hm2DynFwRuleParams
HM2-FW-MIB ·
.1.3.6.1.4.1.248.11.79.1.2.2.1.1.7
Object
column
r/w
OctetString
Additional parameters to this rule as string.
A parameter has the syntax:
<param>=<val>
Parameters are separated by a comma.
If more than one value is given for a parameter, values are
separated by a |-sign
Following paramters are defined based on the different
protocols:
o icmp: type=<ICMP type> (specify ICMP type to filter)
code=<ICMP code> (specify ICMP code to filter)
o tcp: frag=<true/false> (apply to fragments)
flags=<SYN/ACK/FIN> (apply to packets with give flags
o udp/tcp: state=<new/rel/est> (apply to packets according
current state of connection>
o general: mac=<MAC> (specify source MAC address for this
rule)
Context
- MIB
- HM2-FW-MIB
- OID
.1.3.6.1.4.1.248.11.79.1.2.2.1.1.7- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- hm2DynFwRuleEntry
- Table
- hm2DynFwRuleTable
- Siblings
- 11
Syntax
OctetString
Values & Constraints
Object Constraints
range: 0-50
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| hm2DynFwRuleIndex Rule index of this dynamic firewall rule | column | Integer32 | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.1 |
| hm2DynFwTrap Set to true if application of this rule shall send a trap. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.10 |
| hm2DynFwRowStatus This is a standard row status value:
- active(1): The rule is active. Note that until committed, the rule
will not be applied.
- notInService(2): The rule is inactive because of… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.11 |
| hm2DynFwDescription User defined textual description related to this rule. | column | OctetString | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.12 |
| hm2DynFwSourceAddress The source address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- netobject ('$name') | column | OctetString | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.2 |
| hm2DynFwSourcePort The source port of the packet to filter. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma s… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.3 |
| hm2DynFwTargetAddress The destination address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- netobject ('$name') | column | OctetString | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.4 |
| hm2DynFwTargetPort The destination port of the packet to filter. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- co… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.5 |
| hm2DynFwProto The IP protocol (RFC 791) for protocol-independent
filtering. The following values are currently
supported:
o icmp(1): internet control message protocol (RFC 792)
o igmp(2): int… | column | Enumeration | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.6 |
| hm2DynFwAction The action of the corresponding rule:
o accept(1): Packets matching this rule are accepted and will
be forwarded
o drop(2): Packets matching this rule will be silently
disca… | column | Enumeration | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.8 |
| hm2DynFwLog Set to true if application of this rule shall be logged | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.248.11.79.1.2.2.1.1.9 |