13-Security

HomeSupportSwitchesS9820 SeriesReference GuidesMIB CompanionH3C S9820-8C MIB Companion-Release 6715-6W10013-Security
06-HH3C-PORTATK-TRAP-MIB
Title Size Download
06-HH3C-PORTATK-TRAP-MIB 139.73 KB

HH3C-PORTATK-TRAP-MIB

About this MIB

Use this table to configure port attack notifications.

MIB file name

hh3c-portatk-trap.mib

Root object

iso(1).org(3).dod(6).internet(1).private(4).enterprises(1).hh3c(25506).hh3cCommon(2).hh3cPortAtkTrap(250)

Scalar objects

hh3cPortAtkTrapPacketIf

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cPortAtkTrapPacketIf (1.3.6.1.4.1.25506.2.250.1.1)

accessible-for-notify

OCTET STRING

OCTET STRING  (1..47)

Interface name

As per the MIB.

 

hh3cPortAtkTrapPacketType

Object (OID)

Access

Syntax

Value range

Description

Implementation

hh3cPortAtkTrapPacketType (1.3.6.1.4.1.25506.2.250.1.2)

accessible-for-notify

INTEGER

isis(1)

esis(2)

clnp(3)

vrrp(4)

unknownIpv4Mc(5)

unknownIpv6Mc(6)

ipv4McastRip(7)

ipv4BcastRip(8)

mcastNtp(9)

bcastNtp(10)

ipv4McastOspfDip5(11)

ipv4McastOspfDip6(12)

ipv4UcastOspf(13)

ipv4McastPim(14)

ipv4UcastPim(15)

ipv4Igmp(16)

ucastLdp(17)

ipv6McastPim(18)

ipv6UcastPim(19)

ipv6Mld(20)

ipv6Ripng(21)

ipv6UcastOspfv3(22)

ipv6McastOspfv3Dip5(23)

ipv6McastOspfv3Dip6(24)

ipv6Ldp(25)

ipv6Vrrp(26)

rrpp(27)

ipv4Autorp(28)

dot1x(29)

stp(30)

lacp(31)

gvrp(32)

hgmp(33)

ucastBgp(34)

ucastIcmp(35)

ucastTtl(36)

ucastIpOption(37)

ipv6Bgp(38)

ipv6NdPass(39)

ipv6NdDest(40)

lldp(41)

dldp(42)

bpduTunnelDmac3(43)

bpduTunnelDmac0(44)

bpduTunnelDmac1(45)

bpduTunnelDmac2(46)

msdp(47)

telnetSsh(48)

httpHttps(49)

snmp(50)

smlk(51)

dot1ag(52)

cdp(53)

acsei(54)

ucastNtp(55)

md(56)

ipv4UcDhcp(57)

ipv4UcOspfTtl(58)

ipv4UcPimTtl(59)

ipv6Icmp(60)

gmrp(61)

pvst(62)

oam(63)

hgmpBc(64)

eapolBridgemac(65)

wpiBridgemac(66)

cfdBridgemac(67)

hgmpBridgemac(68)

acseiBridgemac(69)

ipv6DhcpUcClient(70)

ipv6DhcpUcRelay(71)

l2Stationmove(72)

icmpRdm(73)

ipv6CpudstCar(74)

ptp(75)

fcoeFipUc(76)

fcoeToCpu(77)

ipv6UcastRtrenum(78)

ipv6McastRtrenum(79)

ipv6UcastNtp(80)

ipv6McastNtp(81)

trillAllisis(82)

drcp(83)

rlinkHigh(84)

rlinkMiddle(85)

vdp(86)

ipv4McastCbt(87)

arp(88)

arpReply(89)

ipv6Ttl(90)

ipv6Ping(91)

snapCis(92)

macBasevlan(93)

trillStp(94)

routeToCpuMask(95)

spbm(96)

ipv6IpOption(97)

ipv4UcBgpTtl(98)

dhcpClient(99)

dhcpServer(100)

dhcpRelayClient(101)

dhcpRelayServer(102)

ipv6Dhcp(103)

ipv6DhcpClient(104)

ipv6DhcpServer(105)

ipv6DhcpRelayServer(106)

bfdEcho(107)

bfdCtrl(108)

bfdMultihop(109)

bfdIntfCtrl(110)

lspPing(111)

loopbackDetection(112)

loopTest(113)

ipv6TelnetSsh(114)

mplsRsvp(115)

rrppFd(116)

ptpUdp(117)

ofpMiss(118)

ofpMatch(119)

ofpDevconfTtl(120)

ofpMacipMiss(121)

ftpCtrl(122)

vxlanUdp(123)

capwap(124)

rlinkextNormal(125)

rlinkextMiddle(126)

rlinkextHigh(127)

ipv4Siph225(128)

ipv4Siph245(129)

typeErps(130)

esmc(131)

rlinkNormal(132)

onvifv4(133)

onvifv6(134)

ipv4Sip(135)

twamp(136)

pppoe(137)

ipv6RaGuard(138)

tcpToCpuLow(139)

ipv4BcmpServer(140)

wlanAcToCpu(141)

lwappAcToCpu(142)

smartmcUc(143)

smartmcBc(144)

rlinkLow(145)

drniUdp(146)

sipSnooping(147)

douPsg(148)

h323Snooping(149)

mdns(150)

erps(151)

sadp(152)

dhcpProtectionClient(153)

dhcpProtectionServer(154)

bfdMultihopVxlan(155)

rarp(156)

inof(157)

inofMobile(158)

ipv6UcBgpTtl(159)

ipv4McastOspf5High(160)

ipv4McastOspf6High(161)

ipv6Drcp(162)

l2ptusr(163)

rarpReply(164)

Packet type

As per the MIB.

 

Notifications

hh3cPortAtkTrapPtkAlarm

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.250.0.1

A port attack alarm notification was sent to the SNMP module.

Error

Major

1.3.6.1.4.1.25506.2.250.0.2(hh3cPortAtkTrapPtkResume)

OFF

 

Notification triggers

This notification is generated when the number of received packets of a specific type exceeds the threshold.

System impact

When the number of received packets of a specific type exceeds the threshold, the device drops the packets that exceed the threshold, which might affect services.

Status control

ON

CLI: Use the snmp-agent trap enable port-attack command.

OFF

CLI: Use the undo snmp-agent trap enable port-attack command.

Objects

OID (object name)

Description

Index nodes

Type

Value range

1.3.6.1.4.1.25506.2.250.1.1 (hh3cPortAtkTrapPacketIf)

Interface name.

N/A

OCTET STRING

OCTET STRING  (1..47)

1.3.6.1.4.1.25506.2.250.1.2 (hh3cPortAtkTrapPacketType)

Packet type.

N/A

INTEGER

isis(1)

esis(2)

clnp(3)

vrrp(4)

unknownIpv4Mc(5)

unknownIpv6Mc(6)

ipv4McastRip(7)

ipv4BcastRip(8)

mcastNtp(9)

bcastNtp(10)

ipv4McastOspfDip5(11)

ipv4McastOspfDip6(12)

ipv4UcastOspf(13)

ipv4McastPim(14)

ipv4UcastPim(15)

ipv4Igmp(16)

ucastLdp(17)

ipv6McastPim(18)

ipv6UcastPim(19)

ipv6Mld(20)

ipv6Ripng(21)

ipv6UcastOspfv3(22)

ipv6McastOspfv3Dip5(23)

ipv6McastOspfv3Dip6(24)

ipv6Ldp(25)

ipv6Vrrp(26)

rrpp(27)

ipv4Autorp(28)

dot1x(29)

stp(30)

lacp(31)

gvrp(32)

hgmp(33)

ucastBgp(34)

ucastIcmp(35)

ucastTtl(36)

ucastIpOption(37)

ipv6Bgp(38)

ipv6NdPass(39)

ipv6NdDest(40)

lldp(41)

dldp(42)

bpduTunnelDmac3(43)

bpduTunnelDmac0(44)

bpduTunnelDmac1(45)

bpduTunnelDmac2(46)

msdp(47)

telnetSsh(48)

httpHttps(49)

snmp(50)

smlk(51)

dot1ag(52)

cdp(53)

acsei(54)

ucastNtp(55)

md(56)

ipv4UcDhcp(57)

ipv4UcOspfTtl(58)

ipv4UcPimTtl(59)

ipv6Icmp(60)

gmrp(61)

pvst(62)

oam(63)

hgmpBc(64)

eapolBridgemac(65)

wpiBridgemac(66)

cfdBridgemac(67)

hgmpBridgemac(68)

acseiBridgemac(69)

ipv6DhcpUcClient(70)

ipv6DhcpUcRelay(71)

l2Stationmove(72)

icmpRdm(73)

ipv6CpudstCar(74)

ptp(75)

fcoeFipUc(76)

fcoeToCpu(77)

ipv6UcastRtrenum(78)

ipv6McastRtrenum(79)

ipv6UcastNtp(80)

ipv6McastNtp(81)

trillAllisis(82)

drcp(83)

rlinkHigh(84)

rlinkMiddle(85)

vdp(86)

ipv4McastCbt(87)

arp(88)

arpReply(89)

ipv6Ttl(90)

ipv6Ping(91)

snapCis(92)

macBasevlan(93)

trillStp(94)

routeToCpuMask(95)

spbm(96)

ipv6IpOption(97)

ipv4UcBgpTtl(98)

dhcpClient(99)

dhcpServer(100)

dhcpRelayClient(101)

dhcpRelayServer(102)

ipv6Dhcp(103)

ipv6DhcpClient(104)

ipv6DhcpServer(105)

ipv6DhcpRelayServer(106)

bfdEcho(107)

bfdCtrl(108)

bfdMultihop(109)

bfdIntfCtrl(110)

lspPing(111)

loopbackDetection(112)

loopTest(113)

ipv6TelnetSsh(114)

mplsRsvp(115)

rrppFd(116)

ptpUdp(117)

ofpMiss(118)

ofpMatch(119)

ofpDevconfTtl(120)

ofpMacipMiss(121)

ftpCtrl(122)

vxlanUdp(123)

capwap(124)

rlinkextNormal(125)

rlinkextMiddle(126)

rlinkextHigh(127)

ipv4Siph225(128)

ipv4Siph245(129)

typeErps(130)

esmc(131)

rlinkNormal(132)

onvifv4(133)

onvifv6(134)

ipv4Sip(135)

twamp(136)

pppoe(137)

ipv6RaGuard(138)

tcpToCpuLow(139)

ipv4BcmpServer(140)

wlanAcToCpu(141)

lwappAcToCpu(142)

smartmcUc(143)

smartmcBc(144)

rlinkLow(145)

drniUdp(146)

sipSnooping(147)

douPsg(148)

h323Snooping(149)

mdns(150)

erps(151)

sadp(152)

dhcpProtectionClient(153)

dhcpProtectionServer(154)

bfdMultihopVxlan(155)

rarp(156)

inof(157)

inofMobile(158)

ipv6UcBgpTtl(159)

ipv4McastOspf5High(160)

ipv4McastOspf6High(161)

ipv6Drcp(162)

l2ptusr(163)

rarpReply(164)

 

Recommended action

To resolve this issue:

1.     Identify the dropped packet type by the notification.

2.     If the dropped packets affect services, expand the device capacity.

3.     If the issue persists, collect log messages and configuration data, and then contact H3C Support for help.

hh3cPortAtkTrapPtkResume

Basic information

OID

Event

Type

Severity

Recovery notification

Default status

1.3.6.1.4.1.25506.2.250.0.2

A port attack alarm was cleared.

Recovery

Major

N/A

OFF

 

Notification triggers

This notification is generated when the number of received packets of a specific type drops below the threshold.

System impact

No negative impact on the system.

Status control

ON

CLI: Use the snmp-agent trap enable port-attack command.

OFF

CLI: Use the undo snmp-agent trap enable port-attack command.

Objects

OID (object name)

Description

Index nodes

Type

Value range

1.3.6.1.4.1.25506.2.250.1.1 (hh3cPortAtkTrapPacketIf)

Interface name.

N/A

OCTET STRING

OCTET STRING  (1..47)

1.3.6.1.4.1.25506.2.250.1.2 (hh3cPortAtkTrapPacketType)

Packet type.

N/A

INTEGER

isis(1)

esis(2)

clnp(3)

vrrp(4)

unknownIpv4Mc(5)

unknownIpv6Mc(6)

ipv4McastRip(7)

ipv4BcastRip(8)

mcastNtp(9)

bcastNtp(10)

ipv4McastOspfDip5(11)

ipv4McastOspfDip6(12)

ipv4UcastOspf(13)

ipv4McastPim(14)

ipv4UcastPim(15)

ipv4Igmp(16)

ucastLdp(17)

ipv6McastPim(18)

ipv6UcastPim(19)

ipv6Mld(20)

ipv6Ripng(21)

ipv6UcastOspfv3(22)

ipv6McastOspfv3Dip5(23)

ipv6McastOspfv3Dip6(24)

ipv6Ldp(25)

ipv6Vrrp(26)

rrpp(27)

ipv4Autorp(28)

dot1x(29)

stp(30)

lacp(31)

gvrp(32)

hgmp(33)

ucastBgp(34)

ucastIcmp(35)

ucastTtl(36)

ucastIpOption(37)

ipv6Bgp(38)

ipv6NdPass(39)

ipv6NdDest(40)

lldp(41)

dldp(42)

bpduTunnelDmac3(43)

bpduTunnelDmac0(44)

bpduTunnelDmac1(45)

bpduTunnelDmac2(46)

msdp(47)

telnetSsh(48)

httpHttps(49)

snmp(50)

smlk(51)

dot1ag(52)

cdp(53)

acsei(54)

ucastNtp(55)

md(56)

ipv4UcDhcp(57)

ipv4UcOspfTtl(58)

ipv4UcPimTtl(59)

ipv6Icmp(60)

gmrp(61)

pvst(62)

oam(63)

hgmpBc(64)

eapolBridgemac(65)

wpiBridgemac(66)

cfdBridgemac(67)

hgmpBridgemac(68)

acseiBridgemac(69)

ipv6DhcpUcClient(70)

ipv6DhcpUcRelay(71)

l2Stationmove(72)

icmpRdm(73)

ipv6CpudstCar(74)

ptp(75)

fcoeFipUc(76)

fcoeToCpu(77)

ipv6UcastRtrenum(78)

ipv6McastRtrenum(79)

ipv6UcastNtp(80)

ipv6McastNtp(81)

trillAllisis(82)

drcp(83)

rlinkHigh(84)

rlinkMiddle(85)

vdp(86)

ipv4McastCbt(87)

arp(88)

arpReply(89)

ipv6Ttl(90)

ipv6Ping(91)

snapCis(92)

macBasevlan(93)

trillStp(94)

routeToCpuMask(95)

spbm(96)

ipv6IpOption(97)

ipv4UcBgpTtl(98)

dhcpClient(99)

dhcpServer(100)

dhcpRelayClient(101)

dhcpRelayServer(102)

ipv6Dhcp(103)

ipv6DhcpClient(104)

ipv6DhcpServer(105)

ipv6DhcpRelayServer(106)

bfdEcho(107)

bfdCtrl(108)

bfdMultihop(109)

bfdIntfCtrl(110)

lspPing(111)

loopbackDetection(112)

loopTest(113)

ipv6TelnetSsh(114)

mplsRsvp(115)

rrppFd(116)

ptpUdp(117)

ofpMiss(118)

ofpMatch(119)

ofpDevconfTtl(120)

ofpMacipMiss(121)

ftpCtrl(122)

vxlanUdp(123)

capwap(124)

rlinkextNormal(125)

rlinkextMiddle(126)

rlinkextHigh(127)

ipv4Siph225(128)

ipv4Siph245(129)

typeErps(130)

esmc(131)

rlinkNormal(132)

onvifv4(133)

onvifv6(134)

ipv4Sip(135)

twamp(136)

pppoe(137)

ipv6RaGuard(138)

tcpToCpuLow(139)

ipv4BcmpServer(140)

wlanAcToCpu(141)

lwappAcToCpu(142)

smartmcUc(143)

smartmcBc(144)

rlinkLow(145)

drniUdp(146)

sipSnooping(147)

douPsg(148)

h323Snooping(149)

mdns(150)

erps(151)

sadp(152)

dhcpProtectionClient(153)

dhcpProtectionServer(154)

bfdMultihopVxlan(155)

rarp(156)

inof(157)

inofMobile(158)

ipv6UcBgpTtl(159)

ipv4McastOspf5High(160)

ipv4McastOspf6High(161)

ipv6Drcp(162)

l2ptusr(163)

rarpReply(164)

 

Recommended action

No action is required.

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us