Standard view Table view

CISCO-IP-PROTOCOL-FILTER-MIB

        The MIB module is for management of information 
to support packet filtering on IP protocols.
        
The cippfIpProfileTable allows users to create
delete, and get information about filter profiles.
Filter profiles are uniquely identified by the 
profile names.  Filter profiles can either be of
Simple or Extended usage types, and the usage type
cannot be changed once it has been created. 
        
The cippfIfIpProfileTable applies the filtering
profiles to device interfaces running IP.  A filter
profile can be applied to multiple interfaces.
        
The cippfIpFilterTable contains ordered lists of
IP filters for all the filtering profiles.  
Filters and profiles are related if they are of 
the same filter profile name.  Filters can only 
be created if their associated filter profiles
already exist in the cippfIpProfileTable. 
Filters of the same profile name belongs to a 
common profile.  
        
The cippfIfIpProfileTable can be configured with
information independent from the other.  However, 
if the name of a profile in the cippfIfIpProfileTable
matches that of any profile in the 
cippfIpProfileTable and the profile name of any 
filter entry in the cippfIpFilterTable, the profile 
is 'active' and the filter entry is being applied 
to IP traffic passing through the attached device 
interfaces.  Therefore, any change to the filters 
in the cippfIpFilterTable or the profile itself in 
the cippfIpProfileTable will affect all the 
attached interfaces.
Source file
CISCO-IP-PROTOCOL-FILTER-MIB
Last revised
Identity
ciscoIpProtocolMIB
Base OID
1.3.6.1.4.1.9.9.278
Imported Objects
CISCO-FILTER-GROUP-MIB CfgFilterGroupName
CISCO-SMI ciscoMgmt
CISCO-SYSLOG-MIB SyslogSeverity
IF-MIB ifIndex
INET-ADDRESS-MIB InetAddress InetAddressType InetPortNumber
SNMP-FRAMEWORK-MIB SnmpAdminString
SNMPv2-CONF MODULE-COMPLIANCE OBJECT-GROUP
SNMPv2-SMI Counter64 Integer32 MODULE-IDENTITY OBJECT-TYPE Unsigned32
SNMPv2-TC RowStatus TEXTUAL-CONVENTION TruthValue
Net-SNMP examples using the cisco MIB directory Show commands

These commands use the standard Observium installation path and load the selected MIB variant before the RFC and Net-SNMP directories.

Translate the module identity
/usr/bin/snmptranslate -Pud -Ir -On -m 'CISCO-IP-PROTOCOL-FILTER-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CISCO-IP-PROTOCOL-FILTER-MIB::ciscoIpProtocolMIB'
Walk the MIB subtree
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'CISCO-IP-PROTOCOL-FILTER-MIB' -M '/opt/observium/mibs/cisco:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CISCO-IP-PROTOCOL-FILTER-MIB::ciscoIpProtocolMIB'
How SNMP, Net-SNMP, MIB paths, and variants work
Objects (56)
ciscoIpProtocolMIB
.1.3.6.1.4.1.9.9.278
ciscoIpProtocolFilterMIBNotifs
.1.3.6.1.4.1.9.9.278.0
ciscoIpProtocolFilterMIBObjects
.1.3.6.1.4.1.9.9.278.1
cippfIpFilterConfig
.1.3.6.1.4.1.9.9.278.1.1
cippfIpProfileTable
.1.3.6.1.4.1.9.9.278.1.1.1
cippfIpProfileEntry
cippfIpProfileName
 .1.3.6.1.4.1.9.9.278.1.1.1.1
cippfIpProfileName
CippfIpFilterProfileName
 .1.3.6.1.4.1.9.9.278.1.1.1.1.1
cippfIpProfileType r/w
Enumeration
 .1.3.6.1.4.1.9.9.278.1.1.1.1.2
cippfIpProfileLastFilterIndex
Unsigned32
 .1.3.6.1.4.1.9.9.278.1.1.1.1.3
cippfIpProfileStatus r/w
SNMPv2-TCRowStatus
 .1.3.6.1.4.1.9.9.278.1.1.1.1.4
cippfIfIpProfileTable
.1.3.6.1.4.1.9.9.278.1.1.2
cippfIfIpProfileEntry
IF-MIBifIndexcippfIfIpProfileDirection
 .1.3.6.1.4.1.9.9.278.1.1.2.1
cippfIfIpProfileDirection
Enumeration
 .1.3.6.1.4.1.9.9.278.1.1.2.1.1
cippfIfIpProfileName r/w
CippfIpFilterProfileName
 .1.3.6.1.4.1.9.9.278.1.1.2.1.2
cippfIfIpProfileStatus r/w
SNMPv2-TCRowStatus
 .1.3.6.1.4.1.9.9.278.1.1.2.1.3
cippfIpFilterTable
.1.3.6.1.4.1.9.9.278.1.1.3
cippfIpFilterEntry
cippfIpProfileNamecippfIpFilterIndex
 .1.3.6.1.4.1.9.9.278.1.1.3.1
cippfIpFilterIndex
Unsigned32
 .1.3.6.1.4.1.9.9.278.1.1.3.1.1
cippfIpFilterSrcPortLow r/w
INET-ADDRESS-MIBInetPortNumber
 .1.3.6.1.4.1.9.9.278.1.1.3.1.10
cippfIpFilterSrcPortHigh r/w
INET-ADDRESS-MIBInetPortNumber
 .1.3.6.1.4.1.9.9.278.1.1.3.1.11
cippfIpFilterDestPortLow r/w
INET-ADDRESS-MIBInetPortNumber
 .1.3.6.1.4.1.9.9.278.1.1.3.1.12
cippfIpFilterDestPortHigh r/w
INET-ADDRESS-MIBInetPortNumber
 .1.3.6.1.4.1.9.9.278.1.1.3.1.13
cippfIpFilterPrecedence r/w
Enumeration
 .1.3.6.1.4.1.9.9.278.1.1.3.1.14
cippfIpFilterTos r/w
Integer32
 .1.3.6.1.4.1.9.9.278.1.1.3.1.15
cippfIpFilterLogEnabled r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.278.1.1.3.1.16
cippfIpFilterStatus r/w
SNMPv2-TCRowStatus
 .1.3.6.1.4.1.9.9.278.1.1.3.1.17
cippfIpFilterICMPType r/w
Integer32
 .1.3.6.1.4.1.9.9.278.1.1.3.1.18
cippfIpFilterTCPEstablished r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.278.1.1.3.1.19
cippfIpFilterOrderPosition r/w
Unsigned32
 .1.3.6.1.4.1.9.9.278.1.1.3.1.2
cippfIpFilterFragments r/w
SNMPv2-TCTruthValue
 .1.3.6.1.4.1.9.9.278.1.1.3.1.20
cippfIpFilterICMPCode r/w
Integer32
 .1.3.6.1.4.1.9.9.278.1.1.3.1.21
cippfIpFilterSrcIPGroupName r/w
CISCO-FILTER-GROUP-MIBCfgFilterGroupName
 .1.3.6.1.4.1.9.9.278.1.1.3.1.22
cippfIpFilterDstIPGroupName r/w
CISCO-FILTER-GROUP-MIBCfgFilterGroupName
 .1.3.6.1.4.1.9.9.278.1.1.3.1.23
cippfIpFilterProtocolGroupName r/w
CISCO-FILTER-GROUP-MIBCfgFilterGroupName
 .1.3.6.1.4.1.9.9.278.1.1.3.1.24
cippfIpFilterSrcServiceGroupName r/w
CISCO-FILTER-GROUP-MIBCfgFilterGroupName
 .1.3.6.1.4.1.9.9.278.1.1.3.1.25
cippfIpFilterDstServiceGroupName r/w
CISCO-FILTER-GROUP-MIBCfgFilterGroupName
 .1.3.6.1.4.1.9.9.278.1.1.3.1.26
cippfIpFilterICMPGroupName r/w
CISCO-FILTER-GROUP-MIBCfgFilterGroupName
 .1.3.6.1.4.1.9.9.278.1.1.3.1.27
cippfIpFilterAction r/w
Enumeration
 .1.3.6.1.4.1.9.9.278.1.1.3.1.3
cippfIpFilterAddressType r/w
INET-ADDRESS-MIBInetAddressType
 .1.3.6.1.4.1.9.9.278.1.1.3.1.4
cippfIpFilterSrcAddress r/w
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.9.9.278.1.1.3.1.5
cippfIpFilterSrcMask r/w
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.9.9.278.1.1.3.1.6
cippfIpFilterDestAddress r/w
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.9.9.278.1.1.3.1.7
cippfIpFilterDestMask r/w
INET-ADDRESS-MIBInetAddress
 .1.3.6.1.4.1.9.9.278.1.1.3.1.8
cippfIpFilterProtocol r/w
Integer32
 .1.3.6.1.4.1.9.9.278.1.1.3.1.9
cippfIpFilterExtTable
.1.3.6.1.4.1.9.9.278.1.1.4
cippfIpFilterExtEntry
.1.3.6.1.4.1.9.9.278.1.1.4.1
cippfIpFilterExtDescription r/w
SNMP-FRAMEWORK-MIBSnmpAdminString
 .1.3.6.1.4.1.9.9.278.1.1.4.1.1
cippfIpFilterExtLogLevel r/w
CISCO-SYSLOG-MIBSyslogSeverity
 .1.3.6.1.4.1.9.9.278.1.1.4.1.2
cippfIpFilterExtLogInterval r/w
secondsSNMPv2-SMIUnsigned32
 .1.3.6.1.4.1.9.9.278.1.1.4.1.3
cippfIpFilterStats
.1.3.6.1.4.1.9.9.278.1.2
cippfIpFilterStatsTable
.1.3.6.1.4.1.9.9.278.1.2.1
cippfIpFilterStatsEntry
cippfIpProfileNamecippfIpFilterIndex
 .1.3.6.1.4.1.9.9.278.1.2.1.1
cippfIpFilterHits
SNMPv2-SMICounter64
 .1.3.6.1.4.1.9.9.278.1.2.1.1.1
ciscoIpProtocolFilterMIBConform
.1.3.6.1.4.1.9.9.278.2
ciscoIpProtocolFilterMIBCompl
.1.3.6.1.4.1.9.9.278.2.1
ciscoIpProtocolFilterMIBGroups
.1.3.6.1.4.1.9.9.278.2.2
Dependencies (12) 9 direct · 3 transitive Show tree and compile order Hide dependency details

Each imported module is resolved in the importing module's source directory first, then through the normal default-variant rules.

Dependency tree
Dependency-first compile order
  1. SNMPv2-SMIrfc
  2. CISCO-SMIcisco
  3. SNMPv2-TCrfc
  4. CISCO-TCcisco
  5. INET-ADDRESS-MIBrfc
  6. SNMPv2-CONFrfc
  7. SNMP-FRAMEWORK-MIBrfc
  8. CISCO-FILTER-GROUP-MIBcisco
  9. CISCO-SYSLOG-MIBcisco
  10. IANAifType-MIBrfc
  11. SNMPv2-MIBrfc
  12. IF-MIBrfc
  13. CISCO-IP-PROTOCOL-FILTER-MIBciscoselected
Type Definitions (1)
CippfIpFilterProfileName
OctetString range: 1..64
Conformance Groups (5)
ciscoIpProtocolFilteringGroup
cippfIpProfileType cippfIpProfileLastFilterIndex cippfIpProfileStatus cippfIfIpProfileName cippfIfIpProfileStatus cippfIpFilterOrderPosition cippfIpFilterAction cippfIpFilterAddressType cippfIpFilterSrcAddress cippfIpFilterSrcMask cippfIpFilterDestAddress cippfIpFilterDestMask cippfIpFilterProtocol cippfIpFilterSrcPortLow cippfIpFilterSrcPortHigh cippfIpFilterDestPortLow cippfIpFilterDestPortHigh cippfIpFilterPrecedence cippfIpFilterTos cippfIpFilterLogEnabled cippfIpFilterStatus
Configuration parameters for IP Protocol filters.
 .1.3.6.1.4.1.9.9.278.2.2.1
ciscoIpProtocolFilterGroup2
cippfIpFilterICMPType cippfIpFilterTCPEstablished cippfIpFilterFragments cippfIpFilterICMPCode
Configuration parameters for IP Protocol filters.
 .1.3.6.1.4.1.9.9.278.2.2.2
ciscoIpProtocolFilterExtGroup
cippfIpFilterExtDescription cippfIpFilterExtLogLevel cippfIpFilterExtLogInterval
Configuration parameters for logging
packet filters.
 .1.3.6.1.4.1.9.9.278.2.2.4
ciscoIpProtocolFilterObjectGroup
cippfIpFilterSrcIPGroupName cippfIpFilterDstIPGroupName cippfIpFilterProtocolGroupName cippfIpFilterSrcServiceGroupName cippfIpFilterDstServiceGroupName cippfIpFilterICMPGroupName
Configuration parameters for filter groups
in a protocol filter.
 .1.3.6.1.4.1.9.9.278.2.2.5
ciscoIpProtocolFilterStatsGroup
cippfIpFilterHits
This is a group containing objects
related to packet filter.
 .1.3.6.1.4.1.9.9.278.2.2.6
Compliance Statements (3)

OID .1.3.6.1.4.1.9.9.278.2.1.1
The compliance statement for entities implementing
the Cisco IP Protocol Filter MIB.

OBJECT cippfIpFilterAddressType
SYNTAX InetAddressType { ipv4(1) }
DESCRIPTION
An implementation is only required to
support IPv4 addresses.

OBJECT cippfIpFilterSrcAddress
SYNTAX InetAddress (SIZE(4))
DESCRIPTION
An implementation is only required to
support IPv4 addresses.

OBJECT cippfIpFilterDestAddress
SYNTAX InetAddress (SIZE(4))
DESCRIPTION
An implementation is only required to
support IPv4 addresses.
Required groups
mandatory ciscoIpProtocolFilteringGroup

OID .1.3.6.1.4.1.9.9.278.2.1.2
The compliance statement for entities implementing
the Cisco IP Protocol Filter MIB.

OBJECT cippfIpFilterAddressType
SYNTAX InetAddressType { ipv4(1) }
DESCRIPTION
An implementation is only required to
support IPv4 addresses.

OBJECT cippfIpFilterSrcAddress
SYNTAX InetAddress (SIZE(4))
DESCRIPTION
An implementation is only required to
support IPv4 addresses.

OBJECT cippfIpFilterDestAddress
SYNTAX InetAddress (SIZE(4))
DESCRIPTION
An implementation is only required to
support IPv4 addresses.

OBJECT cippfIpFilterOrderPosition
MIN-ACCESS read-only
DESCRIPTION
Write access is not required.

OBJECT cippfIpProfileType
MIN-ACCESS read-only
DESCRIPTION
Write access is not required.
Required groups
mandatory ciscoIpProtocolFilteringGroup
optional ciscoIpProtocolFilterGroup2 Implementation of this group is optional.

OID .1.3.6.1.4.1.9.9.278.2.1.3
The compliance statement for entities implementing
the Cisco IP Protocol Filter MIB.
Required groups
mandatory ciscoIpProtocolFilteringGroup
mandatory ciscoIpProtocolFilterStatsGroup
optional ciscoIpProtocolFilterGroup2 Implementation of this group is optional.
optional ciscoIpProtocolFilterExtGroup Implementation of this group is mandatory
for those systems where additional objects
supported for each filter.
optional ciscoIpProtocolFilterObjectGroup Implementation of this group is mandatory
for those systems where filter groups
are supported in IP filters.
Object refinements
ObjectAccessSyntaxDescription
cippfIpFilterAddressType
INET-ADDRESS-MIBInetAddressType
ipv4(1)
An implementation is only required to
support IPv4 addresses.
cippfIpFilterSrcAddress
INET-ADDRESS-MIBInetAddress
 An implementation is only required to
support IPv4 addresses.
cippfIpFilterDestAddress
INET-ADDRESS-MIBInetAddress
 An implementation is only required to
support IPv4 addresses.
cippfIpFilterOrderPosition readonly
Write access is not required.
cippfIpProfileType readonly
Write access is not required.
cippfIpFilterSrcIPGroupName noaccess
This object is not required to be implemented
if filter group is not supported.
cippfIpFilterDstIPGroupName noaccess
This object is not required to be implemented
if filter group is not supported.
cippfIpFilterSrcServiceGroupName noaccess
This object is not required to be implemented
if filter group is not supported.
cippfIpFilterDstServiceGroupName noaccess
This object is not required to be implemented
if filter group is not supported.
cippfIpFilterICMPGroupName noaccess
This object is not required to be implemented
if filter group is not supported.