BIANCA-BRICK-IP-SERVICE-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view

Tables

Rows

Columns

localTcpAllowTable

table mandatory

.1.3.6.1.4.1.272.4.5.14.1 · 1 row entry · 6 columns

Open in standard view

Filter rule table for incoming TCP packets for local services.
This table is used to restrict access to TCP services provided
by the system.
          
o  active rules have at least one of 'localTcpAllowAddrMode'
	and 'localTcpAllowIfMode' set to 'verify' 
          
o  if there are active rules for a certain service,
	incoming connections of this service type (port) must
	match at least one of them.
          
o  incoming connections to a service (port) without
	an active rule are always allowed.
          
o  connections originating from 127.0.0.1 are always
	allowed

localTcpAllowEntry entry .1.3.6.1.4.1.272.4.5.14.1.1

Indexes

localTcpAllowAddr localTcpAllowService

Column Syntax OID

localTcpAllowAddrMode mandatory

Specifies wether or not the IP source address of incoming
TCP packets should be checked against localTcpAllowAddr and
localTcpAllowMask.

Enumerationr/w

Enumerated Values:

1	dont-verify
2	verify
3	delete

.1.3.6.1.4.1.272.4.5.14.1.1.1

localTcpAllowAddr mandatory

Check source IP address against contents of this variable,
taking localTcpAllowMask into account.

RFC1155-SMIIpAddressr/w

Textual Convention: RFC1155-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.272.4.5.14.1.1.2

localTcpAllowMask mandatory

Specifies address mask to use for IP source address comparisson
with address contained in localTcpAllowAddr.

RFC1155-SMIIpAddressr/w

Textual Convention: RFC1155-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.272.4.5.14.1.1.3

localTcpAllowIfMode mandatory

Specifies wether or not the source interface of incoming
TCP packets should be checked.

Enumerationr/w

Enumerated Values:

1	dont-verify
2	verify

.1.3.6.1.4.1.272.4.5.14.1.1.4

localTcpAllowIfIndex mandatory

Specifies source interface index for interface check in case
localTcpAllowIfMode is set to verify.

Integer32r/w

Textual Convention: COPS-PR-SPPIInteger32 Integer32

Type Constraints:
range: -2147483648..2147483647

.1.3.6.1.4.1.272.4.5.14.1.1.5

localTcpAllowService mandatory

TCP service

Enumerationr/w

Enumerated Values:

1	telnet
2	trace
3	snmp
4	capi
5	tapi
6	rfc1086
7	http
8	https
9	ssh

.1.3.6.1.4.1.272.4.5.14.1.1.6

localUdpAllowTable

table mandatory

.1.3.6.1.4.1.272.4.5.14.2 · 1 row entry · 6 columns

Open in standard view

Filter rule table for incoming UDP packets for local services.
This table is used to restrict access to UDP services provided
by the system.
          
o  active rules have at least one of 'localUdpAllowAddrMode'
	and 'localUdpAllowIfMode' set to 'verify'
          
o  if there are active rules for a certain service,
	incoming packets of this service type must
	match at least one of them.
          
o  incoming packets to a service (port) without
	an active rule are always allowed.
          
o  packets originating from 127.0.0.1 are always
	allowed

localUdpAllowEntry entry .1.3.6.1.4.1.272.4.5.14.2.1

Indexes

localUdpAllowAddr localUdpAllowService

Column Syntax OID

localUdpAllowAddrMode mandatory

Specifies wether or not the IP source address of incoming
UDP packets should be checked against localUdpAllowAddr and
localUdpAllowMask.

Enumerationr/w

Enumerated Values:

1	dont-verify
2	verify
3	delete

.1.3.6.1.4.1.272.4.5.14.2.1.1

localUdpAllowAddr mandatory

Check source IP address against contents of this variable,
taking localUdpAllowMask into account.

RFC1155-SMIIpAddressr/w

Textual Convention: RFC1155-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.272.4.5.14.2.1.2

localUdpAllowMask mandatory

Specifies address mask to use for IP source address comparisson
with address contained in localUdpAllowAddr.

RFC1155-SMIIpAddressr/w

Textual Convention: RFC1155-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.272.4.5.14.2.1.3

localUdpAllowIfMode mandatory

Specifies wether or not the source interface of incoming
UDP packets should checked

Enumerationr/w

Enumerated Values:

1	dont-verify
2	verify

.1.3.6.1.4.1.272.4.5.14.2.1.4

localUdpAllowIfIndex mandatory

Specifies source interface index for interface check in case
localUdpAllowIfMode is set to verify.

Integer32r/w

Textual Convention: COPS-PR-SPPIInteger32 Integer32

Type Constraints:
range: -2147483648..2147483647

.1.3.6.1.4.1.272.4.5.14.2.1.5

localUdpAllowService mandatory

service

Enumerationr/w

Enumerated Values:

1	snmp
2	rip
3	bootps
4	dns
5	nbns
6	statmon

.1.3.6.1.4.1.272.4.5.14.2.1.6

localTcpLimitTable

table mandatory

.1.3.6.1.4.1.272.4.5.14.3 · 1 row entry · 5 columns

Open in standard view

Table to be used to limit access to local TCP services.

localTcpLimitEntry entry .1.3.6.1.4.1.272.4.5.14.3.1

Indexes

localTcpLimitService

Column Syntax OID

localTcpLimitAdminState mandatory

The administrative state of this limit entry.

Enumerationr/w

Enumerated Values:

1	active
2	inactive
3	delete

.1.3.6.1.4.1.272.4.5.14.3.1.1

localTcpLimitService mandatory

The corresponding TCP service.

Enumerationr/w

Enumerated Values:

1	telnet
2	trace
3	snmp
4	capi
5	tapi
6	rfc1086
7	http
8	https
9	ssh

.1.3.6.1.4.1.272.4.5.14.3.1.2

localTcpLimitMaxSessions mandatory

Maximum number of allowed sessions for this TCP service.

Integer32r/w

Constraints:
range: 0-65536

.1.3.6.1.4.1.272.4.5.14.3.1.3

localTcpLimitCurSessions mandatory

The current number of sessions for this TCP service.

RFC1155-SMICounter

Textual Convention: RFC1155-SMICounter Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.272.4.5.14.3.1.4

localTcpLimitState mandatory

The current state for this TCP service.

Enumeration

Enumerated Values:

1	below
2	exceeded

.1.3.6.1.4.1.272.4.5.14.3.1.5

localUdpLimitTable

table mandatory

.1.3.6.1.4.1.272.4.5.14.4 · 1 row entry · 5 columns

Open in standard view

Table to be used to limit access to local UDP services.

localUdpLimitEntry entry .1.3.6.1.4.1.272.4.5.14.4.1

Indexes

localUdpLimitService

Column Syntax OID

localUdpLimitAdminState mandatory

The administrative state of this limit entry.

Enumerationr/w

Enumerated Values:

1	active
2	inactive
3	delete

.1.3.6.1.4.1.272.4.5.14.4.1.1

localUdpLimitService mandatory

The corresponding UDP service.

Enumerationr/w

Enumerated Values:

1	snmp
2	rip
3	bootps
4	dns
5	nbns
6	statmon

.1.3.6.1.4.1.272.4.5.14.4.1.2

localUdpLimitMaxRate mandatory

Maximum number of packets per second for this UDP service.

Integer32r/w

Constraints:
range: 0-65536

.1.3.6.1.4.1.272.4.5.14.4.1.3

localUdpLimitCurRate mandatory

The current number of packets per second for this UDP service.

RFC1155-SMICounter

Textual Convention: RFC1155-SMICounter Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.272.4.5.14.4.1.4

localUdpLimitState mandatory

The current state for this UDP service.

Enumeration

Enumerated Values:

1	below
2	exceeded

.1.3.6.1.4.1.272.4.5.14.4.1.5

localIcmpAllowTable

table mandatory

.1.3.6.1.4.1.272.4.5.14.5 · 1 row entry · 6 columns

Open in standard view

Filter rule table for incoming ICMP packets. 
          
o  active rules have at least one of 'localIcmpAllowAddrMode'
	and 'localIcmpAllowIfMode' set to 'verify'
          
o  if there are active rules for a certain ICMP packet type,
	incoming packets of this type must
	match at least one of them.
          
o  incoming ICMP packets with a packet type not listed in
	any active rule are always allowed.
          
o  packets originating from 127.0.0.1 are always
	allowed

localIcmpAllowEntry entry .1.3.6.1.4.1.272.4.5.14.5.1

Indexes

localIcmpAllowAddr localIcmpAllowType

Column Syntax OID

localIcmpAllowAddrMode mandatory

Specifies wether or not the IP source address of incoming
ICMP packets should checked

Enumerationr/w

Enumerated Values:

1	dont-verify
2	verify
3	delete

.1.3.6.1.4.1.272.4.5.14.5.1.1

localIcmpAllowAddr mandatory

source IP address

RFC1155-SMIIpAddressr/w

Textual Convention: RFC1155-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.272.4.5.14.5.1.2

localIcmpAllowMask mandatory

source IP address mask

RFC1155-SMIIpAddressr/w

Textual Convention: RFC1155-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.272.4.5.14.5.1.3

localIcmpAllowIfMode mandatory

Specifies wether or not the source interface of incoming
ICMP packets should checked

Enumerationr/w

Enumerated Values:

1	dont-verify
2	verify

.1.3.6.1.4.1.272.4.5.14.5.1.4

localIcmpAllowIfIndex mandatory

source interface index

Integer32r/w

Textual Convention: COPS-PR-SPPIInteger32 Integer32

Type Constraints:
range: -2147483648..2147483647

.1.3.6.1.4.1.272.4.5.14.5.1.5

localIcmpAllowType mandatory

ICMP packet type

Enumerationr/w

Enumerated Values:

1	echoRep
4	destUnreach
5	srcQuench
6	redirect
9	echo
12	timeExcds
13	parmProb
14	timestamp
15	timestampRep
18	addrMask
19	addrMaskRep

.1.3.6.1.4.1.272.4.5.14.5.1.6