networkRulesAction
MX-NFW-MIB ·
.0.2250.1.600.1.800
Object
column
r/w
Enumeration
Action
Action taken when this rule matches a packet.
Action can be one of the following:
* Accept: Let the packet through.
* Reject: Send back an ICMP port unreachable in response to
the matched packet, the packet is then dropped.
* Drop: The packet is dropped without any notification.
* RateLimitPerSource: Drop the packets received from a given
source IP address when it exceeds a configurable rate. The
rate is set using the RateLimitValue and
RateLimitTimePeriod parameters.
Note: This action is only allowed when the ConnectionState
parameter is set to 'New'.
Context
- MIB
- MX-NFW-MIB
- OID
.0.2250.1.600.1.800- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- networkRulesEntry
- Table
- networkRulesTable
- Siblings
- 15
Syntax
Enumeration
Values & Constraints
Enumerated Values
100 | accept |
200 | reject |
300 | drop |
400 | rateLimitPerSource |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| networkRulesPriority Rule Priority
Unique identifier of the row in the table. | column | SNMPv2-SMIUnsigned32 | .0.2250.1.600.1.100 |
| networkRulesDown Down
Moves the current row downwards. | column | Enumeration | .0.2250.1.600.1.1000 |
| networkRulesInsert Insert
Inserts a new row before this row. | column | Enumeration | .0.2250.1.600.1.1100 |
| networkRulesDelete Delete
Deletes this row. | column | Enumeration | .0.2250.1.600.1.1200 |
| networkRulesActivation Activation
Activates this rule.
* Enable: This rule is active in the firewall.
* Disable: This rule is not in the firewall. | column | MX-TCMxEnableState | .0.2250.1.600.1.200 |
| networkRulesSourceAddress Source Address
Source address of the incoming packet using the following
format: address[/mask] or network interface name/.
Address can be either a n… | column | OctetString | .0.2250.1.600.1.300 |
| networkRulesSourcePort Source Port
Source port of the incoming packet using the following format:
port[-port].
MinPort-MaxPort specifies a port range.
The de… | column | OctetString | .0.2250.1.600.1.400 |
| networkRulesDestinationAddress Destination Address
Destination address of the incoming packet using the following
format: address[/mask] or network interface name/.
The address can… | column | OctetString | .0.2250.1.600.1.500 |
| networkRulesDestinationPort Destination Port
Destination port of the incoming packet using the following
format: port[-port].
MinPort-MaxPort specifies a port range.
… | column | OctetString | .0.2250.1.600.1.600 |
| networkRulesProtocol Protocol
Protocol of the incoming packet.
The protocol can be one of the following:
* All: Match packets using any protocols.
* Tc… | column | Enumeration | .0.2250.1.600.1.700 |
| networkRulesBlacklistEnable Blacklist Enable
Indicates if blacklisting is enabled for this rule.
* Enable: When a packet establishing a connection matches
this rule, the a… | column | MX-TCMxEnableState | .0.2250.1.600.1.720 |
| networkRulesRateLimitValue Rate Limit Value
Number of packets allowed to match this rule from a single
source IP address within a certain time period. | column | Unsigned32 | .0.2250.1.600.1.730 |
| networkRulesRateLimitTimePeriod Rate Limit Time Period
The time period on which to base the rate limit. This period is
expressed in seconds.
Ex.: a RateLimitValue of 10 and a RateLi… | column | Unsigned32 | .0.2250.1.600.1.740 |
| networkRulesConnectionState Connection State
Connection state associated with the incoming packet.
The connection state can be one of the following:
* All: Matc… | column | Enumeration | .0.2250.1.600.1.750 |
| networkRulesUp Up
Moves the current row upwards. | column | Enumeration | .0.2250.1.600.1.900 |