{ "id":"/axapi/v3/ip/anomaly-drop", "type":"object", "node-type":"scalar", "title":"anomaly-drop", "partition-visibility":"shared", "auto-created-object":1, "description":"Set IP anomaly drop policy", "properties":{ "packet-deformity":{ "type":"object", "properties":{ "packet-deformity-layer-3":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop packets with layer 3 anomaly" }, "packet-deformity-layer-4":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop packets with layer 4 anomaly" } } }, "security-attack":{ "type":"object", "properties":{ "security-attack-layer-3":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop packets with layer 3 anomaly" }, "security-attack-layer-4":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop packets with layer 4 anomaly" } } }, "bad-content":{ "type":"number", "format":"number", "minimum":1, "maximum":127, "partition-visibility":"shared", "description":"bad content threshold (threshold value)", "optional":true }, "drop-all":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop all IP anomaly packets", "optional":true }, "frag":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop all fragmented packets", "optional":true }, "ip-option":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop packets with IP options", "optional":true }, "land-attack":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop IP packets with the same source and destination addresses", "optional":true }, "out-of-sequence":{ "type":"number", "format":"number", "minimum":1, "maximum":127, "partition-visibility":"shared", "description":"out of sequence packet threshold (threshold value)", "optional":true }, "ping-of-death":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop oversize ICMP packets", "optional":true }, "tcp-no-flag":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop TCP packets with no flag", "optional":true }, "tcp-syn-fin":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop TCP packets with both syn and fin flags set", "optional":true }, "tcp-syn-frag":{ "type":"number", "format":"flag", "default":0, "partition-visibility":"shared", "description":"drop fragmented TCP packets with syn flag set", "optional":true }, "zero-window":{ "type":"number", "format":"number", "minimum":1, "maximum":127, "partition-visibility":"shared", "description":"zero window size threshold (threshold value)", "optional":true }, "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "partition-visibility":"shared", "modify-not-allowed":1, "description":"uuid of the object", "optional":true }, "sampling-enable":{ "type":"array", "minItems":1, "items":{ "type":"object" }, "uniqueItems":true, "array":[ { "properties":{ "counters1":{ "type":"string", "format":"enum", "partition-visibility":"shared", "description":"'all': all; 'land': land; 'emp_frg': emp_frg; 'emp_mic_frg': emp_mic_frg; 'opt': opt; 'frg': frg; 'bad_ip_hdrlen': bad_ip_hdrlen; 'bad_ip_flg': bad_ip_flg; 'bad_ip_ttl': bad_ip_ttl; 'no_ip_payload': no_ip_payload; 'over_ip_payload': over_ip_payload; 'bad_ip_payload_len': bad_ip_payload_len; 'bad_ip_frg_offset': bad_ip_frg_offset; 'csum': csum; 'pod': pod; 'bad_tcp_urg_offset': bad_tcp_urg_offset; 'tcp_sht_hdr': tcp_sht_hdr; 'tcp_bad_iplen': tcp_bad_iplen; 'tcp_null_frg': tcp_null_frg; 'tcp_null_scan': tcp_null_scan; 'tcp_syn_fin': tcp_syn_fin; 'tcp_xmas': tcp_xmas; 'tcp_xmas_scan': tcp_xmas_scan; 'tcp_syn_frg': tcp_syn_frg; 'tcp_frg_hdr': tcp_frg_hdr; 'tcp_bad_csum': tcp_bad_csum; 'udp_srt_hdr': udp_srt_hdr; 'udp_bad_len': udp_bad_len; 'udp_kerb_frg': udp_kerb_frg; 'udp_port_lb': udp_port_lb; 'udp_bad_csum': udp_bad_csum; 'runt_ip_hdr': runt_ip_hdr; 'runt_tcp_udp_hdr': runt_tcp_udp_hdr; 'ipip_tnl_msmtch': ipip_tnl_msmtch; 'tcp_opt_err': tcp_opt_err; 'ipip_tnl_err': ipip_tnl_err; 'vxlan_err': vxlan_err; 'nvgre_err': nvgre_err; 'gre_pptp_err': gre_pptp_err; ", "enum":[ "all", "land", "emp_frg", "emp_mic_frg", "opt", "frg", "bad_ip_hdrlen", "bad_ip_flg", "bad_ip_ttl", "no_ip_payload", "over_ip_payload", "bad_ip_payload_len", "bad_ip_frg_offset", "csum", "pod", "bad_tcp_urg_offset", "tcp_sht_hdr", "tcp_bad_iplen", "tcp_null_frg", "tcp_null_scan", "tcp_syn_fin", "tcp_xmas", "tcp_xmas_scan", "tcp_syn_frg", "tcp_frg_hdr", "tcp_bad_csum", "udp_srt_hdr", "udp_bad_len", "udp_kerb_frg", "udp_port_lb", "udp_bad_csum", "runt_ip_hdr", "runt_tcp_udp_hdr", "ipip_tnl_msmtch", "tcp_opt_err", "ipip_tnl_err", "vxlan_err", "nvgre_err", "gre_pptp_err" ] }, "optional":true } } ] } } }