DLINKSW-IP-FILTER-MIB
AI MIB Summary
The DLINKSW-IP-FILTER-MIB enables the monitoring and configuration of IP packet filtering rules, including access control lists and firewall policies, on D-Link managed network switches. It exposes specific metrics for filter rule definitions, hit counts, and packet drop statistics to facilitate traffic security enforcement and network anomaly detection.
This MIB module defines objects for IP filter.
Main OID:
dlinkSwIPFilterMIB.1.3.6.1.4.1.171.12.117
61
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
61 total| Object Name |
|---|
dlinkSwIPFilterMIBThis MIB module defines objects for IP filter. MODULE-IDENTITY .1.3.6.1.4.1.171.12.117 |
dIPFilterNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.117.0 |
dIPFilterObjects OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.117.1 |
dRouteMapTableThis table contains route-map name. SEQUENCE OF DRouteMapEntry .1.3.6.1.4.1.171.12.117.1.1 |
dRouteMapEntryEach entry is a specific name of a route map. DRouteMapEntry .1.3.6.1.4.1.171.12.117.1.1.1 |
dRouteMapNameThe name of the route map. DisplayString .1.3.6.1.4.1.171.12.117.1.1.1.1 |
dRouteMapRowStatusThis object indicates the status of the route-map. Only createAndGo(4) and destroy(6) are supported.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.1.1.99 |
dRouteMapSeqTableThis table contains entries for route maps instances. SEQUENCE OF DRouteMapSeqEntry .1.3.6.1.4.1.171.12.117.1.2 |
dRouteMapSeqEntryEach entry is a specific sequence of a route map. DRouteMapSeqEntry .1.3.6.1.4.1.171.12.117.1.2.1 |
dRouteMapSeqNumMultiple entries of the same route map can be created by assigning a different sequence number to it. Each instance is identified by the route map name and the sequence number. The value of the sequence number associated with the particular route map instance determines the order in which the routing protocol evaluates routes; the instance of having lowest sequence number is evaluated first. If the routes pass all the match conditions specified in the lowest-numbered instance, and if all set clause elements are successfully configured, then no other instance of the route map is considered. However, any routes that do not pass all the match conditions are evaluated against the next instance of the route map. Unsigned32 .1.3.6.1.4.1.171.12.117.1.2.1.1 |
dRouteMapSeqMatchActionIndicates the action performed by this route map instance.rw Enumeration .1.3.6.1.4.1.171.12.117.1.2.1.2 |
dRouteMapSeqRowStatusControls creation/deletion of entries in this table according to the RowStatus textual convention. The writable columns in a row cannot be changed if the row is active. In other words, once created, dRouteMapMatchAction cannot be modified directly. It is required to destroy the instance and then create it with the new value. Before configure match or set a clause/element, it is required to create the same route map instance. Deletion of the route map instance will also delete all the clause elements confgured which associate the deleted route map.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.2.1.99 |
dRouteMapClauseTableThis table contains entries for instances of the route map clause elements. SEQUENCE OF DRouteMapClauseEntry .1.3.6.1.4.1.171.12.117.1.3 |
dRouteMapClauseEntryEach entry describes the characteristics of one route map clause element instance. DRouteMapClauseEntry .1.3.6.1.4.1.171.12.117.1.3.1 |
dRouteMapClauseTypeIdThe type of match or set command in this entry. A route map entry can contain multiple match and set statements. To match a route against a route map entry, all of the match clause elements in a route map sequence must be satisfied. When a route map entry is matched, all the set clause elements in the sequence will be performed (if applicable) for a 'permit' sequence. The valid values and ranges of dRouteMapClauseAddOption and dRouteMapClauseElementValue depends on this object. Please refer to the dRouteMapClauseRowStatus object's DESCRIPTION for details. Enumeration .1.3.6.1.4.1.171.12.117.1.3.1.1 |
dRouteMapClauseSubIdIndicates the clause element sub ID. Because for some clause types (e.g. setIpNexthop), multiple instances can be created, this object is used solely to distinguish specific instance of the element. If the created instance has same dRouteMapName, dRouteMapSeqNum, dRouteMapClauseTypeId and dRouteMapClauseElementValue as the entry exists in the dRouteMapClauseTable,the creation will be rejected. This value is determined by choosing the next available by walking the table and may change across system reboots. Integer32 .1.3.6.1.4.1.171.12.117.1.3.1.2 |
dRouteMapClauseAddOptionThis indicates the additional option selected along with the main option (dRouteMapClauseTypeId) whenever it applies. For more information on how to map this object value to each value, refer to the route-map clauses table in the dRouteMapClauseRowStatus object's DESCRIPTION.rw Enumeration .1.3.6.1.4.1.171.12.117.1.3.1.3 |
dRouteMapClauseElementValueThis represents match and set clauses' variable element instance values in character string form. Whatever may be the data type of the attribute element instance value, it is always interpreted as a set of characters for both configuration and display purposes. It is up to the user to know the element's data type mapping in order to input the correct value while configuring. Refer to the route-map clauses table in the dRouteMapClauseRowStatus object descrption for detailed information.rw DisplayString .1.3.6.1.4.1.171.12.117.1.3.1.4 |
dRouteMapClauseRowStatusControls creation/deletion of entries in this table according to the RowStatus textual convention. The writable columns in a row cannot be changed if the row is active. In other words, the table entry elements may not be modified. To create/delete an entry in this table, the following entry objects MUST be explicitly configured: dRouteMapClauseRowStatus dRouteMapClauseElementValue Make sure the corresponding route map(s) are created before configuring their corresponding clause elements. The table below explains how to determine the values and ranges of dRouteMapClauseAddOption and dRouteMapClauseElementValue. Clause element configuration table ==================================================== Clause Type Addtional Option Element Value dRouteMapClauseTypeId dRouteMapClauseAddOption dRouteMapClauseElementValue ======================= ========================== ================== matchIpAccessList notApplicable DisplayString (SIZE(1..32)) matchIpPrefixList notApplicable DisplayString (SIZE(1..32)) matchIpv6AccessList notApplicable DisplayString (SIZE(1..32)) matchIpv6PrefixList notApplicable DisplayString (SIZE(1..32)) matchAsPath notApplicable DisplayString (SIZE(1..32)) matchCommunity exact/ DisplayString (SIZE(1..32)) notApplicable DisplayString (SIZE(1..32)) macthIpNexthop notApplicable DisplayString (SIZE(1..32)) matchIpNexthopPrefixList notApplicable DisplayString (SIZE(1..32)) matchIpv6Nexthop notApplicable DisplayString (SIZE(1..32)) matchIpv6NexthopPrefixList notApplicable DisplayString (SIZE(1..32)) matchMetric notApplicable DisplayString (SIZE(1..32)) matchInterface notApplicable DisplayString (SIZE(1..32)) matchRouteType notApplicable DisplayString (SIZE(1..32)) matchIpRouteSource notApplicable DisplayString (SIZE(1..32)) setIpNexthop notApplicable InetAddressIPv4 setIpv6Nexthop notApplicable InetAddressIPv6 setAsPath notApplicable DisplayString (SIZE(1..32)) setCommunity(Note#1) additive/ DisplayString (SIZE(1..32)) communityNone zero-length string notApplicable DisplayString (SIZE(1..32)) setMetric notApplicable Unsigned32 setLocalPreference notApplicable Unsigned32 setOrigin notApplicable { egp, igp, incomplete } (Note#2) setWeight notApplicable Interger32 (0..65535) setDampening notApplicable Interger32 (0..65535) setMetricType notApplicable Interger32 (0..65535) ======================================================================================== Note#1: Given a {route map, sequence number}, setCommunity will have at most one instance, i.e., all options and values will be aggregated into one dRouteMapClauseSubId. When 'additive' is chosen for dRouteMapClauseAddOption, the specified community list will be added to the existed community list. If 'communityNone' is chosen, the dRouteMapClauseElementValue should be a zeor-length string. When read dRouteMapClauseElementValue, the value 'additive' is never returned. Note#2: The element value needs choose the exact case-sensitive string to set the option. For example, for setOrigin, egp or igp or incomplete will be the valid options to select.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.3.1.99 |
dAccessListTableThis table contains name for IP access list. SEQUENCE OF DAccessListEntry .1.3.6.1.4.1.171.12.117.1.4 |
dAccessListEntryAn entry contains the information of IP access list. DAccessListEntry .1.3.6.1.4.1.171.12.117.1.4.1 |
dAccessListNameThe name of the IP access list. DisplayString .1.3.6.1.4.1.171.12.117.1.4.1.1 |
dAccessListAddrTypeThis object indicates the address type of the access list. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.12.117.1.4.1.2 |
dAccessListRowStatusThis object indicates the status of this entry. Only createAndGo(4) and destroy(6) are supported.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.4.1.99 |
dAccessListRuleTableThis table contains rules for IP access list. SEQUENCE OF DAccessListRuleEntry .1.3.6.1.4.1.171.12.117.1.5 |
dAccessListRuleEntryAn entry contains one rule of the IP access list. DAccessListRuleEntry .1.3.6.1.4.1.171.12.117.1.5.1 |
dAccessListRuleMatchActionIndicates the action performed for this IP access list. Enumeration .1.3.6.1.4.1.171.12.117.1.5.1.1 |
dAccessListRuleNetAddrIndicates the network address. InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.12.117.1.5.1.2 |
dAccessListRulePfxLenIndicates the prefix length of the network address. INTEGER .1.3.6.1.4.1.171.12.117.1.5.1.3 |
dAccessListRuleRowStatusThis object indicates the status of this entry. Only createAndGo(4) and destroy(6) are supported.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.5.1.99 |
dPrefixListTableThis table contains name for IP prefix list. SEQUENCE OF DPrefixListEntry .1.3.6.1.4.1.171.12.117.1.6 |
dPrefixListEntryAn entry contains the information of IP prefix list. DPrefixListEntry .1.3.6.1.4.1.171.12.117.1.6.1 |
dPrefixListNameThe name of the IP prefix list. DisplayString .1.3.6.1.4.1.171.12.117.1.6.1.1 |
dPrefixListAddrTypeThis object indicates the address type of the prefix. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.12.117.1.6.1.2 |
dPrefixListRowStatusThis object indicates the status of this entry. Only createAndGo(4) and destroy(6) are supported.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.6.1.99 |
dPrefixListRuleTableA table consists of a list of IP prefixes. The initial 2 index elements identify the prefix list that a prefix belongs to. SEQUENCE OF DPrefixListRuleEntry .1.3.6.1.4.1.171.12.117.1.7 |
dPrefixListRuleEntryAn entry contains the information of an IP prefix. DPrefixListRuleEntry .1.3.6.1.4.1.171.12.117.1.7.1 |
dPrefixListRuleSeqNumThe checking sequence of the prefix within a prefix list. The lower the number is, the higher the precedence of the permit/deny rule. The special value of 0 means the sequence number will be automatically determined by the agent. Unsigned32 ( 0 | 1..65535) .1.3.6.1.4.1.171.12.117.1.7.1.1 |
dPrefixListRuleActionThis object indicates whether to permit or deny the matched route entry.rw Enumeration .1.3.6.1.4.1.171.12.117.1.7.1.2 |
dPrefixListRuleNetAddrThis object indicates the network address (prefix).rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.12.117.1.7.1.3 |
dPrefixListRulePrefixLenThe length of network address (prefix).rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.12.117.1.7.1.4 |
dPrefixListRuleGeValueThe minimum prefix length of the route that can be matched. The special value of 0 indicates this object is not specified.rw Unsigned32(0 | 1..128) .1.3.6.1.4.1.171.12.117.1.7.1.5 |
dPrefixListRuleLeValueThe maximum prefix length of the route that can be matched. The special value of 0 indicates this object is not specified.rw Unsigned32 (0 | 1..128) .1.3.6.1.4.1.171.12.117.1.7.1.6 |
dPrefixListRuleHitCountCounter that the prefix list entry has been matched.ro Unsigned32 .1.3.6.1.4.1.171.12.117.1.7.1.7 |
dPrefixListRuleRowStatusThis object indicates the status of this entry. Only createAndGo(4) and destroy(6) are supported.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.7.1.99 |
dPrefixListDescTableA table consists of a list of descriptions for IP prefix lists. SEQUENCE OF DPrefixListDescEntry .1.3.6.1.4.1.171.12.117.1.8 |
dPrefixListDescEntryAn entry contains the description of an IP prefix list. DPrefixListDescEntry .1.3.6.1.4.1.171.12.117.1.8.1 |
dPrefixListDescContentSpecify the description for prefix list.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.8.1.1 |
dPrefixListDescRowStatusThis object indicates the status of this entry. Only createAndGo(4) and destroy(6) are supported.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.12.117.1.8.1.99 |
dIPFilterConform OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.117.2 |
dIPFilterMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.117.2.1 |
dRouteMapGroupThese objects are used for managing/monitoring route map configurations. Unknown .1.3.6.1.4.1.171.12.117.2.1.1 |
dRouteMapSeqGroupThese objects are used for managing/monitoring route map sequence configurations. Unknown .1.3.6.1.4.1.171.12.117.2.1.2 |
dRouteMapClauseGroupThese objects are used for managing/monitoring route map clauses. Unknown .1.3.6.1.4.1.171.12.117.2.1.3 |
dAccessListGroupThese objects are used for managing/monitoring IP access list configuration. Unknown .1.3.6.1.4.1.171.12.117.2.1.4 |
dAccessListRuleGroupThese objects are used for managing/monitoring IP access list rules configuration. Unknown .1.3.6.1.4.1.171.12.117.2.1.5 |
dPrefixListGroupThese objects are used for managing/monitoring route map clauses. Unknown .1.3.6.1.4.1.171.12.117.2.1.6 |
dPrefixListRuleGroupThese objects are used for managing/monitoring IP access list configuration. Unknown .1.3.6.1.4.1.171.12.117.2.1.7 |
dPrefixListDescGroupThese objects are used for managing/monitoring IP access list rules configuration. Unknown .1.3.6.1.4.1.171.12.117.2.1.8 |
dIPFilterMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.171.12.117.2.2 |
dIPFilterMIBFullComplianceThe compliance statement Unknown .1.3.6.1.4.1.171.12.117.2.2.1 |