POLICY-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
16
Rows
16
Columns
195

ipPolicyListTable

table
.1.3.6.1.4.1.81.36.1 · 1 row entry · 19 columns
Open in standard view 
This table is used to add/delete/monitor policy lists.
This table maintains a list of policy lists in the system. 
Each POLICY list is made up of a group of policy rules, a table
of Diff-Serv Code-Point (DSCP) mappings, and a compositeOP table.
          
The policy rules are stored in the ipPolicyRuleTable.
The DSCP mappings are stored in ipDSCPmapTable.
The Composite Ops are stored in ipPolicyCompositeOps.
          
Number of lists in a device (both in run-time and in NVRAM) is not 
part of the syntax of this mib.
This is a device issue that should be agreed between the device and
the managment applications and should be specified in the 
device and/or managment Spec.
RNR for example needs 3 lists : 1 for validation + 2 for activation
ipPolicyListEntry entry .1.3.6.1.4.1.81.36.1.1
The information concerning one of the IP policy lists
Indexes
ipPolicyListSlot ipPolicyListID
Column Syntax OID
ipPolicyListSlot
The EntID-id (AKA module-id / box number) to which this list relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.1.1.1
ipPolicyListID
The ID of the list.
List 0 is the default list. It contains read-only rule (permit all),
and a default DSCP mapping table and composite Op. When a new list
is created, the default DSCP table and composite ops are co…
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.1.1.2
ipPolicyListName
Name of this list.
ACL default name: ACL List #list-number
QoS default name: QoS List #list-number
PBR default name: PBR List #list-number
OctetStringr/w
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.1.1.3
ipPolicyListValidityStatus obsolete
Validity status of this list. Summarizes validity of rules,
dscp table and composite Opertaions associated with this list.
The validity context is that of the first entry for this SlotID in
ipPolicyValidListTable.
…
Enumeration
Enumerated Values:
1valid
2partiallyValid
3invalid
4validationInProgress
 .1.3.6.1.4.1.81.36.1.1.4
ipPolicyListChecksum obsolete
Checksum of all the configurable (read/write) mib items that are
part of this list or part of any rule/dscp mapping/compositeOp
that belongs to this list.
Addition/deletion/modification of a rule in this list shall resu…
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.1.1.5
ipPolicyListRowStatus
Used for creation/deletion of a list and for monitoring list status.
Use CreateAndWait (5) to create a list.
Destroy (6) to destroy a list. The active list can NOT
be destroyed. Destroying a list automatically removes …
RowStatusr/w
Textual Convention: BtechTypes-MIBRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.81.36.1.1.6
ipPolicyListDefaultOperation
The operation that should be applied to a packet in case the packet does not match any of the user specified rules. Values pertains to ACL or QoS depending on List type.
This field points to the appropriate ipPolicyComp…
Integer32r/w
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.1.1.7
ipPolicyListCookie
A cookie to be associated with this list. This mib item can be used
by the management application as a unique ID of the list.

Note: The Agent is not aware of the contents of this cookie.
Its only purpo…
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.1.1.8
ipPolicyListTrackChanges
Counts the number of changes made to the configuration of the list
including changes to the rules that are part of the list.
This counters is set to 0 when the list is being created. Adding default
rule to the list inc…
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.1.1.9
ipPolicyListOwner
The entity that configured this list
OctetStringr/w
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.1.1.10
ipPolicyListErrMsg obsolete
Free text describing the reason why the list is not valid.
When the list is valid returns NULL string.
The values returned for this MIB are not affected by the list
status (active/inactive).
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.1.1.11
ipPolicyListTrustedFields
Specify which fields in the incoming packet might be trusted when the policy decision should be based in the incoming packet itself.

Policy decision depend on the active policy list.
In cases that the res…
Enumerationr/w
Enumerated Values:
1cos
2dscp
3cos-dscp
4untrust
256not-supported
 .1.3.6.1.4.1.81.36.1.1.12
ipPolicyListScope obsolete
Controls the scope of the policy rules.
forward(1) - policy rules apply to packets forwarded by the Entity.
local subnet will not apply to theIf
forwardAndControl(2) - policy rules apply to control packets sent
to …
Enumerationr/w
Enumerated Values:
1forward
2forwardAndControl
 .1.3.6.1.4.1.81.36.1.1.13
ipPolicyListIpOptionOperation
The operation that should be applied to packets carrying IP Options.
Applied only for ingress access-control List. Egress is not-supported.
This field points to the appropriate ipPolicyCompositeOpID in IpPolicyComposite…
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
4deny-and-reset-connection
5deny-and-notify-and-reset-connection
255not-supported
 .1.3.6.1.4.1.81.36.1.1.14
ipPolicyListIpFragmentationOperation
The operation that should be applied to IP fragmentation packets.
Applied only for ingress access-control List. Egress is not-supported.
This field points to the appropriate ipPolicyCompositeOpID in IpPolicyCompositeOpT…
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
4deny-and-reset-connection
5deny-and-notify-and-reset-connection
255not-supported
 .1.3.6.1.4.1.81.36.1.1.15
ipPolicyListType
IP policy list type.
Derived from list range. See ipPolicyListID MIB.
Enumeration
Enumerated Values:
1acl-and-qos
2acl
3qos
4source-nat
5capture
6anti-spoofing
7policy-based-routing
8crypto
 .1.3.6.1.4.1.81.36.1.1.16
ipPolicyListEtherTypeDefaultOperation
The operation that should be applied to a packet in case the packet
does not match any of the user specified ether type rules.
This field points to the appropriate ipPolicyCompositeOpID in IpPolicyCompositeOpTable.
Per…
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
 .1.3.6.1.4.1.81.36.1.1.17
ipPolicyListLocalAddress
Local address for VPN tunnel (crypto list).
Field format: either IP address (x.x.x.x) or IP interface name. Management application shall parse and display local address value based as either IP address or IP interface n…
OctetStringr/w
Constraints:
range: 1-255
 .1.3.6.1.4.1.81.36.1.1.18
ipPolicyListNATPoolListIndex
Add ipPolicyListNATPoolListIndex as an index to NAT pool list to
IpPolicyListEntry.
Values:
1 - Invalid.
2 - Null, No NAT list association.
3 - 10 - NAT list index 1-8.
The field is relevant to crypto list on…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.1.1.19

ipPolicyRuleTable

table
.1.3.6.1.4.1.81.36.2 · 1 row entry · 35 columns
Open in standard view 
This table is used to add/delete/modify/monitor individual policy rules in a policy list.
ipPolicyRuleEntry entry .1.3.6.1.4.1.81.36.2.1
Controls all the conditional fields and its parameters for
a policy rule.
Indexes
ipPolicyRuleSlot ipPolicyRuleListID ipPolicyRuleID
Column Syntax OID
ipPolicyRuleSlot
The EntID-id (AKA module-id / box number) to which this rule relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.2.1.1
ipPolicyRuleListID
The ID of the list this rule is part of.
Derived from list range. See ipPolicyListID MIB.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.2.1.2
ipPolicyRuleID
Number of rule within its list. Each list may contain many rule.
Lists work in a First Match manner.
A rule with a lower ID would be preferred over a rule with a higher ID.
Integer32
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.2.1.3
ipPolicyRuleSrcAddr
The IP address of the source station. A value of 255.255.255.255
in ipPolicyRuleSrcAddrWild indicates this is a DON'T CARE field.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.2.1.4
ipPolicyRuleSrcAddrWild
This field specifies the wildcard of the source IP address.
Note that a the mask for a single host is 0.0.0.0 and the mask for all
hosts is 255.255.255.255. This field can has any combination of bits
set allowing all k…
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.2.1.5
ipPolicyRuleDstAddr
The IP address of the destination station.
A value of 255.255.255.255 in ipPolicyRuleDstAddrWild indicates this
is a DON'T CARE field.
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.2.1.6
ipPolicyRuleDstAddrWild
This field specifies the wildcard of the destination IP address.
Note that a the mask for a single host is 0.0.0.0 and the mask for
all hosts is 255.255.255.255. This field can has any combination of
bits set allowing…
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.2.1.7
ipPolicyRuleProtocol
The IP protocol to which this rule relates.
Use 256 to specify any IP (i.e. don't care)
Integer32r/w
Constraints:
range: 0-256
 .1.3.6.1.4.1.81.36.2.1.8
ipPolicyRuleL4SrcPortMin
The minimal source port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6)
UDP(17). In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.2.1.9
ipPolicyRuleL4SrcPortMax
The maximal source port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6) or
UDP(17). In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.2.1.10
ipPolicyRuleL4DestPortMin
The minimal destination port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6)
or UDP(17). In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.2.1.11
ipPolicyRuleL4DestPortMax
The maximal destination port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6)
or UDP(17). In all other cases its value is not used.
Integer32r/w
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.2.1.12
ipPolicyRuleEstablished
This field indicates the value of the established bit in the TCP header.
If protocol is not TCP this values should not be used.
Enumerationr/w
Enumerated Values:
1yes
2dontCare
 .1.3.6.1.4.1.81.36.2.1.13
ipPolicyRuleOperation
The operation that should be applied to a packet in case the packet does not match any of the user specified rules. Values pertains to ACL or QoS depending on List type.
This field points to the appropriate ipPolicyComp…
Integer32r/w
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.2.1.14
ipPolicyRuleApplicabilityPrecedence
This field indicates how important is it to enforce this rule.
The higher the number the more important it is to enforce this rule.
The value 9999 has a special meaning of Mandatory which means this
rule MUST be enforc…
Integer32r/w
Constraints:
range: 0-9999
 .1.3.6.1.4.1.81.36.2.1.15
ipPolicyRuleApplicabilityStatus obsolete
Used to monitor if a rule is currently applicable (for the active
list)or would be applicable (if the list becomes active).
The applicability context is that of the first entry for this SlotID
in ipPolicyValidRuleTable…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
 .1.3.6.1.4.1.81.36.2.1.16
ipPolicyRuleApplicabilityType obsolete
Used to monitor the ApplicabilityStatus of the rule in the context of
this list. The values returned for this MIB are not affected by the
list status (active/inactive)

static - The applicabilityStatus o…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
 .1.3.6.1.4.1.81.36.2.1.17
ipPolicyRuleErrMsg obsolete
Free text describing the reason why the rule is not Applicable.
When rule is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.2.1.18
ipPolicyRuleStatus
Used to configure and monitor one rule.
Use CreateAndWait (4) to create a rule.
Destroy (6) to destroy a rule
active (1) is returned when a rule is complete and is configured
into device HW
NotReady (3) is return…
RowStatusr/w
Textual Convention: BtechTypes-MIBRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.81.36.2.1.19
ipPolicyRuleDSCPOperation obsolete
The New DSCP value that should be applied to packets that meatch this rule.
A value of 64 means no change.
Integer32r/w
Constraints:
range: 0-64
 .1.3.6.1.4.1.81.36.2.1.20
ipPolicyRuleDSCPFilter
A DSCP value to match against.
This filter can be used instead or with the DSCP implicit
mapping table.
This filter is used in combination with
ipPolicyRuleDSCPFilterWild to match DSCP values.

Example…
Integer32r/w
Constraints:
range: 0-64
 .1.3.6.1.4.1.81.36.2.1.21
ipPolicyRuleDSCPFilterWild
A bitmask wildcard to match bits in the Diff-Serv
byte. '1' bits are part of the comparison.
'0' bits are 'don't care'.
A value of 63 means match all bits.
A value of 0 means don't care.
Note: this field is not in use.
Integer32r/w
Constraints:
range: 0-63
 .1.3.6.1.4.1.81.36.2.1.22
ipPolicyRuleIcmpTypeCode
The ICMP type and code to which this rule relates.
If protocol is not ICMP this values should not be used.

Field format:
- 19 bits filed.
- MSB (bit 18) stand for not-supported.
- Bit 17 stands for any IC…
Enumerationr/w
Enumerated Values:
0echo-reply
768netwrok-unreachable
769host-unreachable
770protocol-unreachable
771port-unreachable
772fragmentation-needed-but-df-bit-set
773source-route-failed
774destination-network-unknown
775destination-host-unknown
777destination-network-admin-prohibited
779network-unreachable-for-tos
780host-unreachable-for-tos
781communication-admin-prohibited-filtering
782host-precedence-violation
783precedence-cutoff-in-effect
1024source-quench
1280redirect-for-network
1283redirect-for-type-of-service-and-host
2048echo-request
2304router-advertisement
2817time-to-live-equals-0-during-reassembly
3072bad-ip-header
3073required-option-missing
3328timestamp-requested
3584timestamp-reply
4352address-mask-request
4608address-mask-reply
7680traceroute-outbound-packet-successfully-fw
7681traceroute-no-route-for-outbound-packet
9472domain-name-request
9728domain-name-reply
9984skip-algorithm-discovery-protocol
66304unreachable
66816redirect
68352time-exceeded
68608parameters-problem
73216traceroute
73472conversion-errors
73728mobile-host-redirect
73984ipv6-where-are-you
74240ipv6-I-am-here
74496mobile-registration-request
74752mobile-registration-reply
75776security-failure
196608any
262144not-supported
 .1.3.6.1.4.1.81.36.2.1.23
ipPolicyRuleSrcAddrNot
Logical NOT of the source-IP or source policy user name field.
Packets with source IPs or source policy user name which do NOT match the IP address & wildcard or source policy user name
specified will match the source-I…
Enumerationr/w
Enumerated Values:
1disable
2not-source-ip-address
 .1.3.6.1.4.1.81.36.2.1.24
ipPolicyRuleDstAddrNot
Logical NOT of the destination-IP field or destination policy user name.
Packets with destination IPs or destination policy user name which do NOT match the IP address & wildcard or destination policy user name
specifie…
Enumerationr/w
Enumerated Values:
1disable
2not-destination-ip-address
 .1.3.6.1.4.1.81.36.2.1.25
ipPolicyRuleProtocolNot
Logical NOT of the IP protocol field.
Enumerationr/w
Enumerated Values:
1disable
2not-ip-protocol
 .1.3.6.1.4.1.81.36.2.1.26
ipPolicyRuleL4SrcPortNot
Logical NOT of the tcp source port settings.
Enumerationr/w
Enumerated Values:
1disable
2not-source-port
 .1.3.6.1.4.1.81.36.2.1.27
ipPolicyRuleL4DestPortNot
Logical NOT of the tcp destination port settings.
Enumerationr/w
Enumerated Values:
1disable
2not-destination-port
 .1.3.6.1.4.1.81.36.2.1.28
ipPolicyRuleIcmpTypeCodeNot
Logical NOT of the protocol field + ICMP type and code.
Enumerationr/w
Enumerated Values:
1disable
2not-icmp-type-code
 .1.3.6.1.4.1.81.36.2.1.29
ipPolicyRuleSrcPolicyUserGroupName
Source user group's policy name.
Identical to ugPolicyName MIB.
ipPolicyRuleSrcAddr and ipPolicyRuleSrcAddrWild MIBs should be cleared when this value sets and vise versa.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.81.36.2.1.30
ipPolicyRuleDstPolicyUserGroupName
Destination user group's policy name.
Identical to ugPolicyName MIB.
ipPolicyRuleDstAddr and ipPolicyRuleDstAddrWild MIBs should be cleared when this value sets and vise versa.
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.81.36.2.1.31
ipPolicyRuleDSCPFilterNot
Logical NOT of DSCP filter settings.
Enumerationr/w
Enumerated Values:
1disable
2not-dscp
 .1.3.6.1.4.1.81.36.2.1.32
ipPolicyRuleDescription
IP rule description field. Allowing the user to specify the description for each rule.
In Crypto list a rule equals a tunnel and therefore the description is of the tunnel.
There is no description for default rules to s…
OctetStringr/w
Constraints:
range: 0-127
 .1.3.6.1.4.1.81.36.2.1.33
ipPolicyRuleFragment
This field indicates whether the rule will apply to non-initial fragments only.
When this key is set the L4 information is removed.
Enumerationr/w
Enumerated Values:
1yes
2dontCare
 .1.3.6.1.4.1.81.36.2.1.34
ipPolicyRuleDoSClass
Enumerated description of DoS attack this
correspondingly defends from.

Presently the DoS description is used for classification of DoS attacks in the MSS notification.

For all non-Dos rela…
Enumerationr/w
Enumerated Values:
8ipPolicySmurf-AttackRule
9ipPolicyFraggleAttackRule
11ipPolicypSpoofingRule
100ipPolicyUsedDefinedDoS100
101ipPolicyUsedDefinedDoS101
102ipPolicyUsedDefinedDoS102
103ipPolicyUsedDefinedDoS103
104ipPolicyUsedDefinedDoS104
105ipPolicyUsedDefinedDoS105
255ipPolicyNonApplicable
 .1.3.6.1.4.1.81.36.2.1.35

ipPolicyControlTable

table
.1.3.6.1.4.1.81.36.3 · 1 row entry · 13 columns
Open in standard view 
This table activates & monitors the policy application
ipPolicyControlEntry entry .1.3.6.1.4.1.81.36.3.1
Each entry relates to one EntID (AKA module / box) in the stack
Indexes
ipPolicyControlSlot
Column Syntax OID
ipPolicyControlSlot
The EntID-id (AKA module-id / box number) to which this control entry
relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.3.1.1
ipPolicyControlActiveGeneralList obsolete
The ipPolicyListID of the Active general policy List on this EntID.
A value of Zero means there is no active list.
If the new list can not be activated the old list continues to be
active.

The Policy Enf…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.3.1.2
ipPolicyControlAllowedPolicyManagers
Specify if who is allowed to configure policy on the device.
local - a local policy manager is allowed to configure
(using CLI or SNMP)
remote - A remote policy manger is allowed to configure
(using CLI or SNMP)
…
Enumerationr/w
Enumerated Values:
1local
2remote
 .1.3.6.1.4.1.81.36.3.1.3
ipPolicyControlCurrentChecksum
Checksum of the entire CURRENT Policy Database including (but not
limited to) the following :
o ipPolicyControlActiveGeneralList
o ipPolicyControlAllowedPolicyManagers
o ipPolicyListCookie &
ipPolicyListTrackChanges o…
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.3.1.4
ipPolicyControlMinimalPolicyManagmentVersion obsolete
The minimal policy management version that this device inter operates
with as verified by actual testing.

For example: The P330R/340/130 shall return 1.1 (if testing succeeds).

The specia…
OctetString
Constraints:
range: 25-25
 .1.3.6.1.4.1.81.36.3.1.5
ipPolicyControlMaximalPolicyManagmentVersion obsolete
The maximal policy management version that this device inter operates
with as verified by actual testing.

For example: The P330R/340/130 shall return 1.1 (if testing succeeds).
P360 for example may retur…
OctetString
Constraints:
range: 25-25
 .1.3.6.1.4.1.81.36.3.1.6
ipPolicyControlMIBversion
The version of the Policy MIB supported by the module.
The format:
0.X.Y.Z
Example:
2.1.2 will be coded as:
0x00020102
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.3.1.7
ipPolicyControlCapabilitiesGeneral
Reports the Policy capabilities of the device.
Each bit in the string represents a capability/behavior. Value of '1' means that the behavior is supported. Value of '0' means that it's not supported.
Capability number in…
OctetString .1.3.6.1.4.1.81.36.3.1.8
ipPolicyControlCopySourceList
Specify the source list index for copy operation.
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.3.1.9
ipPolicyControlCopyDestinationList
Specify the destination list index for copy operation.
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.3.1.10
ipPolicyControlCopyOperation
Copy operation and status of the copy operation.
idle(1)- R/O - Last Copy operation finished OK.
copy(2)- R/W - Activate the copy operation with the relevant source/destination
list indexes.
Enumerationr/w
Enumerated Values:
1idle
2copy
 .1.3.6.1.4.1.81.36.3.1.11
ipPolicyControlCopyOperationLastStatus
Copy operation status.
Enumeration
Enumerated Values:
1noError
2error
 .1.3.6.1.4.1.81.36.3.1.12
ipPolicyControlCopyOperationLastFailureDisplay
Display string for each one of the errors.
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.3.1.13

ipPolicyDiffServTable

table obsolete
.1.3.6.1.4.1.81.36.4 · 1 row entry · 9 columns
Open in standard view 
This table is used to configure the policy that is associated with
differntiated services. For each DSCP value the table contain the
operation that should applied to packets that match this DSCP value.
Note that in this version of this mib, allowed policies are restricted
to prioirty levels and access control.
          
Note: The ietf notion of PHB (per-hop forwarding behaviors) is not 
yet supported
ipPolicyDiffServEntry entry .1.3.6.1.4.1.81.36.4.1
The information concerning one of the IP policy lists
Indexes
ipPolicyDiffServSlot ipPolicyDiffServDSCP
Column Syntax OID
ipPolicyDiffServSlot obsolete
The EntID-id (AKA module-id / box number) to which diff-serv
table relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.4.1.1
ipPolicyDiffServDSCP obsolete
The DSCP value to which this entry relates.
Integer32
Constraints:
range: 0-63
 .1.3.6.1.4.1.81.36.4.1.2
ipPolicyDiffServOperation obsolete
This field points to the appropriate ipPolicyCompositeOpID in
ipPolicyCompositeOpTable.
The following read-only rows are always defined in
ipPolicyCompositeOpTable,for backward comaptability with Policy
MIB prior to …
Integer32r/w
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.4.1.3
ipPolicyDiffServName obsolete
Name of this DSCP entry. This fields is used only for documentation
purposes. Default name is:
DSCP #N
OctetStringr/w
Constraints:
range: 0-40
 .1.3.6.1.4.1.81.36.4.1.4
ipPolicyDiffServAggIndex obsolete
Index of the aggregated group this DSCP entry belongs too.
Management station may use this mib item to classify the DSCP entries
to groups with the same behaviour.
The defval for this mib item is device specific.
Integer32r/w
Constraints:
range: 0-63
 .1.3.6.1.4.1.81.36.4.1.5
ipPolicyDiffServApplicabilityPrecedence obsolete
This field indicates how important is it to enforce this entry.
The higher the number the more important it is to enforce this entry.
The value 9999 has a special meaning of Mandatory which means this
entry MUST be enf…
Integer32r/w
Constraints:
range: 0-9999
 .1.3.6.1.4.1.81.36.4.1.6
ipPolicyDiffServApplicabilityStatus obsolete
Used to monitor if a DSCP entry is currently applicable
or would be applicable (if the table becomes active).
The values returned for this MIB are not affected by the table status
active/inactive)

applic…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
 .1.3.6.1.4.1.81.36.4.1.7
ipPolicyDiffServApplicabilityType obsolete
Used to monitor the ApplicabilityStatus of the entry in the context of
this table. The values returned for this MIB are not affected by the
table status (active/inactive).

static - The applicabilityStat…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
 .1.3.6.1.4.1.81.36.4.1.8
ipPolicyDiffServErrMsg obsolete
Free text describing the reason why the entry is not Applicable.
When entry is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.4.1.9

ipPolicyQueryTable

table
.1.3.6.1.4.1.81.36.5 · 1 row entry · 22 columns
Open in standard view 
This table is used to query the policy application for different 
types of information. The first use is to query about the operation 
that would be applied to a given packet.
          
This table can be used by a managment application to supply the user
an interactive dialog for looking ahead at the outcomes of the policy
defined
ipPolicyQueryEntry entry .1.3.6.1.4.1.81.36.5.1
Each entry relates to one EntID (AKA module / box) in the stack
Indexes
ipPolicyQuerySlot
Column Syntax OID
ipPolicyQuerySlot
The EntID-id (AKA module-id / box number) to which this rule relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.5.1.1
ipPolicyQueryListID
The ID of the list used to check the simulated packet.
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.5.1.2
ipPolicyQuerySrcAddr
The IP address of the source station in the packet
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.5.1.3
ipPolicyQueryDstAddr
The IP address of the destination station in the packet
RFC1155-SMIIpAddressr/w
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.5.1.4
ipPolicyQueryProtocol
The IP protocol in the packet. Use 256 to specify IP
(i.e. don't care)
Integer32r/w
Constraints:
range: 0-256
 .1.3.6.1.4.1.81.36.5.1.5
ipPolicyQueryL4SrcPort
The source port of the packet.
This fields is applicable only when ipPolicyQueryProtocol
is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65536
 .1.3.6.1.4.1.81.36.5.1.6
ipPolicyQueryL4DestPort
The destination port of the packet.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.5.1.7
ipPolicyQueryEstablished
The value of the TCP Establish bit in simulated packet.
This fields is applicable only when ipPolicyQueryProtocol is TCP(6)
Enumerationr/w
Enumerated Values:
1yes
2no
 .1.3.6.1.4.1.81.36.5.1.8
ipPolicyQueryDSCP
The DSCP value in the simulated packet.
The value 64 is used to specify DONT CARE. In this case the result
maybe forwardNoChange
If a specifc value is specified the result would be the exact prioirty
associated with …
Integer32r/w
Constraints:
range: 0-64
 .1.3.6.1.4.1.81.36.5.1.9
ipPolicyQueryOperation
The operation that would be applied to the simulated packet.
This field points to the appropriate ipPolicyCompositeOpID in
ipPolicyCompositeOpTable.
The following read-only rows are always defined in
ipPolicyComposit…
Integer32
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.5.1.10
ipPolicyQueryRuleID
ID of the rule of the list that resulted in the ipPolicyQueryOperation for the query.
A value of 0 means that ipPolicyQueryOperation is a result of the ipPolicyListDefaultOperation
10000 should be returned in case of an…
Integer32
Constraints:
range: 0-10000
 .1.3.6.1.4.1.81.36.5.1.11
ipPolicyQueryDSCPOperation
The New DSCP value that of the simulated packet
A value of 64 means the DSCP field will not be changed.
A value of 65 means this query can't be processed.
Integer32
Constraints:
range: 0-65
 .1.3.6.1.4.1.81.36.5.1.12
ipPolicyQueryPriority
The 802.1p priority in the simulated packet.
When the priority is dontCare, the result maybe forwardNoChange.
Enumerationr/w
Enumerated Values:
1forwardPriority0
2forwardPriority1
3forwardPriority2
4forwardPriority3
5forwardPriority4
6forwardPriority5
7forwardPriority6
8forwardPriority7
99dontCare
 .1.3.6.1.4.1.81.36.5.1.13
ipPolicyQueryIfIndex
This variable should be made equal to the ifIndex of the interface for which this query should be resolved.
The value of 0 means the context of the first entry in the ipPolicyActivationTable for this SlotID
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.5.1.14
ipPolicyQuerySubContext
The direction for which this query should be resolved:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypesr/w .1.3.6.1.4.1.81.36.5.1.15
ipPolicyQueryIcmpTypeCode
Simulated packet ICMP type and code.
If protocol is not ICMP this values should not be used.

Field format:
- 19 bits filed.
- MSB (bit 18) stand for not-supported.
- Bit 17 stands for any ICMP type.
- Bit…
Enumerationr/w
Enumerated Values:
0echo-reply
768netwrok-unreachable
769host-unreachable
770protocol-unreachable
771port-unreachable
772fragmentation-needed-but-df-bit-set
773source-route-failed
774destination-network-unknown
775destination-host-unknown
777destination-network-admin-prohibited
779network-unreachable-for-tos
780host-unreachable-for-tos
781communication-admin-prohibited-filtering
782host-precedence-violation
783precedence-cutoff-in-effect
1024source-quench
1280redirect-for-network
1283redirect-for-type-of-service-and-host
2048echo-request
2304router-advertisement
2817time-to-live-equals-0-during-reassembly
3072bad-ip-header
3073required-option-missing
3328timestamp-requested
3584timestamp-reply
4352address-mask-request
4608address-mask-reply
7680traceroute-outbound-packet-successfully-fw
7681traceroute-no-route-for-outbound-packet
9472domain-name-request
9728domain-name-reply
9984skip-algorithm-discovery-protocol
66304unreachable
66816redirect
68352time-exceeded
68608parameters-problem
73216traceroute
73472conversion-errors
73728mobile-host-redirect
73984ipv6-where-are-you
74240ipv6-I-am-here
74496mobile-registration-request
74752mobile-registration-reply
75776security-failure
196608any
262144not-supported
 .1.3.6.1.4.1.81.36.5.1.16
ipPolicyQueryIpFragments
Simulate fragment packet.
Enumerationr/w
Enumerated Values:
1not-fragment
2fragment-first-packet
3fragment-non-first-packet
 .1.3.6.1.4.1.81.36.5.1.17
ipPolicyQueryIpOption
Simulate IP option packet.
TruthValuer/w
Textual Convention: AP80-PRIVATE-MIBTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.81.36.5.1.18
ipPolicyQueryAccessOperation
This object reports the Access operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1permit
2deny
 .1.3.6.1.4.1.81.36.5.1.19
ipPolicyQueryNotifyOperation
This object reports the Notify operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1ignore
2notify
 .1.3.6.1.4.1.81.36.5.1.20
ipPolicyQueryErrorReplyOperation
This object reports the Error Reply operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1disable
2tcp-reset
3icmp-unreachable
 .1.3.6.1.4.1.81.36.5.1.21
ipPolicyQueryCoSOperation
This object reports the CoS (Ethernet=802.1p) operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1cos0
2cos1
3cos2
4cos3
5cos4
6cos5
7cos6
8cos7
9no-change
 .1.3.6.1.4.1.81.36.5.1.22

ipPolicyDiffServControlTable

table obsolete
.1.3.6.1.4.1.81.36.6 · 1 row entry · 5 columns
Open in standard view 
This table activates & monitors the Diff Serv application
ipPolicyDiffServControlEntry entry .1.3.6.1.4.1.81.36.6.1
Each entry relates to one EntID (AKA module / box) in the stack
Indexes
ipPolicyDiffServSlot
Column Syntax OID
ipPolicyDiffServControlSlot obsolete
The EntID-id (AKA module-id / box number) to which this control entry
relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.6.1.1
ipPolicyDiffServControlChecksum obsolete
Checksum of all the configurable (read/write) DiffServ mib items
including the Diff Serv table.
This field can be used by the management application to discover that
Diff Serv configuration has changed (instead of pol…
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.6.1.2
ipPolicyDiffServControlTrustedFields obsolete
Specify which fields in the incoming packet might be trausted when the
policy decision should be based in the incoming packet itself.

Policy decision depend on the active policy list.
In cases that ther…
Enumerationr/w
Enumerated Values:
1cos
2dscp
3cos-dscp
4untrust
 .1.3.6.1.4.1.81.36.6.1.3
ipPolicyDiffServControlValidityStatus obsolete
Validity status of the DSCP table:

valid - All the entries in the DSCP table can be executed

invalid - One or more of the entries in the DSCP table
can NOT be EXECUTED.
Enumeration
Enumerated Values:
1valid
2invalid
 .1.3.6.1.4.1.81.36.6.1.4
ipPolicyDiffServControlErrMsg obsolete
Free text describing the reason why the table is not valid.
When the table is valid returns NULL string.
The values returned for this MIB are not affected by the table
status (active/inactive).
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.6.1.5

ipPolicyAccessControlViolationTable

table
.1.3.6.1.4.1.81.36.7 · 1 row entry · 12 columns
Open in standard view 
This table contains infomations raerding the last packet (per module)
for which ipPolicyAccessControlViolationTrap was sent.
ipPolicyAccessControlViolationEntry entry .1.3.6.1.4.1.81.36.7.1
An entry conatins the information regarding the last packet for which
ipPolicyAccessControlViolationTrap was sent by the specific module.
Indexes
ipPolicyAccessControlViolationEntID
Column Syntax OID
ipPolicyAccessControlViolationEntID
The EntID-id (AKA module-id / box number) for which the trap was vsent
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.7.1.1
ipPolicyAccessControlViolationSrcAddr
The IP address of the source station in the packet
RFC1155-SMIIpAddress
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.7.1.2
ipPolicyAccessControlViolationDstAddr
The IP address of the destination station in the packet
RFC1155-SMIIpAddress
Textual Convention: RFC1155-SMIIpAddress OctetString
Type Constraints:
range: 4
 .1.3.6.1.4.1.81.36.7.1.3
ipPolicyAccessControlViolationProtocol
The IP protocol in the packet. Use 256 to specify IP (i.e. don't care)
Integer32
Constraints:
range: 0-256
 .1.3.6.1.4.1.81.36.7.1.4
ipPolicyAccessControlViolationL4SrcPort
The source port of the packet.
This fields is applicable only when
ipPolicyAccessControlViolationProtocol is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32
Constraints:
range: 0-65536
 .1.3.6.1.4.1.81.36.7.1.5
ipPolicyAccessControlViolationL4DstPort
The destination port of the packet.
This fields is applicable only when
ipPolicyAccessControlViolationProtocol is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.7.1.6
ipPolicyAccessControlViolationEstablished
This field indicates the value of the established bit in the TCP header
of the packet. This fields is applicable only when \
ipPolicyAccessControlViolationProtocol is TCP(6) or UDP(17).
In all other cases its values is …
Enumeration
Enumerated Values:
1yes
2dontCare
3no
 .1.3.6.1.4.1.81.36.7.1.7
ipPolicyAccessControlViolationDSCP
The DSCP value in the violating packet.
The value 64 is used to specify DONT know.
Integer32
Constraints:
range: 0-64
 .1.3.6.1.4.1.81.36.7.1.8
ipPolicyAccessControlViolationIfIndex
The interface on which the violation occured.
SNMPv2-SMIInteger32
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.7.1.9
ipPolicyAccessControlViolationSubCtxt
The sub-context on which this violation occured.
Enumeration
Enumerated Values:
1ingress
2egress
 .1.3.6.1.4.1.81.36.7.1.10
ipPolicyAccessControlViolationTime
The value of sysUpTime at the time the violation was recorded
RFC1155-SMITimeTicks
Textual Convention: RFC1155-SMITimeTicks Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.81.36.7.1.11
ipPolicyAccessControlViolationRuleType
The type of rule that generated this notification.
ruleEntry - notification generated by a rule in IpPolicyRuleEntry
ipOptionOperation - notification generated by the list-level
ipPolicyListIpOptionOperation…
Enumeration
Enumerated Values:
1ruleEntry
2ipOptionOperation
3ipFragmentationOperation
 .1.3.6.1.4.1.81.36.7.1.12

ipPolicyCompositeOpTable

table
.1.3.6.1.4.1.81.36.8 · 1 row entry · 12 columns
Open in standard view 
This table is used to add/delete/modify/monitor individual composite operations in a policy list.
ipPolicyCompositeOpEntry entry .1.3.6.1.4.1.81.36.8.1
An operation composed of different actions that can be applied to a
flow. A compostie op is refernced from ipPolicyRuleOperation
Indexes
ipPolicyCompositeOpEntID ipPolicyCompositeOpListID ipPolicyCompositeOpID
Column Syntax OID
ipPolicyCompositeOpEntID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-1000
 .1.3.6.1.4.1.81.36.8.1.1
ipPolicyCompositeOpListID
The list object this set of operations belong to.
List 0 is the default list. When a new list is created, the
CompositeOp table of list 0 is copied to the composite op table of
that list. Hence changing the composite …
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.8.1.2
ipPolicyCompositeOpID
The ID of the operation. This ID is pointed by the corresponding
ipPolycyRuleOperation.
Integer32
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.8.1.3
ipPolicyCompositeOpName
User-created name for the composite action.

The operation that should be applied to a packet in case the packet does not match any of the user specified rules. Values pertains to ACL or QoS depending on …
OctetStringr/w
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.8.1.4
ipPolicyCompositeOp802priority
Class of Service to use.
In the Ethernet world it means 802.1p tagging.
Enumerationr/w
Enumerated Values:
1cos0
2cos1
3cos2
4cos3
5cos4
6cos5
7cos6
8cos7
9no-change
255not-supported
 .1.3.6.1.4.1.81.36.8.1.5
ipPolicyCompositeOpAccess
Access control method - block or forward.
Enumerationr/w
Enumerated Values:
1permit
2deny
255not-supported
 .1.3.6.1.4.1.81.36.8.1.6
ipPolicyCompositeOpDscp
The New DSCP value that should be applied to packets that match
this rule. Applicable only to devices that can change the DSCP
field of a packet.
64 - no change.
255 - notSupported.
Integer32r/w
Constraints:
range: 0-64
range: 255-255
 .1.3.6.1.4.1.81.36.8.1.7
ipPolicyCompositeOpRSGQualityClass
Requested Web Switching Service quality.
This field is meaningfull onnly in the context of Web-Switching
applications (Server Load balancing, Application redirection,
Firewall load balancing, etc.).

If a…
Integer32r/w
Constraints:
range: 0-255
 .1.3.6.1.4.1.81.36.8.1.8
ipPolicyCompositeOpNotify
Notify (send trap and/or log) to management if specific flow was detected.
Enumerationr/w
Enumerated Values:
1ignore
2notify
255not-supported
 .1.3.6.1.4.1.81.36.8.1.9
ipPolicyCompositeOpRowStatus
Used for creation/deletion of an operation
RowStatusr/w
Textual Convention: BtechTypes-MIBRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.81.36.8.1.10
ipPolicyCompositeOpErrorReply
Reset connection.
Sends TCP reset as response to TCP syn or TCP syn+ack packets or send ICMP destination unreachable, communication administratively prohibited by filtering (code 13) for non-TCP packets. Boxster specifi…
Enumerationr/w
Enumerated Values:
1disable
2auto
255not-supported
 .1.3.6.1.4.1.81.36.8.1.11
ipPolicyCompositeOpTrustDscp
Trust DSCP table.
trust dscp-only or trust dscp-and-cos means 'consult DSCP table' (which actually points back to composite operation table).
Packet's DSCP field would be remarked based on DSCP table.
Packet's CoS field…
Enumeration
Enumerated Values:
1no
2dscp-only
3dscp-and-cos
 .1.3.6.1.4.1.81.36.8.1.12

ipPolicyDSCPmapTable

table
.1.3.6.1.4.1.81.36.9 · 1 row entry · 9 columns
Open in standard view 
This table is used to configure the policy that is associated with differntiated services. For each DSCP value the table contain the operation that should applied to packets that match this DSCP value.
Note that in this version of this mib, allowed policies are restricted to priority levels and access control.
          
There is one set of DSCP mappings per List. Set no. 0 is the default set.
When a new list is created, DSCP mappings of set 0 are copied to the DSCP mapping set of the new list.
Note: The ietf notion of PHB (per-hop forwarding behaviors) is not yet supported
ipPolicyDSCPmapEntry entry .1.3.6.1.4.1.81.36.9.1
The information concerning one of the IP policy lists
Indexes
ipPolicyDSCPmapEntID ipPolicyDSCPmapListID ipPolicyDSCPmapDSCP
Column Syntax OID
ipPolicyDSCPmapEntID
The EntID-id (AKA module-id / box number) to which diff-serv
table relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.9.1.1
ipPolicyDSCPmapListID
The list object this set of DSCP mappings belong to.
List 0 is the default list. When a new list is created, the
DSCP mapping of list 0 is opied to the DSCP mappingp table of
that list. Hence changing the DSCP mapping …
Integer32
Constraints:
range: 0-1000
 .1.3.6.1.4.1.81.36.9.1.2
ipPolicyDSCPmapDSCP
The DSCP value to which this entry relates.
Integer32
Constraints:
range: 0-63
 .1.3.6.1.4.1.81.36.9.1.3
ipPolicyDSCPmapOperation
This field points to the appropriate ipPolicyCompositeOpID in ipPolicyCompositeOpTable.

The operation that should be applied to a packet in case the packet does not match any of the user specified rules. …
Integer32r/w
Constraints:
range: 0-1000
 .1.3.6.1.4.1.81.36.9.1.4
ipPolicyDSCPmapName
Name of this DSCP entry. This field is used only for documentation purposes.
Default name is:
CS0 - 0
CS1 - 8
CS2 - 16
CS3 - 24
CS4 - 32
CS5 - 40
CS6 - 48
CS7 - 56
AF11 - 10
AF12 - 12
AF13 - 14
AF21 - 18
AF22 - 20
AF23…
OctetStringr/w
Constraints:
range: 0-32
 .1.3.6.1.4.1.81.36.9.1.5
ipPolicyDSCPmapApplicabilityPrecedence
This field indicates how important is it to enforce this entry.
The higher the number the more important it is to enforce this entry.
The value 9999 has a special meaning of Mandatory which means this
entry MUST be enf…
Integer32r/w
Constraints:
range: 0-9999
 .1.3.6.1.4.1.81.36.9.1.6
ipPolicyDSCPmapApplicabilityStatus obsolete
Used to monitor if a DSCP entry is currently applicable
or would be applicable (if the table becomes active).

The applicability context is that of the first entry for this SlotID
in ipPolicyValidDSCPTabl…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
 .1.3.6.1.4.1.81.36.9.1.7
ipPolicyDSCPmapApplicabilityType obsolete
Used to monitor the ApplicabilityStatus of the entry in the context of
this table. The values returned for this MIB are not affected by the
table status (active/inactive).

static - The applicabilityStat…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
 .1.3.6.1.4.1.81.36.9.1.8
ipPolicyDSCPmapErrMsg obsolete
Free text describing the reason why the entry is not Applicable.
When entry is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.9.1.9

ipPolicyActivationTable

table
.1.3.6.1.4.1.81.36.10 · 1 row entry · 12 columns
Open in standard view 
The ipPolicyActivationTable is used to map between 
interface/direction pairs
to policy lists.
This table accomodates devices that have one or more active 
Policy list, each list for a different qualifying 
interface/direction context.
          
Each entry has a number which represents the list that is active 
for the matching interface/direction.
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyActivationEntry entry .1.3.6.1.4.1.81.36.10.1
The information concerning an interface/direction pair
Indexes
ipPolicyActivationEntID ipPolicyActivationifIndex ipPolicyActivationSubContext
Column Syntax OID
ipPolicyActivationEntID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.1
ipPolicyActivationifIndex
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.2
ipPolicyActivationSubContext
The direction for which this list is relevant:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.10.1.3
ipPolicyActivationSubContextName
The description of the sub context of this interface, in a human
readable string, to be displayed by the NMS.
OctetString .1.3.6.1.4.1.81.36.10.1.4
ipPolicyActivationList
The number representing the list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports combined lists scheme.
When no list is assigned to th…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.5
ipPolicyActivationAclList
The number (300 - 399) representing the ACL list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.6
ipPolicyActivationQoSList
The number (400 - 499) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.7
ipPolicyActivationSourceNatList
The number (500 - 599) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.8
ipPolicyActivationDestinationNatList
The number (600 - 699) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.9
ipPolicyActivationAntiSpoofignList
The number (700 - 799) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.10
ipPolicyActivationPBRList
The number (800 - 899) representing the PBR list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.11
ipPolicyActivationCryptoList
The number (900 - 999) representing Crypto list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is as…
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.10.1.12

ipPolicyValidListTable

table
.1.3.6.1.4.1.81.36.11.1 · 1 row entry · 8 columns
Open in standard view 
This table is a Read-Only table that describes
the validity status of a list object in the context
of interface/direction pair.
          
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidListEntry entry .1.3.6.1.4.1.81.36.11.1.1
The information concerning an interface/direction pair
Indexes
ipPolicyValidListEntID ipPolicyValidListIfIndex ipPolicyValidListSubContext ipPolicyValidListListID
Column Syntax OID
ipPolicyValidListEntID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.1.1.1
ipPolicyValidListIfIndex
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.1.1.2
ipPolicyValidListSubContext
The direction for which this list should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.1.1.3
ipPolicyValidListListID
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.1.1.4
ipPolicyValidListStatus
Validity status of this list in the context of a particular
interface and direction,
on a particular policy entity.
Summarizes validity of rules,
dscp table and composite Opertaions associated with this list.
…
Enumeration
Enumerated Values:
1valid
2partiallyValid
3invalid
4validationInProgress
 .1.3.6.1.4.1.81.36.11.1.1.5
ipPolicyValidListErrMsg
Free text describing the reason why the list is not valid.
When the list is valid returns NULL string.
The values returned for this MIB are not affected by the list
status (active/inactive).
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.11.1.1.6
ipPolicyValidListIpOption
The list is not valid since filtering based on IP option (ipPolicyListIpOptionOperation) cannot be executed.
TruthValue
Textual Convention: AP80-PRIVATE-MIBTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.81.36.11.1.1.7
ipPolicyValidListIpFragmentation
The list is not valid since filtering based on IP fragmentation (ipPolicyListIpFragmentationOperation) cannot be executed.
TruthValue
Textual Convention: AP80-PRIVATE-MIBTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.81.36.11.1.1.8

ipPolicyValidRuleTable

table
.1.3.6.1.4.1.81.36.11.2 · 1 row entry · 8 columns
Open in standard view 
This table is a Read-Only table that describes
the applicability/validity  status of a rule in a List in the context
of interface/direction pair.
          
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidRuleEntry entry .1.3.6.1.4.1.81.36.11.2.1
The information concerning an interface/direction pair
Indexes
ipPolicyValidRuleEntID ipPolicyValidRuleIfIndex ipPolicyValidRuleSubContext ipPolicyValidRuleListID ipPolicyValidRuleRuleID
Column Syntax OID
ipPolicyValidRuleEntID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.2.1.1
ipPolicyValidRuleIfIndex
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.2.1.2
ipPolicyValidRuleSubContext
The direction for which this list/rule should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.2.1.3
ipPolicyValidRuleListID
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.2.1.4
ipPolicyValidRuleRuleID
The rule ID from ipPolicyRuleTable, in theis list,
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.2.1.5
ipPolicyValidRuleStatus
Used to monitor if a rule is is currently applicable
or would be applicable (if the table becomes active).
In the context of a particular interface and direction,
on a particular policy entity.
The values returned for …
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
 .1.3.6.1.4.1.81.36.11.2.1.6
ipPolicyValidRuleApplicabilityType
Used to monitor the ApplicabilityStatus of the rule in the context of
this list. The values returned for this MIB are not affected by the
list status (active/inactive)

static - The applicabilityStatus o…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
 .1.3.6.1.4.1.81.36.11.2.1.7
ipPolicyValidRuleErrMsg
Free text describing the reason why the rule is not Applicable.
When rule is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.11.2.1.8

ipPolicyValidDSCPTable

table
.1.3.6.1.4.1.81.36.11.3 · 1 row entry · 8 columns
Open in standard view 
This table is a Read-Only table that describes
the applicability/validity  status of a DSCP mapping
in a List in the context of interface/direction pair.
In essencse, this is ipPolicyDSCPmapTable
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidDSCPEntry entry .1.3.6.1.4.1.81.36.11.3.1
The information concerning an interface/direction pair
Indexes
ipPolicyValidDSCPEntID ipPolicyValidDSCPIfIndex ipPolicyValidDSCPSubContext ipPolicyValidDSCPListID ipPolicyValidDSCPvalue
Column Syntax OID
ipPolicyValidDSCPEntID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.3.1.1
ipPolicyValidDSCPIfIndex
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.3.1.2
ipPolicyValidDSCPSubContext
The direction for which this list/rule should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.3.1.3
ipPolicyValidDSCPListID
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.3.1.4
ipPolicyValidDSCPvalue
The DSCP value (from ipPolicyDSCPmapTable) in this list,
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.3.1.5
ipPolicyValidDSCPStatus
Used to monitor if a DSCP entry is currently applicable
or would be applicable (if the table becomes active).
In the context of a particular interface and direction,
on a particular policy entity.
The values returned f…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
 .1.3.6.1.4.1.81.36.11.3.1.6
ipPolicyValidDSCPApplicabilityType
Used to monitor the ApplicabilityStatus of the entry in the context of
this table. The values returned for this MIB are not affected by the
table status (active/inactive).

static - The applicabilityStat…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
 .1.3.6.1.4.1.81.36.11.3.1.7
ipPolicyValidDSCPErrMsg
Free text describing the reason why the entry is not Applicable.
When entry is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.11.3.1.8

ipPolicyValidEtherTypeRuleTable

table
.1.3.6.1.4.1.81.36.11.4 · 1 row entry · 8 columns
Open in standard view 
This table is a Read-Only table that describes
the applicability/validity  status of a rule in a List in the context
of interface/direction pair.
          
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidEtherTypeRuleEntry entry .1.3.6.1.4.1.81.36.11.4.1
The information concerning an interface/direction pair
Indexes
ipPolicyValidRuleEntID ipPolicyValidRuleIfIndex ipPolicyValidRuleSubContext ipPolicyValidRuleListID ipPolicyValidRuleRuleID
Column Syntax OID
ipPolicyValidEtherTypeRuleEntID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.4.1.1
ipPolicyValidEtherTypeRuleIfIndex
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.4.1.2
ipPolicyValidEtherTypeRuleSubContext
The direction for which this list/rule should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.4.1.3
ipPolicyValidEtherTypeRuleListID
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.4.1.4
ipPolicyValidEtherTypeRuleRuleID
The rule ID from etherTypeRuleTable, in theis list, to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.11.4.1.5
ipPolicyValidEtherTypeRuleStatus
Used to monitor if a rule is is currently applicable
or would be applicable (if the table becomes active).
In the context of a particular interface and direction,
on a particular policy entity.
The values returned for …
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
 .1.3.6.1.4.1.81.36.11.4.1.6
ipPolicyValidEtherTypeRuleApplicabilityType
Used to monitor the ApplicabilityStatus of the rule in the context of
this list. The values returned for this MIB are not affected by the
list status (active/inactive)

static - The applicabilityStatus o…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
 .1.3.6.1.4.1.81.36.11.4.1.7
ipPolicyValidEtherTypeRuleErrMsg
Free text describing the reason why the rule is not Applicable.
When rule is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
 .1.3.6.1.4.1.81.36.11.4.1.8

etherTypeRuleTable

table
.1.3.6.1.4.1.81.36.12 · 1 row entry · 7 columns
Open in standard view 
This table is used to add/delete/modify/monitor individual
ether type policy rules in a policy list.
etherTypeRuleEntry entry .1.3.6.1.4.1.81.36.12.1
Controls all the conditional fields and its parameters for
a policy rule.
Indexes
ipPolicyEtherTypeRuleSlot ipPolicyEtherTypeRuleListID ipPolicyEtherTypeRuleID
Column Syntax OID
ipPolicyEtherTypeRuleSlot
The EntID-id (AKA module-id / box number) to which this ether type rule relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.12.1.1
ipPolicyEtherTypeRuleListID
The ID of the list this ether type rule is part of.
Derived from list range. See ipPolicyListID MIB.
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.12.1.2
ipPolicyEtherTypeRuleID
Number of ether type rule within its list. Each list may contain many rule.
Lists work in a First Match manner.
A rule with a lower ID would be preferred over a rule with a higher ID.
Integer32
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.12.1.3
ipPolicyEtherTypeRuleEtherType
Packet's ether type.
IP protocol (2048 - 0x800) is not allowed.
Integer32r/w
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.12.1.4
ipPolicyEtherTypeRuleTrafficType
Match packets based on either broadcast, multicast, both or all packets.
Enumerationr/w
Enumerated Values:
1all
2broadcasts
3multicasts
4broadcasts-and-multicasts
5unicast
 .1.3.6.1.4.1.81.36.12.1.5
ipPolicyEtherTypeRuleOperation
The operation that should be applied to a packet in case the packet matches the rule.
This field points to the appropriate ipPolicyCompositeOpID in ipPolicyCompositeOpTable.
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
 .1.3.6.1.4.1.81.36.12.1.6
ipPolicyEtherTypeRowStatus
Used for creation/deletion of a list and for monitoring list status.
Use CreateAndWait (5) to create a list.
Destroy (6) to destroy a list. The active list can NOT
be destroyed. Destroying a list automatically removes …
RowStatusr/w
Textual Convention: BtechTypes-MIBRowStatus Enumeration
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
 .1.3.6.1.4.1.81.36.12.1.7

etherTypePolicyQueryTable

table
.1.3.6.1.4.1.81.36.13 · 1 row entry · 8 columns
Open in standard view 
This table is used to query the policy application for different 
types of ehter type information. The first use is to query about the operation 
that would be applied to a given packet.
          
This table can be used by a managment application to supply the user
an interactive dialog for looking ahead at the outcomes of the policy
defined
etherTypePolicyQueryEntry entry .1.3.6.1.4.1.81.36.13.1
Each entry relates to one EntID (AKA module / box) in the stack
Indexes
etherTypePolicyQuerySlot
Column Syntax OID
etherTypePolicyQuerySlot
The EntID-id (AKA module-id / box number) to which this rule relates
Integer32
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.13.1.1
etherTypePolicyQueryListID
The ID of the list used to check the simulated packet.
Integer32r/w
Constraints:
range: 0-2147483647
 .1.3.6.1.4.1.81.36.13.1.2
etherTypePolicyQueryIfIndex
This variable should be made equal to the ifIndex of the interface
for which this query should be resolved.
The value of 0 means the context of the first entry in the
ipPolicyActivationTable for this SlotID.
SNMPv2-SMIInteger32r/w
Textual Convention: SNMPv2-SMIInteger32 Integer32
Type Constraints:
range: -2147483648..2147483647
 .1.3.6.1.4.1.81.36.13.1.3
etherTypePolicyQuerySubContext
The direction for which this query should be resolved:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypesr/w .1.3.6.1.4.1.81.36.13.1.4
etherTypePolicyQueryType
Simulated packet ether type.
IP protocol (2048 = 0x800) is not allowed.
Integer32r/w
Constraints:
range: 0-65535
 .1.3.6.1.4.1.81.36.13.1.5
etherTypePolicyQueryTrafficType
Simulated packet ether type traffic type.
Enumerationr/w
Enumerated Values:
1unicast
2broadcasts
3multicasts
 .1.3.6.1.4.1.81.36.13.1.6
etherTypePolicyQueryOperation
The operation that would be applied to the simulated packet.
This field points to the appropriate ipPolicyCompositeOpID in ipPolicyCompositeOpTable.
The following read-only rows are always defined in ipPolicyCompositeOp…
Integer32
Constraints:
range: 1-1000
 .1.3.6.1.4.1.81.36.13.1.7
etherTypePolicyQueryRuleID
ID of the rule of the list that resulted in the query.
A value of 0 means that result of the ipEtherTypePolicyListDefaultOperation 10000 should be returned in case of an error, where this query can't be processed.
Integer32
Constraints:
range: 0-10000
 .1.3.6.1.4.1.81.36.13.1.8