{
    "id":"/axapi/v3/ip/anomaly-drop",
    "type":"object",
    "node-type":"scalar",
    "title":"anomaly-drop",
    "partition-visibility":"shared",
    "auto-created-object":1,
    "description":"Set IP anomaly drop policy",
    "properties":{
        "packet-deformity":{
            "type":"object",
            "properties":{
                "packet-deformity-layer-3":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 3 anomaly"
                },
                "packet-deformity-layer-4":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 4 anomaly"
                }
            }
        },
        "security-attack":{
            "type":"object",
            "properties":{
                "security-attack-layer-3":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 3 anomaly"
                },
                "security-attack-layer-4":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 4 anomaly"
                }
            }
        },
        "bad-content":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":127,
            "partition-visibility":"shared",
            "description":"bad content threshold (threshold value)",
            "optional":true
        },
        "drop-all":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop all IP anomaly packets",
            "optional":true
        },
        "frag":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop all fragmented packets",
            "optional":true
        },
        "ip-option":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop packets with IP options",
            "optional":true
        },
        "land-attack":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop IP packets with the same source and destination addresses",
            "optional":true
        },
        "out-of-sequence":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":127,
            "partition-visibility":"shared",
            "description":"out of sequence packet threshold (threshold value)",
            "optional":true
        },
        "ping-of-death":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop oversize ICMP packets",
            "optional":true
        },
        "tcp-no-flag":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop TCP packets with no flag",
            "optional":true
        },
        "tcp-syn-fin":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop TCP packets with both syn and fin flags set",
            "optional":true
        },
        "tcp-syn-frag":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop fragmented TCP packets with syn flag set",
            "optional":true
        },
        "zero-window":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":127,
            "partition-visibility":"shared",
            "description":"zero window size threshold (threshold value)",
            "optional":true
        },
        "uuid":{
            "type":"string",
            "format":"string",
            "minLength":1,
            "maxLength":64,
            "partition-visibility":"shared",
            "modify-not-allowed":1,
            "description":"uuid of the object",
            "optional":true
        },
        "sampling-enable":{
            "type":"array",
            "minItems":1,
            "items":{
                "type":"object"
            },
            "uniqueItems":true,
            "array":[
                {
                    "properties":{
                        "counters1":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "description":"'all': all; 'land': Land Attack Drop; 'emp_frg': Empty Fragment Drop; 'emp_mic_frg': Micro Fragment Drop; 'opt': IPv4 Options Drop; 'frg': IPv4 Fragment Drop; 'bad_ip_hdrlen': Bad IP Header Len Drop; 'bad_ip_flg': Bad IP Flags Drop; 'bad_ip_ttl': Bad IP TTL Drop; 'no_ip_payload': No IP Payload drop; 'over_ip_payload': Oversize IP Payload Drop; 'bad_ip_payload_len': Bad IP Payload Len Drop; 'bad_ip_frg_offset': Bad IP Fragment Offset Drop; 'csum': Bad IP Checksum Drop; 'pod': ICMP Ping of Death Drop; 'bad_tcp_urg_offset': TCP Bad Urgent Offset Drop; 'tcp_sht_hdr': TCP Short Header Drop; 'tcp_bad_iplen': TCP Bad IP Length Drop; 'tcp_null_frg': TCP Null Flags Drop; 'tcp_null_scan': TCP Null Scan Drop; 'tcp_syn_fin': TCP Syn and Fin Drop; 'tcp_xmas': TCP XMAS Flags Drop; 'tcp_xmas_scan': TCP XMAS Scan Drop; 'tcp_syn_frg': TCP Syn Fragment Drop; 'tcp_frg_hdr': TCP Fragmented Header Drop; 'tcp_bad_csum': TCP Bad Checksum Drop; 'udp_srt_hdr': UDP Short Header Drop; 'udp_bad_len': UDP Bad Length Drop; 'udp_kerb_frg': UDP Kerberos Fragment Drop; 'udp_port_lb': UDP Port Loopback Drop; 'udp_bad_csum': UDP Bad Checksum Drop; 'runt_ip_hdr': Runt IP Header Drop; 'runt_tcp_udp_hdr': Runt TCP/UDP Header Drop; 'ipip_tnl_msmtch': IP-over-IP Tunnel Mismatch Drop; 'tcp_opt_err': TCP Option Error Drop; 'ipip_tnl_err': IP-over-IP Tunnel Error Drop; 'vxlan_err': VXLAN Tunnel Error Drop; 'nvgre_err': GRE Tunnel Error Drop; 'gre_pptp_err': GRE PPTP Error Drop; ",
                            "enum":[
                                "all",
                                "land",
                                "emp_frg",
                                "emp_mic_frg",
                                "opt",
                                "frg",
                                "bad_ip_hdrlen",
                                "bad_ip_flg",
                                "bad_ip_ttl",
                                "no_ip_payload",
                                "over_ip_payload",
                                "bad_ip_payload_len",
                                "bad_ip_frg_offset",
                                "csum",
                                "pod",
                                "bad_tcp_urg_offset",
                                "tcp_sht_hdr",
                                "tcp_bad_iplen",
                                "tcp_null_frg",
                                "tcp_null_scan",
                                "tcp_syn_fin",
                                "tcp_xmas",
                                "tcp_xmas_scan",
                                "tcp_syn_frg",
                                "tcp_frg_hdr",
                                "tcp_bad_csum",
                                "udp_srt_hdr",
                                "udp_bad_len",
                                "udp_kerb_frg",
                                "udp_port_lb",
                                "udp_bad_csum",
                                "runt_ip_hdr",
                                "runt_tcp_udp_hdr",
                                "ipip_tnl_msmtch",
                                "tcp_opt_err",
                                "ipip_tnl_err",
                                "vxlan_err",
                                "nvgre_err",
                                "gre_pptp_err"
                            ]
                        },
                        "optional":true
                    }
                }
            ]
        }
    }
}