Avaya G430 - Page 57

Done!
//identify an SNMP trap recipient, activating the security notification
filter:
Gxxx-001(super)# snmp-server host 5.5.5.2 traps v3 noauth MSS security
Done!
//view the SNMP configuration
Gxxx-001(super)# show snmp
Authentication trap disabled
Community-Access Community-String
---------------- ----------------
read-only *****
read-write *****
SNMPv3 Notifications Status
-----------------------------
Traps: Enabled
Informs: Enabled Retries: 3 Timeout: 3 seconds
SNMP-Rec-Address Model Level Notification Trap/Inform User name
---------------- ----- ------- --------------- -----------
-------------------
5.5.5.2 v3 noauth all trap MSS
UDP port: 162
3. Use the set mss-notification rate command to modify the MSS reporting
rate, if necessary.
The default is 300 seconds. The Branch Gateway counts events for each DoS class
for the duration of the interval. At the end of each interval, if the count of each class
of DoS events surpasses a defined threshold, the Branch Gateway generates an
MSS notification, reporting on the event type, event parameters, and the number of
occurrences. To display the current MSS reporting rate, use the show mss-
notification rate command.
4. Ensure that INADS reporting is configured on the active MGC.
For information about configuring INADS reporting in Avaya Aura
®
Communication
Manager, see Avaya Aura
®
Communication Manager documentation.
DoS attack classifications
Traffic patterns meeting the DoS attack classifications are automatically reported in MSS
notifications.
DoS Attack
Description
LAND_ATTACK Land attack packets with the source IP the
same as an IP address
TCP_URGENT_ATTACK TCP packets with the URGENT option set
ICMP_RATE_LIMIT ICMP (echo) requests exceeding a pre-defined
rate
SMURF_ATTACK ICMP echo packets with limited broadcast
destination address
Special security features
Administering Avaya G430 Branch Gateway October 2013 57