aluSecProfileConfigAllowedIpOpt
ALU-SECURITY-MIB ·
.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.17
Object
The value of the object indicates the bitmask of allowed IP options when IP option inspection is enabled. aluSecProfileConfigAppInspect must be enabled before IP inspection can be enabled.
Context
- MIB
- ALU-SECURITY-MIB
- OID
.1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.17- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- aluSecProfileConfigEntry
- Table
- aluSecProfileConfigTable
- Siblings
- 28
Syntax
SNMPv2-SMIUnsigned32
- Source
- SNMPv2-SMIUnsigned32
- Base type
Unsigned32
Values & Constraints
Type Constraints
range: 0..4294967295
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| aluSecProfileConfigId The value of the object aluSecProfileConfigId
specifies the unique profile id. | column | Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.1 |
| aluSecProfileConfigUdpInitTimeout The value of the object specifies the number of seconds a
UDP session can remain idle after recieving the first packet
before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.10 |
| aluSecProfileConfigUdpDnsTimeout The value of the object specifies the number of seconds a
DNS request can take to recieve a response
before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.11 |
| aluSecProfileConfigIcmpTimeout The value of the object specifies the number of seconds an
ICMP request can take to recieve a response
before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.12 |
| aluSecProfileConfigOtherTimeout The value of the object specifies the number of seconds other
protocol sessions can remain idle before being cleaned up.
This also includes all drop sessions regardless of protoco… | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.13 |
| aluSecProfileConfigAppInspect The value of the object indicates whether application assurance inspection
should be performed on all active connections with this profile. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.14 |
| aluSecProfileConfigInspectTcp The value of the object indicates whether stict TCP inspection
should be performed on all active TCP connections with this profile.
aluSecProfileConfigAppInspect must be enabled b… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.15 |
| aluSecProfileConfigInspectIpOpt The value of the object indicates whether IP options inspection
is to be performed. When 'true' the object aluSecProfileConfigAllowedIpOpt
is used to specify permitted options.
al… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.16 |
| aluSecProfileConfigAllowPktFrag The value of the object indicates whether fragmented IP packets are
permitted through connections with this profile. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.18 |
| aluSecProfileConfigAlg The value of the object indicates the application layer
gateway processing to be performed on this connection. | column | TAlgType | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.19 |
| aluSecProfileConfigRowStatus The value of aluSecProfileConfigRowStatus specifies the
row status. It allows entries to be created and deleted in the
aluSecProfileConfigTable. | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.2 |
| aluSecProfileConfigIcmpReqLimit The value of the object specifies the number of ICMP packets permitted
to travese the ICMP request session in each direction.
A value of 0 specifies that there is no packet limit.… | column | packets Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.20 |
| aluSecProfileConfigIcmpErrLimit The value of the object specifies the whether to limit the number of ICMP Type 3
packets that are permitted to travese the session in each direction.
aluSecProfileConfigAppInspec… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.21 |
| aluSecProfileConfigDnsReplyOnly The value of the object specifies whether to limit the number of DNS
packets that are permitted to travese a DNS session in each direction.
aluSecProfileConfigAppInspect must be… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.22 |
| aluSecProfileConfigTcpTmoStrict The value of the object specifies if a TCP Session in the Established
state is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.23 |
| aluSecProfileConfigUdpTmoStrict The value of the object specifies if a UDP Session in the Established
state is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.24 |
| aluSecProfileConfigIcmpTmoStrict The value of the object specifies if a ICMP Request Session
is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session wi… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.25 |
| aluSecProfileConfigDnsTmoStrict The value of the object specifies if a DNS Request Session
is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session wil… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.26 |
| aluSecProfileConfigOthTmoStrict The value of the object specifies if a Other protocol session
is strictly enforced to timeout after the Timeout setting regardless of
session activity. When'false' the session … | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.27 |
| aluSecProfileConfigFwdPolicerId The value of the object specifies the policer group that the forward direction
of the session should be rate-limited with. | column | TSecurityPolicerId | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.28 |
| aluSecProfileConfigRevPolicerId The value of the object specifies the policer group that the reverse direction
of the session should be rate-limited with. | column | TSecurityPolicerId | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.29 |
| aluSecProfileConfigName Name of the security profile. | column | TIMETRA-TC-MIBTNamedItemOrEmpty | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.3 |
| aluSecProfileConfigDescription Description of this security profile. | column | TIMETRA-TC-MIBTItemDescription | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.4 |
| aluSecProfileConfigTcpSynTimeout The value of the object specifies the number of seconds a
TCP session can wait for a SYN before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.5 |
| aluSecProfileConfigTcpWaitTimeout The value of the object specifies the number of seconds a
TCP session can remain in time wait before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.6 |
| aluSecProfileConfigTcpTransTimeout The value of the object specifies the number of seconds a
TCP session can remain be transitory before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.7 |
| aluSecProfileConfigTcpEstTimeout The value of the object specifies the number of seconds a
TCP session has to reach established before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.8 |
| aluSecProfileConfigUdpTimeout The value of the object specifies the number of seconds a
UDP session can remain idle before being cleaned up. | column | seconds Unsigned32 | .1.3.6.1.4.1.6527.6.1.2.2.17.1.10.1.9 |