HM2-FW-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
21
Rows
21
Columns
188

hm2DynFwRuleTable

table
.1.3.6.1.4.1.248.11.79.1.2.2.1 · 1 row entry · 12 columns
Open in standard view 
The list of rules for this dynamic firewall
hm2DynFwRuleEntry entry .1.3.6.1.4.1.248.11.79.1.2.2.1.1
Dynamic firewall rule entry.
Indexes
hm2DynFwRuleIndex
Column Syntax OID
hm2DynFwRuleIndex
Rule index of this dynamic firewall rule
Integer32
Constraints:
range: 1-512
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.1
hm2DynFwSourceAddress
The source address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- netobject ('$name')
OctetStringr/w
Constraints:
range: 1-20
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.2
hm2DynFwSourcePort
The source port of the packet to filter. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma separated list of ports ('1235,25,123')
-…
OctetStringr/w
Constraints:
range: 1-50
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.3
hm2DynFwTargetAddress
The destination address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- netobject ('$name')
OctetStringr/w
Constraints:
range: 1-20
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.4
hm2DynFwTargetPort
The destination port of the packet to filter. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma separated list of ports ('1235,25,12…
OctetStringr/w
Constraints:
range: 1-50
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.5
hm2DynFwProto
The IP protocol (RFC 791) for protocol-independent
filtering. The following values are currently
supported:
o icmp(1): internet control message protocol (RFC 792)
o igmp(2): internet group management protocol
o ipip(…
Enumerationr/w
Enumerated Values:
1icmp
2igmp
3ipip
4tcp
5udp
6esp
7ah
8icmpv6
9any
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.6
hm2DynFwRuleParams
Additional parameters to this rule as string.
A parameter has the syntax:
<param>=<val>
Parameters are separated by a comma.
If more than one value is given for a parameter, values are
separated by a |-sign
F…
OctetStringr/w
Constraints:
range: 0-50
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.7
hm2DynFwAction
The action of the corresponding rule:
o accept(1): Packets matching this rule are accepted and will
be forwarded
o drop(2): Packets matching this rule will be silently
discarded
o reject(3): Packets matching this …
Enumerationr/w
Enumerated Values:
1accept
2drop
3reject
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.8
hm2DynFwLog
Set to true if application of this rule shall be logged
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.9
hm2DynFwTrap
Set to true if application of this rule shall send a trap.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.10
hm2DynFwRowStatus
This is a standard row status value:
- active(1): The rule is active. Note that until committed, the rule
will not be applied.
- notInService(2): The rule is inactive because of user action.
- notReady(3): The rule is…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.11
hm2DynFwDescription
User defined textual description related to this rule.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.2.2.1.1.12

hm2DynFwRuleIfMappingTable

table
.1.3.6.1.4.1.248.11.79.1.2.2.2 · 1 row entry · 5 columns
Open in standard view 
Table for mapping L3 rules to interfaces
hm2DynFwRuleIfMappingEntry entry .1.3.6.1.4.1.248.11.79.1.2.2.2.1
Entry in rule interface mapping table
Indexes
hm2DynFwIfmInterface hm2DynFwIfmDirection hm2DynFwIfmRuleIndex
Column Syntax OID
hm2DynFwIfmRuleIndex
The index of the DynFw rule this mapping entry is assigned to.
The DynFw rule must exist before creation of mapping entry.
Integer32
Constraints:
range: 1-2048
 .1.3.6.1.4.1.248.11.79.1.2.2.2.1.1
hm2DynFwIfmDirection
Meanings:
- ingress(1): Apply this rule to packets arriving on this interface
- egress(2): Apply this rule to packets leaving from this interface
- both(3): Apply this rule to packets coming in and going out on this
i…
Enumeration
Enumerated Values:
1ingress
2egress
3both
 .1.3.6.1.4.1.248.11.79.1.2.2.2.1.2
hm2DynFwIfmPriority
The priority is the sorting key for rules in to this interface. They
don't need to be unique, but no clear order can be assumed among rules
with the same priority.
Priorities are processed in ascending order (0 highes…
SNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.248.11.79.1.2.2.2.1.3
hm2DynFwIfmInterface
The interface this mapping entry is applied to. This has to be either
an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex.
Note that for physical interfaces this only works if the corresponding
hm2Agen…
IF-MIBInterfaceIndex
Textual Convention: IF-MIBInterfaceIndex Integer32
Type Constraints:
range: 1..2147483647
 .1.3.6.1.4.1.248.11.79.1.2.2.2.1.4
hm2DynFwIfmRowStatus
The RowStatus value for this entry with the usual meanings:

- active(1): The interface mapping is in place
- notInService(2): The interface mapping is not in place because the
user said so
- notReady(3)…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.2.2.2.1.5

hm2DynFwStatsRuleTable

table
.1.3.6.1.4.1.248.11.79.1.2.4.2.1 · 1 row entry · 3 columns
Open in standard view 
Table of per-rule statistics of the dynamic firewall
hm2DynFwStatsRuleEntry entry .1.3.6.1.4.1.248.11.79.1.2.4.2.1.1
Statistics table entry for the dynamic firewall
Indexes
hm2DynFwRuleIndex
Column Syntax OID
hm2DynFwStatsPacketCount
Number of packets matched by this rule
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.248.11.79.1.2.4.2.1.1.1
hm2DynFwStatsPacketSize
Number of bytes processed by this rule
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.248.11.79.1.2.4.2.1.1.2
hm2DynFwStatsLastApplied
Local system time (hm2SystemLocalTime) when the rule was applied the last time
HM2-TC-MIBHmTimeSeconds1970
Textual Convention: HM2-TC-MIBHmTimeSeconds1970 Unsigned32
 .1.3.6.1.4.1.248.11.79.1.2.4.2.1.1.3

hm2L3RuleTable

table
.1.3.6.1.4.1.248.11.79.1.3.2.1 · 1 row entry · 15 columns
Open in standard view 
The list of L3 rules for this firewall
hm2L3RuleEntry entry .1.3.6.1.4.1.248.11.79.1.3.2.1.1
L3 rule entry.
Indexes
hm2L3RuleIndex
Column Syntax OID
hm2L3RuleIndex
Rule index of this L3 rule
Integer32
Constraints:
range: 1-2048
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.1
hm2L3SourceAddress
The source address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- Asset name from hm2AssetTable
- netobject ('$name')
- a prepending '!'…
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.2
hm2L3SourcePort
The source port of the packet to reroute. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma separated list of ports ('1235,25,123')
…
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.3
hm2L3TargetAddress
The destination address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- Asset name from hm2AssetTable
- netobject ('$name')
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.4
hm2L3TargetPort
The destination port of the packet to. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma separated list of ports ('1235,25,123')
- c…
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.5
hm2L3Proto
The IP protocol (RFC 791) for protocol-independent
filtering. The following values are currently
supported:
o icmp(1): internet control message protocol (RFC 792)
o igmp(2): internet group management protocol
o ipip(…
Enumerationr/w
Enumerated Values:
1icmp
2igmp
3ipip
4tcp
5udp
6esp
7ah
8icmpv6
9any
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.6
hm2L3RuleParams
Additional parameters to this rule as string.
A parameter has the syntax:
<param>=<val>
Parameters are separated by a comma.
If more than one value is given for a parameter, values are
separated by a |-sign (…
OctetStringr/w
Constraints:
range: 0-50
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.7
hm2L3Action
The action of the corresponding rule:
o accept(1): Packets matching this rule are accepted and will
be forwarded
o drop(2): Packets matching this rule will be silently
discarded
o reject(3): Packets matching this …
Enumerationr/w
Enumerated Values:
1accept
2drop
3reject
4enforce-modbus
5enforce-opc
6enforce-iec104
7enforce-ethernetip
8enforce-dnp3
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.8
hm2L3Log
Set to true if application of this rule shall be logged
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.9
hm2L3Trap
Set to true if application of this rule shall send a trap.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.10
hm2L3RowStatus
This is a standard row status value:
- active(1): The rule is active. Note that until committed, the rule
will not be applied. You cannot activate the rule
if an enforcer mappings to an inactive profile.
- notInServ…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.11
hm2L3Description
User defined textual description related to this rule.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.12
hm2DPIProfileIndex
The index of the DPI profile this rule is assigned to
depending on enforcer action.
Value 0 no DPI profile this rule is assigned to.
You cannot assign the rule to an inactive profile
if an active enforcer will mapping t…
Integer32r/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.13
hm2L3ProtoName
Following values are supported:
- Protocol name from hm2ProtocolTable
- icmp: internet control message protocol (RFC 792)
- igmp: internet group management protocol
- ipip: IP in IP tunnelling (RFC 1853)
- tcp: transmis…
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.14
hm2L3AppRuleName
Application rule name from hm2AppRuleTable
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.3.2.1.1.15

hm2L3RuleIfMappingTable

table
.1.3.6.1.4.1.248.11.79.1.3.2.2 · 1 row entry · 5 columns
Open in standard view 
Table for mapping L3 rules to interfaces
hm2L3RuleIfMappingEntry entry .1.3.6.1.4.1.248.11.79.1.3.2.2.1
Entry in rule interface mapping table
Indexes
hm2L3IfmInterface hm2L3IfmDirection hm2L3IfmRuleIndex
Column Syntax OID
hm2L3IfmRuleIndex
The index of the L3 rule this mapping entry is assigned to.
The rule must exist before the mapping entry can be created.
Integer32
Constraints:
range: 1-2048
 .1.3.6.1.4.1.248.11.79.1.3.2.2.1.1
hm2L3IfmDirection
Meanings:
- ingress(1): Apply this rule to packets arriving on this interface
- egress(2): Apply this rule to packets leaving from this interface
- both(3): Apply this rule to packets coming in and going out on this
i…
Enumeration
Enumerated Values:
1ingress
2egress
3both
 .1.3.6.1.4.1.248.11.79.1.3.2.2.1.2
hm2L3IfmPriority
The priority is the sorting key for rules in to this interface. They
don't need to be unique, but no clear order can be assumed among rules
with the same priority.
Priorities are processed in ascending order (0 highes…
SNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.248.11.79.1.3.2.2.1.3
hm2L3IfmInterface
The interface this mapping entry is assigned to. This has to be either
an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex.
Note that for physical interfaces this only works if the corresponding
hm2Age…
IF-MIBInterfaceIndex
Textual Convention: IF-MIBInterfaceIndex Integer32
Type Constraints:
range: 1..2147483647
 .1.3.6.1.4.1.248.11.79.1.3.2.2.1.4
hm2L3IfmRowStatus
The RowStatus value for this entry with the usual meanings:

- active(1): The interface mapping is in place
- notInService(2): The interface mapping is not in place because the
user said so
- notReady(3)…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.2.2.1.5

hm2L3StatsRuleTable

table
.1.3.6.1.4.1.248.11.79.1.3.4.2.1 · 1 row entry · 3 columns
Open in standard view 
Table of per-rule statistics of the L3 firewall
hm2L3StatsRuleEntry entry .1.3.6.1.4.1.248.11.79.1.3.4.2.1.1
Statistics table entry for the L3 firewall
Indexes
hm2L3RuleIndex
Column Syntax OID
hm2L3StatsPacketCount
Number of packets matched by this rule
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.248.11.79.1.3.4.2.1.1.1
hm2L3StatsPacketSize
Number of bytes processed by this rule
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.248.11.79.1.3.4.2.1.1.2
hm2L3StatsLastApplied
Time of last application of the rule in seconds since the Unix epoch.
HM2-TC-MIBHmTimeSeconds1970
Textual Convention: HM2-TC-MIBHmTimeSeconds1970 Unsigned32
 .1.3.6.1.4.1.248.11.79.1.3.4.2.1.1.3

hm2DPIProfileModbusTable

table
.1.3.6.1.4.1.248.11.79.1.3.21.1 · 1 row entry · 9 columns
Open in standard view 
The list of DPI MODBUS profiles for this enforcer
hm2DPIProfileModbusEntry entry .1.3.6.1.4.1.248.11.79.1.3.21.1.1
DPI MODBUS profile entry.
Indexes
hm2DPIProfileModbusIndex
Column Syntax OID
hm2DPIProfileModbusIndex
Profile index of this DPI MODBUS profile
Integer32
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.1
hm2DPIProfileModbusDescription
User defined textual description related to this profile.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.2
hm2DPIProfileModbusFunctionType
The function types of the corresponding function codes:
o readonly(1): Selects read only function codes for the function code list.
o readwrite(2): Selects read write function codes for the function code list.
o program…
Enumerationr/w
Enumerated Values:
1readonly
2readwrite
3programming
4all
5advanced
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.3
hm2DPIProfileModbusFunctionCodeList
The function codes for this enforcer as string.
A function code has the syntax:
<val>
Function codes are separated by a comma.
If more than one value is given for a function code, values are
separated by a | -sign (pip…
OctetStringr/w
Constraints:
range: 1-1400
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.4
hm2DPIProfileModbusUnitIdentifierList
Unit identifiers for this enforcer as string.
A unit identifier has the syntax:
<val>
To specify no options, the value 'none' must be given.
Unit identifiers are separated by a comma.
Following unit identifiers are def…
OctetStringr/w
Constraints:
range: 1-1400
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.5
hm2DPIProfileModbusSanityCheck
Set to true if apply to packets for which a
sanity check including format and specification shall be done
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.6
hm2DPIProfileModbusException
Set to true if apply to packets for which a
device exception message shall be sent
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.7
hm2DPIProfileModbusReset
Set to true if apply to packets for which a
reset connection message shall be sent
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.8
hm2DPIProfileModbusRowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.1.1.9

hm2DPIProfileOpcTable

table
.1.3.6.1.4.1.248.11.79.1.3.21.2 · 1 row entry · 6 columns
Open in standard view 
The list of DPI OPC profiles for this enforcer
hm2DPIProfileOpcEntry entry .1.3.6.1.4.1.248.11.79.1.3.21.2.1
DPI OPC profile entry.
Indexes
hm2DPIProfileOpcIndex
Column Syntax OID
hm2DPIProfileOpcIndex
Profile index of this DPI OPC profile
Integer32
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.21.2.1.1
hm2DPIProfileOpcDescription
User defined textual description related to this profile.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.2.1.2
hm2DPIProfileOpcSanityCheck
Set to true if apply to packets for which a
sanity check including format and specification shall be done
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.2.1.3
hm2DPIProfileOpcFragmentCheck
Set to true if apply to packets for which a
fragment check shall be done
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.2.1.4
hm2DPIProfileOpcTimeoutConnect
Set to nonzero if apply to packets for which a
timeout at connect in seconds shall be done.
Value 0 disables this match criteria.
Unsigned32r/w
Constraints:
range: 0-300
 .1.3.6.1.4.1.248.11.79.1.3.21.2.1.5
hm2DPIProfileOpcRowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.2.1.6

hm2DPIProfileIEC104Table

table
.1.3.6.1.4.1.248.11.79.1.3.21.3 · 1 row entry · 16 columns
Open in standard view 
The list of DPI IEC104 profiles for this enforcer
hm2DPIProfileIEC104Entry entry .1.3.6.1.4.1.248.11.79.1.3.21.3.1
DPI IEC104 profile entry.
Indexes
hm2DPIProfileIEC104Index
Column Syntax OID
hm2DPIProfileIEC104Index
Profile index of this DPI IEC104 profile
Integer32
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.1
hm2DPIProfileIEC104Description
User defined textual description related to this profile.
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.2
hm2DPIProfileIEC104FunctionType
The function types of the corresponding type IDs:
o readonly(1): Selects read only type IDs for the type ID list.
o readwrite(2): Selects read write type IDs for the type ID list.
o common(3): Selects common type IDs fo…
Enumerationr/w
Enumerated Values:
1readonly
2readwrite
3common
4any
5advanced
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.3
hm2DPIProfileIEC104TypeIDList obsolete
**NOTE: This object is obsolete in favour of hm2DPIProfileIEC104AdvancedTypeIDList.**
The type IDs for this enforcer as bit string.
Each type ID bit can either be set (allowed) or cleared (blocked).
Following type IDs a…
Bitsr/w
Enumerated Values:
0invalid-0
1m-sp-na-1
2m-sp-ta-1
3m-dp-na-1
4m-dp-ta-1
5m-st-na-1
6m-st-ta-1
7m-bo-na-1
8m-bo-ta-1
9m-me-na-1
10m-me-ta-1
11m-me-nb-1
12m-me-tb-1
13m-me-nc-1
14m-me-tc-1
15m-it-na-1
16m-it-ta-1
17m-ep-ta-1
18m-ep-tb-1
19m-ep-tc-1
20m-ps-na-1
21m-me-nd-1
22reserved-22
23reserved-23
24reserved-24
25reserved-25
26reserved-26
27reserved-27
28reserved-28
29reserved-29
30m-sp-tb-1
31m-dp-tb-1
32m-st-tb-1
33m-bo-tb-1
34m-me-td-1
35m-me-te-1
36m-me-tf-1
37m-it-tb-1
38m-ep-td-1
39m-ep-te-1
40m-ep-tf-1
41reserved-41
42reserved-42
43reserved-43
44reserved-44
45c-sc-na-1
46c-dc-na-1
47c-rc-na-1
48c-se-na-1
49c-se-nb-1
50c-se-nc-1
51c-bo-na-1
52reserved-52
53reserved-53
54reserved-54
55reserved-55
56reserved-56
57reserved-57
58c-sc-ta-1
59c-dc-ta-1
60c-rc-ta-1
61c-se-ta-1
62c-se-tb-1
63c-se-tc-1
64c-bo-ta-1
65reserved-65
66reserved-66
67reserved-67
68reserved-68
69reserved-69
70m-ei-na-1
71reserved-71
72reserved-72
73reserved-73
74reserved-74
75reserved-75
76reserved-76
77reserved-77
78reserved-78
79reserved-79
80reserved-80
81reserved-81
82reserved-82
83reserved-83
84reserved-84
85reserved-85
86reserved-86
87reserved-87
88reserved-88
89reserved-89
90reserved-90
91reserved-91
92reserved-92
93reserved-93
94reserved-94
95reserved-95
96reserved-96
97reserved-97
98reserved-98
99reserved-99
100c-ic-na-1
101c-ci-na-1
102c-rd-na-1
103c-cs-na-1
104c-ts-nb-1
105c-rp-nc-1
106c-cd-na-1
107c-ts-ta-1
108reserved-108
109reserved-109
110p-me-na-1
111p-me-nb-1
112p-me-nc-1
113p-ac-na-1
114reserved-114
115reserved-115
116reserved-116
117reserved-117
118reserved-118
119reserved-119
120f-fr-na-1
121f-sr-na-1
122f-sc-na-1
123f-ls-na-1
124f-af-na-1
125f-sg-na-1
126f-dr-ta-1
127f-sc-nb-1
128custom-128
129custom-129
130custom-130
131custom-131
132custom-132
133custom-133
134custom-134
135custom-135
136custom-136
137custom-137
138custom-138
139custom-139
140custom-140
141custom-141
142custom-142
143custom-143
144custom-144
145custom-145
146custom-146
147custom-147
148custom-148
149custom-149
150custom-150
151custom-151
152custom-152
153custom-153
154custom-154
155custom-155
156custom-156
157custom-157
158custom-158
159custom-159
160custom-160
161custom-161
162custom-162
163custom-163
164custom-164
165custom-165
166custom-166
167custom-167
168custom-168
169custom-169
170custom-170
171custom-171
172custom-172
173custom-173
174custom-174
175custom-175
176custom-176
177custom-177
178custom-178
179custom-179
180custom-180
181custom-181
182custom-182
183custom-183
184custom-184
185custom-185
186custom-186
187custom-187
188custom-188
189custom-189
190custom-190
191custom-191
192custom-192
193custom-193
194custom-194
195custom-195
196custom-196
197custom-197
198custom-198
199custom-199
200custom-200
201custom-201
202custom-202
203custom-203
204custom-204
205custom-205
206custom-206
207custom-207
208custom-208
209custom-209
210custom-210
211custom-211
212custom-212
213custom-213
214custom-214
215custom-215
216custom-216
217custom-217
218custom-218
219custom-219
220custom-220
221custom-221
222custom-222
223custom-223
224custom-224
225custom-225
226custom-226
227custom-227
228custom-228
229custom-229
230custom-230
231custom-231
232custom-232
233custom-233
234custom-234
235custom-235
236custom-236
237custom-237
238custom-238
239custom-239
240custom-240
241custom-241
242custom-242
243custom-243
244custom-244
245custom-245
246custom-246
247custom-247
248custom-248
249custom-249
250custom-250
251custom-251
252custom-252
253custom-253
254custom-254
255custom-255
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.4
hm2DPIProfileIEC104OriginatorAddressList obsolete
**NOTE: This object is obsolete in favour of hm2DPIProfileIEC104OriginatorAddrList.**
Allowed Originator addresses for this enforcer as bit string.
Each bit corresponds to an orignator address which may either be
allowe…
Bitsr/w
Enumerated Values:
0oa-0
1oa-1
2oa-2
3oa-3
4oa-4
5oa-5
6oa-6
7oa-7
8oa-8
9oa-9
10oa-10
11oa-11
12oa-12
13oa-13
14oa-14
15oa-15
16oa-16
17oa-17
18oa-18
19oa-19
20oa-20
21oa-21
22oa-22
23oa-23
24oa-24
25oa-25
26oa-26
27oa-27
28oa-28
29oa-29
30oa-30
31oa-31
32oa-32
33oa-33
34oa-34
35oa-35
36oa-36
37oa-37
38oa-38
39oa-39
40oa-40
41oa-41
42oa-42
43oa-43
44oa-44
45oa-45
46oa-46
47oa-47
48oa-48
49oa-49
50oa-50
51oa-51
52oa-52
53oa-53
54oa-54
55oa-55
56oa-56
57oa-57
58oa-58
59oa-59
60oa-60
61oa-61
62oa-62
63oa-63
64oa-64
65oa-65
66oa-66
67oa-67
68oa-68
69oa-69
70oa-70
71oa-71
72oa-72
73oa-73
74oa-74
75oa-75
76oa-76
77oa-77
78oa-78
79oa-79
80oa-80
81oa-81
82oa-82
83oa-83
84oa-84
85oa-85
86oa-86
87oa-87
88oa-88
89oa-89
90oa-90
91oa-91
92oa-92
93oa-93
94oa-94
95oa-95
96oa-96
97oa-97
98oa-98
99oa-99
100oa-100
101oa-101
102oa-102
103oa-103
104oa-104
105oa-105
106oa-106
107oa-107
108oa-108
109oa-109
110oa-110
111oa-111
112oa-112
113oa-113
114oa-114
115oa-115
116oa-116
117oa-117
118oa-118
119oa-119
120oa-120
121oa-121
122oa-122
123oa-123
124oa-124
125oa-125
126oa-126
127oa-127
128oa-128
129oa-129
130oa-130
131oa-131
132oa-132
133oa-133
134oa-134
135oa-135
136oa-136
137oa-137
138oa-138
139oa-139
140oa-140
141oa-141
142oa-142
143oa-143
144oa-144
145oa-145
146oa-146
147oa-147
148oa-148
149oa-149
150oa-150
151oa-151
152oa-152
153oa-153
154oa-154
155oa-155
156oa-156
157oa-157
158oa-158
159oa-159
160oa-160
161oa-161
162oa-162
163oa-163
164oa-164
165oa-165
166oa-166
167oa-167
168oa-168
169oa-169
170oa-170
171oa-171
172oa-172
173oa-173
174oa-174
175oa-175
176oa-176
177oa-177
178oa-178
179oa-179
180oa-180
181oa-181
182oa-182
183oa-183
184oa-184
185oa-185
186oa-186
187oa-187
188oa-188
189oa-189
190oa-190
191oa-191
192oa-192
193oa-193
194oa-194
195oa-195
196oa-196
197oa-197
198oa-198
199oa-199
200oa-200
201oa-201
202oa-202
203oa-203
204oa-204
205oa-205
206oa-206
207oa-207
208oa-208
209oa-209
210oa-210
211oa-211
212oa-212
213oa-213
214oa-214
215oa-215
216oa-216
217oa-217
218oa-218
219oa-219
220oa-220
221oa-221
222oa-222
223oa-223
224oa-224
225oa-225
226oa-226
227oa-227
228oa-228
229oa-229
230oa-230
231oa-231
232oa-232
233oa-233
234oa-234
235oa-235
236oa-236
237oa-237
238oa-238
239oa-239
240oa-240
241oa-241
242oa-242
243oa-243
244oa-244
245oa-245
246oa-246
247oa-247
248oa-248
249oa-249
250oa-250
251oa-251
252oa-252
253oa-253
254oa-254
255oa-255
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.5
hm2DPIProfileIEC104CommonAddressList
Allowed Common addresses for this enforcer as string.
Allowed format for common address list:
- index range with first and last index separated by hyphen
('10-15')
- comma separated list of index ('12,25,123')
- combina…
OctetStringr/w
Constraints:
range: 0-1024
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.6
hm2DPIProfileIEC104SanityCheck
Set to 'enable' if a sanity check including format and specification
for all packets shall be done
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.7
hm2DPIProfileIEC104Reset
Set to 'enable' if reset connection message shall be sent in case a packet is dropped
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.8
hm2DPIProfileIEC104Debug
Set to 'enable' if reset connection message shall contain debug information
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.9
hm2DPIProfileIEC104RowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer m…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.10
hm2DPIProfileIEC104AdvancedTypeIDList
The type IDs for this enforcer as string.
A type ID list has the syntax:
<val>
If more than one value is given for type ID list, values are
separated by a , sign (comma).
Note: The user can define any number between 0-2…
OctetStringr/w
Constraints:
range: 0-1400
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.11
hm2DPIProfileIEC104OriginatorAddrList
Allowed Originator addresses for this enforcer as string.
Allowed format for originator address list:
- index range with first and last index separated by hyphen
('10-15')
- comma separated list of index ('12,25,123')
-…
OctetStringr/w
Constraints:
range: 0-1400
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.12
hm2DPIProfileIEC104CauseOfTransmissionSize
Set to default value 2 for the latest protocol, set to 1 for legacy protocol
Integer32r/w
Constraints:
range: 1-2
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.13
hm2DPIProfileIEC104CommonAddressSize
Set to default value 2 for the latest protocol, set to 1 for legacy protocol
Integer32r/w
Constraints:
range: 1-2
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.14
hm2DPIProfileIEC104IOAddressSize
Set to default value 3 for the latest protocol, set to 2 or 1 for legacy protocol
Integer32r/w
Constraints:
range: 1-3
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.15
hm2DPIProfileIEC104AllowIEC101
Set to 'enable' if Type IDs that are defined for the old IEC 101 standard have to be allowed
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.3.1.16

hm2DPIProfileEnipTable

table
.1.3.6.1.4.1.248.11.79.1.3.21.4 · 1 row entry · 10 columns
Open in standard view 
The list of DPI EtherNet/IP profiles for this enforcer
hm2DPIProfileEnipEntry entry .1.3.6.1.4.1.248.11.79.1.3.21.4.1
DPI EtherNet/IP profile entry.
Indexes
hm2DPIProfileEnipIndex
Column Syntax OID
hm2DPIProfileEnipIndex
Profile index of this DPI EtherNet/IP profile
Integer32
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.1
hm2DPIProfileEnipDescription
User defined textual description related to this profile.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.2
hm2DPIProfileEnipFunctionType
The function types of the corresponding commands:
o readonly(1): Selects read only commands for the command list.
o readwrite(2): Selects read write commands for the command list.
o any(3): Selects all possible commands…
Enumerationr/w
Enumerated Values:
1readonly
2readwrite
3any
4advanced
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.3
hm2DPIProfileEnipSanityCheck
If a sanity check including format and specification
for all packets shall be done, then it must be enabled.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.4
hm2DPIProfileEnipDebug
Enables or disables the debug information in a reset connection message.
If a reset connection message shall contain debug information, then it must be enabled.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.5
hm2DPIProfileEnipRowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.6
hm2DPIProfileEnipDefaultObjectList
Index of entries to be included from default object list
as per ENIP standard.
Allowed formats are: (Index range <1-347>)
- keyword 'none' for excluding and 'all' for including the default object list.
- any single inde…
OctetStringr/w
Constraints:
range: 1-1280
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.7
hm2DPIProfileEnipWildCardServices
Multiple service codes can be listed separated by a comma (',')
- single service code (eg: 0x10)
- comma separated list of service codes (eg: 0x12,0x31,0x5F)
- Service code starts from 0x00 and cannot be greater than 0x…
OctetStringr/w
Constraints:
range: 0-640
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.8
hm2DPIProfileEnipAllowEmbPCCC
Enables or disables the DPI on PCCC messages.
If DPI is required on PCCC messages that are encapsulated within CIP objects,
then Allow embedded PCCC must be enabled.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.9
hm2DPIProfileEnipTcpReset
Enables or disables the resetting of TCP connection.
The reset connection message shall be sent in case a packet is dropped, if TCP reset is enabled.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.4.1.10

hm2DPIObjectEnipTable

table
.1.3.6.1.4.1.248.11.79.1.3.21.5 · 1 row entry · 4 columns
Open in standard view 
The list of DPI EtherNet/IP objects and services for this enforcer
hm2DPIObjectEnipEntry entry .1.3.6.1.4.1.248.11.79.1.3.21.5.1
DPI EtherNet/IP object entry.
Indexes
hm2DPIProfileEnipIndex hm2DPIObjectEnipClassId
Column Syntax OID
hm2DPIObjectEnipClassId
The object class ID values used in the class ID and service combination.
Values ranging from 0x00 to 0xFFFFFFFF (0 to 4294967295) are
interpreted as the Enip Class ID

Following classes are defined:
…
EnipClassId
Textual Convention: EnipClassId Unsigned32
 .1.3.6.1.4.1.248.11.79.1.3.21.5.1.1
hm2DPIObjectEnipServices
The services codes are allowed as string.
A service has the syntax:
<0xval>
- Services are separated by a comma and are formated in hex (e.g. 0x00 to 0x7F).
- Services start from 0x00 and cannot be greater than 0x7F.
-…
OctetStringr/w
Constraints:
range: 0-640
 .1.3.6.1.4.1.248.11.79.1.3.21.5.1.2
hm2DPIObjectEnipDescription
User defined textual description related to the ENIP object class ID and services.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.5.1.3
hm2DPIObjectEnipRowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.5.1.4

hm2DPIProfileDnp3Table

table
.1.3.6.1.4.1.248.11.79.1.3.21.6 · 1 row entry · 9 columns
Open in standard view 
The list of DPI DNP3 profiles for this enforcer
hm2DPIProfileDnp3Entry entry .1.3.6.1.4.1.248.11.79.1.3.21.6.1
DPI DNP3 profile entry.
Indexes
hm2DPIProfileDnp3Index
Column Syntax OID
hm2DPIProfileDnp3Index
Profile index of this DPI DNP3 profile
Integer32
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.1
hm2DPIProfileDnp3Description
User defined textual description related to this profile.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.2
hm2DPIProfileDnp3FunctionCodeList
The function codes for this enforcer as string.
A function code has the syntax:
<val>
If more than one value is given for a function code, values are
separated by a , sign (comma).
Note: The user can define any numb…
OctetStringr/w
Constraints:
range: 1-1400
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.3
hm2DPIProfileDnp3DefaultWhiteList
Index of entries to be included from Default White list
of objects as per DNP3 standard IEEE 1815-2012.
Allowed formats are: (Index range <1-317>)
- keyword 'none' for excluding and 'all' for including default whitelis…
OctetStringr/w
Constraints:
range: 1-1400
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.4
hm2DPIProfileDnp3CrcCheck
This option makes DNP3 enforcer validate the
checksum contained in dnp3 link-layer frames.
Frames with invalid checksums will be ignored
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.5
hm2DPIProfileDnp3SanityCheck
Set to true for which all
sanity checks shall be done
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.6
hm2DPIProfileDnp3CheckOutstationTraffic
Set to true to make dnp3 enforcer check packets originating at an outstation
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.7
hm2DPIProfileDnp3TcpReset
Set to true if apply to packets for which a reset connection
message shall be sent on ingress and egress ports
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.8
hm2DPIProfileDnp3RowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.6.1.9

hm2DPIProfileDnp3ObjectTable

table
.1.3.6.1.4.1.248.11.79.1.3.21.7 · 1 row entry · 9 columns
Open in standard view 
The list of DPI DNP3 object codes
hm2DPIProfileDnp3ObjectEntry entry .1.3.6.1.4.1.248.11.79.1.3.21.7.1
DPI DNP3 object code entry.
Indexes
hm2DPIProfileDnp3Index hm2DPIProfileDnp3ObjectIndex
Column Syntax OID
hm2DPIProfileDnp3ObjectIndex
An index that (together with the DPI
index hm2DPIProfileDnp3Index) identifies the entry
in the object code list table. This index can
be choosen freely, but must be greater than 0.
Integer32
Constraints:
range: 1-256
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.1
hm2DPIProfileDnp3ObjectType
Set the object type for DNP3 object code list.
Enumerationr/w
Enumerated Values:
1request
2response
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.2
hm2DPIProfileDnp3ObjectGroupno
Group number for object code list.
Integer32r/w
Constraints:
range: 0-255
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.3
hm2DPIProfileDnp3ObjectVariation
Variation number for object code list
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.4
hm2DPIProfileDnp3ObjectFunction
Function code number for object code list.
Integer32r/w
Constraints:
range: 0-255
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.5
hm2DPIProfileDnp3ObjectQualifier
Qualifier codes for Object codes.
OctetStringr/w
Constraints:
range: 0-255
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.6
hm2DPIProfileDnp3ObjectLength
Object length defined for corresponding object codes.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.7
hm2DPIProfileDnp3ObjectFuncName
Corresponding function name for function no in Object code.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.8
hm2DPIProfileDnp3ObjectRowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.7.1.9

hm2DPIProfileAmpTable

table
.1.3.6.1.4.1.248.11.79.1.3.21.8 · 1 row entry · 16 columns
Open in standard view 
The list of DPI AMP profiles for this enforcer.
hm2DPIProfileAmpEntry entry .1.3.6.1.4.1.248.11.79.1.3.21.8.1
DPI AMP profile entry.
Indexes
hm2DPIProfileAmpIndex
Column Syntax OID
hm2DPIProfileAmpIndex
Profile index for the DPI AMP profile.
Integer32
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.1
hm2DPIProfileAmpDescription
Textual description related to the DPI AMP profile.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.2
hm2DPIProfileAmpMsgType
Specify the message type for the DPI AMP profile.
This field specifies the type of data contained
in the message data area and also specifies if
the message is a command or a response.
Allowed formats are:
- comma sep…
OctetStringr/w
Constraints:
range: 0-764
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.4
hm2DPIProfileAmpAddrClass
Specify the particular type of the memory to be accessed.
Allowed formats are:
- keyword 'any'
- Address class range with first and last class seperated
by hyphen (0004-000A).
- Comma seperated address classes (0000,…
OctetStringr/w
Constraints:
range: 0-1024
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.5
hm2DPIProfileAmpDevClass
Specify the device class.
Allowed formats are:
- keyword 'any'
- Device class range with first and last class
seperated by hyphen (0004-000A).
- Comma seperated device classes (0000,0003,FFFF).
- Combination of devic…
OctetStringr/w
Constraints:
range: 0-1024
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.6
hm2DPIProfileAmpAddress
Specify the beginning address of the memory to be read
or written.
Allowed formats are:
- Keyword 'any'
- Memory address range with first and last address
seperated by hyphen (0004-000A).
- Comma seperated memory addr…
OctetStringr/w
Constraints:
range: 0-1024
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.7
hm2DPIProfileAmpDataword
Specify the address from which the data will be read.
It will only be used for the CAMP packets with the memory
exchange command or response.
Allowed formats are:
- Keyword 'any'
- Data word address range with first and…
OctetStringr/w
Constraints:
range: 0-1024
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.8
hm2DPIProfileAmpTaskcode
Specify the task code for the DPI AMP profile.
Allowed formats are:
- Comma seperated task code (00,03,FF).
OctetStringr/w
Constraints:
range: 0-764
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.9
hm2DPIProfileAmpTaskcodedata
Specify the task code data for the DPI AMP profile.
Allowed formats are:
- Range with first and last task code seperated
by hyphen (0004-000A).
- Comma seprated task code data (0000,0003).
- Combination of task code d…
OctetStringr/w
Constraints:
range: 0-1024
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.10
hm2DPIProfileAmpProtectmode
Forcefully enable/disable the protect mode for the
particular task code in the DPI AMP profile.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.11
hm2DPIProfileAmpEcc
Enable/disable the checking for the NITP Error Check
Characters (ECC) of the packets in the DPI AMP profile.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.12
hm2DPIProfileAmpBcc
Enable/disable the checking for the CAMP Block Check
Characters (BCC) of the AMP packets in the DPI AMP profile.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.13
hm2DPIProfileAmpDebug
Enable/disable the debugging in the DPI AMP profile.
If it is enabled then the reset connection message will
contain the debug information.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.14
hm2DPIProfileAmpTcpReset
Enable/disable the reseting of the TCP connection.
If it is enabled then the TCP reset connection message will
be sent in case a packet is dropped
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.15
hm2DPIProfileAmpSanityCheck
Enable/disable the sanity check including format and
specification of all the AMP packets.
HM2-TC-MIBHmEnabledStatusr/w
Textual Convention: HM2-TC-MIBHmEnabledStatus Enumeration
Type Values:
1enable
2disable
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.16
hm2DPIProfileAmpRowStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer m…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.8.1.17

hm2DPIAmpTaskCodeTable

table
.1.3.6.1.4.1.248.11.79.1.3.21.9 · 1 row entry · 5 columns
Open in standard view 
The list of task code table.
hm2DPIAmpTaskCodeEntry entry .1.3.6.1.4.1.248.11.79.1.3.21.9.1
Task code table entry.
Indexes
hm2DPIAmpTaskCode
Column Syntax OID
hm2DPIAmpTaskCode
Task code value for the new custom task codes
The value can be between 00 to FF.
OctetString
Constraints:
range: 1-2
 .1.3.6.1.4.1.248.11.79.1.3.21.9.1.1
hm2DPIAmpTaskCodeDescription
Description related to the task code.
OctetStringr/w
Constraints:
range: 0-64
 .1.3.6.1.4.1.248.11.79.1.3.21.9.1.2
hm2DPIAmpTaskCodeType
Specify the type of task code in the task code table if it is
default(i.e. default) or user defined(i.e. custom).
Enumeration
Enumerated Values:
1default
2custom
 .1.3.6.1.4.1.248.11.79.1.3.21.9.1.3
hm2DPIAmpTaskCodeMode
Specify the mode of the task code if it is config or
nonconfig.
Enumerationr/w
Enumerated Values:
1config
2non-config
 .1.3.6.1.4.1.248.11.79.1.3.21.9.1.4
hm2DPIAmpTaskCodeStatus
This is a standard row status value:
- active(1): The profile is active. You cannot modify it.
- notInService(2): The profile is inactive because of user action.
You cannot inactivate the profile if an active enforcer m…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.3.21.9.1.5

hm2FLMInterfaceTable

table
.1.3.6.1.4.1.248.11.79.1.4.2.1 · 1 row entry · 2 columns
Open in standard view 
The list of interfaces selected for Firewall Learning Mode.
hm2FLMInterfaceEntry entry .1.3.6.1.4.1.248.11.79.1.4.2.1.1
Interface selected for Firewall Learning Mode.
Indexes
hm2FLMInterfaceIndex
Column Syntax OID
hm2FLMInterfaceIndex
Interface index of the entry.
IF-MIBInterfaceIndexr/w
Textual Convention: IF-MIBInterfaceIndex Integer32
Type Constraints:
range: 1..2147483647
 .1.3.6.1.4.1.248.11.79.1.4.2.1.1.1
hm2FLMInterfaceRowStatus
This is a standard row status value:
- active(1): The interface is active.
- notInService(2): The interface is inactive because routing was disabled.
- notReady(3): The interface is inactive because of agent action.
- …
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.4.2.1.1.2

hm2L2RuleTable

table
.1.3.6.1.4.1.248.11.79.1.6.3.1 · 1 row entry · 25 columns
Open in standard view 
A table of layer 2 Filter rule instances.
hm2L2RuleEntry entry .1.3.6.1.4.1.248.11.79.1.6.3.1.1
A table of layer 2 Filter classification rules.
Indexes
hm2L2RuleIndex
Column Syntax OID
hm2L2RuleIndex
The index of this rule instance within an Filter.
Integer32
Constraints:
range: 1-2048
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.1
hm2L2RuleHitCount
Number of packets that matched the L2 rule.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.2
hm2L2RuleAction
The action of the corresponding rule:
o accept(1): Packets matching this rule are accepted and will
be forwarded
o drop(2): Packets matching this rule will be silently discarded
o enforce-modbus(4): Packets matching …
Enumerationr/w
Enumerated Values:
1accept
2drop
4enforce-modbus
5enforce-opc
6enforce-iec104
7enforce-ethernetip
8enforce-dnp3
9enforce-amp
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.3
hm2L2RuleDestMacAddr
The destination MAC address used in the Filter classification
or Asset name from hm2AssetTable.
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.4
hm2L2RuleSrcMacAddr
The source MAC address used in the Filter classification
or Asset name from hm2AssetTable.
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.5
hm2L2RuleEtypeKey
The Ethertype keyword used in the Filter classification.
A keyword of custom(1) requires that the hm2L2RuleEtypeValue
object also be set.
Enumerationr/w
Enumerated Values:
1custom
2appletalk
3arp
4ibmsna
5ipv4
6ipv6
7ipxold
8mplsmcast
9mplsucast
10netbios
11novell
12pppoedisc
13rarp
14pppoesess
15ipxnew
16profinet
17powerlink
18ethercat
19ieee8021q
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.6
hm2L2RuleEtypeValue
The Ethertype custom value used in the Filter classification.
This object is only valid if the hm2L2RuleEtypeKey is set to
custom(1). Values ranging from 0x0600 to 0xFFFF
(1536 to 65535) are interpreted as the Ethertyp…
HM2-PLATFORM-QOS-ACL-MIBEtypeValuer/w
Textual Convention: HM2-PLATFORM-QOS-ACL-MIBEtypeValue Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.7
hm2L2RuleVlanId
The VLAN ID value used in the Filter classification.
The VLAN ID field is defined as the 12-bit VLAN identifier
in the 802.1Q tag header of a tagged Ethernet frame which is
contained in the first/outer tag of a double V…
Integer32r/w
Constraints:
range: 1-4042
range: -1--1
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.8
hm2L2RuleSrcIpAddr
The source IP address in cidr or Asset name from hm2AssetTable.
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.9
hm2L2RuleDestIpAddr
The Destination IP address in cidr or Asset name from hm2AssetTable.
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.10
hm2L2RuleIpTosBits
The type of service (TOS) bits value.
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.12
hm2L2RuleSrcPort
The Source port number
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.13
hm2L2RuleDestPort
The Destination port number
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.14
hm2L2RuleAssignQueueId
Queue identifier to which all inbound packets matching L2 packet filter rule.
This object defaults to the standard queue assignment for user priority 0
traffic per the IEEE 802.1D specification based on the number of a…
Unsigned32r/w
Constraints:
range: 0-7
range: 4294967295-4294967295
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.15
hm2L2RuleRateLimitCrate
Committed rate attribute statement value, specified in kbps.
Value 0 disables this match criteria.
Unsigned32r/w
Constraints:
range: 0-10000000
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.16
hm2L2RuleRateLimitCburst
Committed burst size attribute statement value, specified in kbytes.
Value 0 disables this match criteria.
HM2-PLATFORM-QOS-ACL-MIBAclBurstSizer/w
Textual Convention: HM2-PLATFORM-QOS-ACL-MIBAclBurstSize Unsigned32
Type Constraints:
range: 0..128
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.17
hm2L2RuleRateLimitCrateUnit
The unit of the L2RuleRateLimitCrate.
Can be either packets per second (pps)
or kilobits per second (kbps).
Enumerationr/w
Enumerated Values:
1pps
2kbps
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.18
hm2L2FwTrap
Set to true if application of this rule shall send a trap.
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.19
hm2L2RuleDescription
User defined textual description related to this rule.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.20
hm2L2RuleLog
Set to true if application of this rule shall be logged
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.21
hm2L2RuleStatsAction
Setting the object to 'flushRuleHitCount(2)' will reset hit counter statistics.
Reading the object always returns 'other'.
Enumerationr/w
Enumerated Values:
1other
2flushRuleHitCount
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.22
hm2L2RowStatus
This is a standard row status value
- active(1): The rule is active. Note that until committed, the rule
will not be applied. You cannot activate the rule if an enforcer mappings to an inactive profile.
- notInService…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.23
hm2L2DPIProfileIndex
The index of the DPI profile, to which this rule is assigned,
depending on enforcer action.
Value 0 : This rule is not assigned to any DPI Profile.
You cannot assign the rule to an inactive profile,
if an active enforce…
Integer32r/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.24
hm2L2RuleProtoName
Following values are supported:
- Protocol name from hm2ProtocolTable
- icmp: internet control message protocol (RFC 792)
- igmp: internet group management protocol
- ipip: IP in IP tunnelling (RFC 1853)
- tcp: transmis…
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.25
hm2L2AppRuleName
Application rule name from hm2AppRuleTable
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.6.3.1.1.26

hm2L2RuleIfMappingTable

table
.1.3.6.1.4.1.248.11.79.1.6.3.2 · 1 row entry · 6 columns
Open in standard view 
Table for mapping L2 rules to interfaces
hm2L2RuleIfMappingEntry entry .1.3.6.1.4.1.248.11.79.1.6.3.2.1
Entry in rule interface mapping table
Indexes
hm2L2IfmType hm2L2IfmInterface hm2L2IfmDirection hm2L2IfmRuleIndex
Column Syntax OID
hm2L2IfmType
Meanings:
- port(1): Apply this rule to packets arriving on non-routing physical
interface.
- vlan(2): Apply this rule to packets arriving on non-routing vlan interface.
Enumeration
Enumerated Values:
1port
2vlan
 .1.3.6.1.4.1.248.11.79.1.6.3.2.1.1
hm2L2IfmInterface
The interface this mapping entry is assigned to. This has to be either
an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex.
Note : Routing should be disabled on physical interfaces.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.248.11.79.1.6.3.2.1.2
hm2L2IfmDirection
Meanings:
- ingress(1): Apply this rule to packets arriving on this interface
- egress(2): Apply this rule to packets leaving from this interface
Enumeration
Enumerated Values:
1ingress
2egress
 .1.3.6.1.4.1.248.11.79.1.6.3.2.1.3
hm2L2IfmRuleIndex
The index of the L2 rule this mapping entry is assigned to.
The rule must exist before the mapping entry can be created.
Integer32
Constraints:
range: 1-2048
 .1.3.6.1.4.1.248.11.79.1.6.3.2.1.4
hm2L2IfmPriority
The priority is the sorting key for rules in to this interface. They
don't need to be unique, but no clear order can be assumed among rules
with the same priority.
Priorities are processed in ascending order (0)highest …
SNMPv2-SMIUnsigned32r/w
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.248.11.79.1.6.3.2.1.5
hm2L2IfmRowStatus
The RowStatus value for this entry with the usual meanings:
- active(1): The interface mapping is in place
- notInService(2): The interface mapping is not in place because the
user said so
- notReady(3): The interface…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.6.3.2.1.6

hm2AssetTable

table
.1.3.6.1.4.1.248.11.79.1.7.1 · 1 row entry · 12 columns
Open in standard view 
A list of the Assets representing real world devices/systems
hm2AssetEntry entry .1.3.6.1.4.1.248.11.79.1.7.1.1
Asset Entries
Indexes
hm2AssetIndex
Column Syntax OID
hm2AssetIndex
Index number of this Asset table
Integer32
Constraints:
range: 1-50
 .1.3.6.1.4.1.248.11.79.1.7.1.1.1
hm2AssetName
Descriptive name for the Asset
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.7.1.1.2
hm2AssetDescription
Logical description of the function of Asset
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.7.1.1.3
hm2AssetType
Specifies type of the Asset
Enumerationr/w
Enumerated Values:
1computer
2controller
3device
4network
5network-equipment
6broadcast
7multicast
 .1.3.6.1.4.1.248.11.79.1.7.1.1.4
hm2AssetManufacturer
Make or company that manufacturerd the Asset
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.7.1.1.5
hm2AssetModel
Model version of the Asset
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.7.1.1.6
hm2AssetGeneralLocation
General location of the Asset
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.7.1.1.7
hm2AssetSpecificLocation
Specific location of the Asset
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.7.1.1.8
hm2AssetTag
User defined field for corporate asset tags
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.7.1.1.9
hm2AssetIpAddress
The IP address associated to the Asset, allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- a prepending '!' selects the complement set
OctetStringr/w
Constraints:
range: 1-20
 .1.3.6.1.4.1.248.11.79.1.7.1.1.10
hm2AssetMacAddress
Physical address associated with the Asset
OctetStringr/w
Constraints:
range: 1-20
 .1.3.6.1.4.1.248.11.79.1.7.1.1.11
hm2AssetStatus
active(1) - This template is active.
notInService(2) - Row has been suspended.
notReady(3) - Row has incomplete values.
createAndGo(4) - Accept row values and activate.
createA…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.7.1.1.12

hm2AppRuleTable

table
.1.3.6.1.4.1.248.11.79.1.7.2 · 1 row entry · 7 columns
Open in standard view 
Application rules
hm2AppRuleEntry entry .1.3.6.1.4.1.248.11.79.1.7.2.1
Application rule entry
Indexes
hm2AppRuleIndex
Column Syntax OID
hm2AppRuleIndex
Index number of the Application rule
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.248.11.79.1.7.2.1.1
hm2AppRuleName
Logical description of the Application rule
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.7.2.1.2
hm2AppRuleProtocol
Following values are supported:
- Protocol name from hm2ProtocolTable
- icmp: internet control message protocol (RFC 792)
- igmp: internet group management protocol
- ipip: IP in IP tunnelling (RFC 1853)
- tcp: transmis…
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.7.2.1.3
hm2AppRulePort
The ports used by the selected protocol. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma separated list of ports ('1235,25,123')
- …
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.7.2.1.4
hm2AppRuleDirection
- ingress(1): Apply this rule to packets arriving on this interface
- egress(2): Apply this rule to packets leaving from this interface
- both(3): Apply this rule to packets coming in and going out on this
interface.
Enumerationr/w
Enumerated Values:
1ingress
2egress
3both
 .1.3.6.1.4.1.248.11.79.1.7.2.1.5
hm2AppRuleIsDefault
Set to true if this is a factory initialized rule
SNMPv2-TCTruthValuer/w
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.248.11.79.1.7.2.1.6
hm2AppRuleStatus
This is a standard row status value:
- active(1): The rule is active. Note that until committed, the rule
will not be applied. You cannot activate the rule
if an enforcer mappings to an inactive profile.
- notInServ…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.7.2.1.7

hm2ProtocolTable

table
.1.3.6.1.4.1.248.11.79.1.7.3 · 1 row entry · 9 columns
Open in standard view 
A list of user defined Protocols for Packet Filter rules
hm2ProtocolEntry entry .1.3.6.1.4.1.248.11.79.1.7.3.1
Protocol table entries
Indexes
hm2ProtocolIndex
Column Syntax OID
hm2ProtocolIndex
Index number of the Protocol entry
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.248.11.79.1.7.3.1.1
hm2ProtocolName
The descriptive name for this protocol
OctetStringr/w
Constraints:
range: 1-32
 .1.3.6.1.4.1.248.11.79.1.7.3.1.2
hm2ProtocolDescription
User defined textual description related to this protocol
OctetStringr/w
Constraints:
range: 0-128
 .1.3.6.1.4.1.248.11.79.1.7.3.1.3
hm2ProtocolType
Specify the type used in the protocol
Enumerationr/w
Enumerated Values:
1any
2ethernet
3ip
4tcp
5udp
6tcp-udp
 .1.3.6.1.4.1.248.11.79.1.7.3.1.4
hm2ProtocolEtypeKey
The Ethertype keyword to be used in the L2 filter.
A keyword of custom(1) requires that the hm2ProtocolEtherType
object also be set.
Enumerationr/w
Enumerated Values:
1custom
2appletalk
3arp
4ibmsna
5ipv4
6ipv6
7ipxold
8mplsmcast
9mplsucast
10netbios
11novell
12pppoedisc
13rarp
14pppoesess
15ipxnew
16profinet
17powerlink
18ethercat
19ieee8021q
 .1.3.6.1.4.1.248.11.79.1.7.3.1.5
hm2ProtocolEtherType
The Ethertype custom value to be used in the L2 filter.
This object is only valid if the hm2ProtocolEtypeKey is set to
custom(1). Values ranging from 0x0600 to 0xFFFF
(1536 to 65535) are interpreted as the Ethertype.
L…
HM2-PLATFORM-QOS-ACL-MIBEtypeValuer/w
Textual Convention: HM2-PLATFORM-QOS-ACL-MIBEtypeValue Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.248.11.79.1.7.3.1.6
hm2ProtocolIPProtoNumber
IP Protocol number for user defined protocols
- (-1) represents that no ip protocol is selected
Integer32r/w
Constraints:
range: -1-255
 .1.3.6.1.4.1.248.11.79.1.7.3.1.7
hm2ProtocolPort
The ports used by this protocol. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma separated list of ports ('1235,25,123')
- combinat…
OctetStringr/w
Constraints:
range: 1-128
 .1.3.6.1.4.1.248.11.79.1.7.3.1.8
hm2ProtocolStatus
active(1) - This template is active.
notInService(2) - Row has been suspended.
notReady(3) - Row has incomplete values.
createAndGo(4) - Accept row values and activate.
createA…
SNMPv2-TCRowStatusr/w
Textual Convention: SNMPv2-TCRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.248.11.79.1.7.3.1.9