beautypg.com

Snrtipfilteraction, Snrtipfilterprotocol, Snrtipfiltersourceip – Brocade Unified IP MIB Reference (Supporting FastIron Releases 07.5.00 and 08.0.10) User Manual

Page 480: Snrtipfiltersourcemas k, Snrtipfilterdestip, Snrtipfilterdestmask, Snrtipfilteroperator, Snrtipfilteroperand

background image

454

Unified IP MIB Reference

53-1003106-01

IP filter table

46

snRtIpFilterAction
brcdIp.1.2.2.3.1.2
Syntax: Integer

Read-write

Determines the action to be taken if the IP packet matches this filter:

deny(0)

permit(1)

qosEnabled(2)

When you configure an IP access policy, the device denies all IP packets
by default unless you explicitly permit them. Thus, if you want the device
to permit all IP packets except the ones that you filter out, you must
configure the last IP access policy to permit all IP packets.

snRtIpFilterProtocol
brcdIp.1.2.2.3.1.3
Syntax: Integer

Read-write

Specifies the transport protocol that you can filter. Only the traffic for
the transport protocol selected will be allowed:

all(0) – All traffic of the following transport protocols listed is
permitted.

ICMP(1)

IGMP(2)

IGRP(88)

OSPF(89)

TCP(6)

UDP(17)

In addition, if you filter TCP or UDP, you can also specify a particular
application port (such as “HTTP” or “80”) or a logical expression
consisting of an operator and port names or numbers.

snRtIpFilterSourceIp
brcdIp.1.2.2.3.1.4
Syntax: IpAddress

Read-write

Shows the source IP address. The policy will be applied to packets that
come from this IP address.

snRtIpFilterSourceMas
k
brcdIp.1.2.2.3.1.5
Syntax: IpAddress

Read-write

Shows the source IP subnet mask. The policy will be applied to packets
that come from this subnet mask.

snRtIpFilterDestIp
brcdIp.1.2.2.3.1.6
Syntax: IpAddress

Read-write

Shows the destination IP address. The IP access policy will be applied to
packets that are going to this IP address.

snRtIpFilterDestMask
brcdIp.1.2.2.3.1.7
Syntax: IpAddress

Read-write

Shows the destination IP subnet mask. The IP access policy will be
applied to packets that are going to this subnet mask.

snRtIpFilterOperator
brcdIp.1.2.2.3.1.8
Syntax: Integer

Read-write

Applies only if the value of the

“snRtIpFilterProtocol”

object is TCP or

UDP.
It specifies the type of comparison to be performed to TCP and UDP
packets:

greater(1) – The policy applies to TCP or UDP port numbers that
are greater than the value of the

“snRtIpFilterOperand”

object.

equal(2) – The policy applies to TCP or UDP port numbers that are
equal to the value of the

“snRtIpFilterOperand”

object.

less(3) – The policy applies to TCP or UDP port numbers that are
less than the value of the

“snRtIpFilterOperand”

object.

notEqual(4) – The policy applies to all TCP or UDP port numbers
except to those that are equal to the value of the

“snRtIpFilterOperand”

object.

snRtIpFilterOperand
brcdIp.1.2.2.3.1.9
Syntax: Integer

Read-write

Applies only if the value of the

“snRtIpFilterProtocol”

object is TCP or

UDP.
Specifies the TCP or UDP port number that will be used in this filter.
Valid values: 0 – 65535. 0 means that this object is not applicable.

Name, OID, and syntax

Access

Description

This manual is related to the following products: