ipsecTrAction
FEC-IPSEC-MIB ·
.0.7.1.13
Object
column
r/w
Enumeration
The action to be applied to traffic matching this entry. Possible values: delete(1), -- Delete this entry always-plain(2), -- Forward the packets without -- protection even if there is a -- matching SA and independent from -- the position of the traffic entry -- in the list. pass(3), -- Forward the packets without -- protection protect(4), -- Protect the traffic as specified -- in the proposal. Drop unprotected -- traffic of this kind. drop(5) -- Drop all packets matching this -- traffic entry.
Context
- MIB
- FEC-IPSEC-MIB
- OID
.0.7.1.13- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- ipsecTrafficEntry
- Table
- ipsecTrafficTable
- Siblings
- 23
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | delete |
2 | always-plain |
3 | pass |
4 | protect |
5 | drop |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ipsecTrIndex A unique index identifying this entry. | column | Integer32 | .0.7.1.1 |
| ipsecTrProto The transport protocol defined for this entry. | column | Enumeration | .0.7.1.10 |
| ipsecTrLocalPort The source port defined for this traffic entry. | column | Integer32 | .0.7.1.11 |
| ipsecTrRemotePort The destination port defined for this traffic entry. | column | Integer32 | .0.7.1.12 |
| ipsecTrProposal This object specifies an index in the
ipsecProposalTable. This may be the first proposal of
possibly a choice of multiple, optionally nested
proposals which is to be offered with … | column | Integer32 | .0.7.1.14 |
| ipsecTrForceTunnelMode This object specifies the strategy when transport mode is used.
By default, the system always uses transport mode, if possible.
If this variable is set to true, always tunnel mode… | column | Enumeration | .0.7.1.15 |
| ipsecTrLifeTime This object specifies an index in the
ipsecLifeTimeTable. This lifetime overwrites the
lifetimes specified for all proposals referenced by
this traffic entry. It may itself be ove… | column | Integer32 | .0.7.1.16 |
| ipsecTrGranularity This object specifies the granularity with which SA's
must be created for this kind of traffic.
Possible values:
default(1), -- use the setting from the ipsecPeerTable
coars… | column | Enumeration | .0.7.1.17 |
| ipsecTrKeepAlive This object specifies whether SA's created for this kind
of traffic should be rekeyed on expiration of soft
lifetimes even if there has not been sent any traffic
over them.
Possi… | column | Enumeration | .0.7.1.18 |
| ipsecTrInterface This object specifies the interface for which the traffic
entry should be valid (pass, drop and protect entries).
If this object is set to -1, there is no interface
restriction. | column | Integer32 | .0.7.1.19 |
| ipsecTrNextIndex This object specifies the index of the next traffic
entry in hierarchy. | column | Integer32 | .0.7.1.2 |
| ipsecTrDirection This object specifies the direction for which this traffic
entry should match.
It only applies for pass and drop entries, for protect entries
it is meaningless.
Possible values… | column | Enumeration | .0.7.1.20 |
| ipsecTrLocalAddressType The type of the local address specification.
This may be either a statically configured address or a
dynamic address which is taken from some state information. | column | Enumeration | .0.7.1.21 |
| ipsecTrRemoteAddressType The type of the remote address specification.
This may be either a statically configured address or a
dynamic address which is taken from some state information. | column | Enumeration | .0.7.1.22 |
| ipsecTrProfile The index from the ipsecProfileTable containing a special
phase 2 profile to use for this traffic entry. | column | Integer32 | .0.7.1.23 |
| ipsecTrDescription An optional human readable description for this traffic entry. | column | SNMPv2-TCDisplayString | .0.7.1.3 |
| ipsecTrCreator This object shows the creator of the traffic entry. | column | Enumeration | .0.7.1.36 |
| ipsecTrLocalAddress The source IP-address of this traffic entry. It maybe
either a single address, a network address (in
combination with ipsecTrSrcMask), or the first address
of an address range (in… | column | SNMPv2-SMIIpAddress | .0.7.1.4 |
| ipsecTrLocalMaskLen The length of the network mask for a source network. | column | Integer32 | .0.7.1.5 |
| ipsecTrLocalRange The last address of a source address range. If this
field is nonzero, the ipsecTrLocalMaskLen field is
ignored and the source is considered as a range of
addresses beginning with … | column | SNMPv2-SMIIpAddress | .0.7.1.6 |
| ipsecTrRemoteAddress The destination IP-address of this traffic entry. It maybe
either a single address, a network address (in
combination with ipsecTrDstMask), or the first address
of an address rang… | column | SNMPv2-SMIIpAddress | .0.7.1.7 |
| ipsecTrRemoteMaskLen The length of the network mask for a destination network. | column | Integer32 | .0.7.1.8 |
| ipsecTrRemoteRange The last address of a destination address range. If
this field is nonzero, the ipsecTrRemoteMaskLen field is
ignored and the source is considered as a range of
addresses beginning… | column | SNMPv2-SMIIpAddress | .0.7.1.9 |