CISCO-IP-PROTOCOL-FILTER-MIB Download
The MIB module is for management of information
to support packet filtering on IP protocols.
The cippfIpProfileTable allows users to create
delete, and get information about filter profiles.
Filter profiles are uniquely identified by the
profile names. Filter profiles can either be of
Simple or Extended usage types, and the usage type
cannot be changed once it has been created.
The cippfIfIpProfileTable applies the filtering
profiles to device interfaces running IP. A filter
profile can be applied to multiple interfaces.
The cippfIpFilterTable contains ordered lists of
IP filters for all the filtering profiles.
Filters and profiles are related if they are of
the same filter profile name. Filters can only
be created if their associated filter profiles
already exist in the cippfIpProfileTable.
Filters of the same profile name belongs to a
common profile.
The cippfIfIpProfileTable can be configured with
information independent from the other. However,
if the name of a profile in the cippfIfIpProfileTable
matches that of any profile in the
cippfIpProfileTable and the profile name of any
filter entry in the cippfIpFilterTable, the profile
is 'active' and the filter entry is being applied
to IP traffic passing through the attached device
interfaces. Therefore, any change to the filters
in the cippfIpFilterTable or the profile itself in
the cippfIpProfileTable will affect all the
attached interfaces.
IPHost Network Monitor offer an easy way of SNMP monitoring your Cisco Servers, Routers, Switches, Bridges,
Firewalls, Repeaters.
OID list for CISCO-IP-PROTOCOL-FILTER-MIB
- cippfIpProfileTable
- This table lists all the existing IP protocol filter profiles. These filter profiles contain protocol filters used to filter IP traffic through the device interfaces. The IP protocol filters associated with these profiles are defined in the cippfIpFilte ...
- cippfIpProfileEntry
- Each entry defines the type, state, and the last object index assigned to a filter of the filter profile.
- cippfIpProfileName
- This is the unique IP protocol filter profile identifier. If this value is the same as the cippfIpProfileName in the cippfIpFilterTable and the cippfIfIpProfileName in cippfIfIpFilterTable, they are all referring to the same filter profile.
- cippfIpProfileType
- This object determines the usage type this filter profile. This usage type cannot be changed after the profile has been created. The usage type simple(1) implies that the valid objects of each filter entry in the profile in the cippfIpFilterTable only in ...
- cippfIpProfileLastFilterIndex
- This value is the same as the last cippfIpFilterIndex value assigned to a filter of this profile.
- cippfIpProfileStatus
- This object controls and reflects the status of rows in this table. To create a filter profile of a particular usage type, the NMS must do a multivarbind set containing both cippfIpProfileStatus and cippfIpProfileType. Creation of rows must be done via ' ...
- cippfIfIpProfileTable
- This table lists all the IP protocol filter profiles being applied to IP traffic on the device interfaces. An IP protocol filter profile can be shared by multiple interfaces. The filter profiles are defined in the cippfIpProfileTable, and filters of the ...
- cippfIfIpProfileEntry
- Each entry attaches an IP traffic filter profile to a particular device interface and a specific traffic direction. The interface can be of any ifType supporting and running IP.
- cippfIfIpProfileDirection
- This object determines whether this filter profile is applied to inbound or outbound traffic of a particular interface. The possible value(s) are: inbound - inbound traffic. outbound - outbound traffic. inboundIPv6 - IPv6 inbound traffic. outbou ...
- cippfIfIpProfileName
- This is the unique IP protocol filter profile identifier. This value must be the same as one of the existing cippfIpProfileName object values in the cippfIpProfileTable for this profile and the cippfIfIpProfileStatus of value 'createAndGo' to become 'act ...
- cippfIfIpProfileStatus
- This object controls and reflects the status of rows in this table. To apply this filter profile or remove this filter profile, the NMS must do a multivarbind set containing both cippfIfIpProfileStatus and cippfIfIpProfileName. Creation of rows may be do ...
- cippfIpFilterTable
- This table contains ordered lists of filters for all the IP protocol filter profiles. Device traffic filtering system applies filters of a filter profile according to the filter order position. IP packets matching any filter will be processed according ...
- cippfIpFilterEntry
- Each entry is an IP Protocol traffic filter within an IP filter profile. Entries with the same cippfIpProfileName belong to the same IP filter profile.
- cippfIpFilterIndex
- This index uniquely identifies the IP protocol filters within this table and among all filter profiles. When a new filter is added and if this value is '0', the filter will be appended as the last entry for the corresponding profile in this table. For an ...
- cippfIpFilterOrderPosition
- This object is used to order the IP protocol filters within a filter profile. The filter with the lowest order position number is applied first, that is cippfIpFilterOrderPosition '1'. The order position number among all filters of a profile is always c ...
- cippfIpFilterAction
- If it is set to deny(1), all packets matching this filter will be discarded and scanning of the remainder of the filter list will be aborted. If it is set to permit(2), all packets matching this filter will be allowed for further bridging or routing proc ...
- cippfIpFilterAddressType
- This is the IP address type of for the cippfIpFilterSrcAddress, cippfIpFilterSrcMask, cippfIpFilterDestAddress, and cippfIpFilterDestMask.
- cippfIpFilterSrcAddress
- The source IP address to be matched for this filter. A value of zero causes all source address to match. The object value has to be consistent with the type specified in cippfIpFilterAddressType.
- cippfIpFilterSrcMask
- This is the wildcard mask for the cippfIpFilterSrcAddress bits that must match. 0 bits in the mask indicate the corresponding bits in the cippfIpFilterSrcAddress must match in order for the matching to be successful, and 1 bits are don't care bits in the ...
- cippfIpFilterDestAddress
- The destination IP address to be matched for this filter. A value of zero causes all source address to match. The object value has to be consistent with the type specified in cippfIpFilterAddressType.
- cippfIpFilterDestMask
- This is the wildcard mask for the cippfIpFilterDestAddress bits that must match. 0 bits in the mask indicate the corresponding bits in the cippfIpFilterDestAddress must match in order for the matching to be successful, and 1 bits are don't care bits in t ...
- cippfIpFilterProtocol
- This filter protocol object matches the Internet Protocol Number in the packets. These IP numbers are defined in the Network Working Group Request for Comments (RFC) documents. For example, Cisco commonly used protocol includes: 1 - Internet Control Mes ...
- cippfIpFilterSrcPortLow
- If cippfIpFilterProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer source port range that is to be matched, otherwise it is ignored during matching. This value must be equal to or less than the value specified for this entry ...
- cippfIpFilterSrcPortHigh
- If cippfIpFilterProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer source port range that is to be matched, otherwise it is ignored during matching. This value must be equal to or greater than the value specified for this en ...
- cippfIpFilterDestPortLow
- If cippfIpFilterProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer destination port range that is to be matched, otherwise it is ignored during matching. This value must be equal to or less than the value specified for this ...
- cippfIpFilterDestPortHigh
- If cippfIpFilterProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer destination port range that is to be matched, otherwise it is ignored during matching. This value must be equal to or greater than the value specified for th ...
- cippfIpFilterPrecedence
- The IP traffic precedence parameters in each packet are used to guide the selection of the actual service parameters when transmitting a datagram through a particular network. Most network treats high precedence traffic as more important than other traff ...
- cippfIpFilterTos
- This is the value to match to the Type of Service (TOS) of the packet. The TOS values ranges from '0' to '15'. The value '-1' matches any TOS value.
- cippfIpFilterLogEnabled
- This object specifies whether filtered packets will be logged by the filtering subsystem or not. If it is true(1), then all packets will be logged. If it is false(2), then no packet will be logged.
- cippfIpFilterStatus
- This object controls and reflects the status of rows in this table. Creation of rows must be done via 'createAndGo' and this object will become 'active' if the NMS performs a multivarbind set containing this object and the cippfIpFilterOrderPosition. Th ...
- cippfIpFilterICMPType
- This filter specifies the ICMP message type to be matched. Setting this object to '-1' will make the filtering match any ICMP message type.
- cippfIpFilterTCPEstablished
- This filter if 'true' specifies that for TCP protocol, in an established connection, a match occurs if the TCP datagram has the ACK,FIN,PSH,RST,SYN or URG control bits set. If 'false' a match will occur for any TCP datagram.
- cippfIpFilterFragments
- If 'true', this filter applies only to the second and further fragments of fragmented packets. If 'false', the filter will only match head fragments or unfragmented packets. Note: Second and subsequent fragments do not contain source or destination ports ...
- cippfIpFilterICMPCode
- This filter specifies the ICMP message code to be matched. Setting this object to '-1' will make the filtering match any ICMP code.
- cippfIpFilterSrcIPGroupName
- This object identifies the filter group containing information about source IP addresses and masks that need to be matched for this filter. This value must match an entry in cfgFilterGroupTable whose cfgFilterGroupType value is set to 'network' and must ...
- cippfIpFilterDstIPGroupName
- This object identifies the filter group containing information about destination IP addresses and masks that need to be matched for this filter. This value must match an entry in cfgFilterGroupTable whose cfgFilterGroupType value is set to 'network' and ...
- cippfIpFilterProtocolGroupName
- This object identifies the filter group containing information about internet protocol numbers. This value must match an entry in cfgFilterGroupTable whose cfgFilterGroupType value is set to 'service' and must match an entry in cfgFilterServiceGroupTable ...
- cippfIpFilterSrcServiceGroupName
- This object identifies the filter group containing information about port(TCP/UDP) numbers. This value must match an entry in cfgFilterGroupTable whose cfgFilterGroupType value is set to 'service' and must match an entry in cfgFilterServiceGroupTable. Th ...
- cippfIpFilterDstServiceGroupName
- This object identifies the filter group containing information about port(TCP/UDP) numbers. This value must match an entry in cfgFilterGroupTable whose cfgFilterGroupType value is set to 'service' and must match an entry in cfgFilterServiceGroupTable. Th ...
- cippfIpFilterICMPGroupName
- This object identifies the filter group containing information about ICMP message. This value must match an entry in cfgFilterGroupTable whose cfgFilterGroupType value is set to 'icmp' and must match an entry in cfgFilterICMPGroupTable. This object canno ...
- cippfIpFilterExtTable
- This table is an extension to cippfIpFilterTable. This table is used for configuring the objects that are used for reporting the information about filters and reporting the logs. These objects do not change the match criteria for the filter but assist in ...
- cippfIpFilterExtEntry
- An entry in filter extension table. Each entry contains information on the description of the filter and logging related objects.
- cippfIpFilterExtDescription
- This object is used for configuring description of the filter.
- cippfIpFilterExtLogLevel
- This object is used for specifying the log level (severity) used in syslog for this filter.
- cippfIpFilterExtLogInterval
- This object is used for configuring the time interval at which the syslog message for this filter to be generated.
- cippfIpFilterStatsTable
- This table defines a set of statistics related to packet filter. The statistics related to matched filters are available here.
- cippfIpFilterStatsEntry
- An entry in IP Filter stats table. An entry exists in this table for every entry in cippfIpFilterTable.
- cippfIpFilterHits
- This object specifies the number of packets that are matched the packet filter configuration in cippfIpFilterTable.
- ciscoIpProtocolFilteringGroup
- Configuration parameters for IP Protocol filters.
- ciscoIpProtocolFilterGroup2
- Configuration parameters for IP Protocol filters.
- ciscoIpProtocolFilterExtGroup
- Configuration parameters for logging packet filters.
- ciscoIpProtocolFilterObjectGroup
- Configuration parameters for filter groups in a protocol filter.
- ciscoIpProtocolFilterStatsGroup
- This is a group containing objects related to packet filter.
Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring network devices right now.
