CISCO-IP-PROTOCOL-FILTER-MIB Table View

This table lists all the existing IP protocol 
filter profiles.  These filter profiles contain 
protocol filters used to filter IP traffic 
through the device interfaces.  The IP protocol 
filters associated with these profiles are 
defined in the cippfIpFilterTable.  
          
For profiles to be associated with filters, the 
object value of the cippfIpProfileName of a 
profile must matches that of the cippfIpProfileName
of a filter entry in the cippfIpFilterTable.
Filters of the same profile name belong to a
common filter profile and are of the same usage
type of the profile.
          
This table can only be used to create or delete
filter profiles.  Deleting any profile in this
table will also delete all the associated filters
in the cippfIpFilterTable and cause the state of
the associated 'active' filter profile in the
cippfIfIpProfileTable to be changed to 'notReady'.  
All of these deleted or changed entries are 
associated by virtue of the same profile name.

This table lists all the IP protocol filter
profiles being applied to IP traffic on the
device interfaces.  An IP protocol filter profile
can be shared by multiple interfaces.  The filter
profiles are defined in the cippfIpProfileTable,
and filters of these profiles are defined in the
cippfIpFilterTable.
          
Protocol filter profiles and their associated 
filters can be 'attached to' or 'removed from' 
in-bound or out-bound interfaces.  Both existing
and non-existing protocol filter profiles can be
'attached to' the interfaces.  However, the
cippfIfIpProfileStatus will only become 'active'
if the filter profile exists in the 
cippfIpProfileTable, and the filters will then
be applied to the IP traffic through the interface.
Modification of any filters associated with a 
shared profile will affect all interfaces sharing 
that profile.
          
Each interface can only be attached with one protocol
filter profile on the in-bound direction and one on
the out-bound direction.

This table contains ordered lists of filters for 
all the IP protocol filter profiles.  Device traffic
filtering system applies filters of a filter profile 
according to the filter order position.  IP packets 
matching any filter will be processed according to 
the matching action specified by the filter or they
will be discarded if they do not match any filters.  
          
Any IP packet through an interface can theoretically
match multiple filters or rows of this table of the 
same filter profile.  When applying a filter to a 
packet, the cippfIfIpProfileTable is used to first
identify the filter profile to use, then this table 
is scanned according to filter profile name and 
filter order position.  If the packet matches all 
criteria for that row, the action defined in the 
cippfIpFilterAction object of the row will be taken.  
          
If the action for the matching filter is deny(1), 
the packet is discarded and the processing is 
completed.  If the action for the matching filter is
permit(2), the packet is accepted and permitted to 
be processed by the bridging or routing logic.  If 
the packet matches no filter in this table, the 
packet is always deny(1) and will be dropped.
          
To create a filter, the cippfIpProfileName must
already exists in the cippfIpProfileTable. No filter
can be created without an existing filter in the 
cippfIpProfileTable.  If the filter profile is 
deleted from the cippfIpProfileTable, all the 
associated filters in this table will also be 
deleted.

This table is an extension to cippfIpFilterTable.
This table is used for configuring the objects
that are used for reporting the information about
filters and reporting the logs.  These objects
do not change the match criteria for the filter
but assist in troubleshooting the matched criteria.

This table defines a set of statistics related to 
packet filter.  The statistics related to matched 
filters are available here.