Standard view Table view

FS-URPF-MIB

        Unicast Reverse Path Forwarding (URPF) is a function 
that checks the validity of the source address of IP 
packets received on an interface. This in an attempt 
to prevent Denial of Service attacks based on IP address 
spoofing.
        
URPF checks validity of a source address by determining
whether the packet would be successfully routed as a
destination address.
        
Based on configuration, the check made can be for existence
of any route for the address, or more strictly for a route
out the interface on which the packet was received by the 
device. When a violating packet is detected, it can be dropped.
        
This MIB allows detection of spoofing events.
Source file
FS-URPF-MIB
Last revised
Identity
fsUrpfMIB
Base OID
1.3.6.1.4.1.52642.1.1.10.2.46
Imported Objects
FS-SMI fsMgmt
IF-MIB ifIndex
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP
SNMPv2-SMI Counter32 Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32
SNMPv2-TC TruthValue
Net-SNMP examples using the fscom MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'FS-URPF-MIB' -M '/opt/observium/mibs/fscom:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'FS-URPF-MIB::fsUrpfMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'FS-URPF-MIB' -M '/opt/observium/mibs/fscom:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'FS-URPF-MIB::fsUrpfMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (30)
fsUrpfMIB
.1.3.6.1.4.1.52642.1.1.10.2.46
fsUrpfMIBObjects
.1.3.6.1.4.1.52642.1.1.10.2.46.0
fsUrpfScalar
.1.3.6.1.4.1.52642.1.1.10.2.46.0.1
fsUrpfComputeInterval r/w
secondsInteger32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.1.1
fsUrpfDropRateWindow
secondsInteger32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.1.2
fsUrpfDropNotifyHoldDownTime r/w
secondsInteger32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.1.3
fsUrpfStatistics
.1.3.6.1.4.1.52642.1.1.10.2.46.0.2
fsUrpfTable
.1.3.6.1.4.1.52642.1.1.10.2.46.0.2.1
fsUrpfEntry
fsUrpfIpVersion
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.1.1
fsUrpfIpVersion
Enumeration
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.1.1.1
fsUrpfDrops
packetsSNMPv2-SMICounter32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.1.1.2
fsUrpfDropRate
packets per secondSNMPv2-SMIGauge32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.1.1.3
fsUrpfIfMonTable
.1.3.6.1.4.1.52642.1.1.10.2.46.0.2.2
fsUrpfIfMonEntry
IF-MIBifIndexfsUrpfIfIpVersion
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.2.1
fsUrpfIfIpVersion
Enumeration
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.2.1.1
fsUrpfIfDrops
packetsSNMPv2-SMICounter32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.2.1.2
fsUrpfIfDropRate
packets/secondSNMPv2-SMIGauge32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.2.2.1.3
fsUrpfInterfaceConfig
.1.3.6.1.4.1.52642.1.1.10.2.46.0.3
fsUrpfIfConfTable
.1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1
fsUrpfIfConfEntry
.1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1.1
fsUrpfIfCheckStrict
Enumeration
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1.1.1
fsUrpfIfDropRateNotifyEnable r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1.1.2
fsUrpfIfNotifyDropRateThreshold r/w
packets/secondSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1.1.3
fsUrpfIfNotifyDrHoldDownReset r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1.1.4
fsUrpfIfWhichRouteTableID
Enumeration
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1.1.5
fsUrpfIfVrfName
OctetString
 .1.3.6.1.4.1.52642.1.1.10.2.46.0.3.1.1.6
fsUrpfMIBNotifs
.1.3.6.1.4.1.52642.1.1.10.2.46.1
fsUrpfMIBConformance
.1.3.6.1.4.1.52642.1.1.10.2.46.2
fsUrpfMIBCompliances
.1.3.6.1.4.1.52642.1.1.10.2.46.2.1
fsUrpfMIBGroups
.1.3.6.1.4.1.52642.1.1.10.2.46.2.2
Dependencies (8) 6 direct · 2 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. FS-SMIfscom
  3. SNMPv2-TCrfc
  4. IANAifType-MIBrfc
  5. SNMPv2-CONFrfc
  6. SNMPv2-MIBrfc
  7. IF-MIBrfc
  8. SNMP-FRAMEWORK-MIBrfc
  9. FS-URPF-MIBfscomselected
Conformance Groups (3)
fsUrpfMIBMainObjectGroup
fsUrpfComputeInterval fsUrpfDropRateWindow fsUrpfDropNotifyHoldDownTime fsUrpfDrops fsUrpfDropRate fsUrpfIfDrops fsUrpfIfDropRate fsUrpfIfCheckStrict fsUrpfIfDropRateNotifyEnable fsUrpfIfNotifyDropRateThreshold fsUrpfIfNotifyDrHoldDownReset
The collection of common counter objects, those
needed by other objects, and the common interface
table.
 .1.3.6.1.4.1.52642.1.1.10.2.46.2.2.1
fsUrpfMIBVrfObjectGroup
fsUrpfIfWhichRouteTableID fsUrpfIfVrfName
The collection of objects needed to index by
VRF.
 .1.3.6.1.4.1.52642.1.1.10.2.46.2.2.2
fsUrpfMIBNotifyGroup
fsUrpfIfDropRateNotify
The collection of objects which are used to specify
notifications for URPF.
 .1.3.6.1.4.1.52642.1.1.10.2.46.2.2.3
Compliance Statements (1)

OID .1.3.6.1.4.1.52642.1.1.10.2.46.2.1.1
An SNMP entity can implement this module to
provide URPF problem diagnosis information.
Required groups
mandatory fsUrpfMIBMainObjectGroup
mandatory fsUrpfMIBNotifyGroup
optional fsUrpfMIBVrfObjectGroup This group is mandatory for all implementations
that need to index URPF statistics by VRF interfaces.
Notifications / Traps (1)
NameOIDDescription
fsUrpfIfDropRateNotify
fsUrpfIfDropRate
.1.3.6.1.4.1.52642.1.1.10.2.46.1.1
This notification is generated when
fsUrpfIfDropRateNotifyEnable is set to true and
the calculated URPF drop rate (fsUrpfIfDropRate)
exceeds the notification threshold drop rate
(fsUrpfIfNotifyDropRateThreshold). Note the
exceptional value of 0 for threshold allows notification
generation if any drop events occur in an interval.

After generating this notification, another such
notification will not be sent out for a minimum of five
minutes (note the exception to this provided by
fsUrpfIfNotifyDrHoldDownReset).

The object value present in the notification is the
the drop rate that exceeded the threshold.