fltNewCfgLayer7DenyState
ALTEON-CHEETAH-LAYER4-MIB ·
.1.3.6.1.4.1.1872.2.5.4.1.2.3.1.51
Object
column
r/w
Enumeration
Enable or disable layer 7 deny filtering.
Context
- MIB
- ALTEON-CHEETAH-LAYER4-MIB
- OID
.1.3.6.1.4.1.1872.2.5.4.1.2.3.1.51- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- fltNewCfgTableEntry
- Table
- fltNewCfgTable
- Siblings
- 81
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | enabled |
2 | disabled |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| fltNewCfgIndx The filtering table index. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.1 |
| fltNewCfgRangeHighDstPort The higher destination TCP/UDP port number to be filtered.
It applies only when protocol defined in fltNewCfgProtocol
is UDP or TCP. '0' means no filtering. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.10 |
| fltNewCfgAction The action for the filtering rule. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.11 |
| fltNewCfgRedirPort The real server port number used for redirection. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.12 |
| fltNewCfgRedirGroup The real server group to be redirected to. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.13 |
| fltNewCfgLog Enable or disable logging. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.14 |
| fltNewCfgState The state of this filtering rule. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.15 |
| fltNewCfgDelete When set to the value of 2 (delete), the entire row is deleted.
When read, other(1) is returned. Setting the value to anything
other than 2(delete) has no effect on the state of… | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.16 |
| fltNewCfgNat The selection of destination or source or multicast for
network address translation. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.17 |
| fltNewCfgCache Enable or disable caching sessions that match filter. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.18 |
| fltNewCfgInvert Turn the invert logic on or off for the filter entry. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.19 |
| fltNewCfgSrcIp The source IP address to be filtered. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.2 |
| fltNewCfgClientProxy Enable or disable client proxy. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.20 |
| fltNewCfgTcpAck Enable or disable filtering on matching TCP ACK and RST flag. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.21 |
| fltNewCfgSrcMac The source MAC address to be filtered. | column | SNMPv2-TCPhysAddress | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.23 |
| fltNewCfgDstMac The Destination MAC address to be filtered. | column | SNMPv2-TCPhysAddress | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.24 |
| fltNewCfgFtpNatActive Enable or disable FTP NAT for active ftp. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.25 |
| fltNewCfgAclTcpUrg Enable or disable TCP URG packet. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.26 |
| fltNewCfgAclTcpAck Enable or disable TCP ACK packet. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.27 |
| fltNewCfgAclTcpPsh Enable or disable TCP PSH packet. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.28 |
| fltNewCfgAclTcpRst Enable or disable TCP RST packet. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.29 |
| fltNewCfgSrcIpMask The source IP sub-net mask for filtering. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.3 |
| fltNewCfgAclTcpSyn Enable or disable TCP SYN packet. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.30 |
| fltNewCfgAclTcpFin Enable or disable TCP FIN packet. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.31 |
| fltNewCfgAclIcmp ICMP type to be filtered. A ICMP type of 255 indicates 'any' | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.32 |
| fltNewCfgAclIpOption Enable or disable IP option matching. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.33 |
| fltNewCfgBwmContract Filt default BW contract number. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.34 |
| fltNewCfgAclIpTos The IP TOS value to be filtered. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.35 |
| fltNewCfgAclIpTosMask The IP TOS mask for filtering. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.36 |
| fltNewCfgAclIpTosNew The new IP TOS value to over-write when filtering fired. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.37 |
| fltNewCfgFwlb Enable or disable filtering on firewall redirect hash method. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.38 |
| fltNewCfgNatTimeout The NAT session timeout. The timeout value should be an even
number between 4 and 32768. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.39 |
| fltNewCfgDstIp The destination IP address to be filtered. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.4 |
| fltNewCfgLinklb Enable or disable WAN link load balancing. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.40 |
| fltNewCfgWapRadiusSnoop Enable or disable WAP RADIUS snooping. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.41 |
| fltNewCfgSrcIpMac Set a flag indicating whether filtering should be based on the
source IP address or the source MAC address field. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.42 |
| fltNewCfgDstIpMac Set a flag indicating whether filtering should be based on the
destination IP address or the destination MAC address field. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.43 |
| fltNewCfgIdslbHash Set hash parameter for intrusion detection server load balancing. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.44 |
| fltNewCfgVlan Set the VLAN assoicated with the filter. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.45 |
| fltNewCfgName The name of the filter. | column | OctetString | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.46 |
| fltNewCfgTcpRateLimit Enable or disable protocol rate limiting. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.47 |
| fltNewCfgTcpRateMaxConn Set maximum connections (number of connections in units of 10)
for TCP connection rate limiting. In the case of ICMP and UDP,
this is the maximum packets (number of packets in un… | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.48 |
| fltNewCfgHash Set hash parameter for the filter. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.49 |
| fltNewCfgDstIpMask The destination IP sub-net mask for filtering. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.5 |
| fltNewCfgLayer7DenyUrlBmap The URL strings selected for Layer 7 deny filters.
The selected URL strings are presented in a bitmap format.
in receiving order:
OCTET 1 OCTE… | column | OctetString | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.52 |
| fltNewCfgLayer7DenyAddUrl The URL Path (slbCurCfgUrlLbPathIndex) to be added to the
Layer 7 deny filter. A zero is returned when read. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.53 |
| fltNewCfgLayer7DenyRemUrl The URL Path (slbCurCfgUrlLbPathIndex) to be removed from
the Layer 7 deny filter. A zero is returned when read. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.54 |
| fltNewCfgGotoFilter The filter ID for GOTO action in the new config. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.55 |
| fltNewCfgRadiusWapPersist Enable or disable Radius/WAP persistence. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.56 |
| fltNewCfgPbind Enable or disable filter persistent binding. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.57 |
| fltNewCfgTimeWindow The time window for protocol rate limiting (in seconds). | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.58 |
| fltNewCfgHoldDuration The hold down duration for protocol rate limiting (in minutes). | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.59 |
| fltNewCfgProtocol The protocol to be filtered. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.6 |
| fltNewCfgPatternMatch Enable or disable binary pattern matching. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.60 |
| fltNewCfgLayer7DenyMatchAll Enable or disable match-all criteria for L7 deny string matching. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.61 |
| fltNewCfgProxyIp The client proxy IP address for NAT and REDIR filter. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.62 |
| fltNewCfgLayer7ParseAll Enable or disable layer 7 lookup (parsing) of all packets. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.63 |
| fltNewCfgSecurityParseAll Enable or disable pattern string lookup (parsing) of all packets. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.64 |
| fltNewCfgPatternMatchGroupBmap The pattern match group.
The pattern match groups are presented in a bitmap format.
in receiving order:
OCTET 1 OCTET 2 .....
xxxxxxxx x… | column | OctetString | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.65 |
| fltNewCfgAddPatternMatchGroup The pattern match group to be added to the
security filter. A zero is returned when read. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.66 |
| fltNewCfgRemPatternMatchGroup The pattern match group to be to be removed from
the security filter. A zero is returned when read. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.67 |
| fltNewCfg8021pBitsValue The 802.1p bits value to match. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.68 |
| fltNewCfg8021pBitsMatch Enable or disable matching on 802.1p bits in the packets. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.69 |
| fltNewCfgRangeHighSrcPort The higher source TCP/UDP port number to be filtered. It applies
only when protocol defined in fltNewCfgProtocol is UDP or TCP.
'0' means no filtering. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.7 |
| fltNewCfgAclIpLength Set the IP maximum packet length in bytes. A value can be either 0
which indicates 'any' length or between 64 and 65535. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.70 |
| fltNewCfgIdsGroup The real server group for IDS load balancing. A value of 0 indicates
'none'. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.71 |
| fltNewCfgEgressPip Enable or disable pip selection based on egress port/vlan. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.72 |
| fltNewCfgDbind Enable or disable filter delayed binding. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.73 |
| fltNewCfgRevBwmContract Filt reverse session BWM contract number. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.74 |
| fltNewCfgReverse Enable or disable creating session for reverse side traffic. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.75 |
| fltNewCfgParseChn Enable or disable chained pgroup match criteria for l7 filtering. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.76 |
| fltNewCfgRtpBwmContract BWM contract for SIP RTP traffic. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.77 |
| fltNewCfgSipParsing Enable or disable SIP NAT. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.78 |
| fltNewCfgSessionMirror Enable or disable session mirroring. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.79 |
| fltNewCfgRangeLowSrcPort The lower source TCP/UDP port number to be filtered. It applies
only when protocol defined in fltNewCfgProtocol is UDP or TCP.
'0' means no filtering. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.8 |
| fltNewCfgIpVer The type of IP address. | column | Enumeration | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.80 |
| fltNewCfgIpv6Sip The source IPv6 address to be filtered. Address should be 4-byte
hexadecimal colon notation.
Valid IPv6 address should be in any of the following forms
xxxx:xxxx:xxxx:xxxx:xxxx:… | column | OctetString | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.81 |
| fltNewCfgIpv6Sprefix The prefix length associated with source IP address . | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.82 |
| fltNewCfgIpv6Dip The destination IPv6 address to be filtered. Address should be 4-byte
hexadecimal colon notation.
Valid IPv6 address should be in any of the following forms
xxxx:xxxx:xxxx:xxxx… | column | OctetString | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.83 |
| fltNewCfgIpv6Dprefix The prefix length associated with destination IP address . | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.84 |
| fltNewCfgRangeLowDstPort The lower destination TCP/UDP port number to be filtered.
It applies only when protocol defined in fltNewCfgProtocol
is UDP or TCP. '0' means no filtering. | column | Integer32 | .1.3.6.1.4.1.1872.2.5.4.1.2.3.1.9 |