DEVFILTER-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
2
Rows
2
Columns
34
.1.3.6.1.4.1.4325.2.8.1 · 1 row entry · 32 columns
This table allows the user to view the configured IP 
Filters.
aniDevFilterEntry entry .1.3.6.1.4.1.4325.2.8.1.1
An entry containing objects for each IP Filter
configured.
Indexes
aniDevFilterIfIndex aniDevFilterIdentifier
Column Syntax OID
aniDevFilterIfIndex
The Interface Type.
On SU, only ethernet(1) and wireless-port1(2) are valid.

On BSU, ethernet(1) and all configured wireless interfaces
-- wireless-port1(2), wireless-port2(3), wireless-port3(4),
wirel…
Enumerationr/w
Enumerated Values:
1ethernet
2wireless-port1
3wireless-port2
4wireless-port3
5wireless-port4
6wireless-port5
7wireless-port6
.1.3.6.1.4.1.4325.2.8.1.1.1
aniDevFilterIdentifier
A unique number which identifies the filtering rule.
Integer32r/w
Constraints:
range: 0-255
.1.3.6.1.4.1.4325.2.8.1.1.2
aniDevFilterName
A name which identifies the filtering rule.
OctetStringr/w
Constraints:
range: 0-31
.1.3.6.1.4.1.4325.2.8.1.1.3
aniDevFilterPriority
The priority for the filtering rule. It should be unique.
A higher number means higher priority.
Integer32r/w
Constraints:
range: 0-255
.1.3.6.1.4.1.4325.2.8.1.1.4
aniDevFilterActivationState
The state of the filtering rule.
Enumerationr/w
Enumerated Values:
1inactive
2active
.1.3.6.1.4.1.4325.2.8.1.1.5
aniDevFilterPermission
The permissions for the filtering rule.
Enumerationr/w
Enumerated Values:
1block
2pass
.1.3.6.1.4.1.4325.2.8.1.1.6
aniDevFilterIpProtocol
The IP protocol value.

List of well known IP Protocols:

Protocol Value
-------- -----
ICMP 1
IGMP 2
TCP 6
EGP 8
UDP 17
IPIP 94
RSVP 46
GRE 47
TCP or UDP 257
Integer32r/w
Constraints:
range: 0-257
.1.3.6.1.4.1.4325.2.8.1.1.7
aniDevFilterIpSaddr
The source IP address for this Filter.
IP Source Address and Subnet Mask go in a pair.
So if aniDevFilterIpSaddr is configured, then
aniDevFilterIpSmask should be configured as well and
vice versa.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.4325.2.8.1.1.8
aniDevFilterIpSmask
The Subnet mask for the source IP Address.
IP Source Address and Subnet Mask go in a pair.
So if aniDevFilterIpSaddr is configured, then
aniDevFilterIpSmask should be configured as well and
vice versa.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.4325.2.8.1.1.9
aniDevFilterIpDaddr
The destination IP address for this Filter.
IP Destination Address and Subnet Mask go in a pair.
So if aniDevFilterIpDaddr is configured, then
aniDevFilterIpDmask should be configured as well and
vice versa.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.4325.2.8.1.1.10
aniDevFilterIpDmask
The Subnet mask for the destination IP Address.
IP Destination Address and Subnet Mask go in a pair.
So if aniDevFilterIpDaddr is configured, then
aniDevFilterIpDmask should be configured as well and
vice versa.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.4325.2.8.1.1.11
aniDevFilterIpSourceStart
The lowest bound value for the source port number.

List of Some Well Known Ports:

Application Port
----------- ----
Ftp Data 20
Ftp Control 21
HTTP 80
IMAP2 143
SNMP 161
P…
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.4325.2.8.1.1.12
aniDevFilterIpSourceEnd
The highest bound value for the source port number.

Refer to the Well known ports list under
aniIpFilterIpSourceStart description.
In addition to the list, the user can enter any other
value as well.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.4325.2.8.1.1.13
aniDevFilterIpDestStart
The lowest bound value for the destination port number.

Refer to the Well known ports list under
aniIpFilterIpSourceStart description.
In addition to the list, the user can enter any other
value as well.…
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.4325.2.8.1.1.14
aniDevFilterIpDestEnd
The highest bound value for the destination port number.

Refer to the Well known ports list under
aniIpFilterIpSourceStart description.
In addition to the list, the user can enter any other
value as well…
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.4325.2.8.1.1.15
aniDevFilterIpOptions
The Mask value for the IP Options.
No Operation (0x000001)
Route Record (0x000002)
Time Stamp (0x000040)
MTU Probe (0x000008)
MTU Reply (0x000010)
Trace Route (0x000080)
Address Extension (0x004000)
Loose Sour…
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.4325.2.8.1.1.16
aniDevFilterIpSecOptions
The IP Security Value.
Enumerationr/w
Enumerated Values:
1top-secret
2secret
3confidential
4unclassified
.1.3.6.1.4.1.4325.2.8.1.1.17
aniDevFilterIcmpMsgType
The Message Type for ICMP Protocol.

This field is valid only if the aniDevFilterIpProtocol
is set to ICMP or not specified by the user.

Valid Range:

ICMP Message Type SubCo…
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.4325.2.8.1.1.18
aniDevFilterIcmpSubcode
The Subcode for ICMP Protocol.

This field is valid only if the aniDevFilterIpProtocol is
set to ICMP or not specified by the user.
If this field is specified then aniDevFilterIcmpMsgType
should already…
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.4325.2.8.1.1.19
aniDevFilterTcpFlags
The TCP Flags.

The valid range:
Urgent (0x20)
Acknowledgement (0x10)
Push (0x08)
Reset (0x04)
Sync (0x02)
Sync-Ack (0x12)
Finish (0x01)
Finish-Ack (0x11)

This field is valid only if the ani…
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.4325.2.8.1.1.20
aniDevFilterDestMacMask
The MAC address and mask value for destination.
OctetStringr/w
Constraints:
range: 0-12
.1.3.6.1.4.1.4325.2.8.1.1.21
aniDevFilterSourceMac
The MAC Address of the source.
SNMPv2-TCMacAddressr/w
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
.1.3.6.1.4.1.4325.2.8.1.1.22
aniDevFilterEnetType
The Ethernet type value in the ethernet header.

The maximum length of the ethernet packet is 1500 (0x5DC).
The value of the ethernet type must be greater than 1500.

Appicable for Ethernet V…
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.4325.2.8.1.1.23
aniDevFilterLlcDSAP
The DSAP (Destination Service Access Point) value
in LLC Header.

Valid Range: 0 to 0xFF
Applicable for IEEE 802.3 Frame Format only.
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.4325.2.8.1.1.24
aniDevFilterLlcSSAP
The SSAP (Source Service Access Point) value
in LLC Header.

Valid Range: 0 to 0xFF
Applicable for IEEE 802.3 Frame Format only.
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.4325.2.8.1.1.25
aniDevFilterLlcControl
The Control Byte of the LLC Header.

Valid Range: 0 to 0xFF
Applicable for IEEE 802.3 Frame Format only.
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.4325.2.8.1.1.26
aniDevFilterLocalCode
The Local Code for SNAP ethernet type.
Applicable for IEEE 802.3 Frame Format only.
DSAP should be set to 0xAA, SSAP should be set to 0xAA,
Control Byte should be set to 0x03.

Valid range: 0 - 0xFFF…
SNMPv2-TCDisplayStringr/w
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
.1.3.6.1.4.1.4325.2.8.1.1.27
aniDevFilterRowStatus
This represents the state of an entry within the
table. It is used to manage creation and deletion of rows.
The values include:
active(1)
notInService(2)
notReady(3)
createAndGo(4)
createAndWait(5)
destroy(6)
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.4325.2.8.1.1.28
aniDevFilterUserPriorityHi
The high priority byte of the user priority.

The user priority specifies the matching
parameters for the IEEE 802.1P user_priority
bits. An Ethernet packet with IEEE 802.1P
user_priority value 'priority…
Integer32r/w
Constraints:
range: 0-7
.1.3.6.1.4.1.4325.2.8.1.1.29
aniDevFilterUserPriorityLo
The low priority byte of the user priority.

The user priority specifies the matching
parameters for the IEEE 802.1P user_priority
bits. An Ethernet packet with IEEE 802.1P
user_priority value 'priority'…
Integer32r/w
Constraints:
range: 0-7
.1.3.6.1.4.1.4325.2.8.1.1.30
aniDevFilterVlanIdStart
The lower limit for the VLAN ID.
This value is used to specify the lower limit in the
range. Any IEEE 802.1P packet from a customer's VLAN
that falls into the range matches the rule.
aniDevFilterVlanIdStart and aniDevF…
Integer32r/w
Constraints:
range: 0-4095
.1.3.6.1.4.1.4325.2.8.1.1.31
aniDevFilterVlanIdEnd
The upper limit for the VLAN ID.
This value is used to specify the upper limit in the
range. Any IEEE 802.1P packet from a customer's VLAN
that falls into the range matches the rule.
aniUSClassifierVlanIdStart and aniU…
Integer32r/w
Constraints:
range: 0-4095
.1.3.6.1.4.1.4325.2.8.1.1.32
.1.3.6.1.4.1.4325.2.8.2 · 1 row entry · 2 columns
This table allows the user to enable/disable Filtering
per interface basis.
aniDevFilterIfEntry entry .1.3.6.1.4.1.4325.2.8.2.1
An entry containing objects for each IP Filter
interface configured.
Indexes
aniDevFilterIfIdentifier
Column Syntax OID
aniDevFilterIfIdentifier
The Interface Type.
On SU, only ethernet(1) and wireless-port1(2) are valid.

On BSU, ethernet(1) and all configured wireless interfaces
-- wireless-port1(2), wireless-port2(3), wireless-port3(4),
wirel…
Enumerationr/w
Enumerated Values:
1ethernet
2wireless-port1
3wireless-port2
4wireless-port3
5wireless-port4
6wireless-port5
7wireless-port6
.1.3.6.1.4.1.4325.2.8.2.1.1
aniDevFilterIfFlag
The flag to enable or disable filtering on
a particular interface.

The default value depends on whether a rule is configured
on the particular interface or not. When a rule is configured
on the interface…
Enumerationr/w
Enumerated Values:
1enable
2disable
.1.3.6.1.4.1.4325.2.8.2.1.2