Juniper-IP-POLICY-MIB: View SNMP OID List / Download MIB

The IP Policy MIB for the Juniper Networks enterprise.

This table contains entries for elements of IP access lists. Entries belonging to the same access list are ordered, and comparisons to those entries are performed in that order until a match is detected. If no match is found, the default action is to 'deny'.

Each entry describes the characteristics of an IP access list element.

The number of the access list to which this entry belongs.

The relative position of this entry within its access list. Access list entries are searched in this sequence (low to high values) until a match is found. NOTE: The value zero is reserved for use with SET operations to perform special-purpose table entry creations/deletions; see the DESCRIPTION of juniIpAccessListRowStatus for details. Get/GetNext/GetBulk retrievals never return an entry for which this object is zero-valued.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy Two configuration levels are defined, limited and full. EARLY IMPLEMENTATIONS MIGHT PROVIDE ONLY THE LIMITED LEVEL OF CONFIGURATION CAPABILITY. *** LIMITED ACCESS LIST CONFIGURATION LEVEL *** 1) RowStatus createAndGo/destroy operations directed to a target table entry for which juniIpAccessListElemId is ZERO, have the following special-purpose semantics: createAndGo Create an entry having the specified configuration and append it to the target list, i.e. assign it a value of juniIpAccessListElemId that is one greater than the current last element in the list. destroy Destroy the specified list and all of its constituent elements. 2) RowStatus createAndGo/destroy operations directed to a target table entry for which juniIpAccessListElemId is NONZERO are disallowed. *** FULL ACCESS LIST CONFIGURATION LEVEL *** Permit conventional RowStatus-based management of table entries having a nonzero value for juniIpAccessListElemId, IN ADDITION TO the special RowStatus semantics applied to entries having a zero value for juniIpAccessListElemId. To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpAccessListRowStatus In addition, when creating an entry the following conditions must hold: The value of juniIpAccessListElemId is nonzero. Once created, element attributes cannot be modified except by a RowStatus destroy operation to delete the list element.

Specifies the disposition of an item that matches the comparison criteria described by this entry.

A source IP address. A subject IP address is first masked with the value of juniIpAccessListSrcMask, then the result is compared to this value. Setting both this object and its corresponding mask to 0.0.0.0 acts as a wildcard, matching any source IP address.

The IP address mask to be applied to a subject source IP address before comparing it to juniIpAccessListSrc. Ones in the mask identify which bits in the subject IP address are significant for the comparison. To be considered valid, a nonzero value for this object must contain a single contiguous string of ones, beginning with the most significant bit of the mask.

A destination IP address. A subject IP address is first masked with the value of juniIpAccessListDstMask, then the result is compared to this value. Setting both this object and its corresponding mask to 0.0.0.0 acts as a wildcard, matching any destination IP address.

The IP address mask to be applied to a subject destination IP address before comparing it to juniIpAccessListDst. Ones in the mask identify which bits in the IP address are significant for the comparison. To be considered valid, a nonzero value for this object must contain a single contiguous string of ones, beginning with the most significant bit of the mask.

An IP Protocol value. Nonzero values match a specific IP Protocol value (e.g. 6 for TCP) carried in an IP packet; a value of zero acts as a wildcard, matching any IP Protocol.

This table contains entries for elements of IP access lists. Entries belonging to the same access list are ordered, and comparisons to those entries are performed in that order until a match is detected. If no match is found, the default action is to 'deny'.

Each entry describes the characteristics of an IP access list element.

The name of the access list to which this entry belongs.

The relative position of this entry within its access list. Access list entries are searched in this sequence (low to high values) until a match is found. NOTE: The value zero is reserved for use with SET operations to perform special-purpose table entry creations/deletions; see the DESCRIPTION of juniIpNamedAccessListRowStatus for details. Get/GetNext/GetBulk retrievals never return an entry for which this object is zero-valued.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy Two configuration levels are defined, limited and full. EARLY IMPLEMENTATIONS MIGHT PROVIDE ONLY THE LIMITED LEVEL OF CONFIGURATION CAPABILITY. *** LIMITED ACCESS LIST CONFIGURATION LEVEL *** 1) RowStatus createAndGo/destroy operations directed to a target table entry for which juniIpNamedAccessListElemId is ZERO, have the following special-purpose semantics: createAndGo Create an entry having the specified configuration and append it to the target list, i.e. assign it a value of juniIpNamedAccessListElemId that is one greater than the current last element in the list. destroy Destroy the specified list and all of its constituent elements. 2) RowStatus createAndGo/destroy operations directed to a target table entry for which juniIpNamedAccessListElemId is NONZERO are disallowed. *** FULL ACCESS LIST CONFIGURATION LEVEL *** Permit conventional RowStatus-based management of table entries having a nonzero value for juniIpNamedAccessListElemId, IN ADDITION TO the special RowStatus semantics applied to entries having a zero value for juniIpNamedAccessListElemId. To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpNamedAccessListRowStatus In addition, when creating an entry the following conditions must hold: The value of juniIpNamedAccessListElemId is nonzero. Once created, element attributes cannot be modified except by a RowStatus destroy operation to delete the list element.

Specifies the disposition of an item that matches the comparison criteria described by this entry.

A source IP address. A subject IP address is first masked with the value of juniIpNamedAccessListSrcMask, then the result is compared to this value. Setting both this object and its corresponding mask to 0.0.0.0 acts as a wildcard, matching any source IP address.

The IP address mask to be applied to a subject source IP address before comparing it to juniIpNamedAccessListSrc. Ones in the mask identify which bits in the subject IP address are significant for the comparison. To be considered valid, a nonzero value for this object must contain a single contiguous string of ones, beginning with the most significant bit of the mask.

A destination IP address. A subject IP address is first masked with the value of juniIpNamedAccessListDstMask, then the result is compared to this value. Setting both this object and its corresponding mask to 0.0.0.0 acts as a wildcard, matching any destination IP address.

The IP address mask to be applied to a subject destination IP address before comparing it to juniIpNamedAccessListDst. Ones in the mask identify which bits in the IP address are significant for the comparison. To be considered valid, a nonzero value for this object must contain a single contiguous string of ones, beginning with the most significant bit of the mask.

An IP Protocol value. Nonzero values match a specific IP Protocol value (e.g. 6 for TCP) carried in an IP packet; a value of zero acts as a wildcard, matching any IP Protocol.

This table contains entries for elements of IP AS-Path access entries.

Each entry describes the characteristics of an IP AS-Path access element.

The name of the AS-Path Access List to which this entry belongs.

The element ID portion of the IP AS-Path for this entry.

Indicated whether this entry was created internally by the system, or dynamically via a management interface. A true value for this object indicates that this entry was created internally; false indicates externally.

Indicates the action to take for this AS-Path access list.

The AS-Path access list expression for this entry.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpCommunityRowStatus In addition, when creating an entry the following conditions must hold: Once created, only certain attributes can be modified.

This table contains entries for elements of IP prefix lists. Entries belonging to the same prefix list are ordered, and comparisons to those entries are performed in that order until a match is detected. If no match is found, the default action is to 'deny'.

Each entry describes the characteristics of an IP prefix list element.

The name of the prefix list to which this entry belongs.

The relative position of this entry within its prefix list. Access list entries are searched in this sequence (low to high values) until a match is found.

The IP Address portion of the IP List value for this entry.

The length portion of the IP List value for this entry.

The IP Prefix list action to perform for this entry.

The minimum prefix length to apply to address.

The maximum prefix length to apply to address.

The administratively assigned description for this entry.

The number of hits for this entry.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpPrefixListRowStatus In addition, when creating an entry the following conditions must hold: The value of juniIpPrefixListElemId is nonzero. Once created, only certain attributes can be modified.

This table contains entries for elements of IP prefix trees. Entries belonging to the same prefix tree are ordered, and comparisons to those entries are performed in that order until a match is detected. If no match is found, the default action is to 'deny'.

Each entry describes the characteristics of an IP prefix tree element.

The name of the prefix tree to which this entry belongs.

The IP Address portion of the IP Prefix value for this entry.

The length portion of the IP Prefix value for this entry.

The IP Prefix tree policy perform for this entry.

The administratively assigned description for this entry.

The number of hits for this entry.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpPrefixTreeRowStatus In addition, when creating an entry the following conditions must hold: The value of juniIpPrefixTreeIpAddress and juniIpPrefixTreeLength are nonzero. Once created, only certain attributes can be modified.

This table contains entries for elements of IP Community Lists. Entries belonging to the same Community List are ordered. The table supports standard and extended community lists.

Each entry describes the characteristics of an IP Community List element.

The name of the Community List to which this entry belongs.

The IP Address portion of the IP Prefix value for this entry.

Indicated whether this entry was created internally by the system, or dynamically via a management interface. A true value for this object indicates that this entry was created internally; false indicates externally.

Indicates whether this entry is a standard or extended Community List. True indicates extended, false indicates standard

Indicates the policy action to perform for this list.

The community list expression for this entry.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpCommunityRowStatus In addition, when creating an entry the following conditions must hold: Once created, only certain attributes can be modified.

This table contains entries for Extended IP Community Lists. Entries belonging to the same Extended Community List are ordered.

Each entry describes the characteristics of an Extended IP Community List element.

The name of the Extended Community List to which this entry belongs.

The element ID value for this entry.

Indicated whether this entry was created internally by the system, or dynamically via a management interface. A true value for this object indicates that this entry was created internally; false indicates externally.

Indicates the policy action to perform for this list.

The extended community list expression for this entry.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpExtCommunityRowStatus In addition, when creating an entry the following conditions must hold: The value of juniIpExtCommunityListElemId is included in this table as a key for future use. It must be the value zero. Once created, only certain attributes can be modified.

This table contains entries for elements of IP Dynamic Route Redistribution elements.

Each entry describes the characteristics of a dynamic IP Route Redistribute element.

Identifies the protocol associated with this Dynamic Route Redistribution element that routes are redistributed to.

Indicates the enable/disable state of this redistribution element.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpDynRedistributeRowStatus Once created, only the juniIpDynRedistributeState object can be modified.

This table contains entries for elements of IP Route Redistribution elements.

Each entry describes the characteristics of an IP Route Redistribution element.

Identifies the protocol for this element that routes are redistributed to.

Identifies the protocol for this element that routes are redistributed from.

Indicates the enable/disable state of this redistribution element.

Identifies the IP route-map associated with this IP Route Redistribution element.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpRedistributeRowStatus juniIpRedistributeRouteMapName Once created, only the juniIpRedistributeState object can be modified.

This table contains entries for elements of IP Route Maps.

Each entry describes the characteristics of an IP Route Map element.

The name of the route map to which this entry belongs.

The element ID value for this entry.

The element ID to which this entry belongs.

The sub-element ID to which this entry belongs.

Indicated whether this entry was created internally by the system, or dynamically via a management interface. A true value for this object indicates that this entry was created internally; false indicates externally.

Indicates the policy action performed by this element.

Textual information taken from the NVT ASCII character set (i.e. RFC1903 DisplayString), but with increased length. The information in this object is the series of set, match, and/or match & set clauses for this route map. It is assumed that the information conveyed in this object is used for display purposes and in general, is not parsed. The information in this string is a concatentation of routemap clauses configured via the systems non SNMP interface.

This table contains entries for route maps instances.

Each entry is a specific instance of the Route Map.

The name of the route map to which this instance entry belongs.

Multiple instances of the same route map can be created by assigning a different sequence number to it. Each instance is identified by the route map name and the sequence number. The value of the sequence number associated with the particular route map instance determines the order in which the routing protocol evaluates routes; the instance of having lowest sequence number is evaluated first. If the routes pass all the match conditions specified in the lowest-numbered instance, and if all set clause elements are successfully configured, then no other instance of the route map is considered. However, any routes that do not pass all the match conditions are evaluated against the next instance of the route map.

Indicates the policy action performed by this route map instance.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create an entry in this table, the following entry objects MUST be explicitly configured: juniIpRouteMapV2RowStatus To delete an entry in this table, the following entry objects MUST be explicitly configured: juniIpRouteMapV2RowStatus Once created, juniIpRouteMapV2Policy attribute can be modified. To modify juniIpRouteMapV2Policy, set juniIpRouteMapV2RowStatus also. Note: Match, match-set and set clause elements can be configured for a specific instance of the route map. First create the route map instance to make use of the same to configure in the clause table. Deletion of the route map instance will also delete all the clause elements confgured for that instance as clause elements are configured for that instance.

This table contains entries for instances of the route map clause elements.

Each entry describes the characteristics of one route map clause element instance.

The clause element selection option. Select the appropriate element option to configure each element instance of match, match-set and set clauses. For the complete configuration map table refer to the juniIpRouteMapClauseRowStatus object's DESCRIPTION. Enumeration: 'setCommunityAdd': 105, 'matchTag': 14, 'setNextHop': 111, 'matchCommunity': 2, 'setDistance': 222, 'setLocalPref': 113, 'matchSource': 16, 'matchPolicyList': 17, 'setDampingCreate': 221, 'setMetricType': 117, 'matchSetSummary': 300, 'setAutoTag': 102, 'setExtendedCommunityCreate': 110, 'setNextHopPeerAddr': 112, 'setCommList': 103, 'matchMetric': 12, 'matchMetricType': 13, 'matchAccessList': 5, 'setCommunityCreateList': 108, 'matchNextHopPreList': 8, 'matchLevel': 11, 'setLevel': 115, 'setWeight': 114, 'matchRouteType': 15, 'setCommunityCreateListAdd': 107, 'setExtendedCommunityCreateAdd': 109, 'matchAsPath': 1, 'matchNextHopPreTree': 10, 'matchNotKnown': 0, 'setAsPath': 100, 'setMetric': 116, 'setCommunityNone': 104, 'setCommunity': 106, 'setOrigin': 119, 'matchPrefixList': 7, 'matchNextHop': 6, 'setTag': 118, 'matchDistance': 4, 'matchPrefixTree': 9, 'setRouteType': 220, 'matchExtendedCommunity': 3, 'setAsPathCreateList': 101.

The clause element sub ID used to distinguish specific instance of the element. This value is determined by choosing the next available by walking the table.

This represents clause element instance add-on option selected along with the main option (juniIpRouteMapClauseElemId) whenever it applies. For more information on how to map this object value to each value, refer to the mapping table in the juniIpRouteMapClauseRowStatus object's DESCRIPTION. Enumeration: 'relativeNeg': 3, 'extCommSoo': 6, 'relativePos': 4, 'notApplicable': 0, 'extCommRt': 5, 'exact': 1, 'ipAddress': 8, 'interfaceValue': 7, 'delete': 2.

This represents set, match-set and match clauses' different element instance values in character string form. Whatever may be the data type of the attribute element instance value, it is always interpreted as a set of characters for both configuration and display purposes. It is up to the user to know the element's data type mapping in order to input the correct value while configuring. Refer to the mapping table in the juniIpRouteMapClauseRowStatus object descrption for detailed information.

Controls creation/deletion of entries in this table according to the RowStatus textual convention, constrained to support the following values only: createAndGo destroy To create/delete an entry in this table, the following entry objects MUST be explicitly configured: juniIpRouteMapClauseElementValue juniIpRouteMapClauseRowStatus Additional object juniIpRouteMapClauseElemIdAddon may become OPTIONAL for some elements creation/deletion along with the above. Refer the mapping table below to determine which elements are required. The table entry elements may not be modified. Only create and delete are allowed. Note#1: Make sure route map(s) are created before configuring their corresponding clause elements. Note#2: The mapping table below is the extensive guide for the options, values and ranges of the table objects juniIpRouteMapClauseElemId, juniIpRouteMapClauseElemIdAddon and juniIpRouteMapClauseElementValue. Clause element configuration selection mapping table ==================================================== ClauseElemId ClauseElemIdAddon ClauseElementValue ============ ================= ================== matchAsPath notApplicable DisplayString (SIZE(1..32)) matchCommunity exact/ DisplayString (SIZE(1..32)) notApplicable matchExtendedCommunity exact/ DisplayString (SIZE(1..32)) notApplicable Note#3: At a given time only one can be configured for access list and prefix-list/trees'. matchAccessList notApplicable DisplayString (SIZE(1..32)) matchPrefixList notApplicable DisplayString (SIZE(1..32)) matchPrefixTree notApplicable DisplayString (SIZE(1..32)) matchNextHop notApplicable DisplayString (SIZE(1..32)) matchNextHopPreList notApplicable DisplayString (SIZE(1..32)) matchNextHopPreTree notApplicable DisplayString (SIZE(1..32)) Note#4: For matchLevel, matchMetricType and matchRouteType element selection choose the exact case-sensitive string to set the option. Example: For matchLevel, option levelOne, levelOneAndTwo, etc. can be set. matchLevel notApplicable { levelOne, levelOneAndTwo, levelTwo, backbone, stubArea } matchMetricType notApplicable { internal or typeOne, external or typeTwo } matchRouteType notApplicable { external, internal, internalInter, internalIntra } matchDistance notApplicable Integer32 (0..255) matchMetric notApplicable Unsigned32 matchTag notApplicable Unsigned32 matchPolicyList notApplicable DisplayString (SIZE(1..32)) setAsPath notApplicable DisplayString (SIZE(1..32)) setCommunityAdd notApplicable DisplayString (SIZE(1..32)) setCommList delete/ DisplayString (SIZE(1..32)) notApplicable setCommunity notApplicable DisplayString (SIZE(1..32)) Note#5: For below elements selection choose the exact case-sensitive string to set the option. Example: For setOrigin, egp or igp or incomplete will be the valid options to select. setAutoTag notApplicable { autoTag } setCommunityNone notApplicable { communityNone } Note#6: setCommunityCreateList and setCommunityCreateListAdd will have only one instance and all will be set in one instance of the element (either setCommunityCreateList or setCommunityCreateListAdd), i.e., all options and values will aggregate in one SubElementId. setCommunityCreateList notApplicable Unsigned32 setCommunityCreateListAdd notApplicable Unsigned32 setCommunityCreateList notApplicable { none, localAs, noAdvertise, noExport } setCommunityCreateListAdd notApplicable { none, localAs, noAdvertise, noExport } setLevel notApplicable { backbone, levelOne, levelOneAndTwo, levelTwo, stubArea } setRouteType notApplicable { external, internal, internalInter, internalIntra } setNextHopPeerAddr notApplicable { peerAddress } setMetricType notApplicable { external, internal } setOrigin notApplicable { egp, igp, incomplete } setAsPathCreateList notApplicable Interger32 (1..65535) setTag notApplicable Unsigned32 setWeight notApplicable Unsigned32 setDistance notApplicable Interger32 (1..255) setLocalPref notApplicable Unsigned32 setMetric relativeNeg/ Unsigned32 relativePos/ notApplicable Note#7: setExtendedCommunityCreate and setExtendedCommunityCreateAdd will have only one instance and all will be set in one instance of the element (either setExtendedCommunityCreate or setExtendedCommunityCreateAdd) i.e. all options and values will aggregate in one SubElementId. setExtendedCommunityCreate extCommRt/ IPADDRESS:Unsigned32 or notApplicable IPADDRESS-in-ASN:Unsigned32 setExtendedCommunityCreate extCommSoo/ IPADDRESS:Unsigned32 or notApplicable IPADDRESS-in-ASN:Unsigned32 setExtendedCommunityCreateAdd extCommRt/ IPADDRESS:Unsigned32 or notApplicable IPADDRESS-in-ASN:Unsigned32 setExtendedCommunityCreateAdd extCommSoo/ IPADDRESS:Unsigned32 notApplicable IPADDRESS-in-ASN:Unsigned32 Note#8: Damping element has only one instance at any given time. It can be deleted by just refering to the instance (elementID and subElementId) without refering the exact value; i.e., while deleting, values doesn't matter. setDampingCreate notApplicable 1. HalfLifeiTime-Interger32 (1..45) 2. RtSuppressTime-Interger32 (1..20000) 3. SuppressedRtReuseTime-Interger32 (1..20000) 4. MaxRtSuppressTime-Interger32 (1..255) 5. UnreachableRtHalfLifeTime-Interger32 (1..45) Note#9: 1, 2, 3 and 4 values are MUST values to be specified (in minutes) for route flap damping and 5th one is optional. Format for specifying the values are very rigid and strict. Always specify four MUST values. The first value shouldn't be preceded with space characters and last the value always should be followed with one space character. From first value to till last value, all the values will be separated from each other by one space character. setNextHop interfaceValue/ Unsigned32 notApplicable setNextHop ipAddress/ IPADDRESS notApplicable

An obsolete compliance statement for entities that implement the Juniper IP Policy MIB. This statement became obsolete when support was added for the IP Named Access List.

An obsolete compliance statement for entities that implement the Juniper IP Policy MIB. This statement became obsolete when support was added for the IP ASP Access List, the IP Prefix List, the IP Prefix Tree, the IP Community List, the IP Extended Community List, IP Dynamic Route Redistribution, and the IP Route Map.

An obsolete compliance statement for entities that implement the Juniper IP Policy MIB. This statement became obsolete when support was added for the IP Route Map configurations.

The compliance statement for entities that implement the Juniper IP Policy MIB.

A collection of objects for managing IP access list capabilities in a Juniper product.

A named collection of objects for managing IP access list capabilities in a Juniper product.

A named collection of objects for managing AS-Path access list capabilities in a Juniper product.

A named collection of objects for managing Prefix list capabilities in a Juniper product.

A named collection of objects for managing Prefix Tree capabilities in a Juniper product.

A named collection of objects for managing Community List capabilities in a Juniper product.

A named collection of objects for managing Extended Community List capabilities in a Juniper product.

A collection of objects for managing IP route redistribution list capabilities in a Juniper product.

A collection of objects for managing IP route map list capabilities in a Juniper product.

A collection of objects for managing IP route map list capabilities in a Juniper product.