IPF-MIB
Detailed view of the defined objects, syntax rules, and hierarchical paths.
28
Objects
Active
Status
2
Dependencies
Imported Objects
Objects
28 total| Object Name |
|---|
sbe OBJECT IDENTIFIER .1.3.6.1.4.1.1055 |
ipf OBJECT IDENTIFIER .1.3.6.1.4.1.1055.5 |
ipfMIBVersionVersion number of the IPF MIB. This number will be bumped up whenever there is a change in this MIB. Backward compatibility is a must. The current value = 1ro INTEGER --%{ return ipf_snmp_MIBVersion(snmpi); %} .1.3.6.1.4.1.1055.5.1 |
ipfVersionVersion number of the IPF. This number will be bumped up whenever there is a new release of IPF. Especially important if the FDL syntax changes or when keywords are added. (Deletion not recommended unless backward compatibility is not an issue.) The current value = 1ro INTEGER --%{ return ipf_snmp_Version(snmpi); %} .1.3.6.1.4.1.1055.5.2 |
ipfStateWhether IP-Filtering is active or not. The factory default is INACTIVE.ro Enumeration .1.3.6.1.4.1.1055.5.3 |
ipfCommandUPDATE - the rule set is updated. Use the new rules. If there are any parse errors, the UPDATE operation would fail. If there are no parse errors, the parse buffer is emptied. ie. parserRules (see below) will be an empty table. DISABLE - disable all IP-Filter & NAT activities ENABLE - enable IP-Filter & NAT activities with the current set of rules. DELETE - discard the set of rules from the parse buffer. ie. parserRules (see below) will be an empty table. CLEAR - discard the loaded rules. ie. the ipfCurrRules and natCurrRules (see below) will be empty tables. NOTE: A get or get next operation is meaningless on this variable and hence the value returned is always 42.rw Enumeration .1.3.6.1.4.1.1055.5.4 |
ipfDefActionThe default action of IP-Filter when a packet does not match any rules. The factory default is to block.rw Enumeration .1.3.6.1.4.1.1055.5.5 |
ipfParseTableParse buffer. Rules are accumulated here before being applied using an ipfCommand - UPDATE SEQUENCE OF IpfParseEntryType .1.3.6.1.4.1.1055.5.6 |
ipfParseEntryAn IP-Filter or NAT ParseEntry IpfParseEntryType .1.3.6.1.4.1.1055.5.6.2 |
ipfParseEntryStatusIndication of whether or not a valid entry. NOTE: A row cannot be modified. You can create or delete a row, but not modify. NOTE: Parsing is done when the status changes to valid. The ipfParseEntryError field (see below) would contain any parse errors.rw Enumeration .1.3.6.1.4.1.1055.5.6.2.1 |
ipfParseEntryNumberIndicates the rule sequence number. The rules are inserted in the ascending sequence number order. NOTE: A set operation will fail if the attempt is to modify the rule number.ro INTEGER --%{ return ipf_snmp_ParseEntryNumber(snmpi); %} .1.3.6.1.4.1.1055.5.6.2.2 |
ipfParseEntryTextText string corresponding to a rule. The rule specification language is described else where. NOTE: A set operation will fail if the row is not under creation.rw DisplayString ( SIZE ( 0..256 ) ) --%{ return ipf_snmp_ParseEntryText(snmpi); %} .1.3.6.1.4.1.1055.5.6.2.3 |
ipfParseEntryErrorThe parse error. This field is available if the ipfParseEntryStatus field above has a value = validro DisplayString ( SIZE ( 0..256 ) ) --%{ return ipf_snmp_ParseEntryError(snmpi); %} .1.3.6.1.4.1.1055.5.6.2.4 |
ipfCurrRulesThe set of rules currently used by IP-Filter SEQUENCE OF IpfCurrRuleType --%{ return ipf_snmp_CurrRules(snmpi); %} .1.3.6.1.4.1.1055.5.7 |
ipfCurrRuleAn IP-Filter rule. IpfCurrRuleType .1.3.6.1.4.1.1055.5.7.2 |
ipfCurrRuleStatusReturns valid(1) always - dummy entryro Enumeration .1.3.6.1.4.1.1055.5.7.2.1 |
ipfCurrRuleNumberIndicates the rule sequence numberro INTEGER .1.3.6.1.4.1.1055.5.7.2.2 |
ipfCurrRuleTextText string corresponding to a rule. The rule specification language is described else where.ro DisplayString ( SIZE ( 0..256 ) ) .1.3.6.1.4.1.1055.5.7.2.3 |
ipfCurrRuleFlagsA bit mapped flags field. Defined values are: FR_BLOCK 0x0001 FR_PASS 0x0002 FR_OUTQUE 0x0004 FR_INQUE 0x0008 FR_LOG 0x0010 /* Log */ FR_LOGB 0x0021 /* Log-fail */ FR_LOGP 0x0022 /* Log-pass */ FR_LOGBODY 0x0040 /* Log the body */ FR_LOGFIRST 0x0080 FR_RETRST 0x0100 FR_RETICMP 0x0200 FR_NOMATCH 0x0400 FR_ACCOUNT 0x0800 /* count packet bytes */ FR_KEEPFRAG 0x1000 FR_KEEPSTATE 0x2000 FR_INACTIVE 0x4000 FR_QUICK 0x8000ro INTEGER .1.3.6.1.4.1.1055.5.7.2.4 |
ipfCurrRuleHitsNumber of times this rule was hit - ie. matched. NOTE: Doesn't mean passed or blocked, it just means this rule evaluated as a match for the packetro INTEGER .1.3.6.1.4.1.1055.5.7.2.5 |
ipfCurrRuleBytesNumber of bytes of data seen by this rule. Same as Hits - but in terms of bytes of data.ro INTEGER .1.3.6.1.4.1.1055.5.7.2.6 |
natCurrRulesThe set of rules currently used by NAT SEQUENCE OF NatCurrRuleType --%{ return nat_snmp_CurrRules(snmpi); %} .1.3.6.1.4.1.1055.5.8 |
natCurrRuleA NAT rule. NatCurrRuleType .1.3.6.1.4.1.1055.5.8.2 |
natCurrRuleStatusReturns valid(1) always - dummy entryro Enumeration .1.3.6.1.4.1.1055.5.8.2.1 |
natCurrRuleNumberIndicates the rule sequence numberro INTEGER .1.3.6.1.4.1.1055.5.8.2.2 |
natCurrRuleTextText string corresponding to a rule. The rule specification language is described else where.ro DisplayString ( SIZE ( 0..256 ) ) .1.3.6.1.4.1.1055.5.8.2.3 |
natCurrRuleHitsIndicates the number of packets mapped by this rulero INTEGER .1.3.6.1.4.1.1055.5.8.2.4 |
natCurrRulePendIndicates the number of packets mapped by this rulero INTEGER .1.3.6.1.4.1.1055.5.8.2.5 |