hm2L3Action
HM2-FW-MIB ·
.1.3.6.1.4.1.248.11.79.1.3.2.1.1.8
Object
column
r/w
Enumeration
The action of the corresponding rule: o accept(1): Packets matching this rule are accepted and will be forwarded o drop(2): Packets matching this rule will be silently discarded o reject(3): Packets matching this rule will be dropped and the originator gets informed by an ICMP message o enforce-modbus(4): Packets matching this rule are enforced by modbus enforcer and will be forwarded or discarded. The selected protocol should be tcp or udp o enforce-opc(5): Packets matching this rule are enforced by opc enforcer and will be forwarded or discarded. The selected protocol should be tcp o enforce-iec104(6): Packets matching this rule are enforced by IEC104 enforcer and will be forwarded or discarded. The selected protocol should be tcp o enforce-ethernetip(7): Packets matching this rule are enforced by EtherNet/IP enforcer and will be forwarded or discarded. The selected protocol should be tcp o enforce-dnp3(8): Packets matching this rule are enforced by dnp3 enforcer and will be forwarded or discarded. The selected protocol should be tcp
Context
- MIB
- HM2-FW-MIB
- OID
.1.3.6.1.4.1.248.11.79.1.3.2.1.1.8- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- hm2L3RuleEntry
- Table
- hm2L3RuleTable
- Siblings
- 14
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | accept |
2 | drop |
3 | reject |
4 | enforce-modbus |
5 | enforce-opc |
6 | enforce-iec104 |
7 | enforce-ethernetip |
8 | enforce-dnp3 |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| hm2L3RuleIndex Rule index of this L3 rule | column | Integer32 | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.1 |
| hm2L3Trap Set to true if application of this rule shall send a trap. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.10 |
| hm2L3RowStatus This is a standard row status value:
- active(1): The rule is active. Note that until committed, the rule
will not be applied. You cannot activate the rule
if an enforcer mapp… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.11 |
| hm2L3Description User defined textual description related to this rule. | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.12 |
| hm2DPIProfileIndex The index of the DPI profile this rule is assigned to
depending on enforcer action.
Value 0 no DPI profile this rule is assigned to.
You cannot assign the rule to an inactive prof… | column | Integer32 | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.13 |
| hm2L3ProtoName Following values are supported:
- Protocol name from hm2ProtocolTable
- icmp: internet control message protocol (RFC 792)
- igmp: internet group management protocol
- ipip: IP in … | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.14 |
| hm2L3AppRuleName Application rule name from hm2AppRuleTable | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.15 |
| hm2L3SourceAddress The source address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- Asset name from hm2AssetTable
… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.2 |
| hm2L3SourcePort The source port of the packet to reroute. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma … | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.3 |
| hm2L3TargetAddress The destination address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- Asset name from hm2AssetT… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.4 |
| hm2L3TargetPort The destination port of the packet to. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma sep… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.5 |
| hm2L3Proto The IP protocol (RFC 791) for protocol-independent
filtering. The following values are currently
supported:
o icmp(1): internet control message protocol (RFC 792)
o igmp(2): int… | column | Enumeration | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.6 |
| hm2L3RuleParams Additional parameters to this rule as string.
A parameter has the syntax:
<param>=<val>
Parameters are separated by a comma.
If more than one value is given for a param… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.7 |
| hm2L3Log Set to true if application of this rule shall be logged | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.9 |