dsliteNATBindMappingFilterBehavior

Filtering behavior as described in Section 5 of RFC 4787.
              
endpointIndependent(0) accepts for translation packets
from all combinations of remote address and port
destined to the mapped external address and port via
the given external realm and using the given protocol.
              
addressDependent(1) accepts for translation packets from
all remote ports from the same remote source address
destined to the mapped external address and port via the
given external realm and using the given protocol.
              
addressAndPortDependent(2) accepts for translation only
those packets with the same remote source address, port,
and protocol incoming from the same external realm as
identified when the applicable port map entry was
created.
              
RFC 4787, REQ-8 recommends either endpointIndependent(0)
or addressDependent(1) filtering behavior, depending on
whether application friendliness or security takes
priority.
              
For the DS-Lite scenario, it must be
addressAndPortDependent(2).

MIB

DSLite-MIB

OID

.1.3.6.1.2.1.240.1.2.1.1.13

Type

column

Access

readonly

Status

current

Parent

dsliteNATBindEntry