hm2L3RuleParams
HM2-FW-MIB ·
.1.3.6.1.4.1.248.11.79.1.3.2.1.1.7
Object
column
r/w
OctetString
Additional parameters to this rule as string.
A parameter has the syntax:
<param>=<val>
Parameters are separated by a comma.
If more than one value is given for a parameter, values are
separated by a |-sign (pipe).
Following parameters are defined based on the different
protocols:
o icmp: type=<ICMP type> (specify ICMP type to filter)
code=<ICMP code> (specify ICMP code to filter)
o tcp: flags=<SYN/ACK/FIN> (apply to packets with given flags)
o general: state=<new/rel/est> (apply to packets according to
current state of connection>)
mac=<MAC> (specify source MAC address for this rule)
frag=<true/false> (apply to fragments)
Context
- MIB
- HM2-FW-MIB
- OID
.1.3.6.1.4.1.248.11.79.1.3.2.1.1.7- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- hm2L3RuleEntry
- Table
- hm2L3RuleTable
- Siblings
- 14
Syntax
OctetString
Values & Constraints
Object Constraints
range: 0-50
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| hm2L3RuleIndex Rule index of this L3 rule | column | Integer32 | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.1 |
| hm2L3Trap Set to true if application of this rule shall send a trap. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.10 |
| hm2L3RowStatus This is a standard row status value:
- active(1): The rule is active. Note that until committed, the rule
will not be applied. You cannot activate the rule
if an enforcer mapp… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.11 |
| hm2L3Description User defined textual description related to this rule. | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.12 |
| hm2DPIProfileIndex The index of the DPI profile this rule is assigned to
depending on enforcer action.
Value 0 no DPI profile this rule is assigned to.
You cannot assign the rule to an inactive prof… | column | Integer32 | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.13 |
| hm2L3ProtoName Following values are supported:
- Protocol name from hm2ProtocolTable
- icmp: internet control message protocol (RFC 792)
- igmp: internet group management protocol
- ipip: IP in … | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.14 |
| hm2L3AppRuleName Application rule name from hm2AppRuleTable | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.15 |
| hm2L3SourceAddress The source address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- Asset name from hm2AssetTable
… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.2 |
| hm2L3SourcePort The source port of the packet to reroute. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma … | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.3 |
| hm2L3TargetAddress The destination address of the packet to filter. Allowed formats are:
- keyword 'any'
- single address ('10.0.0.1')
- CIDR address range ('10.0.0.0/8')
- Asset name from hm2AssetT… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.4 |
| hm2L3TargetPort The destination port of the packet to. Allowed formats are:
- keyword 'any'
- single port ('10')
- port range with first and last port separated by hyphen
('10-15')
- comma sep… | column | OctetString | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.5 |
| hm2L3Proto The IP protocol (RFC 791) for protocol-independent
filtering. The following values are currently
supported:
o icmp(1): internet control message protocol (RFC 792)
o igmp(2): int… | column | Enumeration | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.6 |
| hm2L3Action The action of the corresponding rule:
o accept(1): Packets matching this rule are accepted and will
be forwarded
o drop(2): Packets matching this rule will be silently
disca… | column | Enumeration | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.8 |
| hm2L3Log Set to true if application of this rule shall be logged | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.248.11.79.1.3.2.1.1.9 |