BIANCA-BRICK-IP-MIB: View SNMP OID List / Download MIB

The ipExtIfTable contains extended information related to IP and the interfaces found on the system. Entries can only be added or deleted by the system.

Unique interface index

specifies which versions of RIP messages are sent to that interface. Usually RIP messages are sent as broadcast, except this object is set to ripV2mcast. In this case RIP V2 messages are sent to the multicast address 224.0.0.9 . Enumeration: 'both': 3, 'none': 4, 'ripV2mcast': 5, 'ripV2': 2, 'ripV1': 1.

specifies which versions of RIP messages are accepted from that interface. RIP V2 messages are received regardless if they are sent as broadcast or multicast. Enumeration: 'both': 3, 'none': 4, 'ripV2': 2, 'ripV1': 1.

Switch for Proxy ARP on this interface. Enumeration: 'on': 2, 'off': 1, 'up-only': 3.

This object can be used to switch NAT on and off for a specific interface. Enumeration: 'on': 2, 'off': 1, 'reverse': 3.

This object specifies, wether entries in the IpNatTable shall be removed, when TCP-FINS have been received and acknowledged in both directions, a TCP-RST has been received or a ICMP-ERROR message has been received for the entry. Enumeration: 'yes': 2, 'no': 1.

TCP NAT entries vanish unconditionally after not being used for the amount of time specified by this object in seconds.

Non-TCP NAT entries vanish unconditionally after not being used for the amount of time specified by this object in seconds.

This object can be used to switch the outgoing address translation off. Then, all addresses are passed instead of being translated. The session mechanism remains active and implements a security mechanism. Enumeration: 'on': 1, 'off': 2.

Switch for accounting on the specified interface. An IP packet is being accounted, when this object is set to on for either the source or the destination interface. Enumeration: 'on': 2, 'off': 1.

Switch for TCP spoofing on this interface. TCP keepalive polls are answered by the BRICK to prevent unnecessary ISDN connections. Set this object to on for ISDN dialup interfaces. Enumeration: 'on': 2, 'off': 1.

This object describes the action, that is done, when a packet received from the interface has been filtered out. When set to ignore, no action takes place. When set to refuse, an ICMP unreachable message is being sent to the originator of the packet. Enumeration: 'ignore': 1, 'refuse': 2.

This object specifies, how a packed filtered by accesslists should be logged. When set to none, no logging takes place. When set to info, protocol, ip-addresses and portnumbers are logged. When set to dump, a dump of the first 64 bytes of the packet will be written to the syslog table. Enumeration: 'info': 2, 'none': 1, 'dump': 3.

Configure the OSPF status of this interface. Routing information about routes on passive and active interfaces is propagated on active interfaces. Only active interfaces run the OSPF protocol. When set to off the interface and its associated routes are invisible to the OSPF protocol. Enumeration: 'passive': 1, 'active': 2, 'off': 3.

Configure the metric calculation of OSPF interfaces. If set to auto the metric is calculated based on ifSpeed. If set to fixed the metric is taken from the ospfIfMetricTable. Additionaly the metric adjustment for dialup interfaces can be configured. If set to auto-adjust or fixed-adjust the basic metric value is reduced if the operational status of the dialup interface is up. Enumeration: 'auto': 1, 'fixed': 2, 'auto-adjust': 3, 'fixed-adjust': 4.

Enable or disable the TCP checksum check for local packets received on the corresponding interface. Disabling the check may improve performance for some local applications (i.e. remote CAPI). This object should only be set to dont-check on interfaces for LANs without further routers. Packets received from routers may have a corrupted TCP checksum and TCP will no longer be able to detect those packets. The TCP checksum must be checked by the receiving TCP under any circumstances, when TCP header compression is used on any router. Enumeration: 'dont-check': 2, 'check': 1.

This object activates an additional check for incoming packets. If set to on, incoming packets are only accepted if return packets sent back to their source IP address would be sent over the same interface. This prevents packets being passed from untrusted interfaces to this interface. Enumeration: 'on': 2, 'off': 1.

This object defines the index of the first access rule that is applied for incoming packets. If set to 0 or if there is no access rule with this index no access rules are applied for this interface.

This object defines the authentication scheme used for incoming packets. Enumeration: 'off': 1, 'securID': 2.

This object defines the authentication mode. If set to strict each source IP address must be authenticated. If set to loose all source IP addresses are allowed if at least one IP address is successfully authenticated. Enumeration: 'strict': 1, 'loose': 2.

This object defines the time in seconds a successful authentication is valid since the IP partner was authenticated.

This object defines the period between short authentications that are invisible to the user

This object defines the condition when routes on this interface are propagated by routing protocols. If set to up-only routes are only propagated if the operational status of the interface is up. If set to up-dormant routes are propagated if the status is up or dormant. If set to always routes are propagated independent of the operational status. Enumeration: 'up-only': 1, 'up-dormant': 2, 'always': 3.

This object defines different modes used for fragmentation of IP datagrams greater than the MTU of the destination interface. If set to enabled (1) each IP datagram will be splitted into a first fragment MTU sized and the last one smaller than the first. If set to disabled (2) an ICMP unreachable message will be performed. The equal (3) mode defines a fragmentation technique wich generates fragments having approximately the same size whereon the reverse (4) mode starts with a small fragment followed by MTU sized fragment(s). Enumeration: 'disabled': 2, 'enabled': 1, 'equal': 3, 'reverse': 4.

This object enables or disables rerouting on this interface. The default value is enabled. If set to disabled, then only the better one route from two or more possible routes is chosen, even if the ifOperStatus of the interface for this route is dormant. Enumeration: 'disabled': 2, 'enabled': 1.

This object defines the index of the first rule used for Bandwidth on Demand (BOD) that is applied for incoming and/or outgoing traffic. If set to 0 or if there is no entry in the ipBodRuleTable with this index no BOD-specific information is applied for this interface.

This object defines the index of the first rule used for Qos (Qualtiy of Service) rules applied for IP traffic. If set to 0 or if there is no entry in the ipQoSTable with this index no QoS-specific information is applied for this interface.

This object determines, whether packets which are en- or decapsulated by IPSec should be accounted with encapsulation header(ipsec) or without the encapsulation header (clear), or even twice (both). Enumeration: 'both': 3, 'clear': 2, 'ipsec': 1.

Enable that multicast frames are accepted from that interface. Enumeration: 'on': 2, 'off': 1.

This object specifies - if NAT is enabled (see ipExtIfNat) - wether incoming IP packets not passed by the NAT barrier should answered with an ICMP Host Unreachable or TCP RST message addressed to to packet originator. If set to enabled(2), such incoming IP packets will be silently discarded. Enumeration: 'disabled': 1, 'enabled': 2.

The ipExtRtTable can be used in addition (not instead of) to the ipRouteTable to specify routing of IP datagrams. The selection of datagram-types is more specific with the ipExtRtTable, so routing of different services over different pathes is possible. The specification of local IP-addresses is not possible in the ipExtRtTable. The ipExtRtTable will be searched before the ipRouteTable. If a matching entry is found, it will be taken for routing and no further lookup in the ipRouteTable will happen.

Each entry in the ipExtRtTable describes a set of IP datagrams and the destination interface for that set. Metric parameters allow for ordering of the different specifications for overlapping sets.

This object specifies the value of the protocolfield in the ip header for all IP-datagrams belonging to the set. If this object is set to dont-verify, the value of the protocol field is not specified and can take any value. Enumeration: 'udp': 17, 'l2tp': 115, 'ggp': 3, 'igrp': 88, 'esp': 50, 'ah': 51, 'egp': 8, 'hmp': 20, 'tcp': 6, 'xns-idp': 22, 'gre': 47, 'ospf': 89, 'rsvp': 46, 'dont-verify': 256, 'icmp': 1, 'pup': 12, 'rdp': 27.

This object specifies the source index of the IP-datagrams. If this object has a value other than 0, only datagrams received over the interface with the appropriate interface index are considered to be part of the set. If this object is set to 0, the source interface index for the datagrams belonging to the set is not specified.

This object describes together with ipExtRtSrcMask the range of the source-addresses of the IP-datagrams belonging to the set. If both objects are set to 0.0.0.0 the source- addresses for the datagrams in the set is not specified and can take any value.

This object describes together with ipExtRtSrcAddr the range of the source-addresses of the IP-datagrams belonging to the set. If both objects are set to 0.0.0.0 the source- addresses for the datagrams in the set is not specified and can take any value.

This object describes together with ipExtRtSrcPortRange the range of source portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the source portnumber is not specified and can take any value.

This object describes together with ipExtRtSrcPort the range of source portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the source portnumber is not specified and can take any value.

This object describes together with ipExtRtDstMask the range of the target-addresses of the IP-datagrams belonging to the set. If both objects are set to 0.0.0.0 the target- addresses for the datagrams in the set is not specified and can take any value.

This object describes together with ipExtRtDstAddr the range of the target-addresses of the IP-datagrams belonging to the set. If both objects are set to 0.0.0.0 the target- addresses for the datagrams in the set is not specified and can take any value.

This object describes together with ipExtRtDstPortRange the range of target-portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the target portnumber is not specified and can take any value.

This object describes together with ipExtRtDstPort the range of target-portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the target portnumber is not specified and can take any value.

This object describes together with ipExtRtTosMask the range of the Type of Service field (TOS) in the IP-header of the IP-datagrams belonging to the set. A TOS value is considered within the range, when the following equation is valid: (tos & ipExtRtTosMask) == (ipExtRtTos & ipExtRtTosMask) If both objects are set to 0 the TOS value of the datagrams in the set is not specified and can take any value.

This object describes together with ipExtRtTos the range of the Type of Service field (TOS) in the IP-header of the IP-datagrams belonging to the set. A TOS value is considered within the range, when the following equation is valid: (tos & ipExtRtTosMask) == (ipExtRtTos & ipExtRtTosMask) If both objects are set to 0 the TOS value of the datagrams in the set is not specified and can take any value.

This object describes different behavior depending on the ifOperStatus of the destination interface: dialup-wait: The route matches, when the ifOperStatus of the destination interface is either up or dormant. If the status is dormant, the ifAdminStatus is set to dialup to bring the interface to the up state. The datagram will wait until the ifOperStatus reaches the up state. For all other states, the routing tables will be searched for a different matching entry. dialup-continue: The route matches, if the ifOperStatus of the destination interface is up. For all other states, the routing tables are searched for different matching entry. However, if the ifOperStatus was dormant, the ifAdminStatus will be set to dialup to bring the interface to the up state. This setting can be used to establish a better path for a specific service and to use an existing path for that service as long as the better path could not be established. up-only: The route matches, if the ifOperStatus of the destination interface is up. For all other states, the routing tables are searched for different matching entry. always: The route matches independantly of the ifOperStatus of the destination interface. If it is up, the interface is used. If the state is dormant, ifAdminStatus is set to dialup to bring the interface in the up state. For all other states, the destination is considered unreachable. Enumeration: 'up-only': 3, 'dialup-wait': 1, 'dialup-continue': 2, 'always': 4.

This object specifies the destination interface for the IP-datagrams belonging to the set. If the value of this object is set to 0, the datagrams of the set are discarded and an ICMP destination unreachable datagram is sent back to the originator.

This object is used on point-to-multipoint interfaces with indirect routes (see ipExrRtType) to specify the IP-address of the gateway on the network, where the datagram should be routed to.

This object specifies, on point-to-multipoint interface wether the datagram shall be sent to the destination IP address in the IP datagram header (direct) or to a gateway (indirect). In the later case, the IP-addres of the gateway is specified by ipExtRtNextHop. If this object is set to other, the entry is not used for routing. The complete entry can also be deleted, by setting this object to invalid. Enumeration: 'indirect': 4, 'other': 1, 'direct': 3, 'invalid': 2.

This object is used to specify an order on the entries in the ipExtRtTable. If a datagram is matching multiple entries, the entry with the lowest value of ipExtRtMetric1 is choosen. The decision is undefined, when even after interpreting the metric, there are still multiple entries matching the IP-datagram.

Undefined yet; for further extension

Undefined yet; for further extension

Undefined yet; for further extension

Undefined yet; for further extension

This object describes, how the route has been gained. This will normaly be netmgmt, because there is currently no routing protocol, that is able to handle extended routes. Enumeration: 'bgp': 14, 'bbnSpfIgp': 12, 'ggp': 6, 'ospf': 13, 'egp': 5, 'rip': 8, 'es-is': 10, 'ciscoIgrp': 11, 'other': 1, 'is-is': 9, 'icmp': 4, 'local': 2, 'hello': 7, 'netmgmt': 3.

This object specifies the age of the route.

If NAT is switched on for an interface, this table contains an entry for each session running over the interface. Table entries are creates by the system whenever a valid session is established. A session may be either a tcp connection, a udp connection or an icmp connection with icmp-echo messages (ping). A valid session is either an outgoing session or an incoming session specified in the ipNatPresetTable. Everything behind an interface with NAT enabled is called outside. The BRICK itself and all networks connected to it via interfaces without NAT are called inside. Table entries are removed after timeout. This timeout is specified by ipExtIfNatOtherTimeout for UDP and ICMP sessions. specified by ipExtIfTcpTimeout for TCP sessions 16 seconds for closed TCP-sessions (FIN has been received and acknowledged in both directions.

This object specifies the interface, for which the session is monitored.

This object specifies the protocol, the session is using. The value icmp specifies an icmp-echo (ping) session. ICMP error messages are processed by the appropriate tcp or udp session. Enumeration: 'udp': 17, 'esp': 50, 'ah': 51, 'tcp': 6, 'gre': 47, 'l2tp': 115, 'icmp': 1, 'ospf': 89.

This object specifies the internal local IP Address used for the session. The internal address is only visible to inside networks and is translated to the external address, when a packet is being sent outside.

This object specifies the internal local portnumber used for the session. The internal portnumber is only visible to inside networks and is translated to the external portnumber whenever a packet is being sent outside.

This object specifies the external local address used for the session. This address is visible outside only and will be translated to the internal address, whenever a packet is received from outside.

This object specifies the external local portnumber used for the session. This address is visible outside only and is translated to the internal portnumber, whenever a packet is received from outside.

This object specifies the remote IP-address used for the session. This is an outside address. However, it is visible to outside networks and also to inside networks.

This object specifies the remote portnumber used for the session. This is an outside portnumber. However, it is visible to outside networks and also to inside networks.

This object specifies, whether the session is incoming (from outside to inside) or outgoing (from inside to outside). Enumeration: 'outgoing': 2, 'incoming': 1.

This object specifies how long no packet has been transferred for the session and is used internally for timeout purposes.

This table specifies the IP addresses and port numbers for sessions requested from outside. If this table is empty and NAT is enabled, only packets for sessions initiated from inside are forwarded. The IP address and the port number of the internal server can be specified individually for each combination of - protocol (udp/tcp/icmp) - initiating hosts IP address (RemoteAddr, RemoteMask) - called hosts IP address (ExtAddr, ExtMask) - called port number (ExtPort, ExtPortRange) Entries in the table are created and removed manually by network management.

This object specifies the interface index, for which the table entry shall be valid. If set to 0, the entry will be valid for all interfaces configured to use NAT.

This object specifies the protocol, for which the table entry shall be valid. Enumeration: 'udp': 17, 'esp': 50, 'ah': 51, 'tcp': 6, 'gre': 47, 'l2tp': 115, 'ipinip': 94, 'icmp': 1, 'ospf': 89, 'delete': 256.

This object specifies together with ipNatPrRemoteMask the the set of IP addresses of remote hosts initiating the connection. The table entry will be valid for an incoming call, when the IP adress of the remote host initiating the connection lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for any remote host.

This object specifies together with ipNatPrRemoteAddr the the set of IP addresses of remote hosts initiating the connection. The table entry will be valid for an incoming call, when the IP adress of the remote host initiating the connection lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for any remote host.

This object specifies together with ipNatPrExtMask the the set of called IP addresses, for which the table entry shall be valid. The entry is valid, if the called IP address of an incoming calls setup packet lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for any called IP address.

This object specifies together with ipNatPrExtAddr the the set of called IP addresses, for which the table entry shall be valid. The entry is valid, if the called IP address of an incoming calls setup packet lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for any called IP address.

This object specifies together with ipNatPrExtPortRange the range of portnumbers for incoming call, for which the table entry shall be valid. If both objects are set to -1, the entry is valid for all portnumbers. If ipNatPrPortRange is set to -1, the entry is only valid, when the called portnumber of an incoming call is equal to ipNatPrExtPort. Otherwise, the entry is valid, if the called portnumber lies in the range ExtPort .. ExtPortRange.

This object specifies together with ipNatPrExtPort the range of portnumbers for incoming call, for which the table entry shall be valid. If both objects are set to -1, the entry is valid for all portnumbers. If ipNatPrPortRange is set to -1, the entry is only valid, when the called portnumber of an incoming call is equal to ipNatPrExtPort. Otherwise, the entry is valid, if the called portnumber lies in the range ExtPort .. ExtPortRange.

This object specifies the internal target hosts IP address for incoming calls matching the table entry. An incoming call matching this entry will be routed to the internal server specified by this object. If this object is set to 0.0.0.0 the target host will be the original target host in the incoming calls setup packet. No translation of the IP-addresses take place in this case.

This object specifies the internal target hosts port-number for incoming calls matching the table entry. If this object is set to -1, the target portnumber will be taken from the original incoming calls setup packet. No translation of the portnumber will take place in this case. If the set of portnumbers for this table entry is a range instead of a single portnumber, this object will specify the base of the target range of portnumbers. The internal portnumber will be constructed as follows: new-target-port := old-target-port - ipNatPrExtPort + ipNatPrIntPort

Enumeration: 'udp': 17, 'l2tp': 115, 'ggp': 3, 'igrp': 88, 'esp': 50, 'ah': 51, 'egp': 8, 'hmp': 20, 'tcp': 6, 'xns-idp': 22, 'gre': 47, 'ospf': 89, 'rsvp': 46, 'icmp': 1, 'pup': 12, 'rdp': 27.

This table specifies how routes from one routing protocol are imported into another routing protocol. The dummy protocol default-route allows the generation of a default route for the routing domain. Not all combinations of source and destination protocols might be valid or implemented.

This object describes the protocol that generated the route and inserted it into the routing table. Enumeration: 'default-route': 1, 'direct': 2, 'rip': 4, 'static': 3, 'radius': 7, 'ospf': 5, 'special': 6.

This object describes the destination protocol into that the routes should be imported. Enumeration: 'ospf': 3, 'rip': 2, 'delete': 1.

This object defines the metric in the context of the destination protocol the imported routes should get. If set to -1 these routes get a protocol specific default metric.

This object might define protocol specific properties of the imported routes in the context of the destination protocol.

This object specifies together with ipImportMask the range of IP addresses for which the table entry should be valid. The entry is valid if the destination IP address of the route lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for destination.

This object specifies together with ipImportAddr the range of IP addresses for which the table entry should be valid. The entry is valid if the destination IP address of the route lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for destination.

This object defines the effect this row should have. If set to import, the importation from ipImportSrcProto to ipImportDstProto takes place. If set to doNotImport the importation is prevented. Enumeration: 'import': 1, 'doNotImport': 2.

This object specifies the interface index of the interface for which the entry should be valid. If set to 0 it will be valid for all interfaces.

This table defines the order, in which routes from different protocols are being used to determine the destination of an ip packet. The table will contain an entry for each type of routing protocol including STATIC and DIRECT routes. A priority-value can be configured for each of those protocols to get an order between the different protocols. The table contains a fixed number of entries. Only the priority may be configured.

This object specifies the routig-protocol, for which the entry is valid. Enumeration: 'ospf': 4, 'ospf-ext': 5, 'static': 2, 'direct': 1, 'rip': 3.

This object contains the priority-value for a specific routing protocol. Low values mean high precedence.

The ipFilterTable defines filters that describe subsets of IP packets. The filter matches if all conditions defined are true when comparing with the header of an IP packet.

This object uniquely references this filter. The index value is generated automatically.

A textual string describing this filter.

This object specifies the value of the protocol field in the ip header for all IP-datagrams belonging to the set. If this object is set to dont-verify, the value of the protocol field is not specified and can take any value. Enumeration: 'egp': 8, 'igrp': 88, 'ip': 4, 'tcp': 6, 'ah': 51, 'tlsp': 56, 'igp': 9, 'chaos': 16, 'xns-idp': 22, 'ipx-in-ip': 111, 'gre': 47, 'l2tp': 115, 'skip': 57, 'rsvp': 46, 'udp': 17, 'ggp': 3, 'vrrp': 112, 'hmp': 20, 'icmp': 1, 'pup': 12, 'rdp': 27, 'iso-ip': 80, 'esp': 50, 'ipip': 94, 'kryptolan': 65, 'dont-verify': 256, 'ospf': 89, 'delete': 255.

This object specifies together with ipFilterSrcMask the set of IP addresses of datagrams that belong to the subset defined by this entry. If both objects are set to 0.0.0.0 the source-addresses for the datagrams in the set is not specified and can take any value.

This object specifies together with ipFilterSrcAddr the set of IP addresses of datagrams that belong to the subset defined by this entry. If both objects are set to 0.0.0.0 the source-addresses for the datagrams in the set is not specified and can take any value.

This object describes together with ipFilterSrcPortRange the range of source portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the source portnumber is not specified and can take any value.

This object describes together with ipFilterDstPort the range of source portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the source portnumber is not specified and can take any value.

This object describes together with ipFilterDstMask the range of the target-addresses of the IP-datagrams belonging to the set. If both objects are set to 0.0.0.0 the target- addresses for the datagrams in the set is not specified and can take any value.

This object describes together with ipFilterDstAddr the range of the target-addresses of the IP-datagrams belonging to the set. If both objects are set to 0.0.0.0 the target- addresses for the datagrams in the set is not specified and can take any value.

This object describes together with ipFilterDstPortRange the range of target-portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the target portnumber is not specified and can take any value.

This object describes together with ipFilterDstPort the range of target-portnumbers of the IP-datagrams belonging to the set. All portnumbers between and including the two objects are within the range. If both objects are the to -1, the value of the target portnumber is not specified and can take any value.

This object describes the state of the TCP connection associated with the packets belonging to the set. If this object is set to established, the value of the TCP flags of incoming packets is checked. Packets with flags that initiate TCP connections are excluded from the set. If this object is set to dont-verify, the TCP flags are not checked and can be any value. Enumeration: 'established': 2, 'dont-verify': 1.

This object describes the ICMP type of the packets belonging to the set. If this object is set to dont-verify, the value of the ICMP type field is not specified and can take any value. Enumeration: 'redirect': 6, 'echoRep': 1, 'timestampRep': 15, 'timeExcds': 12, 'echo': 9, 'srcQuench': 5, 'addrMask': 16, 'timestamp': 14, 'destUnreach': 4, 'dont-verify': 31, 'parmProb': 13, 'addrMaskRep': 17.

This object describes together with ipFilterTosMask the range of the Type of Service field (TOS) in the IP-header of the IP-datagrams belonging to the set. A TOS value is considered within the range, when the following equation is valid: (tos & ipFilterTosMask) == (ipFilterTos & ipFilterTosMask) If both objects are set to 0 the TOS value of the datagrams in the set is not specified and can take any value.

This object describes together with ipFilterTos the range of the Type of Service field (TOS) in the IP-header of the IP-datagrams belonging to the set. A TOS value is considered within the range, when the following equation is valid: (tos & ipFilterTosMask) == (ipFilterTos & ipFilterTosMask) If both objects are set to 0 the TOS value of the datagrams in the set is not specified and can take any value.

The ipRuleTable defines access rules for checking incoming IP packets. The rules are processed in order, i.e. each rule has a link to the next rule. The set of rules is processed until a match occurs, that means the rule's associated filter matches and the specified action is performed (either accept or deny a packet). The last rule is implicitly a deny rule. The set of rules to be processed can be defined for each interface

Unique rule index.

References the rule's associated filter.

This object specifies the action to be performed if the rule's associated filter matches. If set to ignore the filter is not consulted and the next rule is processed immediately. Enumeration: 'deny': 3, 'allow-if-not': 2, 'ignore': 5, 'deny-if-not': 4, 'allow': 1, 'delete': 6.

Specifies the next rule to be processed if the rule's associated filter does not match. The value 0 is used to mark the end of the rule set.

This table specifies the IP address translation for outgoing sessions. If no matching entry is found the IP address is set to the IP address defined on the interface configured for NAT. If a matching entry is found, the source IP address of outgoing IP packets is set to the value of ipNatOutExtAddr. This table is only used if the outgoing address translation is activated (ipExtIfNatOutXlat). Entries in the table are created and removed manually by network management.

This object specifies the interface index, for which the table entry shall be valid. If set to 0, the entry will be valid for all interfaces configured to use NAT.

This object specifies the protocol, for which the table entry shall be valid. Enumeration: 'udp': 17, 'esp': 50, 'ah': 51, 'tcp': 6, 'gre': 47, 'l2tp': 115, 'icmp': 1, 'any': 255, 'delete': 256.

This object specifies together with ipNatOutRemoteMask the set of target IP addresses for which the table entry is valid. If both objects are set to 0.0.0.0, the table entry will be valid for any target IP address.

This object specifies together with ipNatOutRemoteAddr the set of target IP addresses for which the table entry is valid. If both objects are set to 0.0.0.0, the table entry will be valid for any target IP address.

This object specifies the external IP address to which the internal IP address is mapped.

This object specifies together with ipNatOutRemotePortRange the range of portnumbers for outgoing calls, for which the table entry shall be valid. If both objects are set to -1, the entry is valid for all portnumbers. If ipNatOutPortRange is set to -1, the entry is only valid, when the portnumber of an outgoing call is equal to ipNatOutRemotePort. Otherwise, the entry is valid, if the called portnumber lies in the range RemotePort .. RemotePortRange.

This object specifies together with ipNatOutRemotePort the range of portnumbers for outgoing calls, for which the table entry shall be valid. If both objects are set to -1, the entry is valid for all portnumbers. If ipNatOutPortRange is set to -1, the entry is only valid, when the portnumber of an outgoing call is equal to ipNatOutRemotePort. Otherwise, the entry is valid, if the called portnumber lies in the range RemotePort .. RemotePortRange.

This object specifies together with ipNatOutIntMask the internal hosts IP address for outgoing calls matching the table entry. If both objects are set to 0.0.0.0, the table entry will be valid for any source IP address.

This object specifies together with ipNatOutIntAddr the internal hosts IP address for outgoing calls matching the table entry. If both objects are set to 0.0.0.0, the table entry will be valid for any source IP address.

This object specifies the internal source port for which the table entry shall be valid. If this object is set to -1, any internal source port matches this entry.

This object may be used to specify a fixed external source port to which the internal source port is mapped. If this object is set to -1, the port is mapped to the next free source port available.

This table specifies the watched IP addresses. Entries in the table are created and removed manually by network management.

The group of the watched IP-Addresses

The watched IP-Address

The State of the watched IP-Address Enumeration: 'down': 2, 'alive': 1.

This is the timeinterval for state verification

This action must be perform, if the hosts do not answer Enumeration: 'down': 2, 'up': 1, 'delete': 3.

The first ifc

The range of all ifcs

The ipBodRuleTable defines access rules for checking incoming IP packets. The rules are processed in order, i.e. each rule has a link to the next rule. The set of rules is processed until a match occurs, that means the rule's associated filter matches and the specified action is performed (either request or deny additional bandwidth). The last rule is implicitly a deny rule. The set of rules to be processed can be defined for each interface.

Unique rule index.

References the rule's associated filter.

This object specifies the action to be performed if the rule's associated filter matches. If set to ignore the filter is not consulted and the next rule is processed immediately. Enumeration: 'deny': 3, 'invoke': 1, 'invoke-if-not': 2, 'ignore': 5, 'deny-if-not': 4, 'delete': 6.

This object specifies the direction of the packets for which the rule is processed. Enumeration: 'both': 3, 'outgoing': 1, 'incoming': 2.

The number of B-channels to invoke if the rule's associated filter matches.

Specifies the next rule to be processed if the rule's associated filter does not match. The value 0 is used to mark the end of the rule set.

Specifies the time in seconds the interface-specific shorthold interval (see biboPPPTable) is extended if the rule's associated filter matches. When set to zero this setting is ignored. When set to -1 matching packets are sent piggyback, they are not considered for shorthold mode.

The ipQosTable defines the classifier rules that are applied to IP traffic arriving this interface in a particular direction. The rules are processed in order, i.e. each rule has a link to the next rule. The set of rules is processed until a match occurs, that means the rule's associated filter matches and the specified action is performed (set the IP headers TOS field, specify a service class for QoS). The set of these rules to be processed can be defined for each interface.

Unique rule index.

References the associated filter (see IpFilterTable).

Specifies the next classifier rule to be processed if the rule's associated filter does not match. The value 0 is used to mark the end of the rule set.

This object specifies the action to be performed if the associated filter matches. If set to ignore the filter is not consulted and the next rule is processed immediately, possible values: classify(1) = filter matches, set TOS & classify packet classify-if-not(2) = classify if filter doesn't match disabled(3) = ignore rule and skip to next rule delete(4) = delete the entry from the table. Enumeration: 'disabled': 3, 'classify-if-not': 2, 'classify': 1, 'delete': 4.

Value for TOS field inside IP header to be set.

Maximum amount of packets per second that should be TOS changed.

Maximum amount of packets per second additional to the ipQosSetRate that could be TOS changed.

This object specifies together with ipQoSClassId the class of service used for the congestion management, priorization and traffic shapping. If set to high-priority(2) (high priority service class) the related traffic will be always handled first and ipQoSClassId is ignored. Enumeration: 'high-priority': 2, 'normal': 1.

This object specifies together with ipQoSServiceClass (normal(1) only) the class of service used for congestion avoidance, congestion management, priorization and traffic shapping. Note that this ID is not used to give a nominal priority to the related IP traffic.

This object specifies the direction for witch this classifier rule applies on this interface, possible values: outgoing(1) = used for outgoing packets only incoming(2) = used for incoming packets only both(3) = used for both directions. Enumeration: 'both': 3, 'outgoing': 1, 'incoming': 2.