MX-LFW-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
2
Rows
2
Columns
25

localRulesStatusTable

table
.0.2200.1.200 · 1 row entry · 10 columns
Open in standard view
Uses the media5 variant from /opt/observium/mibs/media5.
Command help
Walk localRulesStatusTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'MX-LFW-MIB' -M '/opt/observium/mibs/media5:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'MX-LFW-MIB::localRulesStatusTable' 
Local Rules Status
          
This table shows the local rules applied in the firewall.
localRulesStatusEntry row .0.2200.1.200.1
A row in table Local Rules Status.
Indexes
Column Syntax OID
localRulesStatusPriority
Rule priority

Unique identifier of the row in the table.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .0.2200.1.200.1.100
localRulesStatusSourceAddress
Source Address

Source address[/mask] criteria an incoming packet must have to
match this rule.

An empty string matches any address.
OctetString .0.2200.1.200.1.200
localRulesStatusSourcePort
Source Port

Source port[-port] criteria an incoming packet must have to
match this rule.

MinPort-MaxPort specifies a port range.

An empty string means that no filtering is ap…
OctetString .0.2200.1.200.1.300
localRulesStatusDestinationAddress
Destination Address

Destination address[/mask] criteria an incoming packet must
have to match this rule.

An empty string matches any address.
OctetString .0.2200.1.200.1.400
localRulesStatusDestinationPort
Destination Port

Destination port[-port] criteria an incoming packet must have
to match this rule.

MinPort-MaxPort specifies a port range.

An empty string means that no filte…
OctetString .0.2200.1.200.1.500
localRulesStatusProtocol
Protocol

Protocol criteria an incoming packet must have to match this
rule.

The protocol can be one of the following:

* All: Match packets using any protocols.
* Tcp: Onl…
Enumeration
Enumerated Values:
100all
200tcp
300udp
400icmp
 .0.2200.1.200.1.600
localRulesStatusBlacklistEnable
Blacklist Enable

Indicates if blacklisting is enabled for this rule.

* Enable: When a packet establishing a connection matches
this rule, the action is executed and the source IP addr…
MX-TCMxEnableState
Type Values:
0disable
1enable
 .0.2200.1.200.1.620
localRulesStatusRateLimitValue
Rate Limit Value

Number of new connections allowed to match this rule from a
single source IP address within a certain time period.
Unsigned32
Constraints:
range: 1-5000
 .0.2200.1.200.1.650
localRulesStatusRateLimitTimePeriod
Rate Limit Time Period

The time period on which to base the rate limit. This period is
expressed in seconds.

Ex.: a RateLimitValue of 10 and a RateLimitTimePeriod of 60
means a limit of 10 …
Unsigned32
Constraints:
range: 1-86400
 .0.2200.1.200.1.680
localRulesStatusAction
Action

Action taken when this rule matches a packet.

Action can be one of the following:

* Accept: Let the packet through.
* Reject: Send back an ICMP port unreachable in…
Enumeration
Enumerated Values:
100accept
200reject
300drop
400rateLimitPerSource
 .0.2200.1.200.1.700

localRulesTable

table
.0.2200.1.600 · 1 row entry · 15 columns
Open in standard view
Uses the media5 variant from /opt/observium/mibs/media5.
Command help
Walk localRulesTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'MX-LFW-MIB' -M '/opt/observium/mibs/media5:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'MX-LFW-MIB::localRulesTable' 
Local Rules
          
This table shows the configured local rules for the
firewall.
localRulesEntry row .0.2200.1.600.1
A row in table Local Rules.
Indexes
Column Syntax OID
localRulesPriority
Rule Priority

Unique identifier of the row in the table.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
 .0.2200.1.600.1.100
localRulesActivation
Activation

Current activation state for this rule.

* Enable: This rule is active in the firewall.
* Disable: This rule is not in the firewall.
MX-TCMxEnableStater/w
Type Values:
0disable
1enable
 .0.2200.1.600.1.200
localRulesSourceAddress
Source Address

Source address of the incoming packet using the following
format: address[/mask] or network interface name/.

The address can either be a network IP address (using /mask) or
o…
OctetStringr/w
Constraints:
range: 0-51
 .0.2200.1.600.1.300
localRulesSourcePort
Source Port

Source port of the incoming packet using the following format:
port[-port].

MinPort-MaxPort specifies a port range.

The default empty string means that no filteri…
OctetStringr/w
Constraints:
range: 0-11
 .0.2200.1.600.1.400
localRulesDestinationAddress
Destination Address

Destination address of the incoming packet using the following
format: address or network interface name.

The address must be one of the host IP addresses. Specifying a
…
OctetStringr/w
Constraints:
range: 0-51
 .0.2200.1.600.1.500
localRulesDestinationPort
Destination Port

Destination port of the incoming packet using the following
format: port[-port].

MinPort-MaxPort specifies a port range.

The default empty string means that …
OctetStringr/w
Constraints:
range: 0-11
 .0.2200.1.600.1.600
localRulesProtocol
Protocol

Protocol of the incoming packet.

The protocol can be one of the following:

* All: Match packets using any protocols.
* Tcp: Only match TCP packets.
* Udp: Only…
Enumerationr/w
Enumerated Values:
100all
200tcp
300udp
400icmp
 .0.2200.1.600.1.700
localRulesBlacklistEnable
Blacklist Enable

Indicates if blacklisting is enabled for this rule.

* Enable: When a packet establishing a connection matches
this rule, the action is executed and the source IP addr…
MX-TCMxEnableStater/w
Type Values:
0disable
1enable
 .0.2200.1.600.1.720
localRulesRateLimitValue
Rate Limit Value

Number of new connections allowed to match this rule from a
single source IP address within a certain time period.
Unsigned32r/w
Constraints:
range: 1-5000
 .0.2200.1.600.1.750
localRulesRateLimitTimePeriod
Rate Limit Time Period

The time period on which to base the rate limit. This period is
expressed in seconds.

Ex.: a RateLimitValue of 10 and a RateLimitTimePeriod of 60
means a limit of 10 …
Unsigned32r/w
Constraints:
range: 1-86400
 .0.2200.1.600.1.780
localRulesAction
Action

Action taken when this rule matches a packet.

Action can be one of the following:

* Accept: Let the packet through.
* Reject: Send back an ICMP port unreachable in…
Enumerationr/w
Enumerated Values:
100accept
200reject
300drop
400rateLimitPerSource
 .0.2200.1.600.1.800
localRulesUp
Up

Moves the current row upwards.
Enumerationr/w
Enumerated Values:
0noOp
10up
 .0.2200.1.600.1.900
localRulesDown
Down

Moves the current row downwards.
Enumerationr/w
Enumerated Values:
0noOp
10down
 .0.2200.1.600.1.1000
localRulesInsert
Insert

Inserts a new row before this row.
Enumerationr/w
Enumerated Values:
0noOp
10insert
 .0.2200.1.600.1.1100
localRulesDelete
Delete

Deletes this row.
Enumerationr/w
Enumerated Values:
0noOp
10delete
 .0.2200.1.600.1.1200