caqIpAceProtocolMatchCriteria
CISCO-CATOS-ACL-QOS-MIB ·
.1.3.6.1.4.1.9.9.179.1.3.2.1.20
Object
column
r/w
Enumeration
Indicates what field in the packet header for ICMP or IGMP
or TCP protocol or IPv4 ESP (Enscrypted Security Payload)
to be matched.
none(1) = no comparison is to be done for ICMP/IGMP/TCP/ESP.
matchIgmpType(2) means that the Type field of IGMP protocol
packet header needs to be matched. If this value is specified,
the caqIpAceIgmpType object in the same row should be
configured.
matchIcmpType(3) means that the Type field of ICMP protocol
packet header needs to be matched. If this value is specified,
the caqIpAceIcmpType object in the same row should be
configured.
matchIcmpTypeAndCode(4) means that both the Type and Code
fields of ICMP protocol packet header need to be matched.
If this value is specified, the caqIpAceIcmpType and
caqIpAceIcmpCode object in the same row should be configured.
matchEstablished(5) means that a match occurs if the TCP packet
has the ACK or RST bits set. The non matching case is that of
the intial TCP packet to form a connection.
matchSecurityId(6) means that the Security Association
Identifier field of IPv4 ESP packet header needs to be matched.
If this value is specified, the caqIpAceSecurityId object in
the same row should be configured.
matchEapoudp(7) means that this ACE needs to be matched
against the criteria for EAP (Extensible Authentication
Protocol) over UDP purpose.
matchUrlRedirect(8) means that this ACE needs to be matched
against the criteria for URL redirection purpose.
Context
- MIB
- CISCO-CATOS-ACL-QOS-MIB
- OID
.1.3.6.1.4.1.9.9.179.1.3.2.1.20- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- caqIpAceEntry
- Table
- caqIpAceTable
- Siblings
- 29
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | none |
2 | matchIgmpType |
3 | matchIcmpType |
4 | matchIcmpTypeAndCode |
5 | matchEstablished |
6 | matchSecurityId |
7 | matchEapoudp |
8 | matchUrlRedirect |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| caqIpAceFeature Indicates whether this entry is a Qos ACL or Security ACL.
ACEs belongs to the same ACL should have the same value
for this object. | column | Enumeration | .1.3.6.1.4.1.9.9.179.1.3.2.1.1 |
| caqIpAceSrcPort The source port number of the TCP or UDP protocol. If the
caqIpAceSrcPortOp object in the same row is range(6), this
object will be the starting port number of the port range.
Thi… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.10 |
| caqIpAceSrcPortRange The source port number of the TCP or UDP protocol. If the
caqIpAceSrcPortOp object in the same row is range(6), this
object will be the ending port number of the port range.
This … | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.11 |
| caqIpAceDestIp The specified destination IP address. The packet's destination
address is AND-ed with the value of caqIpAceDestIpMask and then
compared against the value of this object. If this o… | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.179.1.3.2.1.12 |
| caqIpAceDestIpMask The specified destination IP address mask. | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.179.1.3.2.1.13 |
| caqIpAceDestPortOp Indicates how a packet's destination TCP/UDP port number is
to be compared.
If the caqIpAceProtocolType object in the same row does not
indicate TCP or UDP, this ob… | column | Enumeration | .1.3.6.1.4.1.9.9.179.1.3.2.1.14 |
| caqIpAceDestPort The destination port number of the TCP or UDP protocol.
If the caqIpAceDestPortOp object in the same row is range(6),
this object will be the starting port number of the port rang… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.15 |
| caqIpAceDestPortRange The destination port number of the TCP or UDP protocol.
If the caqIpAceDestPortOp object in the same row is range(6),
this object will be the ending port number of the port range.… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.16 |
| caqIpAceTosMatchCriteria Indicates what field of Tos octet in the packet header
to be matched.
none(1) means that there is no need to match the ToS octet.
matchDscp(2) means… | column | Enumeration | .1.3.6.1.4.1.9.9.179.1.3.2.1.17 |
| caqIpAceIpPrec Specifies the IP precedence value to be matched against.
This object could not be configured when the status of the
entry, caqIpAceStatus, is active(1).
The value… | column | CaqIpPrecedence | .1.3.6.1.4.1.9.9.179.1.3.2.1.18 |
| caqIpAceDscp Specifies the Dscp value to be matched against.
This object could not be configured when the status of the
entry, caqIpAceStatus, is active(1). Packets can be matched
the DSCP le… | column | CISCO-QOS-PIB-MIBDscp | .1.3.6.1.4.1.9.9.179.1.3.2.1.19 |
| caqIpAclName The name of an ACL. Within a feature (qos or security), the
name is unique across all of the ACL tables that identifies
the list to which the entry belongs in the device. | column | CaqAclName | .1.3.6.1.4.1.9.9.179.1.3.2.1.2 |
| caqIpAceIcmpType Indicates the message type of ICMP packets. The type is
a number from 0 to 255.
The value of this object is ignored whenever the value of
caqIpAceProtocolMatchCri… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.21 |
| caqIpAceIcmpCode Indicates the message code of ICMP packets. The code is
a number from 0 to 255.
The value of this object is ignored whenever the value of
caqIpAceProtocolMatchCri… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.22 |
| caqIpAceIgmpType Indicates the message type of IGMP packets. The code is
a number from 0 to 15.
The value of this object is ignored whenever the value of
caqIpAceProtocolMatchCriti… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.23 |
| caqIpAceOrderPosition The ordering position of this ACE in the ACL. If this entry
is not in active(1) state, this object has value of 0. | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.24 |
| caqIpAceBeforePosition The object is to control the position of an ACE in the ACL.
Indicates the order position of a new ACE before an active ACE
which is already in the ACL. It means that the new ACE … | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.25 |
| caqIpAceStatus The status of this IP ACE conceptual row entry. This object is
used to manage creation, deletion and modification of rows in
this table.
An entry may not exist in… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.9.9.179.1.3.2.1.26 |
| caqIpAceSecurityId Indicates the Security Association Identifier of IPv4 ESP
packets.
The value of this object is ignored whenever the value of
caqIpAceProtocolMatchCritial object i… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.27 |
| caqIpAceSrcGroup Indicates the source group name which the source IP address
in the IP packet header belongs to. If this object is
configured, the value of caqIpAceProtocolType object in the
same… | column | SNMP-FRAMEWORK-MIBSnmpAdminString | .1.3.6.1.4.1.9.9.179.1.3.2.1.28 |
| caqIpAceDestGroup Indicates the destination group name which the destination
IP address in the IP packet header belongs to. If this object
is configured, the value of caqIpAceProtocolType object in… | column | SNMP-FRAMEWORK-MIBSnmpAdminString | .1.3.6.1.4.1.9.9.179.1.3.2.1.29 |
| caqIpAceIndex The index of an ACE within an ACL. | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.3 |
| caqIpAceType Indicates the ACE type. | column | Enumeration | .1.3.6.1.4.1.9.9.179.1.3.2.1.30 |
| caqIpAceMatchedAction Indicates the action to be taken if a packet matches this ACE.
If the value of this ACE's caqIpAceFeature object is: 'qos(1)',
then this object contains the index of an active row… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.4 |
| caqIpAceProtocolType The protocol number field in the IP header used to indicate
the higher layer protocol as specified in RFC 1700. A value
value of 0 matches every IP packet.
For ex… | column | Unsigned32 | .1.3.6.1.4.1.9.9.179.1.3.2.1.5 |
| caqIpAceAddrType The type of IP address used by this ACE entry. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.179.1.3.2.1.6 |
| caqIpAceSrcIp The specified source IP address. The packet's source address is
AND-ed with the value of caqIpAceSrcIpMask and then compared
against the value of this object. If this object value… | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.179.1.3.2.1.7 |
| caqIpAceSrcIpMask The specified source IP address mask. | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.179.1.3.2.1.8 |
| caqIpAceSrcPortOp Indicates how a packet's source TCP/UDP port number is
to be compared.
If the caqIpAceProtocolType object in the same row does not
indicate TCP or UDP, this object … | column | Enumeration | .1.3.6.1.4.1.9.9.179.1.3.2.1.9 |