QTECH-URPF-MIB

        Unicast Reverse Path Forwarding (URPF) is a function 
that checks the validity of the source address of IP 
packets received on an interface. This in an attempt 
to prevent Denial of Service attacks based on IP address 
spoofing.
        
URPF checks validity of a source address by determining
whether the packet would be successfully routed as a
destination address.
        
Based on configuration, the check made can be for existence
of any route for the address, or more strictly for a route
out the interface on which the packet was received by the 
device. When a violating packet is detected, it can be dropped.
        
This MIB allows detection of spoofing events.

Imported Objects

ifIndexIF-MIB
qtechMgmtQTECH-SMI
SnmpAdminStringSNMP-FRAMEWORK-MIB
MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUPSNMPv2-CONF
MODULE-IDENTITY, OBJECT-TYPE, Gauge32, Integer32, Counter32, Unsigned32, NOTIFICATION-TYPESNMPv2-SMI
TruthValueSNMPv2-TC

Objects

qtechUrpfMIB .1.3.6.1.4.1.27514.1.1.10.2.46
qtechUrpfMIBObjects .1.3.6.1.4.1.27514.1.1.10.2.46.0
qtechUrpfScalar .1.3.6.1.4.1.27514.1.1.10.2.46.0.1
qtechUrpfComputeInterval .1.3.6.1.4.1.27514.1.1.10.2.46.0.1.1
qtechUrpfDropRateWindow .1.3.6.1.4.1.27514.1.1.10.2.46.0.1.2
qtechUrpfDropNotifyHoldDownTime .1.3.6.1.4.1.27514.1.1.10.2.46.0.1.3
qtechUrpfStatistics .1.3.6.1.4.1.27514.1.1.10.2.46.0.2
qtechUrpfTable .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1
qtechUrpfEntry .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1
qtechUrpfIpVersion .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1.1
qtechUrpfDrops
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1.2
qtechUrpfDropRate
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1.3
qtechUrpfIfMonTable .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2
qtechUrpfIfMonEntry
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1
qtechUrpfIfIpVersion .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1.1
qtechUrpfIfDrops
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1.2
qtechUrpfIfDropRate
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1.3
qtechUrpfInterfaceConfig .1.3.6.1.4.1.27514.1.1.10.2.46.0.3
qtechUrpfIfConfTable .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1
qtechUrpfIfConfEntry .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1
qtechUrpfIfCheckStrict .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.1
qtechUrpfIfDropRateNotifyEnable
.1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.2
qtechUrpfIfNotifyDropRateThreshold .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.3
qtechUrpfIfNotifyDrHoldDownReset
.1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.4
qtechUrpfIfWhichRouteTableID .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.5
qtechUrpfIfVrfName .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.6
qtechUrpfMIBNotifs .1.3.6.1.4.1.27514.1.1.10.2.46.1
qtechUrpfMIBConformance .1.3.6.1.4.1.27514.1.1.10.2.46.2
qtechUrpfMIBCompliances .1.3.6.1.4.1.27514.1.1.10.2.46.2.1
qtechUrpfMIBGroups .1.3.6.1.4.1.27514.1.1.10.2.46.2.2

Notifications/Traps

NameOIDDescription
qtechUrpfIfDropRateNotify

.1.3.6.1.4.1.27514.1.1.10.2.46.1.1
This notification is generated when 
qtechUrpfIfDropRateNotifyEnable is set to true and
the calculated URPF drop rate (qtechUrpfIfDropRate) 
exceeds the notification threshold drop rate 
(qtechUrpfIfNotifyDropRateThreshold). Note the 
exceptional value of 0 for threshold allows notification 
generation if any drop events occur in an interval.
          
After generating this notification, another such
notification will not be sent out for a minimum of five 
minutes (note the exception to this provided by 
qtechUrpfIfNotifyDrHoldDownReset).
          
The object value present in the notification is the 
the drop rate that exceeded the threshold.