{
    "id":"/axapi/v3/ip/anomaly-drop",
    "type":"object",
    "node-type":"scalar",
    "title":"anomaly-drop",
    "partition-visibility":"shared",
    "auto-created-object":1,
    "description":"Set IP anomaly drop policy",
    "properties":{
        "packet-deformity":{
            "type":"object",
            "properties":{
                "packet-deformity-layer-3":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 3 anomaly"
                },
                "packet-deformity-layer-4":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 4 anomaly"
                }
            }
        },
        "security-attack":{
            "type":"object",
            "properties":{
                "security-attack-layer-3":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 3 anomaly"
                },
                "security-attack-layer-4":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"drop packets with layer 4 anomaly"
                }
            }
        },
        "bad-content":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":127,
            "partition-visibility":"shared",
            "description":"bad content threshold (threshold value)",
            "optional":true
        },
        "drop-all":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop all IP anomaly packets",
            "optional":true
        },
        "frag":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop all fragmented packets",
            "optional":true
        },
        "ip-option":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop packets with IP options",
            "optional":true
        },
        "land-attack":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop IP packets with the same source and destination addresses",
            "optional":true
        },
        "out-of-sequence":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":127,
            "partition-visibility":"shared",
            "description":"out of sequence packet threshold (threshold value)",
            "optional":true
        },
        "ping-of-death":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop oversize ICMP packets",
            "optional":true
        },
        "tcp-no-flag":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop TCP packets with no flag",
            "optional":true
        },
        "tcp-syn-fin":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop TCP packets with both syn and fin flags set",
            "optional":true
        },
        "tcp-syn-frag":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"drop fragmented TCP packets with syn flag set",
            "optional":true
        },
        "zero-window":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":127,
            "partition-visibility":"shared",
            "description":"zero window size threshold (threshold value)",
            "optional":true
        },
        "ipv6-ext-header":{
            "type":"object",
            "properties":{
                "ipv6-eh-frag":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter fragmentation extension header"
                },
                "ipv6-eh-auth":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter authentication extension header"
                },
                "ipv6-eh-esp":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter ESP extension header"
                },
                "ipv6-eh-mobility":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter mobility extension header"
                },
                "ipv6-eh-nonext":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter no-next-header extension header"
                },
                "ipv6-eh-malformed":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter malformed extension headers (check for order and occurrences)"
                },
                "ipv6-eh-hbh":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter hop by hop extension header"
                },
                "ipv6-eh-dest":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter destination extension header"
                },
                "ipv6-eh-routing":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Filter routing extension header"
                },
                "hbh-option-list":{
                    "type":"array",
                    "minItems":1,
                    "items":{
                        "type":"object"
                    },
                    "uniqueItems":true,
                    "array":[
                        {
                            "properties":{
                                "hbh-otype-from":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Filter hop by hop option type (Option type value)"
                                },
                                "hbh-otype-to":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Option type range end"
                                }
                            }
                        }
                    ]
                },
                "dst-option-list":{
                    "type":"array",
                    "minItems":1,
                    "items":{
                        "type":"object"
                    },
                    "uniqueItems":true,
                    "array":[
                        {
                            "properties":{
                                "dst-otype-from":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Filter destination header option type (Option type value)"
                                },
                                "dst-otype-to":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Option type range end"
                                }
                            }
                        }
                    ]
                },
                "routing-option-list":{
                    "type":"array",
                    "minItems":1,
                    "items":{
                        "type":"object"
                    },
                    "uniqueItems":true,
                    "array":[
                        {
                            "properties":{
                                "routing-otype-from":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Filter routing header option type (Option type value)"
                                },
                                "routing-otype-to":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Option type range end"
                                }
                            }
                        }
                    ]
                },
                "unknown-ext-header-list":{
                    "type":"array",
                    "minItems":1,
                    "items":{
                        "type":"object"
                    },
                    "uniqueItems":true,
                    "array":[
                        {
                            "properties":{
                                "eh-type-from":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Filter unknown extension header (eh) type (Extension header type value)"
                                },
                                "eh-type-to":{
                                    "type":"number",
                                    "format":"number",
                                    "partition-visibility":"shared",
                                    "description":"Extension header type range end"
                                }
                            }
                        }
                    ]
                }
            }
        },
        "uuid":{
            "type":"string",
            "format":"string",
            "minLength":1,
            "maxLength":64,
            "partition-visibility":"shared",
            "modify-not-allowed":1,
            "description":"uuid of the object",
            "optional":true
        },
        "sampling-enable":{
            "type":"array",
            "minItems":1,
            "items":{
                "type":"object"
            },
            "uniqueItems":true,
            "array":[
                {
                    "properties":{
                        "counters1":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "description":"'all': all; 'land': Land Attack Drop; 'emp_frg': Empty Fragment Drop; 'emp_mic_frg': Micro Fragment Drop; 'opt': IPv4 Options Drop; 'frg': IPv4 Fragment Drop; 'bad_ip_hdrlen': Bad IP Header Len Drop; 'bad_ip_flg': Bad IP Flags Drop; 'bad_ip_ttl': Bad IP TTL Drop; 'no_ip_payload': No IP Payload drop; 'over_ip_payload': Oversize IP Payload Drop; 'bad_ip_payload_len': Bad IP Payload Len Drop; 'bad_ip_frg_offset': Bad IP Fragment Offset Drop; 'csum': Bad IP Checksum Drop; 'pod': ICMP Ping of Death Drop; 'bad_tcp_urg_offset': TCP Bad Urgent Offset Drop; 'tcp_sht_hdr': TCP Short Header Drop; 'tcp_bad_iplen': TCP Bad IP Length Drop; 'tcp_null_frg': TCP Null Flags Drop; 'tcp_null_scan': TCP Null Scan Drop; 'tcp_syn_fin': TCP Syn and Fin Drop; 'tcp_xmas': TCP XMAS Flags Drop; 'tcp_xmas_scan': TCP XMAS Scan Drop; 'tcp_syn_frg': TCP Syn Fragment Drop; 'tcp_frg_hdr': TCP Fragmented Header Drop; 'tcp_bad_csum': TCP Bad Checksum Drop; 'udp_srt_hdr': UDP Short Header Drop; 'udp_bad_len': UDP Bad Length Drop; 'udp_kerb_frg': UDP Kerberos Fragment Drop; 'udp_port_lb': UDP Port Loopback Drop; 'udp_bad_csum': UDP Bad Checksum Drop; 'runt_ip_hdr': Runt IP Header Drop; 'runt_tcp_udp_hdr': Runt TCP/UDP Header Drop; 'ipip_tnl_msmtch': IP-over-IP Tunnel Mismatch Drop; 'tcp_opt_err': TCP Option Error Drop; 'ipip_tnl_err': IP-over-IP Tunnel Error Drop; 'vxlan_err': VXLAN Tunnel Error Drop; 'nvgre_err': GRE Tunnel Error Drop; 'gre_pptp_err': GRE PPTP Error Drop; 'ipv6_eh_hbh': IPv6 Hop by Hop Header Drop; 'ipv6_eh_dest': IPv6 Destination Header Drop; 'ipv6_eh_routing': IPv6 Routing Header Drop; 'ipv6_eh_frag': IPv6 Fragmentation Header Drop; 'ipv6_eh_ah': IPv6 Authentication Header Drop; 'ipv6_eh_esp': IPv6 ESP Header Drop; 'ipv6_eh_mobility': IPv6 Mobility Header Drop; 'ipv6_eh_none': IPv6 No Next Header Drop; 'ipv6_eh_other': IPv6 Unknown Extension Header Drop; 'ipv6_eh_malformed': IPv6 Malformed Extension Header Drop; ",
                            "enum":[
                                "all",
                                "land",
                                "emp_frg",
                                "emp_mic_frg",
                                "opt",
                                "frg",
                                "bad_ip_hdrlen",
                                "bad_ip_flg",
                                "bad_ip_ttl",
                                "no_ip_payload",
                                "over_ip_payload",
                                "bad_ip_payload_len",
                                "bad_ip_frg_offset",
                                "csum",
                                "pod",
                                "bad_tcp_urg_offset",
                                "tcp_sht_hdr",
                                "tcp_bad_iplen",
                                "tcp_null_frg",
                                "tcp_null_scan",
                                "tcp_syn_fin",
                                "tcp_xmas",
                                "tcp_xmas_scan",
                                "tcp_syn_frg",
                                "tcp_frg_hdr",
                                "tcp_bad_csum",
                                "udp_srt_hdr",
                                "udp_bad_len",
                                "udp_kerb_frg",
                                "udp_port_lb",
                                "udp_bad_csum",
                                "runt_ip_hdr",
                                "runt_tcp_udp_hdr",
                                "ipip_tnl_msmtch",
                                "tcp_opt_err",
                                "ipip_tnl_err",
                                "vxlan_err",
                                "nvgre_err",
                                "gre_pptp_err",
                                "ipv6_eh_hbh",
                                "ipv6_eh_dest",
                                "ipv6_eh_routing",
                                "ipv6_eh_frag",
                                "ipv6_eh_ah",
                                "ipv6_eh_esp",
                                "ipv6_eh_mobility",
                                "ipv6_eh_none",
                                "ipv6_eh_other",
                                "ipv6_eh_malformed"
                            ]
                        }
                    }
                }
            ]
        }
    }
}