tnSysIpAclPatternAction
TROPIC-SYSTEM-MIB ·
.1.3.6.1.4.1.7483.2.1.1.2.17.3.1.2
Object
column
r/w
Enumeration
Action to be taken on packets matching the
specified ACL pattern. Valid values are:
pass - allow the packet if it matches all the
pattern descriptors;
block - disallow the packet if it doesn't match
all the pattern descriptors.
log - log the packet if it matches all the
pattern descriptors.
Context
- MIB
- TROPIC-SYSTEM-MIB
- OID
.1.3.6.1.4.1.7483.2.1.1.2.17.3.1.2- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- tnSysIpAclPatternEntry
- Table
- tnSysIpAclPatternTable
- Siblings
- 17
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | pass |
2 | block |
3 | log |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| tnSysIpAclPatternID The identifier of the ACL pattern to be created.
It could be either an integer in the range of
(1-4000) or a string of up to 30 case-sensitive
alphanumeric characters, where the f… | column | OctetString | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.1 |
| tnSysIpAclPatternIpFragment IP Fragmentation. True means that the filtering
is done on all fragments, not just on the initial
one (assuming the following ones are ok). Valid
values are:
true - pattern is … | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.10 |
| tnSysIpAclPatternIcmpType ICMP Type identifier. It is applicable only
when IPPROTOCOL is ICMP. If specified, the
pattern will match only packets with this exact
ICMP type. Some of the most commonly used… | column | Integer32 | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.11 |
| tnSysIpAclPatternIcmpCode ICMP code field. It is applicable only when IP
protocol is ICMP and is used along with certain
ICMP types to further specify the message type.
It must also specify the ICMP type … | column | Integer32 | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.12 |
| tnSysIpAclPatternTcpEstablish TCP established flag. It matches a packet depending on
whether the TCP flags in the IP header correspond to the
established state. It is applicable only when IP Protocol
is TCP.… | column | Enumeration | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.13 |
| tnSysIpAclPatternRowStatus The status of pattern.
Set to 4 (createAndGo) to add pattern.
Set to 6 (destroy) to remove the pattern. | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.14 |
| tnSysIpAclPatternSrcPort TCP/UDP source port. When rangeEnd not zero,
it is used as range start. It is applicable only
when the IP Protocol is TCP or UDP. Some of the
commonly used ports are:
… | column | Integer32 | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.15 |
| tnSysIpAclPatternSystemDefault Indicates if ACL pattern is added by the system
or a user. Valid values are:
true - ACL pattern is added by the system.
false - ACL pattern is added by the user. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.16 |
| tnSysIpAclPatternSrcPortRangeEnd TCP/UDP source port range end. | column | Integer32 | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.17 |
| tnSysIpAclPatternDestPortRangeEnd TCP/UDP destination port range end. | column | Integer32 | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.18 |
| tnSysIpAclPatternICMPERROR ICMP error reporting behavior for blocked
packets. If no icmpError value is specified,
the behavior will be determined by the system
default setting. Valid values are:
true - s… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.3 |
| tnSysIpAclPatternSrcAddr Source IP address. It can be specified
explicitly to match only packets that originate
from a particular address or can be used along
with the SrcPrefix parameter to specify a ra… | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.4 |
| tnSysIpAclPatternSrcPrefix Source IP mask prefix. It's the reverse of a
subnet mask, where 0 indicates a position that
must be matched and 1 indicates a position that
does not matter. If the SrcAddr is sp… | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.5 |
| tnSysIpAclPatternDestAddr Destination IP address. It can be specified
explicitly to match only packets that originate
from a particular address or can be used along
with the DestPrefix parameter to specif… | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.6 |
| tnSysIpAclPatternDestPrefix Destination IP Mask Prefix. It's the reverse
of a subnet mask, where 0 indicates a position
that must be matched and 1 indicates a position
that does not matter. If the DestAddr… | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.7 |
| tnSysIpAclPatternDestPort TCP/UDP destination port.When rangeEnd not zero,
it is used as range start. It is applicable only
when the IP Protocol is TCP or UDP. Some of the
commonly used ports are:
20 F… | column | Integer32 | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.8 |
| tnSysIpAclPatternIpProtocol IP Protocol. It can be specified by explicit
protocol number (Integer, 0 to 255) or by keyword.
Some common protocol types are listed below:
ICMP - IP protocol is IC… | column | OctetString | .1.3.6.1.4.1.7483.2.1.1.2.17.3.1.9 |