hm2DosMitigationTcpMinimalHeaderSize
HM2-DOS-MITIGATION-MIB ·
.1.3.6.1.4.1.248.11.82.1.1.1.11
Object
scalar
r/w
Unsigned32
Specifies the minimum size of a valid TCP frame header size.
Context
- MIB
- HM2-DOS-MITIGATION-MIB
- OID
.1.3.6.1.4.1.248.11.82.1.1.1.11- Type
- scalar
- Access
- readwrite
- Status
- current
- Parent
- hm2DosMitigationTcpHdrChecks
- Siblings
- 8
Syntax
Unsigned32
Values & Constraints
Object Constraints
range: 20-255
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| hm2DosMitigationTcpNullScan When enabled, TCP Null scans (TCP flags and sequence number
set to 0) are filtered by the device. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.1 |
| hm2DosMitigationTcpMinimalHeader When enabled all TCP frames are checked for a minimal valid
header size. Packets that contain an invalid header size are
discarded. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.10 |
| hm2DosMitigationLandAttack When enabled all IP frames are checked for equality of
src and dst IP address (known as land attack). Packets that
contain such a combination are silently discarded when
enabled. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.13 |
| hm2DosMitigationTcpOffsetEqu1 Enable/Disable TCP offset DoS protection. All packets
ingress having a TCP header offset equal to 1 are dropped. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.14 |
| hm2DosMitigationTcpPrivilegedSrcPort Enable/Disable TCP SYN and L4 source port smaller than 1024
DoS protection. All packets ingress having the TCP SYN flag set
and a L4 source port from 0 to 1023 are dropped. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.15 |
| hm2DosMitigationTcpSrcDstPortEqu Enable/Disable L4 source port equals L4 destination port
DoS protection. All TCP or UDP packets ingress having the
L4 source port equal to L4 destination port are dropped. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.16 |
| hm2DosMitigationTcpXmasScan When enabled TCP Xmas scans (TCP flags FIN,
URG and PSH all set to 1 and a TCP sequence
number = 0) are filtered by the device. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.4 |
| hm2DosMitigationTcpSynFinScan When enabled TCP packets with SYN and FIN flags set are
filtered by the device. | scalar | HM2-TC-MIBHmEnabledStatus | .1.3.6.1.4.1.248.11.82.1.1.1.7 |