to the
state of the juniDosProtectionScfdsGlobalGrouping object."::={ juniDosProtectionScfdsSlotEntry 4}juniDosProtectionScfdsSlotCurrentSuspiciousFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of flows currently marked as suspicious for this slot."::={ juniDosProtectionScfdsSlotEntry 5}juniDosProtectionScfdsSlotNumberSuspiciousFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of suspicious flows seen on this slot, since slot restart"::={ juniDosProtectionScfdsSlotEntry 6}juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of suspicius flow groups seen on this slot since slot
restart."::={ juniDosProtectionScfdsSlotEntry 7}juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of flows currently falsely considered suspicious for
this slot."::={ juniDosProtectionScfdsSlotEntry 8}juniDosProtectionScfdsSlotCurrentFalseNegativeFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-only
STATUScurrentDESCRIPTION"The number of flows currently falsely considered suspicious on
this slot."::={ juniDosProtectionScfdsSlotEntry 9}juniDosProtectionScfdsSlotNumberFalseNegativeFlows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of suspicious flows seen on this slot, since this
slot restart."::={ juniDosProtectionScfdsSlotEntry 10}juniDosProtectionScfdsSlotOverflows OBJECT-TYPESYNTAXCounter32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The number of times this slot has had a table overflow."::={ juniDosProtectionScfdsSlotEntry 11}--
-- dos protection group slot info
--juniDosProtectionDpgSlotRateTable OBJECT-TYPESYNTAXSEQUENCEOF JuniDosProtectionDpgSlotRateEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION
"This table provides information about the calculated minimum
rates (as well as the maximum rates) for each dos-protection-group
control protocol for each line module."::={ juniDosProtectionPlatformDpgGroup 1}juniDosProtectionDpgSlotRateEntry OBJECT-TYPESYNTAX JuniDosProtectionDpgSlotRateEntry
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The rates for an individual dos-protection-group on an line
module for a control protocol."INDEX{ juniDosProtectionDpgSlotRateSlot,
juniDosProtectionDpgSlotRateDpgName,
juniDosProtectionDpgSlotRateProtocol}::={ juniDosProtectionDpgSlotRateTable 1}
JuniDosProtectionDpgSlotRateEntry ::=SEQUENCE{
juniDosProtectionDpgSlotRateSlot Unsigned32,
juniDosProtectionDpgSlotRateDpgName DisplayString,
juniDosProtectionDpgSlotRateProtocol JuniDosProtectionProtocolType,
juniDosProtectionDpgSlotRateMinRate Unsigned32,
juniDosProtectionDpgSlotRateMaxRate Unsigned32,
juniDosProtectionDpgSlotRateMinBurst Unsigned32,
juniDosProtectionDpgSlotRateMaxBurst Unsigned32}juniDosProtectionDpgSlotRateSlot OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The slot value for this entry."::={ juniDosProtectionDpgSlotRateEntry 1}juniDosProtectionDpgSlotRateDpgName OBJECT-TYPESYNTAXDisplayString(SIZE(1..32))MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The dos-protection-group name for this entry."::={ juniDosProtectionDpgSlotRateEntry 2}juniDosProtectionDpgSlotRateProtocol OBJECT-TYPESYNTAX JuniDosProtectionProtocolType
MAX-ACCESSnot-accessibleSTATUScurrentDESCRIPTION"The control protocol for this entry."::={ juniDosProtectionDpgSlotRateEntry 3}juniDosProtectionDpgSlotRateMinRate OBJECT-TYPE
SYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The minimum rate for this control protocol on this slot for this
dos-protection-group. This value is calculated based on the
priority rate and oversubscription as well as the control protocol
weight"::={ juniDosProtectionDpgSlotRateEntry 4}juniDosProtectionDpgSlotRateMaxRate OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The maximum rate for this protocol on this slot for this
dos-protection-group. This is equivalent to the configured
rate for the dos-protection-group"::={ juniDosProtectionDpgSlotRateEntry 5}juniDosProtectionDpgSlotRateMinBurst OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The minimum burst for this control protocol on this slot for this
dos-protection-group. This value is calculated based on the
priority burst and oversubscription as well as the control protocol
weight"::={ juniDosProtectionDpgSlotRateEntry 6}
juniDosProtectionDpgSlotRateMaxBurst OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSread-onlySTATUScurrentDESCRIPTION"The maximum burst for this protocol on this slot for this
dos-protection-group. This is equivalent to the configured
burst for the dos-protection-group"::={ juniDosProtectionDpgSlotRateEntry 7}-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Notifications
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniDosProtectionPlatformTraps OBJECTIDENTIFIER::={ juniDosProtectionPlatformMIB 0}juniDosProtectionPlatformTrapControl OBJECTIDENTIFIER::={ juniDosProtectionPlatformMIB 2}juniDosProtectionPlatformScfdsTraps OBJECTIDENTIFIER::={ juniDosProtectionPlatformTraps 0}juniDosProtectionScfdsSlot OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSaccessible-for-notifySTATUScurrentDESCRIPTION"The slot value."
::={ juniDosProtectionPlatformTrapControl 1}juniDosProtectionPriority OBJECT-TYPESYNTAX JuniDosProtectionPriorityType
MAX-ACCESSaccessible-for-notifySTATUScurrentDESCRIPTION"The control priority value."::={ juniDosProtectionPlatformTrapControl 2}juniDosProtectionProtocol OBJECT-TYPESYNTAX JuniDosProtectionProtocolType
MAX-ACCESSaccessible-for-notifySTATUScurrentDESCRIPTION"The control protocol value."::={ juniDosProtectionPlatformTrapControl 3}juniDosProtectionIfIndex OBJECT-TYPESYNTAXInterfaceIndexMAX-ACCESSaccessible-for-notifySTATUScurrentDESCRIPTION"The ifIndex value."::={ juniDosProtectionPlatformTrapControl 4}juniDosProtectionGroupId OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSaccessible-for-notifySTATUScurrentDESCRIPTION"The group id value."::={ juniDosProtectionPlatformTrapControl 5}juniDosProtectionSrcPhysAddr OBJECT-TYPESYNTAXMacAddress(SIZE(6))MAX-ACCESSaccessible-for-notifySTATUScurrentDESCRIPTION"The source physical MAC address."::={ juniDosProtectionPlatformTrapControl 6}juniDosProtectionScfdsFlowRate OBJECT-TYPESYNTAXUnsigned32MAX-ACCESSaccessible-for-notifySTATUScurrentDESCRIPTION"The flow rate at the creation time."::={ juniDosProtectionPlatformTrapControl 7}---
--- traps
---juniDosProtectionScfdsSuspiciousControlFlow NOTIFICATION-TYPEOBJECTS{ juniDosProtectionIfIndex,
juniDosProtectionProtocol }STATUSobsoleteDESCRIPTION"This trap will be generated when a control flow becomes
suspicious."::={ juniDosProtectionPlatformScfdsTraps 1}
juniDosProtectionScfdsNonSuspiciousControlFlow NOTIFICATION-TYPEOBJECTS{ juniDosProtectionIfIndex,
juniDosProtectionProtocol }STATUSobsoleteDESCRIPTION"This trap will be generated when a control flow becomes
no longer suspicious"::={ juniDosProtectionPlatformScfdsTraps 2}juniDosProtectionScfdsSuspiciousControlFlowGroup NOTIFICATION-TYPEOBJECTS{ juniDosProtectionScfdsSlot,
juniDosProtectionGroupId,
juniDosProtectionProtocol }STATUScurrentDESCRIPTION"This trap will be generated when a control flow that
represents a group becomes suspicious."::={ juniDosProtectionPlatformScfdsTraps 3}juniDosProtectionScfdsNonSuspiciousControlFlowGroup NOTIFICATION-TYPEOBJECTS{ juniDosProtectionScfdsSlot,
juniDosProtectionGroupId,
juniDosProtectionProtocol }STATUScurrentDESCRIPTION"This trap will be generated when a control flow that
represents a group becomes no longer suspicious."
::={ juniDosProtectionPlatformScfdsTraps 4}juniDosProtectionScfdsTableFull NOTIFICATION-TYPEOBJECTS{ juniDosProtectionScfdsSlot }STATUScurrentDESCRIPTION"This trap will be generated when the suspicious flow
control table becomes full on a slot."::={ juniDosProtectionPlatformScfdsTraps 5}juniDosProtectionScfdsTableNotFull NOTIFICATION-TYPEOBJECTS{ juniDosProtectionScfdsSlot }STATUScurrentDESCRIPTION"This trap will be generated when the suspicious flow
control table is no longer full on a slot."::={ juniDosProtectionPlatformScfdsTraps 6}juniDosProtectionScfdsGroupingInUse NOTIFICATION-TYPEOBJECTS{ juniDosProtectionScfdsSlot }STATUScurrentDESCRIPTION"This trap will be generated when the suspicious flow
control system begins to group flow controls on a slot,
due to the suspicious flow control table being full."::={ juniDosProtectionPlatformScfdsTraps 7}juniDosProtectionScfdsSuspiciousProtocol NOTIFICATION-TYPE
OBJECTS{ juniDosProtectionScfdsSlot,
juniDosProtectionProtocol }STATUScurrentDESCRIPTION"This trap will be generated when a control protocol
becomes suspicious on a slot, and therefore the suspicious
control flow system begins to watch flows of this
control protocol type."::={ juniDosProtectionPlatformScfdsTraps 8}juniDosProtectionScfdsNonSuspiciousProtocol NOTIFICATION-TYPEOBJECTS{ juniDosProtectionScfdsSlot,
juniDosProtectionProtocol }STATUScurrentDESCRIPTION"This trap will be generated when a control protocol
becomes no longer suspicious on a slot, and therefore the suspicious
control flow system will no longer watch flows of this
control protocol type."::={ juniDosProtectionPlatformScfdsTraps 9}juniDosProtectionScfdsSuspiciousPriority NOTIFICATION-TYPEOBJECTS{juniDosProtectionScfdsSlot,
juniDosProtectionPriority }STATUScurrentDESCRIPTION"This trap will be generated when a control priority
becomes suspicious on a slot."::={ juniDosProtectionPlatformScfdsTraps 10}
juniDosProtectionScfdsNonSuspiciousPriority NOTIFICATION-TYPEOBJECTS{ juniDosProtectionScfdsSlot,
juniDosProtectionPriority }STATUScurrentDESCRIPTION"This trap will be generated when a control priority
becomes no longer suspicious on a slot."::={ juniDosProtectionPlatformScfdsTraps 11}juniDosProtectionScfdsSuspiciousControlFlowMac NOTIFICATION-TYPEOBJECTS{ juniDosProtectionIfIndex,
juniDosProtectionProtocol,
juniDosProtectionSrcPhysAddr,
juniDosProtectionScfdsFlowRate}STATUScurrentDESCRIPTION"This trap will be generated when a control flow becomes
suspicious."::={ juniDosProtectionPlatformScfdsTraps 12}juniDosProtectionScfdsNonSuspiciousControlFlowMac NOTIFICATION-TYPEOBJECTS{ juniDosProtectionIfIndex,
juniDosProtectionProtocol,
juniDosProtectionSrcPhysAddr}STATUSobsoleteDESCRIPTION"This trap will be generated when a control flow becomes
no longer suspicious"::={ juniDosProtectionPlatformScfdsTraps 13}-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-- Conformance information
-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++juniDosProtectionPlatformMIBConformance OBJECTIDENTIFIER::={ juniDosProtectionPlatformMIB 4}juniDosProtectionPlatformMIBCompliances OBJECTIDENTIFIER::={ juniDosProtectionPlatformMIBConformance 1}juniDosProtectionPlatformMIBGroups OBJECTIDENTIFIER::={ juniDosProtectionPlatformMIBConformance 2}juniDosProtectionCompliance MODULE-COMPLIANCESTATUSobsoleteDESCRIPTION"The compliance statement for entities which implement the Juniper Dos
Protection Platform specific MIB. Obsoleted with the addition of
dos-protection groups."MODULE-- this moduleMANDATORY-GROUPS{--PSIM(Modif) juniDosProtectionPlatformGroup,
juniDosProtectionGroup,--PSIM(Modif) juniDosProtectionPlatformNotificationGroup }
juniDosProtectionNotificationGroup }::={ juniDosProtectionPlatformMIBCompliances 1}juniDosProtectionCompliance2 MODULE-COMPLIANCESTATUScurrentDESCRIPTION"The compliance statement for entities which implement the Juniper Dos
Protection Platform specific MIB."MODULE-- this moduleMANDATORY-GROUPS{--PSIM(Modif) juniDosProtectionPlatformGroup1,
juniDosProtectionGroup1,--PSIM(Modif) juniDosProtectionPlatformNotificationGroup1 }
juniDosProtectionNotificationGroup1 }::={ juniDosProtectionPlatformMIBCompliances 2}--
-- units of conformance
--juniDosProtectionGroup OBJECT-GROUPOBJECTS{juniDosProtectionScfdsSlotProtocolState,
juniDosProtectionScfdsSlotProtocolTransitions,
juniDosProtectionScfdsSlotFlowRate,
juniDosProtectionScfdsSlotFlowPeakRate,
juniDosProtectionScfdsSlotFlowTimeFlagged,
juniDosProtectionScfdsSlotFlowClearEntry,
juniDosProtectionScfdsSlotFlowIngressSlot,
juniDosProtectionScfdsSlotFlowGroup,
juniDosProtectionScfdsSlotDiscontinuityTime,
juniDosProtectionScfdsSlotTableOverflowState,
juniDosProtectionScfdsSlotCurrentSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentFalseNegativeFlows,
juniDosProtectionScfdsSlotNumberFalseNegativeFlows,
juniDosProtectionScfdsSlotOverflows }STATUScurrentDESCRIPTION"A collection of objects providing management of platform
specific aspects of the DOS protection application in a
Juniper product. This became obsolete with the addition
of MAC address in the flow table and the addition of
dos-protection-groups."::={ juniDosProtectionPlatformMIBGroups 1}juniDosProtectionNotificationGroup NOTIFICATION-GROUPNOTIFICATIONS{
juniDosProtectionScfdsSuspiciousControlFlow,
juniDosProtectionScfdsNonSuspiciousControlFlow,
juniDosProtectionScfdsSuspiciousControlFlowGroup,
juniDosProtectionScfdsNonSuspiciousControlFlowGroup,
juniDosProtectionScfdsTableFull,
juniDosProtectionScfdsTableNotFull,
juniDosProtectionScfdsGroupingInUse,
juniDosProtectionScfdsSuspiciousProtocol,
juniDosProtectionScfdsNonSuspiciousProtocol,
juniDosProtectionScfdsSuspiciousPriority,
juniDosProtectionScfdsNonSuspiciousPriority }STATUScurrentDESCRIPTION"Collection of objects for DOS protection application
notifications in a Juniper product.This became obsolete with the
addition of MAC address in flow traps."::={ juniDosProtectionPlatformMIBGroups 2}juniDosProtectionGroup1 OBJECT-GROUPOBJECTS{juniDosProtectionScfdsSlotProtocolState,
juniDosProtectionScfdsSlotProtocolTransitions,
juniDosProtectionScfdsSlotFlowMacRate,
juniDosProtectionScfdsSlotFlowMacPeakRate,
juniDosProtectionScfdsSlotFlowMacTimeFlagged,
juniDosProtectionScfdsSlotFlowMacClearEntry,
juniDosProtectionScfdsSlotFlowMacIngressSlot,
juniDosProtectionScfdsSlotFlowMacGroup,
juniDosProtectionScfdsSlotDiscontinuityTime,
juniDosProtectionScfdsSlotTableOverflowState,
juniDosProtectionScfdsSlotCurrentSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlows,
juniDosProtectionScfdsSlotNumberSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentSuspiciousFlowGroups,
juniDosProtectionScfdsSlotCurrentFalseNegativeFlows,
juniDosProtectionScfdsSlotNumberFalseNegativeFlows,
juniDosProtectionScfdsSlotOverflows,
juniDosProtectionDpgSlotRateMinRate,
juniDosProtectionDpgSlotRateMaxRate,
juniDosProtectionDpgSlotRateMinBurst,
juniDosProtectionDpgSlotRateMaxBurst }STATUScurrentDESCRIPTION"A collection of objects providing management of platform
specific aspects of the DOS protection application in a
Juniper product."::={ juniDosProtectionPlatformMIBGroups 3}juniDosProtectionNotificationGroup1 NOTIFICATION-GROUPNOTIFICATIONS{
juniDosProtectionScfdsSuspiciousControlFlowMac,
juniDosProtectionScfdsNonSuspiciousControlFlowMac,
juniDosProtectionScfdsSuspiciousControlFlowGroup,
juniDosProtectionScfdsNonSuspiciousControlFlowGroup,
juniDosProtectionScfdsTableFull,
juniDosProtectionScfdsTableNotFull,
juniDosProtectionScfdsGroupingInUse,
juniDosProtectionScfdsSuspiciousProtocol,
juniDosProtectionScfdsNonSuspiciousProtocol,
juniDosProtectionScfdsSuspiciousPriority,
juniDosProtectionScfdsNonSuspiciousPriority }
STATUScurrentDESCRIPTION"Collection of objects for DOS protection application
notifications in a Juniper product."::={ juniDosProtectionPlatformMIBGroups 4}END