NETGEAR-RADLAN-SECURITY-SUITE Table View

This table enables/disable well-know DoS attacks,
applied globally to all ifIndexes.

rlSecuritySuiteKnownDoSAttacksEntry row .1.3.6.1.4.1.4526.17.120.2.1

Each entry in this table describes one well known DoS attack address

Indexes

rlSecuritySuiteKnownDoSAttack

Column	Syntax	OID
rlSecuritySuiteKnownDoSAttack A well-known DoS attack to enable	RlSecuritySuiteKnownDosAttackType Type Values: 1 stacheldraht 2 invasor-Trojan 3 back-orifice-Trojan	.1.3.6.1.4.1.4526.17.120.2.1.1
rlSecuritySuiteKnownDoSAttackEnable Enable/Disable a well-known DoS attack	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.4526.17.120.2.1.2

This read-only table used to present the detailed attributes
of each well-known DoS attack. Used for presentation propose only.

rlSecuritySuiteKnownDoSAttacksDetailsEntry row .1.3.6.1.4.1.4526.17.120.3.1

Each entry in this table describes one well known DoS attack address ,

Indexes

rlSecuritySuiteKnownDoSAttack

Column	Syntax	OID
rlSecuritySuiteKnownDoSAttackProtocl Specifies the protocol type of the relevant well-known attack	RlSecuritySuiteKnownDosAttackProtocolType Type Values: 1 tcp 2 upd	.1.3.6.1.4.1.4526.17.120.3.1.1
rlSecuritySuiteKnownDoSAttackSrcTcpUdpPort Specifies the source tcp/udp port of the relevant well-known attack	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.4526.17.120.3.1.2
rlSecuritySuiteKnownDoSAttackDestTcpUdpPort Specifies the destination tcp/udp port of the relevant well-known attack	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.4526.17.120.3.1.3

This read-only table specifies all current configured Martian addresses -
both pre-defined (=reserved) and used-configured (=static) addresses

rlSecuritySuiteMartianAddrAllEntry row .1.3.6.1.4.1.4526.17.120.5.1

Each entry in this table describes one Martian address ,
packets with this address as IP source or IP destination, are discarded.

Indexes

rlSecuritySuiteMartianAddr rlSecuritySuiteMartianAddrNetMask

Column	Syntax	OID
rlSecuritySuiteMartianAddr An IP address to discard all packets with that address as source or destination	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.4526.17.120.5.1.1
rlSecuritySuiteMartianAddrNetMask Specify the net mask that comprise the destination IP address prefix.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.4526.17.120.5.1.2
rlSecuritySuiteAllMartianEntryType Specific the entry origin: pre-defined (reserved) of statically configured.	RlSecuritySuiteAllMartianEntryType Type Values: 1 reserved 2 static	.1.3.6.1.4.1.4526.17.120.5.1.3

This table specifies the Martian addresses -
the addresses that packets with these IP addressed as source or
destination are discarded.

rlSecuritySuiteMartianAddrEntry row .1.3.6.1.4.1.4526.17.120.6.1

Each entry in this table describes one Martian address ,
packets with this address as IP source or IP destination, are discarded.

Indexes

rlSecuritySuiteMartianAddr rlSecuritySuiteMartianAddrNetMask

Column	Syntax	OID
rlSecuritySuiteMartianAddrStatus The status of a table entry. It is used to delete/Add an entry from this table.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.4526.17.120.6.1.1

This table contains IP address and rate, to limit DoS SYN attacks from
a specific IP address and interface(s)

rlSecuritySuiteDoSSynAttackEntry row .1.3.6.1.4.1.4526.17.120.7.1

Each entry in this table describes one Martian address ,
packets with this address as IP source or IP destination, are discarded.

Indexes

rlSecuritySuiteDoSSynAttackIfIndex rlSecuritySuiteDoSSynAttackAddr rlSecuritySuiteDoSSynAttackNetMask

Column	Syntax	OID
rlSecuritySuiteDoSSynAttackIfIndex Interface which the attack is applied on	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.4526.17.120.7.1.1
rlSecuritySuiteDoSSynAttackAddr An IP address to discard all packets with that address as destination	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.4526.17.120.7.1.2
rlSecuritySuiteDoSSynAttackNetMask Relevant when rlSecuritySuiteSynAttackRangeType equals prefix(2). Specify the number of bits that comprise the destination IP address prefix.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.4526.17.120.7.1.3
rlSecuritySuiteDoSSynAttackSynRate Specify the maximum connections per second allowed from this IP address and rlSecuritySuiteSynAttackPortList	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.4526.17.120.7.1.4
rlSecuritySuiteDoSSynAttackStatus The status of a table entry. It is used to delete/Add an entry from this table.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.4526.17.120.7.1.6

This table specifies the ip address and TCP ports that
TCP SYN packets from them on a specific interfaces are dropped.

rlSecuritySuiteDenyTypesEntry row .1.3.6.1.4.1.4526.17.120.8.1

Each entry in this table describes one ip address, TCP port and
list of ifIndexes, that packets with these attributes are discarded.

Indexes

rlSecuritySuiteDenyIfIndex rlSecuritySuiteDenyAttackType rlSecuritySuiteDenyDestAddr rlSecuritySuiteDenyNetMask rlSecuritySuiteDenyDestPort

Column	Syntax	OID
rlSecuritySuiteDenyIfIndex Interface which the attack is applied on	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.4526.17.120.8.1.1
rlSecuritySuiteDenyAttackType The specific deny attack type	RlSecuritySuiteDenyAttackType Type Values: 1 syn 2 icmp-echo-request 3 fragmented	.1.3.6.1.4.1.4526.17.120.8.1.2
rlSecuritySuiteDenyDestAddr An IP address to discard all packets with that address as destination	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.4526.17.120.8.1.3
rlSecuritySuiteDenyNetMask Relevant when rlSecuritySuiteDenyTCPRangeType equals mask(1). Specify the number of bits that comprise the destination IP address prefix.	SNMPv2-SMIIpAddress Type Constraints: range: 4	.1.3.6.1.4.1.4526.17.120.8.1.4
rlSecuritySuiteDenyDestPort Destination TCP port. Use 65553 to specify all ports. This key-field is relevant in specific attack types (not all) Use 0 when not relevant.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.4526.17.120.8.1.5
rlSecuritySuiteDenyStatus The status of a table entry. It is used to delete/Add an entry from this table.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.4526.17.120.8.1.6

This table keeps SYN protection status per port.

rlSecuritySuiteSynProtectionPortEntry row .1.3.6.1.4.1.4526.17.120.13.1

Each entry in this table describes TCP SYN protection status for one port.

Indexes

IF-MIBifIndex

Column	Syntax	OID
rlSecuritySuiteSynProtectionPortMode The port's TCP SYN protection mode.	RlSecuritySuiteSynProtectionPortMode Type Values: 1 normal 2 attacked 3 blocked	.1.3.6.1.4.1.4526.17.120.13.1.1
rlSecuritySuiteSynProtectionPortModeLastTimeAttack The port's TCP SYN protection last attack time mode.	RlSecuritySuiteSynProtectionPortMode Type Values: 1 normal 2 attacked 3 blocked	.1.3.6.1.4.1.4526.17.120.13.1.2
rlSecuritySuiteSynProtectionPortLastTimeAttack The port's TCP SYN protection last attack time.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.4526.17.120.13.1.3