zxAnSecL3TcpSynFldProtectStatus

ZTE-AN-SECURITY-L3-MIB · .1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.20

Object

scalar Enumeration
TCP SYN flooding protection status.
This object will be automatically set as following:
          
CurrentHoRatio     = 100 * zxAnSecL3TcpHalfOpenConns
                          / zxAnSecL3TcpTotalConns                     
Current1MinHoRatio = 100 * zxAnSecL3TcpC1MHalfOpenConns
                          / zxAnSecL3TcpC1MTotalConns
          
If CurrentHoRatio < zxAnSecL3TcpHalfOpenLoThresh 
    and Current1MinHoRatio < zxAnSecL3TcpC1MHalfOpenLoThresh
zxAnSecL3TcpSynFldProtectStatus will be set to safety(1);
          
If CurrentHoRatio >= zxAnSecL3TcpHalfOpenHiThresh 
    or Current1MinHoRatio >= zxAnSecL3TcpC1MHalfOpenHiThresh
zxAnSecL3TcpSynFldProtectStatus will be set to defence(3);
          
In other cases, 
zxAnSecL3TcpSynFldProtectStatus will be set to warning(2).

Context

MIB
ZTE-AN-SECURITY-L3-MIB
OID
.1.3.6.1.4.1.3902.1082.70.37.2.3.1.1.20
Type
scalar
Access
readonly
Status
current
Parent
zxAnSecL3TcpSynFloodGlbObjects

Scalars have one instance, identified by the .0 suffix.

Read the scalar instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'ZTE-AN-SECURITY-L3-MIB' -M '/opt/observium/mibs/zte-ng:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectStatus.0'
More examples
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'ZTE-AN-SECURITY-L3-MIB' -M '/opt/observium/mibs/zte-ng:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'ZTE-AN-SECURITY-L3-MIB::zxAnSecL3TcpSynFldProtectStatus'

Syntax

Enumeration

Values & Constraints

Enumerated Values
1safety
2warning
3defence