hm2DosMitigationLandAttack

HM2-DOS-MITIGATION-MIB · .1.3.6.1.4.1.248.11.82.1.1.1.13
MIB view Table view

Object

scalar r/w HM2-TC-MIBHmEnabledStatus 
When enabled all IP frames are checked for equality of
src and dst IP address (known as land attack). Packets that 
contain such a combination are silently discarded when
enabled.

Context

MIB
HM2-DOS-MITIGATION-MIB
OID
.1.3.6.1.4.1.248.11.82.1.1.1.13
Type
scalar
Access
readwrite
Status
current
Parent
hm2DosMitigationTcpHdrChecks
Siblings
8

Syntax

HM2-TC-MIBHmEnabledStatus
Source
HM2-TC-MIBHmEnabledStatus
Base type
Enumeration

Values & Constraints

Type Values
1enable
2disable

Related Objects

Sibling Objects
ObjectTypeSyntaxOID
hm2DosMitigationTcpNullScan
When enabled, TCP Null scans (TCP flags and sequence number set to 0) are filtered by the device.
scalarHM2-TC-MIBHmEnabledStatus.1.3.6.1.4.1.248.11.82.1.1.1.1
hm2DosMitigationTcpMinimalHeader
When enabled all TCP frames are checked for a minimal valid header size. Packets that contain an invalid header size are discarded.
scalarHM2-TC-MIBHmEnabledStatus.1.3.6.1.4.1.248.11.82.1.1.1.10
hm2DosMitigationTcpMinimalHeaderSize
Specifies the minimum size of a valid TCP frame header size.
scalarUnsigned32.1.3.6.1.4.1.248.11.82.1.1.1.11
hm2DosMitigationTcpOffsetEqu1
Enable/Disable TCP offset DoS protection. All packets ingress having a TCP header offset equal to 1 are dropped.
scalarHM2-TC-MIBHmEnabledStatus.1.3.6.1.4.1.248.11.82.1.1.1.14
hm2DosMitigationTcpPrivilegedSrcPort
Enable/Disable TCP SYN and L4 source port smaller than 1024 DoS protection. All packets ingress having the TCP SYN flag set and a L4 source port from 0 to 1023 are dropped.
scalarHM2-TC-MIBHmEnabledStatus.1.3.6.1.4.1.248.11.82.1.1.1.15
hm2DosMitigationTcpSrcDstPortEqu
Enable/Disable L4 source port equals L4 destination port DoS protection. All TCP or UDP packets ingress having the L4 source port equal to L4 destination port are dropped.
scalarHM2-TC-MIBHmEnabledStatus.1.3.6.1.4.1.248.11.82.1.1.1.16
hm2DosMitigationTcpXmasScan
When enabled TCP Xmas scans (TCP flags FIN, URG and PSH all set to 1 and a TCP sequence number = 0) are filtered by the device.
scalarHM2-TC-MIBHmEnabledStatus.1.3.6.1.4.1.248.11.82.1.1.1.4
hm2DosMitigationTcpSynFinScan
When enabled TCP packets with SYN and FIN flags set are filtered by the device.
scalarHM2-TC-MIBHmEnabledStatus.1.3.6.1.4.1.248.11.82.1.1.1.7