BIANCA-BRICK-SIF-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
8
Rows
8
Columns
65

ipSifAliasAddressTable

table mandatory
.1.3.6.1.4.1.272.4.5.28 · 1 row entry · 8 columns
Contains a alias Address Entry Index,Ip,Mask,Interface
ipSifAliasAddressEntry entry .1.3.6.1.4.1.272.4.5.28.1
Contents a Stateful inspection Firewall description for a
alias Name
Indexes
ipSifAliasAddressAlias
Column Syntax OID
ipSifAliasAddressIndex mandatory
The Index for the address alias
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.28.1.1
ipSifAliasAddressAlias mandatory
Alias Name for the Address Entry
r/w .1.3.6.1.4.1.272.4.5.28.1.2
ipSifAliasAddressAddress mandatory
The ip-address for the Alias
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.28.1.3
ipSifAliasAddressMask mandatory
The ip Mask for the Alias
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.28.1.4
ipSifAliasAddressInterface mandatory
The interface index for the alias
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.28.1.5
ipSifAliasAddressMode mandatory
Address or Interface Mode
Enumerationr/w
Enumerated Values:
1interface
2address
3range
4delete
.1.3.6.1.4.1.272.4.5.28.1.6
ipSifAliasAddressRange mandatory
The ip Range for the Alias
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.272.4.5.28.1.7
ipSifAliasAddressGroup mandatory
For values greater than zero this entry determines the
IP address group this entry belongs to, see also
ipSifAliasAddressGroupId
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.28.1.8

ipSifAliasServiceTable

table mandatory
.1.3.6.1.4.1.272.4.5.29 · 1 row entry · 11 columns
Contains a alias Service Entry Protocol,Port,Range
ipSifAliasServiceEntry entry .1.3.6.1.4.1.272.4.5.29.1
Contains a alias Service Entry Protocol,Port,Range
Indexes
ipSifAliasServiceAlias
Column Syntax OID
ipSifAliasServiceIndex mandatory
The Index for the address alias
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.29.1.1
ipSifAliasServiceAlias mandatory
Alias Name for the Service Entry
r/w .1.3.6.1.4.1.272.4.5.29.1.2
ipSifAliasServiceProtocol mandatory
The protocol for the Service alias
Enumerationr/w
Enumerated Values:
1icmp
2igmp
3ggp
4ip
6tcp
8egp
9igp
12pup
16chaos
17udp
20hmp
22xns-idp
27rdp
41ipv6
46rsvp
47gre
50esp
51ah
56tlsp
57skip
65kryptolan
80iso-ip
88igrp
89ospf
94ipip
103pim
111ipx-in-ip
112vrrp
115l2tp
250local
251internet
252netmeeting
253udptcp
254any
255delete
256dont-verify
.1.3.6.1.4.1.272.4.5.29.1.3
ipSifAliasServicePort mandatory
The Port for the Service Alias.
Integer32r/w
Constraints:
range: -1-65535
.1.3.6.1.4.1.272.4.5.29.1.4
ipSifAliasServiceRange mandatory
The Port Range for the Service Alias.
Integer32r/w
Constraints:
range: 1-65536
.1.3.6.1.4.1.272.4.5.29.1.5
ipSifAliasServiceType mandatory
Specifies wether created by the IP/SIF subsystem itself or
created/modified by the administrator.
Enumeration
Enumerated Values:
1predefined
2custom
.1.3.6.1.4.1.272.4.5.29.1.6
ipSifAliasServiceGroup mandatory
For values greater than zero this entry determines the
IP service group this entry belongs to, see also
ipSifAliasServiceGroupId
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.29.1.7
ipSifAliasServiceSourcePort mandatory
The Source Port for the Service Alias.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.272.4.5.29.1.8
ipSifAliasServiceSourceRange mandatory
The Source Port Range for the Service Alias.
Integer32r/w
Constraints:
range: 1-65536
.1.3.6.1.4.1.272.4.5.29.1.9
ipSifAliasServiceIcmpType mandatory
The ICMP Type for the Service Alias.
Integer32r/w
Constraints:
range: -1-255
.1.3.6.1.4.1.272.4.5.29.1.10
ipSifAliasServiceIcmpCode mandatory
The ICMP Code for the Service Alias.
Integer32r/w
Constraints:
range: -1-255
.1.3.6.1.4.1.272.4.5.29.1.11

ipSifAliasTable

table mandatory
.1.3.6.1.4.1.272.4.5.30 · 1 row entry · 8 columns
Contains a Stateful Inspection Firewall (SIF) policy.
ipSifAliasEntry entry .1.3.6.1.4.1.272.4.5.30.1
Indexes
ipSifAliasOrder
Column Syntax OID
ipSifAliasOrder mandatory
The Order for the Stateful Inspection Entry rule
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.30.1.1
ipSifAliasSource mandatory
The alias Source Index for the Entry
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.30.1.2
ipSifAliasDestination mandatory
The alias Destination Index for the Entry
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.30.1.3
ipSifAliasService mandatory
The alias Protocol/service Index for Entry
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.30.1.4
ipSifAliasAction mandatory
The Rule for the Filter
Enumerationr/w
Enumerated Values:
1access
2deny
3reject
255delete
.1.3.6.1.4.1.272.4.5.30.1.5
ipSifAliasStatus mandatory
Defines the administrative status of this policy
Enumerationr/w
Enumerated Values:
1enabled
2disabled
.1.3.6.1.4.1.272.4.5.30.1.6
ipSifAliasPriority mandatory
Defines the QoS priority of this policy
Enumerationr/w
Enumerated Values:
1default
2low-latency
3high
4medium
5low
.1.3.6.1.4.1.272.4.5.30.1.7
ipSifAliasClassId mandatory
Internal ID for SIF policy to QoS policy mapping
Integer32r/w
Constraints:
range: 0-255
.1.3.6.1.4.1.272.4.5.30.1.8

ipSifRejectTable

table mandatory
.1.3.6.1.4.1.272.4.5.31 · 1 row entry · 8 columns
Contains actually rejected Frames with Source Destination
ipSifRejectEntry entry .1.3.6.1.4.1.272.4.5.31.1
Indexes
ipSifRejectIndex
Column Syntax OID
ipSifRejectIndex mandatory
The Index for the Reject Entry
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.31.1.1
ipSifRejectSource mandatory
The Reject Source for the Entry
RFC1155-SMIIpAddress
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.31.1.2
ipSifRejectDestination mandatory
The Reject Destination Index for the Entry
RFC1155-SMIIpAddress
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.31.1.3
ipSifRejectRejects mandatory
Count of rejected frames
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.31.1.4
ipSifRejectSilence mandatory
Last reject in seconds
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.31.1.5
ipSifRejectProtocol mandatory
The protocol of the rejected Packet
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.31.1.6
ipSifRejectPortLo mandatory
The lowest Port rejected
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.31.1.7
ipSifRejectPortHigh mandatory
The highest port rejected
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.31.1.8

ipSifExpectTable

table mandatory
.1.3.6.1.4.1.272.4.5.35 · 1 row entry · 9 columns
Contains expected Sessions with  Source Destination
ipSifExpectEntry entry .1.3.6.1.4.1.272.4.5.35.1
Indexes
ipSifExpectIndex
Column Syntax OID
ipSifExpectIndex mandatory
This field is used for SIF-internal signalling and stores the
index for the expected session for later matching.
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.35.1.1
ipSifExpectSource mandatory
The source-IP-address for the expected session.
A value of 0 means ANY source-address.
RFC1155-SMIIpAddress
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.35.1.2
ipSifExpectDestination mandatory
The destination-IP-address for the expected session.
A value of 0 means ANY destination-address.
RFC1155-SMIIpAddress
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.35.1.3
ipSifExpectProtocol mandatory
The protocol of the expected session.
Enumerationr/w
Enumerated Values:
2igmp
4ip
6tcp
17udp
255delete
.1.3.6.1.4.1.272.4.5.35.1.4
ipSifExpectSourcePort mandatory
The source-port-number of the expected session.
A value of 0 means ANY source-port-number.
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.35.1.5
ipSifExpectDestPort mandatory
The destination-port-number of the expected session.
A value of 0 means ANY destination-port-number.
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.35.1.6
ipSifExpectPriority mandatory
Defines the QoS-priority/policy to be used for the
expected SIF-session.
Enumeration
Enumerated Values:
1default
2low-latency
3high
4medium
5low
.1.3.6.1.4.1.272.4.5.35.1.7
ipSifExpectClassId mandatory
Internal ID for mapping SIF-policy to QoS-policy.
Default-value of 0 means NOT SPECIFIED.
Integer32
Constraints:
range: 1-255
.1.3.6.1.4.1.272.4.5.35.1.8
ipSifExpectIfIndex mandatory
Interface-index for which the session is expected.
A value of 0 means ANY interface-index.
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.35.1.9
.1.3.6.1.4.1.272.4.5.47 · 1 row entry · 4 columns
Defines IP address or interface group alias
ipSifAliasAddressGroupEntry entry .1.3.6.1.4.1.272.4.5.47.1
Defines IP address or interface group alias
Indexes
ipSifAliasAddressGroupId
Column Syntax OID
ipSifAliasAddressGroupId mandatory
The unique address group entry ID
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.47.1.1
ipSifAliasAddressGroupAlias mandatory
Alias name for the address group entry
r/w .1.3.6.1.4.1.272.4.5.47.1.2
ipSifAliasAddressGroupIndex mandatory
The index for the address group entry to be referred by an
ipSifAlias entry
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.47.1.3
ipSifAliasAddressGroupMode mandatory
Specifies wether this entry defines an interface or address
group
Enumerationr/w
Enumerated Values:
1interface
2address
3delete
.1.3.6.1.4.1.272.4.5.47.1.4
.1.3.6.1.4.1.272.4.5.48 · 1 row entry · 4 columns
Defines IP service group alias
ipSifAliasServiceGroupEntry entry .1.3.6.1.4.1.272.4.5.48.1
Defines IP service group alias
Indexes
ipSifAliasServiceGroupId
Column Syntax OID
ipSifAliasServiceGroupId mandatory
The unique IP service group entry ID
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.48.1.1
ipSifAliasServiceGroupAlias mandatory
Alias name for the IP service group entry
r/w .1.3.6.1.4.1.272.4.5.48.1.2
ipSifAliasServiceGroupIndex mandatory
The index for the Ip service group entry to be referred by an
ipSifAlias entry
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.48.1.3
ipSifAliasServiceGroupMode mandatory
Specifies wether this entry defines an IP service group or
should be deleted
Enumerationr/w
Enumerated Values:
1service
2delete
.1.3.6.1.4.1.272.4.5.48.1.4

ipSifPolicyChkTable

table mandatory
.1.3.6.1.4.1.272.4.5.49 · 1 row entry · 13 columns
MIB interface in order to check the configured SIF polices:
- for debugging purposes
- for test applications
- for configuration frontends
NOTE: it's a stateless check, not based on a real IP session
     context
ipSifPolicyChkEntry entry .1.3.6.1.4.1.272.4.5.49.1
Indexes
ipSifPolicyChkProtocol ipSifPolicyChkDestPort
Column Syntax OID
ipSifPolicyChkSourceIfIndex mandatory
The source interface index, for example '1' addresses
the 'local' interface whereas '0' means 'don't check.
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.49.1.1
ipSifPolicyChkDestIfIndex mandatory
The destination interface index, for example '1' addresses
the 'local' interface whereas '0' means 'don't check.'
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.49.1.2
ipSifPolicyChkSource mandatory
The source IP address, 0.0.0.0 means 'don't check'.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.49.1.3
ipSifPolicyChkDestination mandatory
The destination IP address, 0.0.0.0 means 'don't check'.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
.1.3.6.1.4.1.272.4.5.49.1.4
ipSifPolicyChkProtocol mandatory
The IP protocol number to checked, '0' means 'don't check.
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.49.1.5
ipSifPolicyChkDestPort mandatory
The destination port number (UDP/TCP service) to checked,
'0' means 'don't check.
Integer32r/w
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.49.1.6
ipSifPolicyChkRule mandatory
Returns the associated policy, depending on:
- ipSifAliasAction
- ipSifAliasOrder
- ipSifAliasStatus
Enumeration
Enumerated Values:
1access
2deny
3reject
4unknown
.1.3.6.1.4.1.272.4.5.49.1.7
ipSifPolicyChkRuleOrder mandatory
Returns the associated policy order (see ipSifAliasOrder).
Integer32
Textual Convention: COPS-PR-SPPIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.272.4.5.49.1.8
ipSifPolicyChkResult mandatory
Returns the result depending on:
- ipSifPolicyChkRule
- administrative status (ipSifAdminStatus)
- operational status of the SIF engine
Enumeration
Enumerated Values:
1access
2deny
3unknown
.1.3.6.1.4.1.272.4.5.49.1.9
ipSifPolicyChkState mandatory
Displays the current status of the policy check, when setting
to trigger(2) a new check will be initiated.
Enumerationr/w
Enumerated Values:
1initial
2trigger
3running
4done
.1.3.6.1.4.1.272.4.5.49.1.10
ipSifPolicyChkAdminStatus mandatory
Determines wether the ipSifAdminStatus should be considered
for the policy (check (1)) or not (ingnore (2)).
Enumerationr/w
Enumerated Values:
1check
2ignore
.1.3.6.1.4.1.272.4.5.49.1.11
ipSifPolicyChkOperStatus mandatory
Determines wether the SIF operational status should be
considered for the policy (check (1)) or not (ingnore (2)).
Enumerationr/w
Enumerated Values:
1check
2ignore
.1.3.6.1.4.1.272.4.5.49.1.12
ipSifPolicyChkCurrOperStatus mandatory
The current SIF operational status.
Enumeration
Enumerated Values:
1up
2down
.1.3.6.1.4.1.272.4.5.49.1.13