localRulesStatusAction
MX-LFW-MIB ·
.0.2200.1.200.1.700
Object
column
Enumeration
Action
Action taken when this rule matches a packet.
Action can be one of the following:
* Accept: Let the packet through.
* Reject: Send back an ICMP port unreachable in response to
the matched packet, the packet is then dropped.
* Drop: The packet is dropped without any notification.
* RateLimitPerSource: Drop the packets received from a given
source IP address when it exceeds a configurable rate. The
rate is set using the RateLimitValue and
RateLimitTimePeriod parameters.
Note: This action is only allowed when the ConnectionState
parameter is set to 'New'.
Context
- MIB
- MX-LFW-MIB
- OID
.0.2200.1.200.1.700- Type
- column
- Access
- readonly
- Status
- current
- Parent
- localRulesStatusEntry
- Table
- localRulesStatusTable
- Siblings
- 9
Syntax
Enumeration
Values & Constraints
Enumerated Values
100 | accept |
200 | reject |
300 | drop |
400 | rateLimitPerSource |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| localRulesStatusPriority Rule priority
Unique identifier of the row in the table. | column | SNMPv2-SMIUnsigned32 | .0.2200.1.200.1.100 |
| localRulesStatusSourceAddress Source Address
Source address[/mask] criteria an incoming packet must have to
match this rule.
An empty string matches any address. | column | OctetString | .0.2200.1.200.1.200 |
| localRulesStatusSourcePort Source Port
Source port[-port] criteria an incoming packet must have to
match this rule.
MinPort-MaxPort specifies a port range.
An em… | column | OctetString | .0.2200.1.200.1.300 |
| localRulesStatusDestinationAddress Destination Address
Destination address[/mask] criteria an incoming packet must
have to match this rule.
An empty string matches any address. | column | OctetString | .0.2200.1.200.1.400 |
| localRulesStatusDestinationPort Destination Port
Destination port[-port] criteria an incoming packet must have
to match this rule.
MinPort-MaxPort specifies a port range.
… | column | OctetString | .0.2200.1.200.1.500 |
| localRulesStatusProtocol Protocol
Protocol criteria an incoming packet must have to match this
rule.
The protocol can be one of the following:
* All: Match p… | column | Enumeration | .0.2200.1.200.1.600 |
| localRulesStatusBlacklistEnable Blacklist Enable
Indicates if blacklisting is enabled for this rule.
* Enable: When a packet establishing a connection matches
this rule, the a… | column | MX-TCMxEnableState | .0.2200.1.200.1.620 |
| localRulesStatusRateLimitValue Rate Limit Value
Number of new connections allowed to match this rule from a
single source IP address within a certain time period. | column | Unsigned32 | .0.2200.1.200.1.650 |
| localRulesStatusRateLimitTimePeriod Rate Limit Time Period
The time period on which to base the rate limit. This period is
expressed in seconds.
Ex.: a RateLimitValue of 10 and a RateLi… | column | Unsigned32 | .0.2200.1.200.1.680 |