QTECH-URPF-MIB
Unicast Reverse Path Forwarding (URPF) is a function
that checks the validity of the source address of IP
packets received on an interface. This in an attempt
to prevent Denial of Service attacks based on IP address
spoofing.
URPF checks validity of a source address by determining
whether the packet would be successfully routed as a
destination address.
Based on configuration, the check made can be for existence
of any route for the address, or more strictly for a route
out the interface on which the packet was received by the
device. When a violating packet is detected, it can be dropped.
This MIB allows detection of spoofing events.
qtechUrpfMIB
1.3.6.1.4.1.27514.1.1.10.2.46
Imported Objects
| IF-MIB | ifIndex |
| QTECH-SMI | qtechMgmt |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Gauge32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | TruthValue |
Objects (30)
qtechUrpfMIB
|
.1.3.6.1.4.1.27514.1.1.10.2.46 |
|
|
qtechUrpfMIBObjects
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0 |
|
|
qtechUrpfScalar
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0.1 |
|
qtechUrpfComputeInterval
r/w
|
secondsInteger32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.1.1 |
|
qtechUrpfDropRateWindow
|
secondsInteger32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.1.2 |
|
qtechUrpfDropNotifyHoldDownTime
r/w
|
secondsInteger32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.1.3 |
|
qtechUrpfStatistics
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2 |
|
qtechUrpfTable
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1 |
|
qtechUrpfEntry
|
qtechUrpfIpVersion | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1 |
qtechUrpfIpVersion
|
Enumeration | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1.1 |
|
qtechUrpfDrops
|
packetsSNMPv2-SMICounter32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1.2 |
|
qtechUrpfDropRate
|
packets per secondSNMPv2-SMIGauge32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.1.1.3 |
|
qtechUrpfIfMonTable
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2 |
|
|
qtechUrpfIfMonEntry
|
IF-MIBifIndexqtechUrpfIfIpVersion | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1 |
|
qtechUrpfIfIpVersion
|
Enumeration | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1.1 |
|
qtechUrpfIfDrops
|
packetsSNMPv2-SMICounter32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1.2 |
|
qtechUrpfIfDropRate
|
packets/secondSNMPv2-SMIGauge32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.2.2.1.3 |
|
qtechUrpfInterfaceConfig
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0.3 |
|
|
qtechUrpfIfConfTable
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1 |
|
|
qtechUrpfIfConfEntry
|
.1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1 |
|
|
qtechUrpfIfCheckStrict
|
Enumeration | .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.1 |
|
qtechUrpfIfDropRateNotifyEnable
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.2 |
|
qtechUrpfIfNotifyDropRateThreshold
r/w
|
packets/secondUnsigned32 | .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.3 |
|
qtechUrpfIfNotifyDrHoldDownReset
r/w
|
SNMPv2-TCTruthValue | .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.4 |
|
qtechUrpfIfWhichRouteTableID
|
Enumeration | .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.5 |
|
qtechUrpfIfVrfName
|
OctetString | .1.3.6.1.4.1.27514.1.1.10.2.46.0.3.1.1.6 |
|
qtechUrpfMIBNotifs
|
.1.3.6.1.4.1.27514.1.1.10.2.46.1 |
|
|
qtechUrpfMIBConformance
|
.1.3.6.1.4.1.27514.1.1.10.2.46.2 |
|
|
qtechUrpfMIBCompliances
|
.1.3.6.1.4.1.27514.1.1.10.2.46.2.1 |
|
|
qtechUrpfMIBGroups
|
.1.3.6.1.4.1.27514.1.1.10.2.46.2.2 |
Notifications / Traps (1)
| Name | OID | Description |
|---|---|---|
qtechUrpfIfDropRateNotify
|
.1.3.6.1.4.1.27514.1.1.10.2.46.1.1 |
This notification is generated when
qtechUrpfIfDropRateNotifyEnable is set to true and
the calculated URPF drop rate (qtechUrpfIfDropRate)
exceeds the notification threshold drop rate
(qtechUrpfIfNotifyDropRateThreshold). Note the
exceptional value of 0 for threshold allows notification
generation if any drop events occur in an interval.
After generating this notification, another such
notification will not be sent out for a minimum of five
minutes (note the exception to this provided by
qtechUrpfIfNotifyDrHoldDownReset).
The object value present in the notification is the
the drop rate that exceeded the threshold.
|