Defining A Dos Snmp Trap-Type - Cisco 11503 - CSS Content Services Switch Administration Manual

Configuring Denial of Service (DoS)

Defining a DoS SNMP Trap-Type

Cisco Content Services Switch Administration Guide
5-24
The following running-configuration example shows the results of entering the
commands in Table 5-2.
!*************************** GLOBAL ***************************
snmp trap-type enterprise
snmp community techpubs read-write
snmp contact "fred n mandy"
snmp location "Operations"
snmp name "arrowpoint.com"
snmp trap-host 172.16.3.6 trap
snmp trap-host 172.16.8.4 trap
snmp trap-type generic
snmp auth-traps
snmp trap-type enterprise login-failure
snmp reload-enable 100
snmp trap-type enterprise dos-illegal-attack trap-threshold 1
snmp trap-type enterprise dos-land-attack trap-threshold 1
snmp trap-type enterprise dos-smurf-attack trap-threshold 1
snmp trap-type enterprise dos-syn-attack trap-threshold 10
snmp trap-type enterprise dos-illegal-attack trap-threshold 1
To enable the CSS to generate SNMP enterprise traps when a DoS attack event
occurs, use the snmp trap-type enterprise command. One trap is generated each
second when the number of attacks during that second exceeds the threshold for
the configured DoS attack type. For details on SNMP traps (and associated MIB
objects) loaded as part of the CSS software, see the
Ensure you first enable SNMP enterprise traps using the snmp trap-type
enterprise command before you configure the CSS to generate SNMP enterprise
traps when a DoS attack event occurs. For information, see the
SNMP Enterprise Traps"
The syntax for this global configuration mode command is:
snmp trap-type enterprise dos_attack_type {trap-threshold
threshold_value}
Chapter 5 Configuring Simple Network Management Protocol (SNMP)
section.
"CSS SNMP Traps" section.
"Configuring
OL-5647-02