ALU-SECURITY-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view

Tables

Rows

Columns

425

aluZoneConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4 · 1 row entry · 19 columns

Open in standard view

The aluZoneConfigTable has an entry for each 
zone configured on the system.

aluZoneConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1

Each row entry represents a zone entry.

Indexes

aluZoneConfigId

Column Syntax OID

aluZoneConfigId

The value of the object aluZoneConfigId specifies
the unique id of the Zone. The Id must be
unique within the system.

Unsigned32

Constraints:
range: 1-65534

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.1

aluZoneConfigName

The value of the object aluZoneConfigName
specifies the name of the Zone.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.2

aluZoneConfigRowStatus

The value of aluZoneConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluZoneConfigTable. aluZoneConfigRowStatus does not support
createAndWait. The status can only be acti…

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.3

aluZoneConfigDescription

Description of this zone.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.4

aluZoneConfigControlApply

This object controls the use of commit of the Zone Policy.

This object always reads none(1).

When set to initialize(2), the objects in standby zone
are set to the current active Operational…

Enumerationr/w

Enumerated Values:

1	none
2	initialize
3	commit

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.5

aluZoneConfigType

Indicates the type of zone.

TZoneTyper/w

Textual Convention: TZoneType Enumeration

Type Values:

0	unknown
1	network
2	service
3	global

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.6

aluZoneConfigSvcId

Specifies the service this zone belongs to when zone type is 'service'.

TIMETRA-TC-MIBTmnxServIdr/w

Textual Convention: TIMETRA-TC-MIBTmnxServId Unsigned32

Type Constraints:
range: 0..2148278381

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.7

aluZoneConfigState

State of the Policy of this zone.

TPlcyState

Textual Convention: TPlcyState Enumeration

Type Values:

0	unknown
1	empty
2	draft
3	commited

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.8

aluZoneConfigBypass

The value of aluZoneConfigBypass specifies whether this zone is being bypassed.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.9

aluZoneConfigInTcpSessLimit

The value of the object aluZoneConfigInTcpSessLimit
indicates the number of permitted active inbound sessions
with protocol TCP. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.10

aluZoneConfigInUdpSessLimit

The value of the object aluZoneConfigInUdpSessLimit
indicates the number of permitted active inbound sessions
with protocol UDP. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.11

aluZoneConfigInIcmpSessLimit

The value of the object aluZoneConfigInIcmpSessLimit
indicates the number of permitted active in sessions with
protocol ICMP. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.12

aluZoneConfigInOthSessLimit

The value of the object aluZoneConfigOthSessLimit
indicates the number of permitted active in sessions of all
other protocols. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.13

aluZoneConfigOutTcpSessLimit

The value of the object aluZoneConfigOutTcpSessLimit
indicates the number of permitted active outbound sessions
with protocol TCP. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.14

aluZoneConfigOutUdpSessLimit

The value of the object aluZoneConfigOutUdpSessLimit
indicates the number of permitted active outbound sessions
with protocol UDP. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.15

aluZoneConfigOutIcmpSessLimit

The value of the object aluZoneConfigOutIcmpSessLimit
indicates the number of permitted active out sessions with
protocol ICMP. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.16

aluZoneConfigOutOthSessLimit

The value of the object aluZoneConfigOutOthSessLimit
indicates the number of permitted active out sessions of all
other protocols. A value of 0 indicates that there is no
limit.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.17

aluZoneConfigLogId

The value of the object aluZoneConfigLogId
indicates the log-id for security logging.

TSecurityLogIdr/w

Textual Convention: TSecurityLogId Unsigned32

Type Constraints:
range: 0..100

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.18

aluZoneConfigAutoBind

The value of aluZoneConfigAutoBind specifies whether this zone is being used to enforce policy
on traffic to/from MP-BGP auto-binding and spoke-sdps. This configuration is only permitted on
VPRN zones and can only be e…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.4.1.19

aluZonePlcyConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.5 · 1 row entry · 3 columns

Open in standard view

The aluZonePlcyConfigTable has an entry for each
policy configured on a particular zone.

aluZonePlcyConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.5.1

Each row entry represents a particular policy entry.

Indexes

aluZoneConfigId aluZonePlcyConfigEntryId

Column Syntax OID

aluZonePlcyConfigEntryId

The value of the object aluZonePlcyConfigEntryId
specifies the unique id of the Zone entries within the zone.
This value must always be 1 in this release.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.5.1.1

aluZonePlcyConfigRowStatus

The value of aluZonePlcyConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluZonePlcyConfigTable. aluZonePlcyConfigRowStatus
does not support createAndWait. The status can …

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.5.1.2

aluZonePlcyConfigSecPlcyId

The value of aluZonePlcyConfigSecPlcyId specifies the
id of the security policy defined globally in the system.

Unsigned32r/w

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.5.1.3

aluZoneNatPoolConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.6 · 1 row entry · 6 columns

Open in standard view

The aluZoneNatPoolConfigTable has an entry for each
nat-pool of ip addresses and ports configured on a particular zone.

aluZoneNatPoolConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.6.1

Each row entry represents a particular policy entry.

Indexes

aluZoneConfigId aluZoneNatPoolConfigId

Column Syntax OID

aluZoneNatPoolConfigId

The value of the object aluZoneNatPoolConfigId
specifies the unique id of the NAT-Pool entries within the zone.

Unsigned32

Constraints:
range: 1-100

.1.3.6.1.4.1.6527.6.1.2.2.17.1.6.1.1

aluZoneNatPoolConfigName

The value of the object aluZoneNatPoolConfigName
specifies the name of the NAT Pool.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.1.6.1.2

aluZoneNatPoolConfigRowStatus

The value of aluZoneNatPoolConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluZoneNatPoolConfigTable. aluZoneNatPoolConfigRowStatus
does not support createAndWait. The st…

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.6.1.3

aluZoneNatPoolConfigDescription

Description of this nat pool.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.6.1.4

aluZoneNatPoolConfigType

Specifies if this pool is direct-mapped or pooled.

TPoolTyper/w

Textual Convention: TPoolType Enumeration

Type Values:

0	unknown
1	srcNatPool

.1.3.6.1.4.1.6527.6.1.2.2.17.1.6.1.5

aluZoneNatPoolConfigDirection

Specifies the zone .

Enumerationr/w

Enumerated Values:

0	unknown
1	zoneInbound
2	zoneOutbound

.1.3.6.1.4.1.6527.6.1.2.2.17.1.6.1.6

aluZoneNatPoolParamsConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7 · 1 row entry · 9 columns

Open in standard view

The aluZoneNatPoolParamsConfigTable has an entry NAT Pool 
params entry configured on this system.

aluZoneNatPoolParamsConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1

Each row entry represents a particular NAT Pool params entry.

Indexes

aluZoneConfigId aluZoneNatPoolConfigId aluZoneNatPoolParamsConfigEntryId

Column Syntax OID

aluZoneNatPoolParamsConfigEntryId

The value of aluZoneNatPoolParamsConfigEntryId specifies the
3rd index for the entry.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.1

aluZoneNatPoolParamsConfigRowStatus

The value of aluZoneNatPoolParamsConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluZoneNatPoolParamsConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.2

aluZoneNatPoolParamsConfigIPAddrValue1

The value of the object
aluZoneNatPoolParamsConfigIPAddrValue1 specifies
the starting range of IP address of the NAT pool.

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.3

aluZoneNatPoolParamsConfigIPAddrValue2

The value of the object
aluZoneNatPoolParamsConfigIPAddrValue2 specifies
the ending range of IP address of the NAT pool.

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.4

aluZoneNatPoolParamsConfigIPOperator

The operator specifies the manner in which
aluZoneNatPoolParamsConfigIPAddrValue1 and
aluZoneNatPoolParamsConfigIPAddrValue2
are to be used. The value of these below 2 objects and
aluZoneNatPoolParamsConfigIPOperator i…

TIPOperatorr/w

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.5

aluZoneNatPoolParamsConfigIPInterfaceIndex

The aluZoneNatPoolParamsConfigIPInterfaceIndex specifies
the index of the interface that the primary-address of that
interface is to be used in the NAT pool.
The interface must exist in the same vRtr that the NAT pool
r…

IF-MIBInterfaceIndexOrZeror/w

Textual Convention: IF-MIBInterfaceIndexOrZero Integer32

Type Constraints:
range: 0..2147483647

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.6

aluZoneNatPoolParamsConfigPortOperator

The operator specifies the manner in which
aluZoneNatPoolParamsConfigPortValue1 and
aluZoneNatPoolParamsConfigPortValue2
are to be used. The value of these below 2 objects and
aluZoneNatPoolParamsConfigPortOperator is …

TIMETRA-TC-MIBTTcpUdpPortOperatorr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPortOperator Enumeration

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.7

aluZoneNatPoolParamsConfigPortValue1

TCP/UDP port value1. The value of this object is used as per the
description for aluZoneNatPoolParamsConfigPortOperator.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.8

aluZoneNatPoolParamsConfigPortValue2

TCP/UDP port value2. The value of this object is used as per the
description for aluZoneNatPoolParamsConfigPortOperator.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.7.1.9

aluSecPlcyConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.8 · 1 row entry · 4 columns

Open in standard view

The aluSecPlcyConfigTable has an entry for each
security policy configured globally on this system.

aluSecPlcyConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.8.1

Each row entry represents a particular security policy.

Indexes

aluSecPlcyConfigId

Column Syntax OID

aluSecPlcyConfigId

The value of the object aluSecPlcyConfigId
specifies the unique policy id.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.8.1.1

aluSecPlcyConfigRowStatus

The value of aluSecPlcyConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecPlcyConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.8.1.2

aluSecPlcyConfigName

Name of the security policy.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.1.8.1.3

aluSecPlcyConfigDescription

Description of this security policy.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.8.1.4

aluSecPlcyParamsConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9 · 1 row entry · 32 columns

Open in standard view

The aluSecPlcyParamsConfigTable has an entry for each
rule configured as part of a security policy.

aluSecPlcyParamsConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1

Each row entry represents a particular rule entry.

Indexes

aluSecPlcyConfigId aluSecPlcyParamsConfigRuleId

Column Syntax OID

aluSecPlcyParamsConfigRuleId

The value of aluSecPlcyParamsConfigRuleId specifies the
index of the rule within the security policy.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.1

aluSecPlcyParamsConfigRowStatus

The value of aluSecPlcyParamsConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecPlcyParamsConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.2

aluSecPlcyParamsConfigDescription

Description of this rule.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.3

aluSecPlcyParamsConfigMatchSrcIPAddrValue1

The value of the object aluSecPlcyParamsConfigMatchSrcIPAddrValue1
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose sour…

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.4

aluSecPlcyParamsConfigMatchSrcIPAddrValue2

The value of the object aluSecPlcyParamsConfigMatchSrcIPAddrValue2
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose sou…

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.5

aluSecPlcyParamsConfigMatchSrcIPOperator

The operator specifies the manner in which
aluSecPlcyParamsConfigMatchSrcIPAddrValue1 and
aluSecPlcyParamsConfigMatchSrcIPAddrValue2
are to be used. The value of these below 2 objects and
aluSecPlcyParamsConfigMatchSrc…

TIPOperatorr/w

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.6

aluSecPlcyParamsConfigMatchSrcIPHostGroup

The value of the object aluSecPlcyParamsConfigMatchSrcIPHostGroup
specifies the host group name, where the group name is a collection
of IP addresses. When configured and activated, filter
policy will be applied to …

Unsigned32r/w

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.7

aluSecPlcyParamsConfigMatchDstIPAddrValue1

The value of the object aluSecPlcyParamsConfigMatchDstIPAddrValue1
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose sour…

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.8

aluSecPlcyParamsConfigMatchDstIPAddrValue2

The value of the object aluSecPlcyParamsConfigMatchDstIPAddrValue2
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose sou…

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.9

aluSecPlcyParamsConfigMatchDstIPOperator

The operator specifies the manner in which
aluSecPlcyParamsConfigMatchDstIPAddrValue1 and
aluSecPlcyParamsConfigMatchDstIPAddrValue2
are to be used. The value of these below 2 objects and
aluSecPlcyParamsConfigMatchDst…

TIPOperatorr/w

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.10

aluSecPlcyParamsConfigMatchDstIPHostGroup

The value of the object aluSecPlcyParamsConfigMatchDstIPHostGroup
specifies the host group name, where the group name is a collection
of IP addresses. When configured and activated, filter
policy will be applied to …

Unsigned32r/w

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.11

aluSecPlcyParamsConfigMatchProtocol

IP protocol to match. set to -1 to disable matching IP protocol. If
the protocol is changed the protocol specific parameters are reset.

TIMETRA-TC-MIBTIpProtocolr/w

Textual Convention: TIMETRA-TC-MIBTIpProtocol Integer32

Type Constraints:
range: -2..255

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.12

aluSecPlcyParamsConfigMatchSrcPortValue1

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.13

aluSecPlcyParamsConfigMatchSrcPortValue2

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.14

aluSecPlcyParamsConfigMatchSrcPortOp

Source TCP/UDP port operator.

TIMETRA-TC-MIBTOperatorr/w

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.15

aluSecPlcyParamsConfigMatchDstPortValue1

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.16

aluSecPlcyParamsConfigMatchDstPortValue2

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.17

aluSecPlcyParamsConfigMatchDstPortOp

Destination TCP/UDP port operator.

TIMETRA-TC-MIBTOperatorr/w

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.18

aluSecPlcyParamsConfigMatchAppGroup

The value of the object aluSecPlcyParamsConfigMatchAppGroup
specifies the application group name, where the group name is a
collection of protocol-id/src port/dest port. When configured
and activated, this filter wi…

Unsigned32r/w

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.19

aluSecPlcyParamsConfigMatchIcmpCode

Icmp code to be matched. aluSecPlcyParamsConfigMatchIcmpCode
complements the object aluSecPlcyParamsConfigMatchIcmpType.
Both of them need to be set to actually
enable ICMP matching. The value -1 means Icmp code match…

Integer32r/w

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.20

aluSecPlcyParamsConfigMatchIcmpType

Icmp type to be matched. aluSecPlcyParamsConfigMatchIcmpType
complements the object aluSecPlcyParamsConfigMatchIcmpCode.
Both of them need to be set to actually
enable ICMP matching. The value -1 means Icmp code match…

Integer32r/w

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.21

aluSecPlcyParamsConfigMatchIgmpType

Type of IGMP to be configured

Integer32r/w

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.22

aluSecPlcyParamsConfigMatchFlowDirection

This object specifies the direction of the packet flow
for which the security filter is to be applied.
in is equivalent to ingress flow,
out is equivalent to egress flow,
both is equivalent to both ingress and egress fl…

Enumerationr/w

Enumerated Values:

1	zoneInbound
2	zoneOutbound
3	both

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.23

aluSecPlcyParamsConfigProfileId

The value of the object specifies profile of this flow

Unsigned32r/w

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.24

aluSecPlcyParamsConfigConcurrentFlowLimit

The value of the object specifies the number of sessions (flows)
that can be active concurrently.

Unsigned32r/w

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.25

aluSecPlcyParamsConfigCreateRevDirFlow

The value of aluSecPlcyParamsConfigCreateRevDirFlow specifies
whether return direction of the session is created or not

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.26

aluSecPlcyParamsConfigAction

This object specifies whether the packet needs to be
passed or dropped if it satisfies the rule condition.

Enumerationr/w

Enumerated Values:

0	forward
1	drop
2	nat
3	reject

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.27

aluSecPlcyParamsConfigMatchLocal

The value of aluSecPlcyParamsConfigMatchLocal specifies
whether to match traffic destined to node

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.28

aluSecPlcyParamsConfigActionNatDstIPAddr

The value of the object aluSecPlcyParamsConfigActionNatDstIPAddr
specifies the Dst IP address of the packet after NAT has been
performed

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.29

aluSecPlcyParamsConfigActionNatDstPort

NAT Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.30

aluSecPlcyParamsConfigLogControl

Log control for this rule. There are three options:
(1) suppress - (DEFAULT) Any events generated from this
rule will be suppressed.
(2) zone - Send any events generated from this rule
…

Enumerationr/w

Enumerated Values:

1	suppress
2	zone
3	log

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.31

aluSecPlcyParamsConfigLogId

Log for policy to be logged. This can only be set

TSecurityLogIdr/w

Textual Convention: TSecurityLogId Unsigned32

Type Constraints:
range: 0..100

.1.3.6.1.4.1.6527.6.1.2.2.17.1.9.1.32

aluSecProfileConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10 · 1 row entry · 29 columns

Open in standard view

The aluSecProfileConfigTable has an entry for each
security profile configured globally on this system.

aluSecProfileConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1

Each row entry represents a particular security profile.

Indexes

aluSecProfileConfigId

Column Syntax OID

aluSecProfileConfigId

The value of the object aluSecProfileConfigId
specifies the unique profile id.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.1

aluSecProfileConfigRowStatus

The value of aluSecProfileConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecProfileConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.2

aluSecProfileConfigName

Name of the security profile.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.3

aluSecProfileConfigDescription

Description of this security profile.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.4

aluSecProfileConfigTcpSynTimeout

The value of the object specifies the number of seconds a
TCP session can wait for a SYN before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 6-86400

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.5

aluSecProfileConfigTcpWaitTimeout

The value of the object specifies the number of seconds a
TCP session can remain in time wait before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 0-240

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.6

aluSecProfileConfigTcpTransTimeout

The value of the object specifies the number of seconds a
TCP session can remain be transitory before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 60-86400

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.7

aluSecProfileConfigTcpEstTimeout

The value of the object specifies the number of seconds a
TCP session has to reach established before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 60-86400

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.8

aluSecProfileConfigUdpTimeout

The value of the object specifies the number of seconds a
UDP session can remain idle before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 60-86400

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.9

aluSecProfileConfigUdpInitTimeout

The value of the object specifies the number of seconds a
UDP session can remain idle after recieving the first packet
before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 10-300

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.10

aluSecProfileConfigUdpDnsTimeout

The value of the object specifies the number of seconds a
DNS request can take to recieve a response
before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 15-86400

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.11

aluSecProfileConfigIcmpTimeout

The value of the object specifies the number of seconds an
ICMP request can take to recieve a response
before being cleaned up.

secondsUnsigned32r/w

Constraints:
range: 60-240

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.12

aluSecProfileConfigOtherTimeout

The value of the object specifies the number of seconds other
protocol sessions can remain idle before being cleaned up.
This also includes all drop sessions regardless of protocol.

secondsUnsigned32r/w

Constraints:
range: 10-86400

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.13

aluSecProfileConfigAppInspect

The value of the object indicates whether application assurance inspection
should be performed on all active connections with this profile.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.14

aluSecProfileConfigInspectTcp

The value of the object indicates whether stict TCP inspection
should be performed on all active TCP connections with this profile.
aluSecProfileConfigAppInspect must be enabled before TCP inspection
can be enabled.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.15

aluSecProfileConfigInspectIpOpt

The value of the object indicates whether IP options inspection
is to be performed. When 'true' the object aluSecProfileConfigAllowedIpOpt
is used to specify permitted options.
aluSecProfileConfigAppInspect must be enab…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.16

aluSecProfileConfigAllowedIpOpt

The value of the object indicates the bitmask of allowed IP options when IP
option inspection is enabled.
aluSecProfileConfigAppInspect must be enabled before IP inspection
can be enabled.

SNMPv2-SMIUnsigned32r/w

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.17

aluSecProfileConfigAllowPktFrag

The value of the object indicates whether fragmented IP packets are
permitted through connections with this profile.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.18

aluSecProfileConfigAlg

The value of the object indicates the application layer
gateway processing to be performed on this connection.

TAlgTyper/w

Textual Convention: TAlgType Enumeration

Type Values:

0	none
1	auto
2	ftp
3	tftp

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.19

aluSecProfileConfigIcmpReqLimit

The value of the object specifies the number of ICMP packets permitted
to travese the ICMP request session in each direction.
A value of 0 specifies that there is no packet limit.
aluSecProfileConfigAppInspect must be e…

packetsUnsigned32r/w

Constraints:
range: 0-254

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.20

aluSecProfileConfigIcmpErrLimit

The value of the object specifies the whether to limit the number of ICMP Type 3
packets that are permitted to travese the session in each direction.
aluSecProfileConfigAppInspect must be enabled before ICMP inspection…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.21

aluSecProfileConfigDnsReplyOnly

The value of the object specifies whether to limit the number of DNS
packets that are permitted to travese a DNS session in each direction.
aluSecProfileConfigAppInspect must be enabled before DNS inspection
can be en…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.22

aluSecProfileConfigTcpTmoStrict

The value of the object specifies if a TCP Session in the Established
state is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session will not timeout until the…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.23

aluSecProfileConfigUdpTmoStrict

The value of the object specifies if a UDP Session in the Established
state is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session will not timeout until the…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.24

aluSecProfileConfigIcmpTmoStrict

The value of the object specifies if a ICMP Request Session
is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session will not timeout until the session
has bee…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.25

aluSecProfileConfigDnsTmoStrict

The value of the object specifies if a DNS Request Session
is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session will not timeout until the session
has been…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.26

aluSecProfileConfigOthTmoStrict

The value of the object specifies if a Other protocol session
is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session will not timeout until the session
has b…

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.27

aluSecProfileConfigFwdPolicerId

The value of the object specifies the policer group that the forward direction
of the session should be rate-limited with.

TSecurityPolicerIdr/w

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.28

aluSecProfileConfigRevPolicerId

The value of the object specifies the policer group that the reverse direction
of the session should be rate-limited with.

TSecurityPolicerIdr/w

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.29

aluSecHostGrpConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.21 · 1 row entry · 4 columns

Open in standard view

The aluSecHostGrpConfigTable has an entry for each
security host group configured globally on this system.

aluSecHostGrpConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.21.1

Each row entry represents a particular security host group.

Indexes

aluSecHostGrpConfigId

Column Syntax OID

aluSecHostGrpConfigId

The value of the object aluSecHosTGrpConfigId
specifies the unique host group id.

Unsigned32

Constraints:
range: 1-100

.1.3.6.1.4.1.6527.6.1.2.2.17.1.21.1.1

aluSecHostGrpConfigRowStatus

The value of aluSecHostGrpConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecHostGrpConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.21.1.2

aluSecHostGrpConfigName

Name of the security host group.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.1.21.1.3

aluSecHostGrpConfigDescription

Description of this security host group.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.21.1.4

aluSecHostConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.22 · 1 row entry · 4 columns

Open in standard view

The aluSecHostConfigTable has an entry for each
rule configured as part of a security host.

aluSecHostConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.22.1

Each row entry represents a particular host entry.

Indexes

aluSecHostGrpConfigId aluSecHostConfigIPAddrValue1

Column Syntax OID

aluSecHostConfigIPAddrValue1

The value of the object aluSecHostConfigIPAddrValue1
specifies the IP address of hosts in this group.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.22.1.1

aluSecHostConfigRowStatus

The value of aluSecHostConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecHostConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.22.1.2

aluSecHostConfigIPAddrValue2

The value of the object aluSecHostConfigIPAddrValue2
specifies the 2nd IP address of a range of hosts.

SNMPv2-SMIIpAddressr/w

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.1.22.1.3

aluSecHostConfigIPOperator

The operator specifies the manner in which
aluSecHostConfigIPAddrValue1 and
aluSecHostConfigIPAddrValue2
are to be used. The value of these below 2 objects and
aluSecHostConfigIPOperator is used as described in
TIPOper…

TIPOperatorr/w

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.1.22.1.4

aluSecAppGrpConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.23 · 1 row entry · 4 columns

Open in standard view

The aluSecAppGrpConfigTable has an entry for each
security application group configured globally on this system.

aluSecAppGrpConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.23.1

Each row entry represents a particular security app group.

Indexes

aluSecAppGrpConfigId

Column Syntax OID

aluSecAppGrpConfigId

The value of the object aluSecAppGrpConfigId
specifies the unique application group id.

Unsigned32

Constraints:
range: 1-100

.1.3.6.1.4.1.6527.6.1.2.2.17.1.23.1.1

aluSecAppGrpConfigRowStatus

The value of aluSecAppGrpConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecAppGrpConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.23.1.2

aluSecAppGrpConfigName

Name of the security application group.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.1.23.1.3

aluSecAppGrpConfigDescription

Description of this security application group.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.23.1.4

aluSecAppConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24 · 1 row entry · 11 columns

Open in standard view

The aluSecAppConfigTable has an entry for each
rule configured as part of a security application.

aluSecAppConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1

Each row entry represents a particular host entry.

Indexes

aluSecAppGrpConfigId aluSecAppConfigEntryId

Column Syntax OID

aluSecAppConfigEntryId

The value of aluSecAppConfigEntryId specifies the
index of the entry within the security app group.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.1

aluSecAppConfigRowStatus

The value of aluSecAppConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecAppConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.2

aluSecAppConfigMatchProtocol

IP protocol to match. set to -1 to disable matching IP protocol. If
the protocol is changed the protocol specific parameters are reset.

TIMETRA-TC-MIBTIpProtocolr/w

Textual Convention: TIMETRA-TC-MIBTIpProtocol Integer32

Type Constraints:
range: -2..255

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.3

aluSecAppConfigMatchSrcPortValue1

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.4

aluSecAppConfigMatchSrcPortValue2

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.5

aluSecAppConfigMatchSrcPortOp

Source TCP/UDP port operator.

TIMETRA-TC-MIBTOperatorr/w

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.6

aluSecAppConfigMatchDstPortValue1

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.7

aluSecAppConfigMatchDstPortValue2

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPortr/w

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.8

aluSecAppConfigMatchDstPortOp

Destination TCP/UDP port operator.

TIMETRA-TC-MIBTOperatorr/w

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.9

aluSecAppConfigMatchIcmpCode

Icmp code to be matched. aluSecAppConfigMatchIcmpCode
complements the object aluSecAppConfigMatchIcmpType.
Both of them need to be set to actually
enable ICMP matching. The value -1 means Icmp code matching is not
ena…

Integer32r/w

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.10

aluSecAppConfigMatchIcmpType

Icmp type to be matched. aluSecAppConfigMatchIcmpType
complements the object aluSecPlcyParamsConfigMatchIcmpCode.
Both of them need to be set to actually
enable ICMP matching. The value -1 means Icmp code matching is …

Integer32r/w

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.1.24.1.11

aluSecPolicerGrpConfigTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.1.25 · 1 row entry · 6 columns

Open in standard view

The aluSecPolcierGrpConfigTable has an entry for each
security policer group configured globally on this system.

aluSecPolicerGrpConfigEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.1.25.1

Each row entry represents a particular security app group.

Indexes

aluSecPolicerGrpConfigId

Column Syntax OID

aluSecPolicerGrpConfigId

The value of the object aluSecPolicerGrpConfigId
specifies the unique policer group id.

Unsigned32

Constraints:
range: 1-1024

.1.3.6.1.4.1.6527.6.1.2.2.17.1.25.1.1

aluSecPolicerGrpConfigRowStatus

The value of aluSecPolicerGrpConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecPolicerGrpConfigTable.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.1.25.1.2

aluSecPolicerGrpConfigName

Name of the security policer group.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.1.25.1.3

aluSecPolicerGrpConfigDescription

Description of this security policer group.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.1.25.1.4

aluSecPolicerGrpConfigRate

The aluSecPolicerGrpConfigRate object specifies the maximum ingress
bandwidth (in mega-bits per second) that the policer can receive.
A value of -1 means that no policing will be performed.

mega-bits per secondInteger32r/w

Constraints:
range: 1-10000
range: -1--1

.1.3.6.1.4.1.6527.6.1.2.2.17.1.25.1.14

aluSecPolicerGrpConfigRateCbs

aluSecPolicerGrpConfigRateCbs specifies the committed burst size that hard policer can accept while complying
to the ingress rate aluSecPolicerGrpConfigRate.

aluSecPolicerGrpConfigRateCbs is not applicab…

bytesUnsigned32r/w

Constraints:
range: 1-130816

.1.3.6.1.4.1.6527.6.1.2.2.17.1.25.1.17

aluZoneOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1 · 1 row entry · 44 columns

Open in standard view

The aluZoneOperTable has an entry for each zone 
configured on this system.

aluZoneOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1

Each row entry represents a particular zone.

Indexes

aluZoneOperId

Column Syntax OID

aluZoneOperId

The value of the object aluZoneOperId
specifies the unique id of the Zone in the system.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.1

aluZoneOperName

The value of the object aluZoneOperName
specifies the name of the Zone in the system.

TIMETRA-TC-MIBTNamedItemOrEmpty

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.2

aluZoneOperBypass

The value of aluZoneOperBypass specifies whether this zone is being bypassed.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.3

aluZoneOperDescription

Description about this zone.

TIMETRA-TC-MIBTItemDescription

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.4

aluZoneOperPlcyRuleCount

The value of aluZoneOperPlcyRuleCount indicates the number of rules that
this policy contains based on the security policies activated on this zone.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.5

aluZoneOperType

Indicates the type of zone.

TZoneType

Textual Convention: TZoneType Enumeration

Type Values:

0	unknown
1	network
2	service
3	global

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.6

aluZoneOperSvcId

Specifies the service this zone belongs to when zone type is 'service'.

TIMETRA-TC-MIBTmnxServId

Textual Convention: TIMETRA-TC-MIBTmnxServId Unsigned32

Type Constraints:
range: 0..2148278381

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.7

aluZoneOperInSessionCount

The value of the object aluZoneOperInSessionCount
indicates the total number of inbound sessions ever established for
this zone.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.8

aluZoneOperInActiveSessions

The value of the object aluZoneOperInActiveSessions
indicates the number of currently active inbound sessions for
this zone.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.9

aluZoneOperOutSessionCount

The value of the object aluZoneOperOutSessionCount
indicates the total number of outbound sessions ever established for
this zone.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.10

aluZoneOperOutActiveSessions

The value of the object aluZoneOperOutActiveSessions
indicates the number of currently active outbound sessions for
this zone.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.11

aluZoneOperInPktsDropped

The number of inbound packets dropped due to policy.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.12

aluZoneOperInBytesDropped obsolete

The number of inbound bytes dropped due to policy.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.13

aluZoneOperOutPktsDropped

The number of outbound packets dropped due to policy.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.14

aluZoneOperOutBytesDropped obsolete

The number of outbound bytes dropped due to policy.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.15

aluZoneOperInPktsDefAction

The number of inbound packets that the default
action was applied.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.16

aluZoneOperInBytesDefAction obsolete

The number of inbound bytes that the default
action was applied.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.17

aluZoneOperOutPktsDefAction

The number of outbound packets that the default
action was applied.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.18

aluZoneOperOutBytesDefAction obsolete

The number of outbound bytes that the default
action was applied.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.19

aluZoneOperPlcyLastCommit

The last time a commit was performed on this zone.

SNMPv2-TCTimeStamp

Textual Convention: SNMPv2-TCTimeStamp Unsigned32

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.20

aluZoneOperInTcpSessLimit

The value of the object aluZoneOperInTcpSessLimit
indicates the number of permitted active in sessions with
protocol TCP.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.21

aluZoneOperInUdpSessLimit

The value of the object aluZoneOperInUdpSessLimit
indicates the number of permitted active in sessions with
protocol UDP.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.22

aluZoneOperInIcmpSessLimit

The value of the object aluZoneOpeInrIcmpSessLimit
indicates the number of permitted active in sessions with
protocol ICMP.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.23

aluZoneOperInOthSessLimit

The value of the object aluZoneOperInOthSessLimit
indicates the number of permitted active in sessions of all
other protocols.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.24

aluZoneOperOutTcpSessLimit

The value of the object aluZoneOperInTcpSessLimit
indicates the number of permitted active outsessions with
protocol TCP.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.25

aluZoneOperOutUdpSessLimit

The value of the object aluZoneOperInUdpSessLimit
indicates the number of permitted active out sessions with
protocol UDP.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.26

aluZoneOperOutIcmpSessLimit

The value of the object aluZoneOpeInrIcmpSessLimit
indicates the number of permitted active out sessions with
protocol ICMP.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.27

aluZoneOperOutOthSessLimit

The value of the object aluZoneOperInOthSessLimit
indicates the number of permitted active out sessions of all
other protocols.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.28

aluZoneOperInTcpActSessions

The value of the object aluZoneInOperTcpActSessions
indicates the number of active sessions with
protocol TCP.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.29

aluZoneOperInUdpActSessions

The value of the object aluZoneInOperUdpActSessions
indicates the number of active sessions with
protocol UDP.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.30

aluZoneOperInIcmpActSessions

The value of the object aluZoneOperInIcmpActSessions
indicates the number of active sessions with
protocol ICMP.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.31

aluZoneOperInOthActSessions

The value of the object aluZoneOperInOthActiveSessions
indicates the number of active sessions of all
other protocols.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.32

aluZoneOperOutTcpActSessions

The value of the object aluZoneOperOutTcpActSessions
indicates the number of active sessions with
protocol TCP.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.33

aluZoneOperOutUdpActSessions

The value of the object aluZoneOperUdpActSessions
indicates the number of active sessions with
protocol UDP.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.34

aluZoneOperOutIcmpActSessions

The value of the object aluZoneOperOutIcmpActSessions
indicates the number of active sessions with
protocol ICMP.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.35

aluZoneOperOutOthActSessions

The value of the object aluZoneOperOutOthActSessions
indicates the number of active sessions of all
other protocols.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.36

aluZoneOperLogId

The value of the object aluZoneConfigLogId
indicates the log-id for security logging.

Unsigned32

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.38

aluZoneOperAutoBind

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.39

aluZoneOperInFwdAction

The accumulated number of inbound sessions with forward action.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.40

aluZoneOperOutFwdAction

The accumulated number of outbound sessions with forward action.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.41

aluZoneOperInNatAction

The accumulated number of inbound sessions with NAT action.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.42

aluZoneOperOutNatAction

The accumulated number of outbound sessions with NAT action.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.43

aluZoneOperInDropAction

The accumulated number of inbound sessions with drop action.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.44

aluZoneOperOutDropAction

The accumulated number of outbound sessions with drop action.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.1.1.45

aluZonePlcyOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2 · 1 row entry · 9 columns

Open in standard view

The aluZonePlcyOperTable describes the active policy of this
zone. This table is a flattened ordered list of rules for this zone based
on the security policies that have been activated.

aluZonePlcyOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1

Each row entry represents a particular zone entry.

Indexes

aluZoneOperId aluZonePlcyOperRuleId

Column Syntax OID

aluZonePlcyOperRuleId

The value of the object aluZonePlcyOperRuleId
rule id of each operational rule in the Zone.
The rule id is assigned by the system based on the
security policies that have been activated on this zone.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.1

aluZonePlcyOperEntryId

The value of the object aluZonePlcyOperEntryId
specifies the zone policy entry this rule is associated with.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.2

aluZonePlcyOperActive

The value of the object aluZonePlcyOperActive
indicates whether this rule is active for rule parsing
in the zone policy.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.3

aluZonePlcyOperFlags

This object specifies all the conditions that
affect the active status of this Zone Policy.

Bits

Enumerated Values:

noNatPool

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.4

aluZonePlcyOperSecPlcyId

The value of aluZonePlcyOperSecPlcyId specifies the security policy
that this rule was derived from.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.5

aluZonePlcyOperSecPlcyRuleId

The value of aluZonePlcyOperSecPlcyRuleId specifies the rule from the
security policy specified by aluZonePlcyOperSecPlcyId that defines this
zone policy rule.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.6

aluZonePlcyOperNatPoolId

The value of aluZonePlcyOperNatPoolId specifies the NAT Pool to be used
for this rule when the action is NAT.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.7

aluZonePlcyOperRuleHitCount

The value of aluZonePlcyOperRuleHitCount specifies the number of times this
rule has been matched.

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.8

aluZonePlcyOperRuleActiveSessions

The value of aluZonePlcyOperRuleActiveSessions specifies the number of currently
active sessions this rule has outstanding.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.2.1.9

aluZoneNatPoolOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.3 · 1 row entry · 5 columns

Open in standard view

The aluZoneNatPoolOperTable has an entry for each
nat-pool of ip addresses and ports configured on a particular zone.

aluZoneNatPoolOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.3.1

Each row entry represents a particular policy entry.

Indexes

aluZoneOperId aluZoneNatPoolOperId

Column Syntax OID

aluZoneNatPoolOperId

The value of the object aluZoneNatPoolOperId
specifies the unique id of the NAT-Pool entries within the zone.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.3.1.1

aluZoneNatPoolOperName

The value of the object aluZoneNatPoolOperName
specifies the name of the NAT Pool.

TIMETRA-TC-MIBTNamedItemOrEmpty

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.2.3.1.2

aluZoneNatPoolOperDescription

Description of this nat pool.

TIMETRA-TC-MIBTItemDescription

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.2.3.1.3

aluZoneNatPoolOperType

Specifies type of pool

TPoolType

Textual Convention: TPoolType Enumeration

Type Values:

0	unknown
1	srcNatPool

.1.3.6.1.4.1.6527.6.1.2.2.17.2.3.1.4

aluZoneNatPoolOperDirection

Specifies direction of the pool.

Enumeration

Enumerated Values:

0	unknown
1	zoneInbound
2	zoneOutbound

.1.3.6.1.4.1.6527.6.1.2.2.17.2.3.1.5

aluZoneNatPoolParamsOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4 · 1 row entry · 8 columns

Open in standard view

The aluZoneNatPoolParamsOperTable has an entry NAT Pool 
params entry configured on this system.

aluZoneNatPoolParamsOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1

Each row entry represents a particular NAT Pool params entry.

Indexes

aluZoneOperId aluZoneNatPoolOperId aluZoneNatPoolParamsOperEntryId

Column Syntax OID

aluZoneNatPoolParamsOperEntryId

The value of aluZoneNatPoolParamsOperEntryId specifies the
3rd index for the entry.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.1

aluZoneNatPoolParamsOperIPAddrValue1

The value of the object
aluZoneNatPoolParamsOperIPAddrValue1 specifies
the starting range of IP address of the NAT pool.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.2

aluZoneNatPoolParamsOperIPAddrValue2

The value of the object
aluZoneNatPoolParamsOperIPAddrValue2 specifies
the ending range of IP address of the NAT pool.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.3

aluZoneNatPoolParamsOperIPOperator

The operator specifies the manner in which
aluZoneNatPoolParamsOperIPAddrValue1 and
aluZoneNatPoolParamsOperIPAddrValue2
are to be used. The value of these below 2 objects and
aluZoneNatPoolParamsOperIPOperator is used…

TIPOperator

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.4

aluZoneNatPoolParamsOperIPInterfaceIndex

The aluZoneNatPoolParamsOperIPInterfaceIndex specifies
the index of the interface that the primary-address of that
interface is to be used in the NAT pool.
The interface must exist in the same vRtr that the NAT pool
res…

IF-MIBInterfaceIndexOrZero

Textual Convention: IF-MIBInterfaceIndexOrZero Integer32

Type Constraints:
range: 0..2147483647

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.5

aluZoneNatPoolParamsOperPortOperator

The operator specifies the manner in which
aluZoneNatPoolParamsOperPortValue1 and
aluZoneNatPoolParamsOperPortValue2
are to be used. The value of these below 2 objects and
aluZoneNatPoolParamsOperPortOperator is used a…

TIMETRA-TC-MIBTTcpUdpPortOperator

Textual Convention: TIMETRA-TC-MIBTTcpUdpPortOperator Enumeration

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.6

aluZoneNatPoolParamsOperPortValue1

TCP/UDP port value1. The value of this object is used as per the
description for aluZoneNatPoolParamsOperPortOperator.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.7

aluZoneNatPoolParamsOperPortValue2

TCP/UDP port value2. The value of this object is used as per the
description for aluZoneNatPoolParamsOperPortOperator.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.4.1.8

aluSecPlcyOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.5 · 1 row entry · 5 columns

Open in standard view

The aluSecPlcyOperTable has an entry for each
policy configured globally on this system.

aluSecPlcyOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.5.1

Each row entry represents a security policy.

Indexes

aluSecPlcyOperId

Column	Syntax	OID
aluSecPlcyOperId The value of the object aluSecPlcyOperId specifies the unique id in the for the policy in the system.	Unsigned32 Constraints: `range: 1-65535`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.5.1.1`
aluSecPlcyOperName Name of the security policy.	TIMETRA-TC-MIBTNamedItemOrEmpty Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty `OctetString` Type Constraints: `range: 0..32`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.5.1.2`
aluSecPlcyOperDescription Description of this security policy.	TIMETRA-TC-MIBTItemDescription Textual Convention: TIMETRA-TC-MIBTItemDescription `OctetString` Type Constraints: `range: 0..80`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.5.1.3`
aluSecPlcyOperRuleCount The value of aluSecPlcyOperRuleCount indicates the current number of rules that are part of the security policy.	SNMPv2-SMIGauge32 Textual Convention: SNMPv2-SMIGauge32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.5.1.4`
aluSecPlcyOperZoneRefCount The value of aluSecPlcyOperZoneRefCount indicates the number of zones that are using this security policy.	SNMPv2-SMIGauge32 Textual Convention: SNMPv2-SMIGauge32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.5.1.5`

aluSecPlcyParamsOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6 · 1 row entry · 31 columns

Open in standard view

The aluSecPlcyParamsOperTable has an entry for each
rule configured in each security policy.

aluSecPlcyParamsOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1

Each row entry represents a particular rule parameters.

Indexes

aluSecPlcyOperId aluSecPlcyParamsOperRuleId

Column Syntax OID

aluSecPlcyParamsOperRuleId

The value of aluSecPlcyParamsOperRuleId specifies the
rule index within the Security Policy.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.1

aluSecPlcyParamsOperDescription

Description of this rule.

TIMETRA-TC-MIBTItemDescription

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.2

aluSecPlcyParamsOperMatchSrcIPAddrValue1

The value of the object aluSecPlcyParamsOperMatchSrcIPAddrValue1
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose source…

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.3

aluSecPlcyParamsOperMatchSrcIPAddrValue2

The value of the object aluSecPlcyParamsOperMatchSrcIPAddrValue2
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose sourc…

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.4

aluSecPlcyParamsOperMatchSrcIPOperator

The operator specifies the manner in which
aluSecPlcyParamsOperMatchSrcIPAddrValue1 and
aluSecPlcyParamsOperMatchSrcIPAddrValue2
are to be used. The value of these below 2 objects and
aluSecPlcyParamsOperMatchSrcIPOper…

TIPOperator

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.5

aluSecPlcyParamsOperMatchSrcIPHostGroup

The value of the object aluSecPlcyParamsOperMatchSrcIPHostGroup
specifies the host group name, where the group name is a collection
of IP addresses.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.6

aluSecPlcyParamsOperMatchDstIPAddrValue1

The value of the object aluSecPlcyParamsOperMatchDstIPAddrValue1
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose source…

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.7

aluSecPlcyParamsOperMatchDstIPAddrValue2

The value of the object aluSecPlcyParamsOperMatchDstIPAddrValue2
specifies the source IP address of the packets to be filltered.
When configured and activated, This filter will be
applied to all IP packets whose sourc…

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.8

aluSecPlcyParamsOperMatchDstIPOperator

The operator specifies the manner in which
aluSecPlcyParamsOperMatchDstIPAddrValue1 and
aluSecPlcyParamsOperMatchDstIPAddrValue2
are to be used. The value of these below 2 objects and
aluSecPlcyParamsOperMatchDstIPOper…

TIPOperator

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.9

aluSecPlcyParamsOperMatchDstIPHostGroup

The value of the object
aluSecPlcyParamsOperMatchDstIPHostGroup specifies
the host group name, where the group name is a collection
of IP addresses.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.10

aluSecPlcyParamsOperMatchProtocol

IP protocol to match. set to -1 to disable matching IP protocol. If
the protocol is changed the protocol specific parameters are reset.

TIMETRA-TC-MIBTIpProtocol

Textual Convention: TIMETRA-TC-MIBTIpProtocol Integer32

Type Constraints:
range: -2..255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.11

aluSecPlcyParamsOperMatchSrcPortValue1

TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.12

aluSecPlcyParamsOperMatchSrcPortValue2

TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.13

aluSecPlcyParamsOperMatchSrcPortOp

TCP/UDP port operator.

TIMETRA-TC-MIBTOperator

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.14

aluSecPlcyParamsOperMatchDstPortValue1

TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.15

aluSecPlcyParamsOperMatchDstPortValue2

TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.16

aluSecPlcyParamsOperMatchDstPortOp

TCP/UDP port operator.

TIMETRA-TC-MIBTOperator

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.17

aluSecPlcyParamsOperMatchAppGroup

The value of the object aluSecPlcyParamsOperMatchAppGroup
specifies the application group, where the app-group is a
collection of protocol-id/src port/dest port.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.18

aluSecPlcyParamsOperMatchIcmpCode

Icmp code to be matched.

Integer32

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.19

aluSecPlcyParamsOperMatchIcmpType

Icmp type to be matched.

Integer32

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.20

aluSecPlcyParamsOperMatchIgmpType

Type of IGMP to be configured

Integer32

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.21

aluSecPlcyParamsOperMatchFlowDirection

This object specifies the direction of the packet flow
for which the rule is matched.
in is equivalent to zone ingress flow,
out is equivalent to zone egress flow,
both is equivalent to both ingress and egress flow

Enumeration

Enumerated Values:

1	zoneInbound
2	zoneOutbound
3	both

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.22

aluSecPlcyParamsOperProfileId

The value of the object specifies traffic profile.

Unsigned32

Constraints:
range: 0-120

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.23

aluSecPlcyParamsOperConcurrentFlowLimit

The value of the object specifies max number of simultaneous
sessions allowed for this particular rule. Beyond this
limit, new sessions will not be created.
Sessions will be created internally for a packet with
uniqu…

Unsigned32

Constraints:
range: 0-10000

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.24

aluSecPlcyParamsOperCreateRevDirFlow

The value of aluSecPlcyParamsOperCreateRevDirFlow specifies
whether return direction of the session is created or not

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.25

aluSecPlcyParamsOperAction

This object specifies whether the packet needs to be
passed or dropped if it satisfies the rule condition.

Enumeration

Enumerated Values:

0	forward
1	drop
2	nat
3	reject

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.26

aluSecPlcyParamsOperMatchLocal

The value of aluSecPlcyParamsOperMatchLocal specifies
whether to match traffic destined to node

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.27

aluSecPlcyParamsOperActionNatDstIPAddr

The value of the object aluSecPlcyParamsOperActionNatDstIPAddr
specifies the Dst IP address of the packet after NAT has been
performed

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.28

aluSecPlcyParamsOperActionNatDstPort

NAT Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.39

aluSecPlcyParamsOperLogControl

Log control for policy.

SNMPv2-SMIInteger32

Textual Convention: SNMPv2-SMIInteger32 Integer32

Type Constraints:
range: -2147483648..2147483647

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.40

aluSecPlcyParamsOperLogId

Log Destination for policy.

TSecurityLogId

Textual Convention: TSecurityLogId Unsigned32

Type Constraints:
range: 0..100

.1.3.6.1.4.1.6527.6.1.2.2.17.2.6.1.41

aluSecProfileOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7 · 1 row entry · 29 columns

Open in standard view

The aluSecProfileOperTable has an entry for each
security profile configured globally on this system.

aluSecProfileOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1

Each row entry represents a particular security profile.

Indexes

aluSecProfileOperId

Column Syntax OID

aluSecProfileOperId

The value of the object aluSecProfileOperId
specifies the unique profile id.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.1

aluSecProfileOperName

Name of the security profile.

TIMETRA-TC-MIBTNamedItemOrEmpty

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.2

aluSecProfileOperDescription

Description of this security profile.

TIMETRA-TC-MIBTItemDescription

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.3

aluSecProfileOperPlcyRefCount

The value of the object specifies the number of times
this profile is referenced in security policies.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.4

aluSecProfileOperTcpSynTimeout

The value of the object specifies the number of seconds a
TCP session can wait for a SYN before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.5

aluSecProfileOperTcpWaitTimeout

The value of the object specifies the number of seconds a
TCP session can remain in time wait before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.6

aluSecProfileOperTcpTransTimeout

The value of the object specifies the number of seconds a
TCP session can remain be transitory before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.7

aluSecProfileOperTcpEstTimeout

The value of the object specifies the number of seconds a
TCP session has to reach established before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.8

aluSecProfileOperUdpTimeout

The value of the object specifies the number of seconds a
UDP session can remain idle before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.9

aluSecProfileOperUdpInitTimeout

The value of the object specifies the number of seconds a
UDP session can remain idle after recieving the first packet
before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.10

aluSecProfileOperUdpDnsTimeout

The value of the object specifies the number of seconds a
DNS request can take to recieve a response
before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.11

aluSecProfileOperIcmpTimeout

The value of the object specifies the number of seconds an
ICMP request can take to recieve a response
before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.12

aluSecProfileOperOtherTimeout

The value of the object specifies the number of seconds other
protocol sessions can remain idle before being cleaned up.

secondsSNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.13

aluSecProfileOperAppInspect

The value of the object indicates whether application inspection
should be performed on all active connections with this profile.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.14

aluSecProfileOperInspectTcp

The value of the object indicates whether stict TCP inspection
should be performed on all active TCP connections with this profile.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.15

aluSecProfileOperInspectIpOpt

The value of the object indicates whether IP options inspection
is to be performed. When 'true' the object aluSecProfileOperAllowedIpOpt
is used to specify permitted options.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.16

aluSecProfileOperAllowedIpOpt

The value of the object indicates the bothmask of allowed IP options when IP
option inspection is enabled.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.17

aluSecProfileOperAllowPktFrag

The value of the object indicates whether fragmented IP packets are
permitted through connections with this profile.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.18

aluSecProfileOperAlg

The value of the object indicates the application layer
gateway processing to be performed on this connection.

TAlgType

Textual Convention: TAlgType Enumeration

Type Values:

0	none
1	auto
2	ftp
3	tftp

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.19

aluSecProfileOperIcmpReqLimit

packetsUnsigned32

Constraints:
range: 0-254

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.20

aluSecProfileOperIcmpErrLimit

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.21

aluSecProfileOperDnsReplyOnly

The value of the object specifies the whether to limit the number of DNS
packets that are permitted to travese a DNS session in each direction.
aluSecProfileConfigAppInspect must be enabled before DNS inspection
can b…

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.22

aluSecProfileOperTcpTmoStrict

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.23

aluSecProfileOperUdpTmoStrict

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.24

aluSecProfileOperIcmpTmoStrict

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.25

aluSecProfileOperDnsTmoStrict

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.26

aluSecProfileOperOthTmoStrict

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.27

aluSecProfileOperFwdPolicerId

The value of the object specifies the policer group that the forward direction
of the session should be rate-limited with.

TSecurityPolicerId

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.28

aluSecProfileOperRevPolicerId

The value of the object specifies the policer group that the reverse direction
of the session should be rate-limited with.

TSecurityPolicerId

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.2.7.1.29

aluZoneInboundSessionTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8 · 1 row entry · 19 columns

Open in standard view

The aluZoneInboundSessionTable has an entry for each
session establish entering a zone.

aluZoneInboundSessionEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1

Each row entry represents a particular inbound active session.

Indexes

aluZoneOperId aluZoneSessionId

Column Syntax OID

aluZoneSessionId

The value of aluZoneSessionId specifies the
session index for this active session.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.1

aluZoneInboundSessionProtocol

IP protocol of session.

TIMETRA-TC-MIBTIpProtocol

Textual Convention: TIMETRA-TC-MIBTIpProtocol Integer32

Type Constraints:
range: -2..255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.2

aluZoneInboundSessionSrcZoneId

The value of aluZoneInboundSessionSrcZoneId secifies the
source zone that established this session.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.3

aluZoneInboundSessionSrcIPAddrValue

The value of aluZoneInboundSessionSrcIPAddrValue
specifies the source IP address of this flow.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.4

aluZoneInboundSessionSrcPortValue

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.5

aluZoneInboundSessionDstIPAddrValue

Destination IP address of this flow.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.6

aluZoneInboundSessionDstPortValue

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.7

aluZoneInboundSessionRevDirCreated

The value of aluZoneInboundSessionRevDirCreated indicates
whether return direction of the session was created or not

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.8

aluZoneInboundSessionAction

This object specifies session action.

Enumeration

Enumerated Values:

0	forward
1	drop
2	nat

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.9

aluZoneInboundSessionNatSrcIPAddrValue

The value of aluZoneInboundSessionNatSrcIPAddrValue
specifies the source IP address of this flow has after NAT.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.10

aluZoneInboundSessionNatSrcPortValue

NAT Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.11

aluZoneInboundSessionNatDstIPAddrValue

The value of aluZoneInboundSessionNatDstIPAddrValue
specifies the destination IP address of this flow has after NAT.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.12

aluZoneInboundSessionNatDstPortValue

NAT Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.13

aluZoneInboundSessionEstablished

Time that this session was established.

SNMPv2-TCTimeStamp

Textual Convention: SNMPv2-TCTimeStamp Unsigned32

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.14

aluZoneInboundSessionAlg

This object specifies ALG being performed on session.
algRule - Dynamic Rule for ALG Data Sessions
ftp - FTP Control Session

Enumeration

Enumerated Values:

0	none
1	algRule
2	ftp

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.15

aluZoneInboundSessionInspect

This object specifies if session traffic is sent to central core.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.16

aluZoneInboundSessionFwdPolicerId

This object specifies policer-group that forward session traffic
is sent to.

TSecurityPolicerId

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.17

aluZoneInboundSessionRevPolicerId

This object specifies policer-group that reverse session traffic
is sent to.

TSecurityPolicerId

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.18

aluZoneInboundSessionCreator

This object specifies the session-id that created this session via ALG.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.8.1.19

aluZoneOutboundSessionTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9 · 1 row entry · 18 columns

Open in standard view

The aluZoneOutboundSessionTable has an entry for each
session establish leaving a zone.

aluZoneOutboundSessionEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1

Each row entry represents a particular inbound active session.

Indexes

aluZoneOperId aluZoneSessionId

Column Syntax OID

aluZoneOutboundSessionProtocol

IP protocol of session.

TIMETRA-TC-MIBTIpProtocol

Textual Convention: TIMETRA-TC-MIBTIpProtocol Integer32

Type Constraints:
range: -2..255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.1

aluZoneOutboundSessionSrcIPAddrValue

The value of aluZoneOutboundSessionSrcIPAddrValue
specifies the source IP address of this flow.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.2

aluZoneOutboundSessionSrcPortValue

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.3

aluZoneOutboundSessionDstIPAddrValue

Destination IP address of this flow.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.4

aluZoneOutboundSessionDstPortValue

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.5

aluZoneOutboundSessionDstZoneId

The value of aluZoneOutboundSessionDstZoneId specifies the
destination zone for this session.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.6

aluZoneOutboundSessionRevDirCreated

The value of aluZoneOutboundSessionRevDirCreated indicates
whether return direction of the session was created or not

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.7

aluZoneOutboundSessionAction

This object specifies session action.

Enumeration

Enumerated Values:

0	forward
1	drop
2	nat

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.8

aluZoneOutboundSessionNatSrcIPAddrValue

The value of aluZoneOutboundSessionNatSrcIPAddrValue
specifies the source IP address of this flow has after NAT.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.9

aluZoneOutboundSessionNatSrcPortValue

NAT Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.10

aluZoneOutboundSessionNatDstIPAddrValue

The value of aluZoneOutboundSessionNatDstIPAddrValue
specifies the destination IP address of this flow has after NAT.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.11

aluZoneOutboundSessionNatDstPortValue

NAT Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.12

aluZoneOutboundSessionEstablished

Time that this session was established.

SNMPv2-TCTimeStamp

Textual Convention: SNMPv2-TCTimeStamp Unsigned32

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.13

aluZoneOutboundSessionAlg

This object specifies ALG being performed on session.
algRule - Dynamic Rule for ALG Data Sessions
ftp - FTP Control Session

Enumeration

Enumerated Values:

0	none
1	algRule
2	ftp

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.14

aluZoneOutboundSessionInspect

This object specifies if session traffic is sent to central core.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.15

aluZoneOutboundSessionFwdPolicerId

This object specifies policer-group that forward session traffic
is sent to.

TSecurityPolicerId

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.16

aluZoneOutboundSessionRevPolicerId

This object specifies policer-group that reverse session traffic
is sent to.

TSecurityPolicerId

Textual Convention: TSecurityPolicerId Unsigned32

Type Constraints:
range: 0..1024

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.17

aluZoneOutboundSessionCreator

This object specifies the session-id that created this session via ALG.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.2.9.1.18

aluSecHostGrpOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.10 · 1 row entry · 4 columns

Open in standard view

The aluSecHostGrpOperTable has an entry for each
security host group configured globally on this system.

aluSecHostGrpOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.10.1

Each row entry represents a particular security host group.

Indexes

aluSecHostGrpOperId

Column	Syntax	OID
aluSecHostGrpOperId The value of the object aluSecHosTGrpOperId specifies the unique host group id.	Unsigned32 Constraints: `range: 1-100`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.10.1.1`
aluSecHostGrpOperName Name of the security host group.	TIMETRA-TC-MIBTNamedItemOrEmpty Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty `OctetString` Type Constraints: `range: 0..32`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.10.1.2`
aluSecHostGrpOperDescription Description of this security host group.	TIMETRA-TC-MIBTItemDescription Textual Convention: TIMETRA-TC-MIBTItemDescription `OctetString` Type Constraints: `range: 0..80`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.10.1.3`
aluSecHostGrpOperPlcyRefCount Number of policy references.	SNMPv2-SMIUnsigned32 Textual Convention: SNMPv2-SMIUnsigned32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.10.1.4`

aluSecHostOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.11 · 1 row entry · 3 columns

Open in standard view

The aluSecHostOperTable has an entry for each
rule configured as part of a security host.

aluSecHostOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.11.1

Each row entry represents a particular host entry.

Indexes

aluSecHostGrpOperId aluSecHostOperIPAddrValue1

Column Syntax OID

aluSecHostOperIPAddrValue1

The value of the object aluSecHostOperIPAddrValue1
specifies the IP address of hosts in this group.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.11.1.1

aluSecHostOperIPAddrValue2

The value of the object aluSecHostOperIPAddrValue2
specifies the 2nd IP address of a range of hosts.

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.6527.6.1.2.2.17.2.11.1.2

aluSecHostOperIPOperator

The operator specifies the manner in which
aluSecHostOperIPAddrValue1 and
aluSecHostOperIPAddrValue2
are to be used. The value of these below 2 objects and
aluSecHostOperIPOperator is used as described in
TIPOperator.

TIPOperator

Textual Convention: TIPOperator Enumeration

Type Values:

0	none
1	eq
2	range

.1.3.6.1.4.1.6527.6.1.2.2.17.2.11.1.3

aluSecAppGrpOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.12 · 1 row entry · 4 columns

Open in standard view

The aluSecAppGrpOperTable has an entry for each
security application group configured globally on this system.

aluSecAppGrpOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.12.1

Each row entry represents a particular security app group.

Indexes

aluSecAppGrpOperId

Column	Syntax	OID
aluSecAppGrpOperId The value of the object aluSecAppGrpOperId specifies the unique application group id.	Unsigned32 Constraints: `range: 1-100`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.12.1.1`
aluSecAppGrpOperName Name of the security application group.	TIMETRA-TC-MIBTNamedItemOrEmpty Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty `OctetString` Type Constraints: `range: 0..32`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.12.1.2`
aluSecAppGrpOperDescription Description of this security application group.	TIMETRA-TC-MIBTItemDescription Textual Convention: TIMETRA-TC-MIBTItemDescription `OctetString` Type Constraints: `range: 0..80`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.12.1.3`
aluSecAppGrpOperPlcyRefCount Number of policy references.	SNMPv2-SMIUnsigned32 Textual Convention: SNMPv2-SMIUnsigned32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.12.1.4`

aluSecAppOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13 · 1 row entry · 10 columns

Open in standard view

The aluSecAppOperTable has an entry for each
rule configured as part of a security application.

aluSecAppOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1

Each row entry represents a particular host entry.

Indexes

aluSecAppGrpOperId aluSecAppOperEntryId

Column Syntax OID

aluSecAppOperEntryId

The value of aluSecAppOperEntryId specifies the
index of the entry within the security app group.

Unsigned32

Constraints:
range: 1-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.1

aluSecAppOperMatchProtocol

IP protocol to match. set to -1 to disable matching IP protocol. If
the protocol is changed the protocol specific parameters are reset.

TIMETRA-TC-MIBTIpProtocol

Textual Convention: TIMETRA-TC-MIBTIpProtocol Integer32

Type Constraints:
range: -2..255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.2

aluSecAppOperMatchSrcPortValue1

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.3

aluSecAppOperMatchSrcPortValue2

Source TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.4

aluSecAppOperMatchSrcPortOp

Source TCP/UDP port operator.

TIMETRA-TC-MIBTOperator

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.5

aluSecAppOperMatchDstPortValue1

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.6

aluSecAppOperMatchDstPortValue2

Destination TCP/UDP port value.

TIMETRA-TC-MIBTTcpUdpPort

Textual Convention: TIMETRA-TC-MIBTTcpUdpPort Integer32

Type Constraints:
range: 0..65535

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.7

aluSecAppOperMatchDstPortOp

Destination TCP/UDP port operator.

TIMETRA-TC-MIBTOperator

Textual Convention: TIMETRA-TC-MIBTOperator Enumeration

Type Values:

0	none
1	eq
2	range
3	lt
4	gt

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.8

aluSecAppOperMatchIcmpCode

Icmp code to be matched. aluSecAppOperMatchIcmpCode
complements the object aluSecAppOperMatchIcmpType.
Both of them need to be set to actually
enable ICMP matching. The value -1 means Icmp code matching is not
enabled.

Integer32

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.9

aluSecAppOperMatchIcmpType

Icmp type to be matched. aluSecAppOperMatchIcmpType
complements the object aluSecPlcyParamsOperMatchIcmpCode.
Both of them need to be set to actually
enable ICMP matching. The value -1 means Icmp code matching is not
…

Integer32

Constraints:
range: -1-255

.1.3.6.1.4.1.6527.6.1.2.2.17.2.13.1.10

aluSecPolicerGrpOperTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.2.14 · 1 row entry · 12 columns

Open in standard view

The aluSecPolcierGrpOperTable has an entry for each
security policer group configured globally on this system.

aluSecPolicerGrpOperEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1

Each row entry represents a particular security app group.

Indexes

aluSecPolicerGrpOperId

Column	Syntax	OID
aluSecPolicerGrpOperId The value of the object aluSecPolicerGrpOperId specifies the unique policer group id.	Unsigned32 Constraints: `range: 1-1024`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.1`
aluSecPolicerGrpOperName Name of the security policer group.	TIMETRA-TC-MIBTNamedItemOrEmpty Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty `OctetString` Type Constraints: `range: 0..32`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.2`
aluSecPolicerGrpOperDescription Description of this security policer group.	TIMETRA-TC-MIBTItemDescription Textual Convention: TIMETRA-TC-MIBTItemDescription `OctetString` Type Constraints: `range: 0..80`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.3`
aluSecPolicerGrpOperRate The aluSecPolicerGrpOperRate object specifies the maximum ingress bandwidth (in mega-bits per second) that the policer can receive. A value of -1 means that no policing will be performed.	mega-bits per secondInteger32 Constraints: `range: 1-100000` `range: -1--1`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.4`
aluSecPolicerGrpOperRateCbs aluSecPolicerGrpOperRateCbs specifies the committed burst size that hard policer can accept while complying to the ingress rate aluSecPolicerGrpOperRate.	bytesUnsigned32 Constraints: `range: 1-130816`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.5`
aluSecPolicerGrpOperPlcyRefCount Number of policy references.	SNMPv2-SMIUnsigned32 Textual Convention: SNMPv2-SMIUnsigned32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.6`
aluSecPolicerGrpOperFwdPktsPassed Pkts passed thru policer in session forward direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.7`
aluSecPolicerGrpOperFwdBytesPassed Bytes passed thru policer in session forward direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.8`
aluSecPolicerGrpOperFwdPktsDrop Pkts dropped by policer in session forward direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.9`
aluSecPolicerGrpOperRevPktsPassed Pkts passed thru policer in session reverse direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.10`
aluSecPolicerGrpOperRevBytesPassed Bytes passed thru policer in session reverse direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.11`
aluSecPolicerGrpOperRevPktsDrop Pkts dropped by policer in session reverse direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.2.14.1.12`

aluSecSessionStatsTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.3.1 · 1 row entry · 19 columns

Open in standard view

The aluSecSessionStatsTable has an entry for each
active session.

aluSecSessionStatsEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1

Each row entry represents an active session.

Indexes

aluSecSessionId

Column	Syntax	OID
aluSecSessionId The value of aluSecSessionId specifies the session index for this active session.	Unsigned32 Constraints: `range: 1-65535`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.1`
aluSecSessionOutboundZoneId The value of aluSecSessionOutboundZoneId specifies the zone this session is leaving.	SNMPv2-SMIUnsigned32 Textual Convention: SNMPv2-SMIUnsigned32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.2`
aluSecSessionInboundZoneId The value of aluSecSessionInboundZoneId specifies the zone this session is entering.	SNMPv2-SMIUnsigned32 Textual Convention: SNMPv2-SMIUnsigned32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.3`
aluSecSessionFwdPktsPassed Pkts passed thru session in forward direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.4`
aluSecSessionFwdBytesPassed Bytes passed thru session in forward direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.5`
aluSecSessionRevPktsPassed Pkts passed thru session in reverse direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.6`
aluSecSessionRevBytesPassed Bytes passed thru session in reverse direction.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.7`
aluSecSessionFwdDropActionPkts Packets/Fragments dropped due to session action being drop.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.8`
aluSecSessionFwdDropIpOptPkts Packets dropped due to containing prohibited IP Options for this session.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.9`
aluSecSessionRevDropIpOptPkts Packets dropped due to containing prohibited IP Options for this session.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.10`
aluSecSessionFwdDropMaxPkts Packets dropped due to exceeding the maximum number of packets permitted for this session.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.11`
aluSecSessionRevDropMaxPkts Packets dropped due to exceeding the maximum number of packets permitted for this session.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.12`
aluSecSessionFwdDropMaxIcmpErr ICMP Error Packets dropped due to exceeding the maximum number of errors permitted for this session.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.13`
aluSecSessionRevDropMaxIcmpErr ICMP Error Packets dropped due to exceeding the maximum number of errors permitted for this session.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.14`
aluSecSessionFwdSecurityDrop Packets dropped due to applications insepctions.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.15`
aluSecSessionRevSecurityDrop Packets dropped due to applications insepctions.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.16`
aluSecSessionFwdPolicerDrop Packets dropped due to rate exceeded in policer.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.17`
aluSecSessionRevPolicerDrop Packets dropped due to rate exceeded in policer.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.18`
aluSecSessionRevDropActionPkts Packets/Fragments dropped due to session action being drop.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.1.1.19`

aluSecZoneStatsTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.3.2 · 1 row entry · 6 columns

Open in standard view

The aluSecZoneStatsTable has an entry for each security zone

aluSecZoneStatsEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.3.2.1

Each row entry represents stats for a security zone.

Indexes

aluSecZoneId

Column Syntax OID

aluSecZoneId

The value of aluSecZoneId specifies the
security zone index for this row entry.

Unsigned32

Constraints:
range: 1-65534

.1.3.6.1.4.1.6527.6.1.2.2.17.3.2.1.1

aluSecZoneRxCtrlQueueFwdPkts

Pkts forwarded from the Receiving Security Control Queue to security engine for further inspection

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.3.2.1.2

aluSecZoneRxCtrlQueueFwdBytes

Bytes forwarded from the Receiving Security Control Queue to security engine for further inspection

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.3.2.1.3

aluSecZoneRxCtrlQueueDroPkts

Pkts dropped from the Receiving Security Control Queue

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.3.2.1.4

aluSecZoneRxCtrlQueueDroBytes

Bytes dropped from the Receiving Security Control Queue

SNMPv2-SMICounter64

Textual Convention: SNMPv2-SMICounter64 Unsigned64

Type Constraints:
range: 0..18446744073709551615

.1.3.6.1.4.1.6527.6.1.2.2.17.3.2.1.5

aluSecZoneRxCtrlQueueAutoBind

All Auto-Bind zones share a single Rx Control Queue. This object indicates
whether this zone row is displaying the aggregates stats for all Auto-Bind Zones

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.3.2.1.6

aluSecEngineStatsTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.3.3 · 1 row entry · 6 columns

Open in standard view

The aluSecEngineStatsTable has an entry for 
security engine in the system.

aluSecEngineStatsEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.3.3.1

Each row entry represents a security engine.

Indexes

aluSecEngineId

Column	Syntax	OID
aluSecEngineId The value of aluSecEngineId specifies the identifier for security engine.	Unsigned32 Constraints: `range: 1-65535`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.3.1.1`
aluSecEngineUtilization The value of aluSecEngineUtilization specifies the percentage of the processing capacity in use over the last second.	percentSNMPv2-SMIUnsigned32 Textual Convention: SNMPv2-SMIUnsigned32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.3.1.2`
aluSecEngineRxQueueCtrlPkts Control Pkts forwarded to Engine from Rx Queue.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.3.1.3`
aluSecEngineRxQueueDataPkts Session Data Pkts forwarded to Engine from Rx Queue.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.3.1.4`
aluSecEngineRxQueueDropPkts Pkts dropped by Engine Rx Queue.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.3.1.5`
aluSecEngineDropPkts Pkts dropped by Engine due to security policy.	SNMPv2-SMICounter64 Textual Convention: SNMPv2-SMICounter64 `Unsigned64` Type Constraints: `range: 0..18446744073709551615`	`.1.3.6.1.4.1.6527.6.1.2.2.17.3.3.1.6`

aluSecLogTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1 · 1 row entry · 12 columns

Open in standard view

The alSecLogTable has an entry for each 
security log configured on the system.

aluSecLogEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1

Each row entry represents a log entry.

Indexes

aluSecLogId

Column Syntax OID

aluSecLogId

The value of the object aluSecLogId specifies
the unique id of the Log. The Id must be
unique within the system.

TSecurityLogId

Textual Convention: TSecurityLogId Unsigned32

Type Constraints:
range: 0..100

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.1

aluSecLogName

The value of the object aluSecLogName
specifies the name of the Log.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.2

aluSecLogRowStatus

The value of aluSecLogRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecLogTable. aluSecLogRowStatus does not support
createAndWait. The status can only be active
or notIn…

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.3

aluSecLogDescription

Description of this log.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.4

aluSecLogEnabled

The value of the object aluSecLogEnabled
indicates whether this Log is currently enabled
to log events.

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.5

aluSecLogDestination

The value of the object aluSecLogDestination
specifies the destination of log.

Enumerationr/w

Enumerated Values:

0	none
1	memory
2	syslog

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.6

aluSecLogMemSize

The value of the object aluSecLogMemSize
specifies the number of logs that are held in memory.
This value is only applicable when aluSecLogDestinations is
type 'memory'

Unsigned32r/w

Constraints:
range: 1-1024

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.7

aluSecLogMemWrap

The value of the object aluSecLogMemWrap
specifies if the log will overwrite the oldest logs once
the log has reached it's maximum size.
This value is only applicable when aluSecLogDestination is
type 'memory'

SNMPv2-TCTruthValuer/w

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.8

aluSecLogSysLogId

The value of the object aluSecLogSysLogId
specifies the unigue ID of the SysLog destination for logs
generated to this log id.
This value is only applicable when aluSecLogDestinations is
type 'syslog'

Unsigned32r/w

Constraints:
range: 0-65535

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.9

aluSecLogLogProfileId

The value of the object aluSecLogLogProfileId
specifies the unigue ID of the Logging Profile of this
log.

TSecurityLogProfileIdr/w

Textual Convention: TSecurityLogProfileId Unsigned32

Type Constraints:
range: 1..100

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.10

aluSecLogApplied

The value of the object aluSecLogApplied indicates
whether this log is in use.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.11

aluSecLogNextEventNum

The value of the object aluSecLogNextEventNum indicates
the next event number to be used.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.5.1.1.12

aluSecLogProfileTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.5.2 · 1 row entry · 5 columns

Open in standard view

The alSecLogProfileTable has an entry for each 
each logging profile configured on the system.

aluSecLogProfileEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.5.2.1

Each row entry represents a log profile.

Indexes

aluSecLogProfileId

Column Syntax OID

aluSecLogProfileId

The value of the object aluSecLogProfileId
specifies the unigue ID of the Logging Profile of this
log.

TSecurityLogProfileId

Textual Convention: TSecurityLogProfileId Unsigned32

Type Constraints:
range: 1..100

.1.3.6.1.4.1.6527.6.1.2.2.17.5.2.1.1

aluSecLogProfileName

The value of the object aluSecLogProfileName
specifies the name of the Log Profile.

TIMETRA-TC-MIBTNamedItemOrEmptyr/w

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.5.2.1.2

aluSecLogProfileRowStatus

The value of aluSecLogProfileRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecLogProfileTable. aluSecLogProfileRowStatus does not support
createAndWait. The status can onl…

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.5.2.1.3

aluSecLogProfileDescription

Description of this log profile.

TIMETRA-TC-MIBTItemDescriptionr/w

Textual Convention: TIMETRA-TC-MIBTItemDescription OctetString

Type Constraints:
range: 0..80

.1.3.6.1.4.1.6527.6.1.2.2.17.5.2.1.4

aluSecLogProfileApplied

Indicates whether this profile is being used by any logs.

SNMPv2-TCTruthValue

Textual Convention: SNMPv2-TCTruthValue Enumeration

Type Values:

1	true
2	false

.1.3.6.1.4.1.6527.6.1.2.2.17.5.2.1.5

aluSecLogEventTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.5.3 · 1 row entry · 4 columns

Open in standard view

The alSecLogEventTable has an entry for each 
each log event configurable with a security log profile 
configured on the system.

aluSecLogEventEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.5.3.1

Each row entry represents a log event under a profile. All events
are auto-created when a Log Profile is created.

Indexes

aluSecLogProfileId aluSecLogEventType aluSecLogEventId

Column Syntax OID

aluSecLogEventType

The value of the object aluSecLogEventType specifies
the type/category of the event.

Enumeration

Enumerated Values:

1	packet
2	zone
3	policy
4	session
5	application
6	alg

.1.3.6.1.4.1.6527.6.1.2.2.17.5.3.1.1

aluSecLogEventId

The value of the object aluSecLogEventId specifies
the unique id of the event within the Event Type/Category.
An Event-Id of 0 is used to set settings at the Event Type level.
These setting will be applied to all events…

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.5.3.1.2

aluSecLogEventName

The value of the object aluSecLogEventName
specifies the name of the Log Event. This value is read-only.

TIMETRA-TC-MIBTNamedItemOrEmpty

Textual Convention: TIMETRA-TC-MIBTNamedItemOrEmpty OctetString

Type Constraints:
range: 0..32

.1.3.6.1.4.1.6527.6.1.2.2.17.5.3.1.3

aluSecLogEventControl

Suppress/Throttle the generation of an event or event type.
- Each event can individually be suppressed.
- Throttling or disabling event control must be done at the event-type
level by setting aluSecLogEventControl u…

Enumerationr/w

Enumerated Values:

1	off
2	throttled
3	suppressed

.1.3.6.1.4.1.6527.6.1.2.2.17.5.3.1.4

aluMcPeerFwTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2 · 1 row entry · 24 columns

Open in standard view

The aluMcPeerFwTable has an entry for each multi-chassis peer
end-point configured on this system.

aluMcPeerFwEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1

Each row entry represents a particular multi-chassis firewall peer.
Entries are create/deleted by the user.

Indexes

TIMETRA-MC-REDUNDANCY-MIBtmnxMcPeerIpType TIMETRA-MC-REDUNDANCY-MIBtmnxMcPeerIpAddr

Column Syntax OID

aluMcPeerFwRowStatus

The value of aluMcPeerFwRowStatus is used for creation/deletion of
multi-chassis peer end-points.

SNMPv2-TCRowStatusr/w

Textual Convention: SNMPv2-TCRowStatus Enumeration

Type Values:

1	active
2	notInService
3	notReady
4	createAndGo
5	createAndWait
6	destroy

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.1

aluMcPeerFwLastChanged

The value of aluMcPeerFwLastChanged indicates the sysUpTime
at the time of the last modification of this entry.

If no changes were made to the entry since the last re-initialization
of the local network m…

SNMPv2-TCTimeStamp

Textual Convention: SNMPv2-TCTimeStamp Unsigned32

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.2

aluMcPeerFwAdminState

The value of aluMcPeerFwAdminState specifies the administrative state
of this multi-chassis peer end-point.

TIMETRA-TC-MIBTmnxAdminStater/w

Textual Convention: TIMETRA-TC-MIBTmnxAdminState Enumeration

Type Values:

1	noop
2	inService
3	outOfService

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.3

aluMcPeerFwSysPriority

The value of aluMcPeerFwSysPriority specifies the system priority
of this multi-chassis peer end-point.

Unsigned32r/w

Constraints:
range: 0-255

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.4

aluMcPeerFwKeepAliveIntvl

The value of aluMcPeerFwKeepAliveIntvl specifies the interval at which
keep-alive messages are exchanged between two peers participating
in a multi-chassis end-point tunnel (MC-FW).

These keep-alive messa…

deci-secondsUnsigned32r/w

Constraints:
range: 5-500

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.5

aluMcPeerFwHoldOnNbrFail

The value of aluMcPeerFwHoldOnNbrFail specifies the number of
keep-alive intervals that the local peer will wait for packets from the
multi-chassis end-point peer before assuming failure.

Unsigned32r/w

Constraints:
range: 2-25

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.6

aluMcPeerFwBootTimer

The value of aluMcPeerFwBootTimer specifies the time the multi-chassis
end-point protocol keeps trying the establish a connection before
assuming a failure of the remote-peer.

This object is used at the b…

secondsUnsigned32r/w

Constraints:
range: 1-600

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.7

aluMcPeerFwBfd

The value of aluMcPeerFwBfd specifies whether bi-directional
forwarding detection (BFD) is configured for this multi-chassis
end-point peering tunnel.

TIMETRA-TC-MIBTmnxEnabledDisabledr/w

Textual Convention: TIMETRA-TC-MIBTmnxEnabledDisabled Enumeration

Type Values:

1	enabled
2	disabled

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.8

aluMcPeerFwOperState

The value of aluMcPeerFwOperState indicates the operational
status of this multi-chassis end-point peer.

Enumeration

Enumerated Values:

0	inService
1	outOfService

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.9

aluMcPeerFwPeerLastStateChge

The value of aluMcPeerFwPeerLastStateChge indicates the sysUpTime
at the time of the last operational state change for this
multi-chassis end-point peer.

If no changes were made since the last re-initial…

SNMPv2-TCTimeStamp

Textual Convention: SNMPv2-TCTimeStamp Unsigned32

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.10

aluMcPeerFwRefCount

The value of aluMcPeerFwRefCount indicates how many service end-points
are referencing this multi-chassis firewall peer.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.11

aluMcPeerFwEncryption

The value of aluMcPeerFwEncryption specifies whether encryption
is enabled for this multi-chassis firewall peer.

TIMETRA-TC-MIBTmnxEnabledDisabledr/w

Textual Convention: TIMETRA-TC-MIBTmnxEnabledDisabled Enumeration

Type Values:

1	enabled
2	disabled

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.12

aluMcPeerFwEncryptionAuthAlg

The value of aluMcPeerFwEncryptionAuthAlg specifies the hashing
algorithm used for the AH (Authentication Header) protocol's
authentication function.

AluMcFwAuthAlgorithmr/w

Textual Convention: AluMcFwAuthAlgorithm Enumeration

Type Values:

1	sha256
2	sha512

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.13

aluMcPeerFwEncryptionEncrAlg

The value of aluMcPeerFwEncryptionEncrAlg specifies the
encryptiontion algorithm to be used. Encryptiontion only applies
to ESP(Encapsulating Security Payload) configurations.

AluMcFwEncrAlgorithmr/w

Textual Convention: AluMcFwEncrAlgorithm Enumeration

Type Values:

1	aes128
2	aes256

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.14

aluMcPeerFwEncryptionActOutSa

The value of aluMcPeerFwEncryptionActOutSa specifies the SPI
to be used when performing encryption and authentication
on egressing packets using this MC firewall peer.

Unsigned32r/w

Constraints:
range: 0-1023

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.15

aluMcPeerFwEncryptionSpi1

The value of aluMcPeerFwEncryptionSpi1 specifies the spi of the first security association.
spi 0 means that this security association is invalid

Unsigned32r/w

Constraints:
range: 0-1023

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.16

aluMcPeerFwEncryptionSpiAuthKey1

The value of aluMcPeerFwEncryptionSpiAuthKey1 specifies the key used
for the authentication algorithm defined by the
aluMcPeerFwEncryptionAuthAlg.

The length of the key must match the length required by t…

OctetStringr/w

Constraints:
range: 0-64

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.17

aluMcPeerFwEncryptionSpiEncrKey1

The value of aluMcPeerFwEncryptionSpiEncrKey1 specifies the key used
for the encryption algorithm defined by the
aluMcPeerFwEncryptionEncrAlg.

The length of the key must match the length required by the
e…

OctetStringr/w

Constraints:
range: 0-32

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.18

aluMcPeerFwEncryptionSpi2

The value of aluMcPeerFwEncryptionSpi2 specifies the spi of the second security association.
spi 0 means that this security association is invalid

Unsigned32r/w

Constraints:
range: 0-1023

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.19

aluMcPeerFwEncryptionSpiAuthKey2

The value of aluMcPeerFwEncryptionSpiAuthKey2 specifies the key used
for the authentication algorithm defined by the
aluMcPeerFwEncryptionAuthAlg.

The length of the key must match the length required by t…

OctetStringr/w

Constraints:
range: 0-64

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.20

aluMcPeerFwEncryptionSpiEncrKey2

The value of aluMcPeerFwEncryptionSpiEncrKey2 specifies the key used
for the encryption algorithm defined by the
aluMcPeerFwEncryptionEncrAlg.

The length of the key must match the length required by the
e…

OctetStringr/w

Constraints:
range: 0-32

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.21

aluMcPeerFwElectionRole

The value of aluMcPeerFwElectionRole indicates the role
of this multi-chassis firewall peer.

Enumeration

Enumerated Values:

0	not-applicable
1	master
2	slave
3	standalone-master

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.22

aluMcPeerFwPolicySync

The value of aluMcPeerFwPolicySync indicates the state of the
Policy Synchronization flag on this multi-chassis firewall peer.

Enumeration

Enumerated Values:

0	not-applicable
1	synced
2	out-of-sync

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.23

aluMcPeerFwSessionDBSync

The value of aluMcPeerFwSessionDBSync indicates the state of the
Session Database Synchronization flag on this multi-chassis firewall peer.

Enumeration

Enumerated Values:

0	not-applicable
1	synced
2	out-of-sync

.1.3.6.1.4.1.6527.6.1.2.2.17.6.2.1.24

aluMcFwPeerStatsTable

table

.1.3.6.1.4.1.6527.6.1.2.2.17.7.1 · 1 row entry · 17 columns

Open in standard view

The aluMcFwPeerStatsTable has an entry for each multi-chassis peer
configured on this system.

aluMcFwPeerStatsEntry entry .1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1

Each row entry represents a collection of statistics for a
multi-chassis peer.

Entries cannot be created and deleted via SNMP SET operations.

Indexes

TIMETRA-MC-REDUNDANCY-MIBtmnxMcPeerIpType TIMETRA-MC-REDUNDANCY-MIBtmnxMcPeerIpAddr

Column	Syntax	OID
aluMcFwPeerStatsPktsRx The value of aluMcFwPeerStatsPktsRx indicates how many valid MC-Firewall control packets were received on this system from the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.1`
aluMcFwPeerStatsPktsRxKpalive The value of aluMcFwPeerStatsPktsRxKpalive indicates how many valid MC-Firewall control packets of type keepalive were received on this system from the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.2`
aluMcFwPeerStatsPktsRxPeerCfg The value of aluMcFwPeerStatsPktsRxPeerCfg indicates how many valid MC-Firewall control packets of type peer config were received on this system from the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.3`
aluMcFwPeerStatsPktsRxPeerData The value of aluMcFwPeerStatsPktsRxPeerData indicates how many valid MC-Firewall control packets of type peer data were received on this system from the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.4`
aluMcFwPeerStatsDropRxPeerData The value of aluMcFwPeerStatsDropRxPeerData indicates indicates how many MC-Firewall control packets of type peer data were dropped on this system from the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.5`
aluMcFwPeerStatsDropStateDsbld The value of aluMcFwPeerStatsDropStateDsbld indicates how many MC-Firewall control packets were dropped on this system from the peer because the peer was administratively disabled.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.6`
aluMcFwPeerStatsDropPktTooShrt The value of aluMcFwPeerStatsDropPktTooShrt indicates how many MC-Firewall control packets were dropped on this system from the peer because the packet was too short.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.7`
aluMcFwPeerStatsDropTlvInvldSz The value of aluMcFwPeerStatsDropTlvInvldSz indicates how many MC-Firewall control packets were dropped on this system from the peer because the packet size was invalid.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.8`
aluMcFwPeerStatsDropOutOfSeq The value of aluMcFwPeerStatsDropOutOfSeq indicates how many MC-Firewall control packets were dropped on this system from the peer because the packet was out of sequence.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.9`
aluMcFwPeerStatsDropUnknownTlv The value of aluMcFwPeerStatsDropUnknownTlv indicates how many MC-Firewall control packets were dropped on this system from the peer because the packet contained an unknown TLV.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.10`
aluMcFwPeerStatsDropMD5 The value of aluMcFwPeerStatsDropMD5 indicates how many MC-Firewall control packets were dropped on this system from the peer because the packet failed MD5 authentication.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.11`
aluMcFwPeerStatsPktsTx The value of aluMcFwPeerStatsPktsTx indicates how many MC-Firewall control packets were transmitted from this system to the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.12`
aluMcFwPeerStatsPktsTxKpalive The value of aluMcFwPeerStatsPktsTxKpalive indicates how many MC-Firewall control packets of type keepalive were transmitted from this system to the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.13`
aluMcFwPeerStatsPktsTxPeerCfg The value of aluMcFwPeerStatsPktsTxPeerCfg indicates how many MC-Firewall control packets of type peer config were transmitted from this system to the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.14`
aluMcFwPeerStatsPktsTxPeerData The value of aluMcFwPeerStatsPktsTxPeerData indicates how many MC-Firewall control packets of type peer data were transmitted from this system to the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.15`
aluMcFwPeerStatsPktsTxFailed The value of aluMcFwPeerStatsPktsTxFailed indicates how many MC-Firewall control packets failed to be transmitted from this system to the peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.16`
aluMcFwPeerStatsDropFwNoPeer The value of aluMcFwPeerStatsDropFwNoPeer indicates how many pkts were dropped because MC-Firewall does not have a MC-peer assigned yet or MC-Firewall is attached to a different peer.	SNMPv2-SMICounter32 Textual Convention: SNMPv2-SMICounter32 `Unsigned32` Type Constraints: `range: 0..4294967295`	`.1.3.6.1.4.1.6527.6.1.2.2.17.7.1.1.17`