CISCO-IP-PROTOCOL-FILTER-MIB
65 objects
The MIB module is for management of information to support packet filtering on IP protocols. The cippfIpProfileTable allows users to create delete, and get information about filter profiles. Filter profiles are uniquely identified by the profile names. Filter profiles can either be of Simple or Extended usage types, and the usage type cannot be changed once it has been created. The cippfIfIpProfileTable applies the filtering profiles to device interfaces running IP. A filter profile can be applied to multiple interfaces. The cippfIpFilterTable contains ordered lists of IP filters for all the filtering profiles. Filters and profiles are related if they are of the same filter profile name. Filters can only be created if their associated filter profiles already exist in the cippfIpProfileTable. Filters of the same profile name belongs to a common profile. The cippfIfIpProfileTable can be configured with information independent from the other. However, if the name of a profile in the cippfIfIpProfileTable matches that of any profile in the cippfIpProfileTable and the profile name of any filter entry in the cippfIpFilterTable, the profile is 'active' and the filter entry is being applied to IP traffic passing through the attached device interfaces. Therefore, any change to the filters in the cippfIpFilterTable or the profile itself in the cippfIpProfileTable will affect all the attached interfaces.
Imported Objects
| CISCO-FILTER-GROUP-MIB | CfgFilterGroupName |
| CISCO-SMI | ciscoMgmt |
| CISCO-SYSLOG-MIB | SyslogSeverity |
| IF-MIB | ifIndex |
| INET-ADDRESS-MIB | InetAddress InetAddressType InetPortNumber |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMPv2-CONF | MODULE-COMPLIANCE OBJECT-GROUP |
| SNMPv2-SMI | Counter64 Integer32 MODULE-IDENTITY OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | RowStatus TEXTUAL-CONVENTION TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.9.9.278 | IdentityciscoIpProtocolMIB | The MIB module is for management of information to support packet filtering on IP protocols. The cippfIpProfileTable allows users to create delete, and get inf… | ||
| 1.3.6.1.4.1.9.9.278.0 | NodeciscoIpProtocolFilterMIBNotifs | |||
| 1.3.6.1.4.1.9.9.278.1 | NodeciscoIpProtocolFilterMIBObjects | |||
| 1.3.6.1.4.1.9.9.278.1.1 | NodecippfIpFilterConfig | |||
| 1.3.6.1.4.1.9.9.278.1.1.1 | TablecippfIpProfileTable | not-accessible | current | This table lists all the existing IP protocol filter profiles. These filter profiles contain protocol filters used to filter IP traffic through the device inte… |
| 1.3.6.1.4.1.9.9.278.1.1.1.1 | RowcippfIpProfileEntry | not-accessible | current | Each entry defines the type, state, and the last object index assigned to a filter of the filter profile. |
| 1.3.6.1.4.1.9.9.278.1.1.1.1.1 | ColumncippfIpProfileName | not-accessible | current | This is the unique IP protocol filter profile identifier. If this value is the same as the cippfIpProfileName in the cippfIpFilterTable and the cippfIfIpProfil… |
| 1.3.6.1.4.1.9.9.278.1.1.1.1.2 | ColumncippfIpProfileType | read-create | current | This object determines the usage type this filter profile. This usage type cannot be changed after the profile has been created. The usage type simple(1) impli… |
| 1.3.6.1.4.1.9.9.278.1.1.1.1.3 | ColumncippfIpProfileLastFilterIndex | read-only | current | This value is the same as the last cippfIpFilterIndex value assigned to a filter of this profile. |
| 1.3.6.1.4.1.9.9.278.1.1.1.1.4 | ColumncippfIpProfileStatus | read-create | current | This object controls and reflects the status of rows in this table. To create a filter profile of a particular usage type, the NMS must do a multivarbind set c… |
| 1.3.6.1.4.1.9.9.278.1.1.2 | TablecippfIfIpProfileTable | not-accessible | current | This table lists all the IP protocol filter profiles being applied to IP traffic on the device interfaces. An IP protocol filter profile can be shared by multi… |
| 1.3.6.1.4.1.9.9.278.1.1.2.1 | RowcippfIfIpProfileEntry | not-accessible | current | Each entry attaches an IP traffic filter profile to a particular device interface and a specific traffic direction. The interface can be of any ifType supporti… |
| 1.3.6.1.4.1.9.9.278.1.1.2.1.1 | ColumncippfIfIpProfileDirection | not-accessible | current | This object determines whether this filter profile is applied to inbound or outbound traffic of a particular interface. The possible value(s) are: inbound - in… |
| 1.3.6.1.4.1.9.9.278.1.1.2.1.2 | ColumncippfIfIpProfileName | read-create | current | This is the unique IP protocol filter profile identifier. This value must be the same as one of the existing cippfIpProfileName object values in the cippfIpPro… |
| 1.3.6.1.4.1.9.9.278.1.1.2.1.3 | ColumncippfIfIpProfileStatus | read-create | current | This object controls and reflects the status of rows in this table. To apply this filter profile or remove this filter profile, the NMS must do a multivarbind … |
| 1.3.6.1.4.1.9.9.278.1.1.3 | TablecippfIpFilterTable | not-accessible | current | This table contains ordered lists of filters for all the IP protocol filter profiles. Device traffic filtering system applies filters of a filter profile accor… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1 | RowcippfIpFilterEntry | not-accessible | current | Each entry is an IP Protocol traffic filter within an IP filter profile. Entries with the same cippfIpProfileName belong to the same IP filter profile. |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.1 | ColumncippfIpFilterIndex | not-accessible | current | This index uniquely identifies the IP protocol filters within this table and among all filter profiles. When a new filter is added and if this value is '0', th… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.2 | ColumncippfIpFilterOrderPosition | read-create | current | This object is used to order the IP protocol filters within a filter profile. The filter with the lowest order position number is applied first, that is cippfI… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.3 | ColumncippfIpFilterAction | read-create | current | If it is set to deny(1), all packets matching this filter will be discarded and scanning of the remainder of the filter list will be aborted. If it is set to p… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.4 | ColumncippfIpFilterAddressType | read-create | current | This is the IP address type of for the cippfIpFilterSrcAddress, cippfIpFilterSrcMask, cippfIpFilterDestAddress, and cippfIpFilterDestMask. |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.5 | ColumncippfIpFilterSrcAddress | read-create | current | The source IP address to be matched for this filter. A value of zero causes all source address to match. The object value has to be consistent with the type sp… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.6 | ColumncippfIpFilterSrcMask | read-create | current | This is the wildcard mask for the cippfIpFilterSrcAddress bits that must match. 0 bits in the mask indicate the corresponding bits in the cippfIpFilterSrcAddre… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.7 | ColumncippfIpFilterDestAddress | read-create | current | The destination IP address to be matched for this filter. A value of zero causes all source address to match. The object value has to be consistent with the ty… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.8 | ColumncippfIpFilterDestMask | read-create | current | This is the wildcard mask for the cippfIpFilterDestAddress bits that must match. 0 bits in the mask indicate the corresponding bits in the cippfIpFilterDestAdd… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.9 | ColumncippfIpFilterProtocol | read-create | current | This filter protocol object matches the Internet Protocol Number in the packets. These IP numbers are defined in the Network Working Group Request for Comments… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.10 | ColumncippfIpFilterSrcPortLow | read-create | current | If cippfIpFilterProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer source port range that is to be matched, otherwise it is ignor… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.11 | ColumncippfIpFilterSrcPortHigh | read-create | current | If cippfIpFilterProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer source port range that is to be matched, otherwise it is ignor… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.12 | ColumncippfIpFilterDestPortLow | read-create | current | If cippfIpFilterProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer destination port range that is to be matched, otherwise it is … |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.13 | ColumncippfIpFilterDestPortHigh | read-create | current | If cippfIpFilterProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer destination port range that is to be matched, otherwise it is … |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.14 | ColumncippfIpFilterPrecedence | read-create | current | The IP traffic precedence parameters in each packet are used to guide the selection of the actual service parameters when transmitting a datagram through a par… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.15 | ColumncippfIpFilterTos | read-create | current | This is the value to match to the Type of Service (TOS) of the packet. The TOS values ranges from '0' to '15'. The value '-1' matches any TOS value. |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.16 | ColumncippfIpFilterLogEnabled | read-create | current | This object specifies whether filtered packets will be logged by the filtering subsystem or not. If it is true(1), then all packets will be logged. If it is fa… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.17 | ColumncippfIpFilterStatus | read-create | current | This object controls and reflects the status of rows in this table. Creation of rows must be done via 'createAndGo' and this object will become 'active' if the… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.18 | ColumncippfIpFilterICMPType | read-create | current | This filter specifies the ICMP message type to be matched. Setting this object to '-1' will make the filtering match any ICMP message type. |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.19 | ColumncippfIpFilterTCPEstablished | read-create | current | This filter if 'true' specifies that for TCP protocol, in an established connection, a match occurs if the TCP datagram has the ACK,FIN,PSH,RST,SYN or URG cont… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.20 | ColumncippfIpFilterFragments | read-create | current | If 'true', this filter applies only to the second and further fragments of fragmented packets. If 'false', the filter will only match head fragments or unfragm… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.21 | ColumncippfIpFilterICMPCode | read-create | current | This filter specifies the ICMP message code to be matched. Setting this object to '-1' will make the filtering match any ICMP code. |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.22 | ColumncippfIpFilterSrcIPGroupName | read-create | current | This object identifies the filter group containing information about source IP addresses and masks that need to be matched for this filter. This value must mat… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.23 | ColumncippfIpFilterDstIPGroupName | read-create | current | This object identifies the filter group containing information about destination IP addresses and masks that need to be matched for this filter. This value mus… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.24 | ColumncippfIpFilterProtocolGroupName | read-create | current | This object identifies the filter group containing information about internet protocol numbers. This value must match an entry in cfgFilterGroupTable whose cfg… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.25 | ColumncippfIpFilterSrcServiceGroupName | read-create | current | This object identifies the filter group containing information about port(TCP/UDP) numbers. This value must match an entry in cfgFilterGroupTable whose cfgFilt… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.26 | ColumncippfIpFilterDstServiceGroupName | read-create | current | This object identifies the filter group containing information about port(TCP/UDP) numbers. This value must match an entry in cfgFilterGroupTable whose cfgFilt… |
| 1.3.6.1.4.1.9.9.278.1.1.3.1.27 | ColumncippfIpFilterICMPGroupName | read-create | current | This object identifies the filter group containing information about ICMP message. This value must match an entry in cfgFilterGroupTable whose cfgFilterGroupTy… |
| 1.3.6.1.4.1.9.9.278.1.1.4 | TablecippfIpFilterExtTable | not-accessible | current | This table is an extension to cippfIpFilterTable. This table is used for configuring the objects that are used for reporting the information about filters and … |
| 1.3.6.1.4.1.9.9.278.1.1.4.1 | RowcippfIpFilterExtEntry | not-accessible | current | An entry in filter extension table. Each entry contains information on the description of the filter and logging related objects. |
| 1.3.6.1.4.1.9.9.278.1.1.4.1.1 | ColumncippfIpFilterExtDescription | read-create | current | This object is used for configuring description of the filter. |
| 1.3.6.1.4.1.9.9.278.1.1.4.1.2 | ColumncippfIpFilterExtLogLevel | read-create | current | This object is used for specifying the log level (severity) used in syslog for this filter. |
| 1.3.6.1.4.1.9.9.278.1.1.4.1.3 | ColumncippfIpFilterExtLogInterval | read-create | current | This object is used for configuring the time interval at which the syslog message for this filter to be generated. |
| 1.3.6.1.4.1.9.9.278.1.2 | NodecippfIpFilterStats | |||
| 1.3.6.1.4.1.9.9.278.1.2.1 | TablecippfIpFilterStatsTable | not-accessible | current | This table defines a set of statistics related to packet filter. The statistics related to matched filters are available here. |
| 1.3.6.1.4.1.9.9.278.1.2.1.1 | RowcippfIpFilterStatsEntry | not-accessible | current | An entry in IP Filter stats table. An entry exists in this table for every entry in cippfIpFilterTable. |
| 1.3.6.1.4.1.9.9.278.1.2.1.1.1 | ColumncippfIpFilterHits | read-only | current | This object specifies the number of packets that are matched the packet filter configuration in cippfIpFilterTable. |
| 1.3.6.1.4.1.9.9.278.2 | NodeciscoIpProtocolFilterMIBConform | |||
| 1.3.6.1.4.1.9.9.278.2.1 | NodeciscoIpProtocolFilterMIBCompl | |||
| 1.3.6.1.4.1.9.9.278.2.1.1 | ComplianceciscoIpProtocolMIBCompliance | deprecated | The compliance statement for entities implementing the Cisco IP Protocol Filter MIB. OBJECT cippfIpFilterAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIP… | |
| 1.3.6.1.4.1.9.9.278.2.1.2 | ComplianceciscoIpProtocolMIBComplianceRev1 | read-only | deprecated | The compliance statement for entities implementing the Cisco IP Protocol Filter MIB. OBJECT cippfIpFilterAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIP… |
| 1.3.6.1.4.1.9.9.278.2.1.3 | ComplianceciscoIpProtocolMIBComplianceRev2 | read-only | current | The compliance statement for entities implementing the Cisco IP Protocol Filter MIB. |
| 1.3.6.1.4.1.9.9.278.2.2 | NodeciscoIpProtocolFilterMIBGroups | |||
| 1.3.6.1.4.1.9.9.278.2.2.1 | GroupciscoIpProtocolFilteringGroup | current | Configuration parameters for IP Protocol filters. | |
| 1.3.6.1.4.1.9.9.278.2.2.2 | GroupciscoIpProtocolFilterGroup2 | current | Configuration parameters for IP Protocol filters. | |
| 1.3.6.1.4.1.9.9.278.2.2.4 | GroupciscoIpProtocolFilterExtGroup | current | Configuration parameters for logging packet filters. | |
| 1.3.6.1.4.1.9.9.278.2.2.5 | GroupciscoIpProtocolFilterObjectGroup | current | Configuration parameters for filter groups in a protocol filter. | |
| 1.3.6.1.4.1.9.9.278.2.2.6 | GroupciscoIpProtocolFilterStatsGroup | current | This is a group containing objects related to packet filter. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| CippfIpFilterProfileName | OCTET STRING (SIZE (1..64)) | current | Objects defined with this textual convention are used to identify IP protocol filter profiles. The object value shall be an alphanumeric string. |