ALCATEL-ENT1-NETSEC-MIB
104 objects
This module describes an authoritative enterprise-specific Simple Network Management Protocol (SNMP) Management Information Base (MIB): For the Birds Of Prey Product Line Configuration and monitoring of the EtherBreaker feature. The right to make changes in specification and other information contained in this document without prior notice is reserved. No liability shall be assumed for any incidental, indirect, special, or consequential damages whatsoever arising from or related to this document or the information contained herein. Vendors, end-users, and other interested parties are granted non-exclusive license to use this specification in connection with management of the products for which it is intended to be used. Copyright (C) 1995-2007 Alcatel-Lucent ALL RIGHTS RESERVED WORLDWIDE
Imported Objects
| ALCATEL-ENT1-BASE | softentIND1NetSec |
| IF-MIB | InterfaceIndex |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Integer32 MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-IDENTITY OBJECT-TYPE |
| SNMPv2-TC | RowStatus TEXTUAL-CONVENTION TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.6486.801.1.2.1.48.1 | IdentityalcatelIND1NETSECMIB | This module describes an authoritative enterprise-specific Simple Network Management Protocol (SNMP) Management Information Base (MIB): For the Birds Of Prey P… | ||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.0 | IdentityalcatelIND1NETSECMIBNotifications | current | Branch For NETSEC MIB Subsystem Notifications. | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.0.1 | NotificationalaNetSecPortTrapAnomaly | current | Trap for an anomaly detected on a port. | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.0.2 | NotificationalaNetSecPortTrapQuarantine | current | Trap for an anomalous port quarantine. | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1 | NodealcatelIND1NETSECMIBObjects | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.1 | NodealaNetSecPortRangeConfig | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.1.1 | TablealaNetSecPortRangeGroupTable | not-accessible | current | Table for collecting port-range and monitoring-group associations. A port belongs to at most one monitoring-group. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.1.1.1 | RowalaNetSecPortRangeGroupEntry | not-accessible | current | Each entry is identified by a unique port-range. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.1.1.1.1 | ColumnalaNetSecPortRangeGroupStartIfId | not-accessible | current | Starting interface index of a port-range |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.1.1.1.2 | ColumnalaNetSecPortRangeGroupEndIfId | not-accessible | current | Ending interface index of a port-range |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.1.1.1.3 | ColumnalaNetSecPortRangeGroupName | read-create | current | Name of monitoring-group with which this port-range is associated. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.1.1.1.4 | ColumnalaNetSecPortRangeGroupRowStatus | read-create | current | identifies state of this entry. CREATEANDGO will only work, if the name of alaNetSecPortRangeGroupName is part of the create request |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2 | NodealaNetSecMonitoringGroupConfig | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1 | TablealaNetSecMonitoringGroupTable | not-accessible | current | Table for collecting monitoring-groups' anomaly configurations |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1 | RowalaNetSecMonitoringGroupEntry | not-accessible | current | Each entry identifies configuration of a monitoring-group's anomaly-type's parameter |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.1 | ColumnalaNetSecMonitoringGroupName | not-accessible | current | name of the monitoring-group |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.2 | ColumnalaNetSecMonitoringGroupAnomaly | not-accessible | current | monitoring-group's anomaly-type |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.3 | ColumnalaNetSecMonitoringGroupAnomalyState | read-create | current | State of detecting indexed anomaly. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.4 | ColumnalaNetSecMonitoringGroupAnomalyLog | read-create | current | State of logging upon detecting anomaly. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.5 | ColumnalaNetSecMonitoringGroupAnomalyTrap | read-create | current | State of sending traps upon detecting anomaly. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.6 | ColumnalaNetSecMonitoringGroupAnomalyQuarantine | read-create | current | State of Quarantining anomalous port upon detecting anomaly. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.7 | ColumnalaNetSecMonitoringGroupAnomalyCount | read-create | current | Count of packets that must be seen during monitoring period to initiate anomaly detection check. Default value varies as below with anomaly: Anomaly Count ARP … |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.8 | ColumnalaNetSecMonitoringGroupAnomalySensitivity | read-create | current | Sensitivity of Anomaly Check to deviation from expected behavior. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.9 | ColumnalaNetSecMonitoringGroupAnomalyPeriod | read-create | current | Time in seconds to monitor packets before checking for anomaly. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.2.1.1.10 | ColumnalaNetSecMonitoringGroupRowStatus | read-create | current | CREATEANDGO will only work if, besides RowStatus, at least one of State, Log, Trap, Quarantine, Count, Sensitivity or Period is part of the request. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3 | NodealaNetSecPortStats | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1 | TablealaNetSecPortStatsTable | not-accessible | current | Table for reporting port specific statistics |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1.1 | RowalaNetSecPortStatsEntry | not-accessible | current | Stats are collected on a <port,packet-type,packet-direction,total/last> basis |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1.1.1 | ColumnalaNetSecPortStatsIfId | not-accessible | current | Interface Index of the port |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1.1.2 | ColumnalaNetSecPortStatsPacket | not-accessible | current | Packet type |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1.1.3 | ColumnalaNetSecPortStatsLastIngress | read-only | current | Count of Indexed Ingress packets observed during last 5 seconds |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1.1.4 | ColumnalaNetSecPortStatsLastEgress | read-only | current | Count of Indexed Egress packets observed during last 5 seconds |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1.1.5 | ColumnalaNetSecPortStatsTotalIngress | read-only | current | Count of Indexed Ingress packets observed since monitoring was enabled, Counter will loop back from zero upon reaching the maximum |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.3.1.1.6 | ColumnalaNetSecPortStatsTotalEgress | read-only | current | Count of Indexed Egress packets observed since monitoring was enabled. Counter will loop back from zero upon reaching the maximum |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4 | NodealaNetSecPortAnomalyStats | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1 | TablealaNetSecPortAnomalyStatsTable | not-accessible | current | Table for reporting Anomaly statistics |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1 | RowalaNetSecPortAnomalyStatsEntry | not-accessible | current | Stats are collected on a <port,anomaly-type,packet-type,packet-direction,current/last> basis |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1.1 | ColumnalaNetSecPortAnomalyStatsIfId | not-accessible | current | Interface Index of the port |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1.2 | ColumnalaNetSecPortAnomalyStatsAnomaly | not-accessible | current | Anomaly type |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1.3 | ColumnalaNetSecPortAnomalyStatsPacket | not-accessible | current | Packet type |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1.4 | ColumnalaNetSecPortAnomalyStatsCurrentIngress | read-only | current | Count of Indexed packets ingress during current monitoring period. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1.5 | ColumnalaNetSecPortAnomalyStatsCurrentEgress | read-only | current | Count of Indexed packets egress during current monitoring period. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1.6 | ColumnalaNetSecPortAnomalyStatsLastIngress | read-only | current | Count of Indexed packets ingress during last monitoring period. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.4.1.1.7 | ColumnalaNetSecPortAnomalyStatsLastEgress | read-only | current | Count of Indexed packets egress during last monitoring period. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.5 | NodealaNetSecPortAnomalySummary | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.5.1 | TablealaNetSecPortAnomalySummaryTable | not-accessible | current | Table for reporting Anomaly summaries |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.5.1.1 | RowalaNetSecPortAnomalySummaryEntry | not-accessible | current | Summary are reported on a <port,summary-type,anomaly-type> basis |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.5.1.1.1 | ColumnalaNetSecPortAnomalySummaryIfId | not-accessible | current | Interface Index of port |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.5.1.1.2 | ColumnalaNetSecPortAnomalySummaryAnomaly | not-accessible | current | Anomaly type |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.5.1.1.3 | ColumnalaNetSecPortAnomalySummaryObserved | read-only | current | Count of observations for indexed anomaly on indexed port since monitoring was enabled. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.5.1.1.4 | ColumnalaNetSecPortAnomalySummaryDetected | read-only | current | Count of detections for indexed anomaly on indexed port since monitoring was enabled. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6 | NodealaNetSecPortOp | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1 | TablealaNetSecPortOpTable | not-accessible | current | Table for reporting port anomaly operation parameters |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1 | RowalaNetSecPortOpEntry | not-accessible | current | Each entry is identified by a unique port, and anomaly-type combination |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.1 | ColumnalaNetSecPortOpIfId | not-accessible | current | interface index of port |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.2 | ColumnalaNetSecPortOpAnomaly | not-accessible | current | anomaly-type |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.3 | ColumnalaNetSecPortOpState | read-only | current | state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.4 | ColumnalaNetSecPortOpLog | read-only | current | Logging state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.5 | ColumnalaNetSecPortOpTrap | read-only | current | Trap state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.6 | ColumnalaNetSecPortOpQuarantine | read-only | current | Quarantine state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.7 | ColumnalaNetSecPortOpCount | read-only | current | activation-count being used by netsec on the indexed object |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.8 | ColumnalaNetSecPortOpSensitivity | read-only | current | sensitivity being used by netsec on the indexed object |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.6.1.1.9 | ColumnalaNetSecPortOpPeriod | read-only | current | monitoring period being used by netsec on the indexed object |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7 | NodealaNetSecGroupOp | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1 | TablealaNetSecGroupOpTable | not-accessible | current | Table for reporting group anomaly operation parameters |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1 | RowalaNetSecGroupOpEntry | not-accessible | current | Each entry is identified by a unique group, and anomaly-type combination |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.1 | ColumnalaNetSecGroupOpName | not-accessible | current | name of the group |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.2 | ColumnalaNetSecGroupOpAnomaly | not-accessible | current | anomaly-type |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.3 | ColumnalaNetSecGroupOpState | read-only | current | state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.4 | ColumnalaNetSecGroupOpLog | read-only | current | Logging state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.5 | ColumnalaNetSecGroupOpTrap | read-only | current | Trap state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.6 | ColumnalaNetSecGroupOpQuarantine | read-only | current | Quarantine state of anomaly |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.7 | ColumnalaNetSecGroupOpCount | read-only | current | activation-count being used by netsec on the indexed object |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.8 | ColumnalaNetSecGroupOpSensitivity | read-only | current | sensitivity being used by netsec on the indexed object |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.7.1.1.9 | ColumnalaNetSecGroupOpPeriod | read-only | current | monitoring period being used by netsec on the indexed object |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.8 | NodealaNetSecGroup | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.8.1 | TablealaNetSecGroupTable | not-accessible | current | Table of groups configured |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.8.1.1 | RowalaNetSecGroupEntry | not-accessible | current | Each entry identifies a configured group |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.8.1.1.1 | ColumnalaNetSecGroupName | not-accessible | current | Name of configured group |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.8.1.1.2 | ColumnalaNetSecGroupMemberPorts | read-only | current | Yes if there are ports in this group. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.8.1.1.3 | ColumnalaNetSecGroupAnomalyCfg | read-only | current | Yes if any of this group's anomaly has a non-default configuration. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.9 | NodealaNetSecPortTrapsObj | |||
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.9.1 | ScalaralaNetSecPortTrapInfoIfId | accessible-for-notify | current | Interface index of port on which anomaly is detected |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.9.2 | ScalaralaNetSecPortTrapInfoAnomaly | accessible-for-notify | current | Type of anomaly detected on the interface |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.1.9.3 | ScalaralaNetSecPortTrapInfoType | accessible-for-notify | current | Nature of anomaly. Informs if system attached to interface is source or target of the anomaly. |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2 | IdentityalcatelIND1NETSECMIBConformance | current | Branch for NETSEC application conformance information | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1 | IdentityalcatelIND1NETSECMIBGroups | current | Branch for NETSEC application units of conformance | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.1 | GroupalaNetSecPortRangeComplianceGroup | current | Collection of objects for management at port range level | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.2 | GroupalaNetSecMonitoringGroupComplianceGroup | current | Collection of objects for management at port group level | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.3 | GroupalaNetSecPortTrapsComplianceGroup | current | Traps | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.4 | GroupalaNetSecPortStatsComplianceGroup | current | Port Statistics Collection | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.5 | GroupalaNetSecPortAnomalyStatsComplianceGroup | current | Port Anomaly Statistics Collection | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.6 | GroupalaNetSecPortAnomalySummaryComplianceGroup | current | Anomaly summary Collection | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.7 | GroupalaNetSecPortOpComplianceGroup | current | Port operation parameter value Collection | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.8 | GroupalaNetSecGroupOpComplianceGroup | current | Group operation parameter value Collection | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.9 | GroupalaNetSecGroupComplianceGroup | current | Monitoring Group port membership Collection | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.10 | GroupalaNetSecMonitoringGroupEntryGroup | current | Entry identifies configuration of a monitoring-group's anomaly-type's parameter group. | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.11 | GroupalaNetSecPortRangeGroupEntryGroup | current | Entry is identified by a unique port-range group. | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.1.12 | GroupalaNetSecPortTrapAnomalyGroup | current | Trap for an anomaly detected on a port group. | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.2 | IdentityalcatelIND1NETSECMIBCompliances | current | Branch for NETSEC application compliance statements | |
| 1.3.6.1.4.1.6486.801.1.2.1.48.1.2.2.1 | CompliancealcatelIND1NETSECMIBCompliance | current | Compliance statement for NetSec. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| AlaAnomalyType | INTEGER { all(0), arpaddressscan(1), arpflood(2), reserved(3), arpfailure(4), icmpaddressscan(5), icmpflood(6), icmpunreachable(7), tcpportscan(8), tcpaddressscan(9), synflood(10), synfailure(11), synackscan(12), finscan(13), finackdiff(14), rstcount(15)} | current | Types of anomalies being configured or monitored |
| AlaNetsecStatus | INTEGER { default (0), enable (1), disable (2) } | current | State of polar variables. |
| AlaPacketType | INTEGER { arpreply (1), arprequest (2), icmpechoreply (3), icmpechorequest (4), icmpdnr (5), tcpsynonly (6), tcpsynack (7), tcpsynnack (8), tcpfinack (9), tcpfinnack (10), tcprst (11) } | current | Types of packets being monitored |