sitesec.DoSProtection (NSP Network Functions Manager

sitesec
DoSProtection

Defines a DoS Protection Policy. This policy is used to guard against DoS attacks using unprovisioned protocols. It is also used to guard against DoS attacks when acting as a Subscriber Aggregation device.

Inheritance Hierarchy
- ManagedObject
  - policy.PolicyObject
    - policy.PolicyDefinition
      - sitesec. DoSProtection

Parent Hierarchy
- netw.Network
  - netw.NetworkElement
    - policy.Manager [NE DoS Protection]
      - sitesec.DoSProtection [[network]:[${systemAddress}]:[$%{policyTypeManaged}]:[${*id}]]
- parent []
  - sitesec.DoSProtection [[backup-${policyTypeManaged}]:[${*id}]]
- policy.Manager [NE DoS Protection]
  - sitesec.DoSProtection [[$%{policyTypeManaged}]:[${*id}]]

Children Hierarchy
- sitesec.DoSProtection
  - sitesec.CfmRateLimiting

Relationships
- sitesec.DoSProtection may be associated with many ies.MSaps (implied relationship)
- sitesec.DoSProtection may be associated with many msappolicy.Policys (implied relationship)
- many sitesec.DoSProtections may be direct children of one policy.Manager (child-parent relationship)
- sitesec.DoSProtection may be associated with many rtr.NetworkInterfaces (implied relationship)
- sitesec.DoSProtection may be associated with many service.L2AccessInterfaces (implied relationship)
- sitesec.DoSProtection may be associated with many service.L3AccessInterfaces (implied relationship)
- sitesec.DoSProtection may be associated with many service.ServiceAccessPoints (implied relationship)
- sitesec.DoSProtection may be associated with many service.VideoInterfaces (implied relationship)
- one sitesec.DoSProtection may be a direct parent of many sitesec.CfmRateLimitings (parent-child relationship)
- many sitesec.DoSProtections may be associated with sitesec.DoSProtection (implied relationship)
- sitesec.DoSProtection may be associated with many sitesec.DoSProtections (implied relationship)
- sitesec.DoSProtection may be associated with many svt.MeshSdpBindings (implied relationship)
- sitesec.DoSProtection may be associated with many svt.SpokeSdpBindings (implied relationship)
- sitesec.DoSProtection may be associated with many vpls.MSaps (implied relationship)
- sitesec.DoSProtection may be associated with many vprn.MSaps (implied relationship)
- sitesec.DoSProtection may be associated with many vprn.NetworkInterfaces (implied relationship)

DoSProtection

Relative Name=[[${*id}]]

Displayed Name=DoS Protection Policy

Properties
limDhcpCiAddrZero	Specifies whether or not to apply per-source rate limiting to DHCP packets containing Client IP address zero. type=generic.TruthValue default=false Displayed(tab/group)=Rate Limit DHCP Packets
outProfRateLogEvnt	Controls the generation of log-events when the out-profile-rate specified by outProfileRate is exceeded. type=generic.TruthValue default=false Displayed(tab/group)=Out Profile Rate Log Event
outProfileRate	Specifies the threshold value at which incoming control packets are marked out of profile. type=long default=3000 minimum=-1 maximum=65534 units=pps Displayed(tab/group)=Out Profile Rate
overallRateLimit	Specifies the overall packet arrival rate limit to be applied to all sources of packets. It is done on a SAP/Interface basis. type=long default=6000 minimum=-1 maximum=65534 units=pps Displayed(tab/group)=Overall Rate Limit
packetRateLimit	Specifies the packet arrival rate limit to be applied to each source (MAC/Subscriber) of packets. type=long default=-1 minimum=-1 maximum=65534 units=pps Displayed(tab/group)=Packet Rate Limit
polAlarm	Specifies if a notification must be issued when one of the packet arrival rate limits is crossed. type=generic.TruthValue default=true Displayed(tab/group)=Receive Notification
sitesec.CfmRateLimiting-Set	type=Children-Set

Properties

limDhcpCiAddrZero

Specifies whether or not to apply per-source rate limiting to DHCP packets containing Client IP address zero.

type=generic.TruthValue
default=false
Displayed(tab/group)=Rate Limit DHCP Packets

outProfRateLogEvnt

Controls the generation of log-events when the out-profile-rate specified by outProfileRate is exceeded.

type=generic.TruthValue
default=false
Displayed(tab/group)=Out Profile Rate Log Event

outProfileRate

Specifies the threshold value at which incoming control packets are marked out of profile.

type=long
default=3000
minimum=-1
maximum=65534
units=pps
Displayed(tab/group)=Out Profile Rate

overallRateLimit

Specifies the overall packet arrival rate limit to be applied to all sources of packets. It is done on a SAP/Interface basis.

type=long
default=6000
minimum=-1
maximum=65534
units=pps
Displayed(tab/group)=Overall Rate Limit

packetRateLimit

Specifies the packet arrival rate limit to be applied to each source (MAC/Subscriber) of packets.

type=long
default=-1
minimum=-1
maximum=65534
units=pps
Displayed(tab/group)=Packet Rate Limit

polAlarm

Specifies if a notification must be issued when one of the packet arrival rate limits is crossed.

type=generic.TruthValue
default=true
Displayed(tab/group)=Receive Notification

sitesec.CfmRateLimiting-Set

type=Children-Set

Overridden Properties
id	ID. minimum=1 maximum=255

Overridden Properties

ID.

minimum=1
maximum=255

Properties inherited from policy.PolicyDefinition
configurationAction, configurationMode, discoveryState, displayedName, distributionMode, isMaster, lastSyncTime, numberOfUnderlyingPolicyItems, origin, policyMode, policySyncGroupPointer, policyType

Properties inherited from policy.PolicyDefinition

configurationAction, configurationMode, discoveryState, displayedName, distributionMode, isMaster, lastSyncTime, numberOfUnderlyingPolicyItems, origin, policyMode, policySyncGroupPointer, policyType

Properties inherited from policy.PolicyObject
description, displayedName, globalPolicy, id, isLocal, policyType, siteId, siteName, templateObject

Properties inherited from policy.PolicyObject

description, displayedName, globalPolicy, id, isLocal, policyType, siteId, siteName, templateObject

Properties inherited from ManagedObject
actionMask, children-Set, deploymentState, isFaultSquelched, name, objectFullName, selfAlarmed

Properties inherited from ManagedObject

actionMask, children-Set, deploymentState, isFaultSquelched, name, objectFullName, selfAlarmed

Methods inherited from policy.PolicyDefinition
distribute, distributeUsingGroups, distributeV2, evaluatePolicy, findGlobal, findLocal, findReleased, getSyncTaskResult, resetToReleasedPolicy, setConfigurationModeToDraft, setConfigurationModeToReleased, setDistributionModeToLocalEditOnly, setDistributionModeToSyncWithGlobal, syncTo, syncToLocalWithResync

Methods inherited from policy.PolicyDefinition

distribute, distributeUsingGroups, distributeV2, evaluatePolicy, findGlobal, findLocal, findReleased, getSyncTaskResult, resetToReleasedPolicy, setConfigurationModeToDraft, setConfigurationModeToReleased, setDistributionModeToLocalEditOnly, setDistributionModeToSyncWithGlobal, syncTo, syncToLocalWithResync

Supported Network Elements
7750 SR	Supported for all versions Excluded chassis types: 7750-SRa4, 7750-SRa8, 7750-SR1 Fixed CFM, 7750-SRc12, 7750-SR1, 7750-SRc4, 7750 SR-1e, 7750 SR-2e, 7750 SR-3e, 7705 SAR-Hm, VSR, VSR-I, 7750 SR-1s, 7750 SR-2s, 7750 SR-1x-48D, 7750 SR-1-48D, 7750 SR-1-24D, 7750 SR-1x-92S, 7750 SR-1-92S, 7750 SR-1-46S, 7750 SR-1se, 7750 SR-2se
7705 SAR Hm	Supported for all versions Excluded chassis types: 7705 SAR-Hm, 7705 SAR-Hmc
7701 CPAA
7450 ESS	Supported for all versions Excluded chassis types: 7450-ESS1
7950 XRS
Product Specifics
7450 ESS 20.0	Warning: iframes not supported by this browser.
7450 ESS 21.0
7450 ESS 22.0
7450 ESS 23.0
7450 ESS 24.0
7450 ESS 25.0
7750 SR 20.0
7750 SR 21.0
7750 SR 22.0
7750 SR 23.0
7750 SR 24.0
7750 SR 25.0
7950 XRS 20.0
7950 XRS 21.0
7950 XRS 22.0
7950 XRS 23.0
7950 XRS 24.0
7950 XRS 25.0

Supported Network Elements

7750 SR

Supported for all versions

Excluded chassis types: 7750-SRa4, 7750-SRa8, 7750-SR1 Fixed CFM, 7750-SRc12, 7750-SR1, 7750-SRc4, 7750 SR-1e, 7750 SR-2e, 7750 SR-3e, 7705 SAR-Hm, VSR, VSR-I, 7750 SR-1s, 7750 SR-2s, 7750 SR-1x-48D, 7750 SR-1-48D, 7750 SR-1-24D, 7750 SR-1x-92S, 7750 SR-1-92S, 7750 SR-1-46S, 7750 SR-1se, 7750 SR-2se

7705 SAR Hm

Supported for all versions