cippfIpFilterAction
CISCO-IP-PROTOCOL-FILTER-MIB ·
.1.3.6.1.4.1.9.9.278.1.1.3.1.3
Object
column
r/w
Enumeration
If it is set to deny(1), all packets matching this filter will be discarded and scanning of the remainder of the filter list will be aborted. If it is set to permit(2), all packets matching this filter will be allowed for further bridging or routing processing.
Context
- MIB
- CISCO-IP-PROTOCOL-FILTER-MIB
- OID
.1.3.6.1.4.1.9.9.278.1.1.3.1.3- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- cippfIpFilterEntry
- Table
- cippfIpFilterTable
- Siblings
- 26
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | deny |
2 | permit |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cippfIpFilterIndex This index uniquely identifies the IP protocol filters
within this table and among all filter profiles. When
a new filter is added and if this value is '0', the
filter will be a… | column | Unsigned32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.1 |
| cippfIpFilterSrcPortLow If cippfIpFilterProtocol is udp or tcp, this is
the inclusive lower bound of the transport-layer
source port range that is to be matched, otherwise
it is ignored during matching… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.10 |
| cippfIpFilterSrcPortHigh If cippfIpFilterProtocol is udp or tcp, this is
the inclusive upper bound of the transport-layer
source port range that is to be matched, otherwise
it is ignored during matching… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.11 |
| cippfIpFilterDestPortLow If cippfIpFilterProtocol is udp or tcp, this is
the inclusive lower bound of the transport-layer
destination port range that is to be matched,
otherwise it is ignored during mat… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.12 |
| cippfIpFilterDestPortHigh If cippfIpFilterProtocol is udp or tcp, this is
the inclusive upper bound of the transport-layer
destination port range that is to be matched,
otherwise it is ignored during mat… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.13 |
| cippfIpFilterPrecedence The IP traffic precedence parameters in each packet
are used to guide the selection of the actual
service parameters when transmitting a datagram
through a particular network. … | column | Enumeration | .1.3.6.1.4.1.9.9.278.1.1.3.1.14 |
| cippfIpFilterTos This is the value to match to the Type of
Service (TOS) of the packet. The TOS values
ranges from '0' to '15'. The value '-1' matches
any TOS value. | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.15 |
| cippfIpFilterLogEnabled This object specifies whether filtered packets
will be logged by the filtering subsystem or not.
If it is true(1), then all packets will be logged.
If it is false(2), then no… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.278.1.1.3.1.16 |
| cippfIpFilterStatus This object controls and reflects the status of
rows in this table. Creation of rows must be done
via 'createAndGo' and this object will become 'active'
if the NMS performs a m… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.9.9.278.1.1.3.1.17 |
| cippfIpFilterICMPType This filter specifies the ICMP message type to be
matched. Setting this object to '-1' will make the
filtering match any ICMP message type. | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.18 |
| cippfIpFilterTCPEstablished This filter if 'true' specifies that for TCP protocol,
in an established connection, a match occurs if the TCP
datagram has the ACK,FIN,PSH,RST,SYN or URG control
bits set. If 'fa… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.278.1.1.3.1.19 |
| cippfIpFilterOrderPosition This object is used to order the IP protocol filters
within a filter profile. The filter with the lowest
order position number is applied first, that is
cippfIpFilterOrderPositi… | column | Unsigned32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.2 |
| cippfIpFilterFragments If 'true', this filter applies only to the second
and further fragments of fragmented packets.
If 'false', the filter will only match head
fragments or unfragmented packets.
No… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.278.1.1.3.1.20 |
| cippfIpFilterICMPCode This filter specifies the ICMP message code to be
matched. Setting this object to '-1' will make the
filtering match any ICMP code. | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.21 |
| cippfIpFilterSrcIPGroupName This object identifies the filter group
containing information about source IP
addresses and masks that need to be matched
for this filter. This value must match an entry
in c… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.22 |
| cippfIpFilterDstIPGroupName This object identifies the filter group
containing information about destination IP
addresses and masks that need to be matched
for this filter. This value must match an entry
… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.23 |
| cippfIpFilterProtocolGroupName This object identifies the filter group
containing information about internet protocol
numbers. This value must match an entry
in cfgFilterGroupTable whose cfgFilterGroupType
va… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.24 |
| cippfIpFilterSrcServiceGroupName This object identifies the filter group
containing information about port(TCP/UDP)
numbers. This value must match an entry
in cfgFilterGroupTable whose cfgFilterGroupType
value … | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.25 |
| cippfIpFilterDstServiceGroupName This object identifies the filter group
containing information about port(TCP/UDP)
numbers. This value must match an entry
in cfgFilterGroupTable whose cfgFilterGroupType
value … | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.26 |
| cippfIpFilterICMPGroupName This object identifies the filter group containing
information about ICMP message. This value must
match an entry in cfgFilterGroupTable whose
cfgFilterGroupType value is set t… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.27 |
| cippfIpFilterAddressType This is the IP address type of for the
cippfIpFilterSrcAddress, cippfIpFilterSrcMask,
cippfIpFilterDestAddress, and cippfIpFilterDestMask. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.278.1.1.3.1.4 |
| cippfIpFilterSrcAddress The source IP address to be matched for this filter.
A value of zero causes all source address to match.
The object value has to be consistent with the type
specified in cippfIpF… | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.5 |
| cippfIpFilterSrcMask This is the wildcard mask for the
cippfIpFilterSrcAddress bits that must match. 0 bits
in the mask indicate the corresponding bits in the
cippfIpFilterSrcAddress must match in … | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.6 |
| cippfIpFilterDestAddress The destination IP address to be matched for this
filter. A value of zero causes all source address
to match. The object value has to be consistent
with the type specified in… | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.7 |
| cippfIpFilterDestMask This is the wildcard mask for the
cippfIpFilterDestAddress bits that must match. 0
bits in the mask indicate the corresponding bits
in the cippfIpFilterDestAddress must match … | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.8 |
| cippfIpFilterProtocol This filter protocol object matches the Internet
Protocol Number in the packets. These IP numbers
are defined in the Network Working Group Request
for Comments (RFC) documents. … | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.9 |