ipPolicyControlCapabilitiesGeneral
POLICY-MIB ·
.1.3.6.1.4.1.81.36.3.1.8
Object
column
OctetString
Reports the Policy capabilities of the device.
Each bit in the string represents a capability/behavior. Value of '1' means that the behavior is supported. Value of '0' means that it's not supported.
Capability number indicates position in the string.
Divide by 8 to get byte number.
Modulo 8 to get bit number. 0 is LSB.
For example 17 is 3rd byte, 2 LSbit.
For example if the value of the mib is 05.FF.B7.05.80... then:
For example if the value of the mib is 05.FF.B7.05.80... then:
05 = 0000 0101 bits 0 to 7, bits 5 and 7 are set.
FF = 1111 1111 bits 8 to 15, all bits are set.
B7 = 1011 0111 bits 16 to 23, bits 16, 18-19, 21-23 are set.
05 = 0000 0101 bits 24 to 31, bits 29 and 31 are set.
80 = 1000 0000 bits 32 to 39, bit 32 is set.
0 - Support Cajun Rules - P333R, P333ML, P333RLB
1 - Default value of Cajun Rule support
2 - Default list is RW - 2
3 - Policy To Me (scope) - P333RLB
4 - Trust is a global parameter - old
5 - Trust is a per list parameter
6 - DSCP is a global parameter - old
7 - DSCP is a per list parameter
8 - Multiple policy interfaces (with Active lists) per device-X330WAN, Boxster, Cayenne
9 - Composite Operation Table - Add/Remove/Edit entries
10 - Composite Operation Permit/Deny
11 - Composite Operation Notify
12 - Composite Operation COS (802)
13 - Composite Operation DSCP (DSCP Coloring)
14 - Composite Operation Error Reply
15 - Support QoS lists - Boxster , Cayenne
16 - Supports ACL lists - Boxster , Cayenne
17 - Support Combined lists - P333R, P333RLB, P330ML, C460, P130, X330WAN
18 - ICMP Classification (ICMP code/type)
19 - Not Rules (Covers all relevant supported classification features)
20 - User group classification
21 - Options with basic operations (permit, deny, deny&Notify)
22 - Fragments with basic operations (permit, deny, deny&Notify)
23 - Simulate Support (covers all other supported features)
24 - Packet Counter Per rule - Cayenne
25 - Session Counter Per rule - Cayenne
26 - Auditing (log per rule) - Not supported yet.
27 - Statefull Inspection Firewall - Not supported yet.
28 - Combined list but QoS only operations - P130.
29 - Policy Based Routing
30 - Query results in distinct leafs (instead of ipPolicyQueryOperation)
31 - Crypto
32 - Support Copy List MIB, Fragment as key for IP rule and IP rule description.
In addition the DSCP field will be supported on QoS and ACL lists in addition
to PBR and Capture lists.
33 - Support MSS feature(ipPolicyRuleDoSClass).
Context
- MIB
- POLICY-MIB
- OID
.1.3.6.1.4.1.81.36.3.1.8- Type
- column
- Access
- readonly
- Status
- current
- Parent
- ipPolicyControlEntry
- Table
- ipPolicyControlTable
- Siblings
- 12
Syntax
OctetString
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ipPolicyControlSlot The EntID-id (AKA module-id / box number) to which this control entry
relates | column | Integer32 | .1.3.6.1.4.1.81.36.3.1.1 |
| ipPolicyControlCopyDestinationList Specify the destination list index for copy operation. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.81.36.3.1.10 |
| ipPolicyControlCopyOperation Copy operation and status of the copy operation.
idle(1)- R/O - Last Copy operation finished OK.
copy(2)- R/W - Activate the copy operation with the relevant source/destination
l… | column | Enumeration | .1.3.6.1.4.1.81.36.3.1.11 |
| ipPolicyControlCopyOperationLastStatus Copy operation status. | column | Enumeration | .1.3.6.1.4.1.81.36.3.1.12 |
| ipPolicyControlCopyOperationLastFailureDisplay Display string for each one of the errors. | column | OctetString | .1.3.6.1.4.1.81.36.3.1.13 |
| ipPolicyControlActiveGeneralList obsolete The ipPolicyListID of the Active general policy List on this EntID.
A value of Zero means there is no active list.
If the new list can not be activated the old list continues to b… | column | Integer32 | .1.3.6.1.4.1.81.36.3.1.2 |
| ipPolicyControlAllowedPolicyManagers Specify if who is allowed to configure policy on the device.
local - a local policy manager is allowed to configure
(using CLI or SNMP)
remote - A remote policy manger is allo… | column | Enumeration | .1.3.6.1.4.1.81.36.3.1.3 |
| ipPolicyControlCurrentChecksum Checksum of the entire CURRENT Policy Database including (but not
limited to) the following :
o ipPolicyControlActiveGeneralList
o ipPolicyControlAllowedPolicyManagers
o ipPolicy… | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.81.36.3.1.4 |
| ipPolicyControlMinimalPolicyManagmentVersion obsolete The minimal policy management version that this device inter operates
with as verified by actual testing.
For example: The P330R/340/130 shall return 1.1 (if test… | column | OctetString | .1.3.6.1.4.1.81.36.3.1.5 |
| ipPolicyControlMaximalPolicyManagmentVersion obsolete The maximal policy management version that this device inter operates
with as verified by actual testing.
For example: The P330R/340/130 shall return 1.1 (if testi… | column | OctetString | .1.3.6.1.4.1.81.36.3.1.6 |
| ipPolicyControlMIBversion The version of the Policy MIB supported by the module.
The format:
0.X.Y.Z
Example:
2.1.2 will be coded as:
0x00020102 | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.81.36.3.1.7 |
| ipPolicyControlCopySourceList Specify the source list index for copy operation. | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.81.36.3.1.9 |