cippfIpFilterOrderPosition
CISCO-IP-PROTOCOL-FILTER-MIB ·
.1.3.6.1.4.1.9.9.278.1.1.3.1.2
Object
column
r/w
Unsigned32
This object is used to order the IP protocol filters
within a filter profile. The filter with the lowest
order position number is applied first, that is
cippfIpFilterOrderPosition '1'. The order position
number among all filters of a profile is always
consecutive. The agent will automatically arrange
the order position to a consecutive manner for the
filter entries within the profile after each addition
(when the created entry moves to 'active' state) and
modification or deletion (when the active entry moves
out from 'active' state) of any filter.
For example, a new filter is added to an empty
profile with the cippfIpFilterOrderPosition '2' ,
the filter will be actually positioned to
cippfIpFilterOrderPosition '1' by the agent.
Moreover, if there are 3 filters in the profile
and their order positions are 1, 2, and 3. Adding
a new filter with any cippfIpFilterOrderPosition
greater than '3' will produce the same effect. The
new filter will actually be in position '4' because
the agent maintains the filters in consecutive order.
When a filter is removed from a profile, the filters
following this filter will be moved forward and
decrement their order position numbers. For example,
if there are 6 filters in the profile and their
order positions are 1, 2, 3, 4, 5, 6. Deleting
the filter of cippfIpFilterOrderPosition '4' will
cause the existing filters of
cippfIpFilterOrderPosition '5' and '6' to change
to '4' and '5' respectively.
When a filter is added to the order position of an
existing filter of the same profile, the existing
filter entry and all subsequent entries following it
will increment their cippfIpFilterOrderPosition.
This essentially move the existing filters towards
the end of the filter profile.
For example, if there are 6 filters in the profile,
and their cippfIpFilterOrderPosition values are 1,
2, 3, 4, 5, 6. If the user would like to add a new
one and specifies '4' to be the
cippfIpFilterOrderPosition of the new filter, the
existing filters of cippfIpFilterOrderPosition
values 4, 5, 6 will become 5, 6, 7.
The cippfIpFilterOrderPosition value '0' is a
special number meaning to append the filter
to the last filter of the profile. Continue with
our previous example, if another new filter is added
and the user specifies the cippfIpFilterOrderPosition
to be '0'. The new filter will actually be created
with cippfIpFilterOrderPosition equal to 8.
Finally, moving a filter within a profile will have
the same effect of first deleting and then adding the
filter to the new position. For example, if the
filter of cippfIpFilterOrderPosition 2 is moved to 4,
the filters originally at the
cippfIpFilterOrderPosition 3 and 4 will be moved
forward to 2 and 3 respectively and filters of all
other cippfIpFilterOrderPosition values will remain
unchanged.
Context
- MIB
- CISCO-IP-PROTOCOL-FILTER-MIB
- OID
.1.3.6.1.4.1.9.9.278.1.1.3.1.2- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- cippfIpFilterEntry
- Table
- cippfIpFilterTable
- Siblings
- 26
Syntax
Unsigned32
Values & Constraints
Object Constraints
range: 0-65535
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cippfIpFilterIndex This index uniquely identifies the IP protocol filters
within this table and among all filter profiles. When
a new filter is added and if this value is '0', the
filter will be a… | column | Unsigned32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.1 |
| cippfIpFilterSrcPortLow If cippfIpFilterProtocol is udp or tcp, this is
the inclusive lower bound of the transport-layer
source port range that is to be matched, otherwise
it is ignored during matching… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.10 |
| cippfIpFilterSrcPortHigh If cippfIpFilterProtocol is udp or tcp, this is
the inclusive upper bound of the transport-layer
source port range that is to be matched, otherwise
it is ignored during matching… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.11 |
| cippfIpFilterDestPortLow If cippfIpFilterProtocol is udp or tcp, this is
the inclusive lower bound of the transport-layer
destination port range that is to be matched,
otherwise it is ignored during mat… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.12 |
| cippfIpFilterDestPortHigh If cippfIpFilterProtocol is udp or tcp, this is
the inclusive upper bound of the transport-layer
destination port range that is to be matched,
otherwise it is ignored during mat… | column | INET-ADDRESS-MIBInetPortNumber | .1.3.6.1.4.1.9.9.278.1.1.3.1.13 |
| cippfIpFilterPrecedence The IP traffic precedence parameters in each packet
are used to guide the selection of the actual
service parameters when transmitting a datagram
through a particular network. … | column | Enumeration | .1.3.6.1.4.1.9.9.278.1.1.3.1.14 |
| cippfIpFilterTos This is the value to match to the Type of
Service (TOS) of the packet. The TOS values
ranges from '0' to '15'. The value '-1' matches
any TOS value. | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.15 |
| cippfIpFilterLogEnabled This object specifies whether filtered packets
will be logged by the filtering subsystem or not.
If it is true(1), then all packets will be logged.
If it is false(2), then no… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.278.1.1.3.1.16 |
| cippfIpFilterStatus This object controls and reflects the status of
rows in this table. Creation of rows must be done
via 'createAndGo' and this object will become 'active'
if the NMS performs a m… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.9.9.278.1.1.3.1.17 |
| cippfIpFilterICMPType This filter specifies the ICMP message type to be
matched. Setting this object to '-1' will make the
filtering match any ICMP message type. | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.18 |
| cippfIpFilterTCPEstablished This filter if 'true' specifies that for TCP protocol,
in an established connection, a match occurs if the TCP
datagram has the ACK,FIN,PSH,RST,SYN or URG control
bits set. If 'fa… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.278.1.1.3.1.19 |
| cippfIpFilterFragments If 'true', this filter applies only to the second
and further fragments of fragmented packets.
If 'false', the filter will only match head
fragments or unfragmented packets.
No… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.9.9.278.1.1.3.1.20 |
| cippfIpFilterICMPCode This filter specifies the ICMP message code to be
matched. Setting this object to '-1' will make the
filtering match any ICMP code. | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.21 |
| cippfIpFilterSrcIPGroupName This object identifies the filter group
containing information about source IP
addresses and masks that need to be matched
for this filter. This value must match an entry
in c… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.22 |
| cippfIpFilterDstIPGroupName This object identifies the filter group
containing information about destination IP
addresses and masks that need to be matched
for this filter. This value must match an entry
… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.23 |
| cippfIpFilterProtocolGroupName This object identifies the filter group
containing information about internet protocol
numbers. This value must match an entry
in cfgFilterGroupTable whose cfgFilterGroupType
va… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.24 |
| cippfIpFilterSrcServiceGroupName This object identifies the filter group
containing information about port(TCP/UDP)
numbers. This value must match an entry
in cfgFilterGroupTable whose cfgFilterGroupType
value … | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.25 |
| cippfIpFilterDstServiceGroupName This object identifies the filter group
containing information about port(TCP/UDP)
numbers. This value must match an entry
in cfgFilterGroupTable whose cfgFilterGroupType
value … | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.26 |
| cippfIpFilterICMPGroupName This object identifies the filter group containing
information about ICMP message. This value must
match an entry in cfgFilterGroupTable whose
cfgFilterGroupType value is set t… | column | CISCO-FILTER-GROUP-MIBCfgFilterGroupName | .1.3.6.1.4.1.9.9.278.1.1.3.1.27 |
| cippfIpFilterAction If it is set to deny(1), all packets matching
this filter will be discarded and scanning of the
remainder of the filter list will be aborted. If
it is set to permit(2), all pa… | column | Enumeration | .1.3.6.1.4.1.9.9.278.1.1.3.1.3 |
| cippfIpFilterAddressType This is the IP address type of for the
cippfIpFilterSrcAddress, cippfIpFilterSrcMask,
cippfIpFilterDestAddress, and cippfIpFilterDestMask. | column | INET-ADDRESS-MIBInetAddressType | .1.3.6.1.4.1.9.9.278.1.1.3.1.4 |
| cippfIpFilterSrcAddress The source IP address to be matched for this filter.
A value of zero causes all source address to match.
The object value has to be consistent with the type
specified in cippfIpF… | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.5 |
| cippfIpFilterSrcMask This is the wildcard mask for the
cippfIpFilterSrcAddress bits that must match. 0 bits
in the mask indicate the corresponding bits in the
cippfIpFilterSrcAddress must match in … | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.6 |
| cippfIpFilterDestAddress The destination IP address to be matched for this
filter. A value of zero causes all source address
to match. The object value has to be consistent
with the type specified in… | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.7 |
| cippfIpFilterDestMask This is the wildcard mask for the
cippfIpFilterDestAddress bits that must match. 0
bits in the mask indicate the corresponding bits
in the cippfIpFilterDestAddress must match … | column | INET-ADDRESS-MIBInetAddress | .1.3.6.1.4.1.9.9.278.1.1.3.1.8 |
| cippfIpFilterProtocol This filter protocol object matches the Internet
Protocol Number in the packets. These IP numbers
are defined in the Network Working Group Request
for Comments (RFC) documents. … | column | Integer32 | .1.3.6.1.4.1.9.9.278.1.1.3.1.9 |