>> MIB - Management Information Base

>> Table: ipFilterTable - (.1.3.6.1.4.1.272.4.5.15.1)

ipFilterTable
OIDNameTypeAccess
.1IndexINTEGERR
.2DescrDisplayStringRW
.3ProtocolENUMD
.4SrcAddrIpAddressRW
.5SrcMaskIpAddressRW
.6SrcPortINTEGERRW
.7SrcPortRangeINTEGERRW
.8DstAddrIpAddressRW
.9DstMaskIpAddressRW
.10DstPortINTEGERRW
.11DstPortRangeINTEGERRW
.12TcpConnStateENUMRW
.13IcmpTypeENUMRW
.14TosINTEGERRW
.15TosMaskINTEGERRW

Index
This object uniquely references this filter. The index

value is generated automatically.
Descr
A textual string describing this filter.
Protocol
This object specifies the value of the protocol field in

the ip header for all IP-datagrams belonging to the set.

If this object is set to dont-verify, the value of the

protocol field is not specified and can take any value.
Enumerations:
  • icmp (1)
  • ggp (3)
  • ip (4)
  • tcp (6)
  • egp (8)
  • igp (9)
  • pup (12)
  • chaos (16)
  • udp (17)
  • hmp (20)
  • xns-idp (22)
  • rdp (27)
  • ipv6 (41)
  • rsvp (46)
  • gre (47)
  • esp (50)
  • ah (51)
  • tlsp (56)
  • skip (57)
  • kryptolan (65)
  • iso-ip (80)
  • igrp (88)
  • ospf (89)
  • ipip (94)
  • ipx-in-ip (111)
  • vrrp (112)
  • l2tp (115)
  • delete (255)
  • dont-verify (256)
SrcAddr
This object specifies together with ipFilterSrcMask 

the set of IP addresses of datagrams that belong to the

subset defined by this entry. If both objects are set to

0.0.0.0 the source-addresses for the datagrams in the set

is not specified and can take any value.
SrcMask
This object specifies together with ipFilterSrcAddr 

the set of IP addresses of datagrams that belong to the

subset defined by this entry. If both objects are set to

0.0.0.0 the source-addresses for the datagrams in the set

is not specified and can take any value.
SrcPort
This object describes together with ipFilterSrcPortRange the

range of source portnumbers of the IP-datagrams belonging to

the set. All portnumbers between and including the two

objects are within the range.

If both objects are the to -1, the value of the source

portnumber is not specified and can take any value.
SrcPortRange
This object describes together with ipFilterDstPort the

range of source portnumbers of the IP-datagrams belonging to

the set. All portnumbers between and including the two

objects are within the range.

If both objects are the to -1, the value of the source

portnumber is not specified and can take any value.
DstAddr
This object describes together with ipFilterDstMask the 

range of the target-addresses of the IP-datagrams belonging

to the set. If both objects are set to 0.0.0.0 the target-

addresses for the datagrams in the set is not specified

and can take any value.
DstMask
This object describes together with ipFilterDstAddr the 

range of the target-addresses of the IP-datagrams belonging

to the set. If both objects are set to 0.0.0.0 the target-

addresses for the datagrams in the set is not specified

and can take any value.
DstPort
This object describes together with ipFilterDstPortRange the

range of target-portnumbers of the IP-datagrams belonging to

the set. All portnumbers between and including the two

objects are within the range.

If both objects are the to -1, the value of the target

portnumber is not specified and can take any value.
DstPortRange
This object describes together with ipFilterDstPort the

range of target-portnumbers of the IP-datagrams belonging to

the set. All portnumbers between and including the two

objects are within the range.

If both objects are the to -1, the value of the target

portnumber is not specified and can take any value.
TcpConnState
This object describes the state of the TCP connection 

associated with the packets belonging to the set.

If this object is set to established, the value of the TCP

flags of incoming packets is checked. Packets with flags

that initiate TCP connections are excluded from the set.

If this object is set to dont-verify, the TCP flags are  

not checked and can be any value.
Enumerations:
  • dont-verify (1)
  • established (2)
IcmpType
This object describes the ICMP type of the packets belonging

to the set. If this object is set to dont-verify, the value 

of the ICMP type field is not specified and can take any 

value.
Enumerations:
  • echoRep (1)
  • destUnreach (4)
  • srcQuench (5)
  • redirect (6)
  • echo (9)
  • timeExcds (12)
  • parmProb (13)
  • timestamp (14)
  • timestampRep (15)
  • addrMask (16)
  • addrMaskRep (17)
  • dont-verify (31)
Tos
This object describes together with ipFilterTosMask the 

range of the Type of Service field (TOS) in the IP-header

of the IP-datagrams belonging to the set. A TOS value is

considered within the range, when the following equation

is valid:

(tos & ipFilterTosMask) == (ipFilterTos & ipFilterTosMask)

If both objects are set to 0 the TOS value of the datagrams

in the set is not specified and can take any value.
TosMask
This object describes together with ipFilterTos the 

range of the Type of Service field (TOS) in the IP-header

of the IP-datagrams belonging to the set. A TOS value is

considered within the range, when the following equation

is valid:

(tos & ipFilterTosMask) == (ipFilterTos & ipFilterTosMask)

If both objects are set to 0 the TOS value of the datagrams

in the set is not specified and can take any value.


Copyright ©2003 by BinTec Access Networks GmbH