Snrtipfilteraction, Snrtipfilterprotocol, Snrtipfiltersourceip – Brocade Unified IP MIB Reference (Supporting FastIron Releases 07.5.00 and 08.0.10) User Manual
Page 480: Snrtipfiltersourcemas k, Snrtipfilterdestip, Snrtipfilterdestmask, Snrtipfilteroperator, Snrtipfilteroperand
454
Unified IP MIB Reference
53-1003106-01
IP filter table
46
snRtIpFilterAction
brcdIp.1.2.2.3.1.2
Syntax: Integer
Read-write
Determines the action to be taken if the IP packet matches this filter:
•
deny(0)
•
permit(1)
•
qosEnabled(2)
When you configure an IP access policy, the device denies all IP packets
by default unless you explicitly permit them. Thus, if you want the device
to permit all IP packets except the ones that you filter out, you must
configure the last IP access policy to permit all IP packets.
snRtIpFilterProtocol
brcdIp.1.2.2.3.1.3
Syntax: Integer
Read-write
Specifies the transport protocol that you can filter. Only the traffic for
the transport protocol selected will be allowed:
•
all(0) – All traffic of the following transport protocols listed is
permitted.
•
ICMP(1)
•
IGMP(2)
•
IGRP(88)
•
OSPF(89)
•
TCP(6)
•
UDP(17)
In addition, if you filter TCP or UDP, you can also specify a particular
application port (such as “HTTP” or “80”) or a logical expression
consisting of an operator and port names or numbers.
snRtIpFilterSourceIp
brcdIp.1.2.2.3.1.4
Syntax: IpAddress
Read-write
Shows the source IP address. The policy will be applied to packets that
come from this IP address.
snRtIpFilterSourceMas
k
brcdIp.1.2.2.3.1.5
Syntax: IpAddress
Read-write
Shows the source IP subnet mask. The policy will be applied to packets
that come from this subnet mask.
snRtIpFilterDestIp
brcdIp.1.2.2.3.1.6
Syntax: IpAddress
Read-write
Shows the destination IP address. The IP access policy will be applied to
packets that are going to this IP address.
snRtIpFilterDestMask
brcdIp.1.2.2.3.1.7
Syntax: IpAddress
Read-write
Shows the destination IP subnet mask. The IP access policy will be
applied to packets that are going to this subnet mask.
snRtIpFilterOperator
brcdIp.1.2.2.3.1.8
Syntax: Integer
Read-write
Applies only if the value of the
object is TCP or
UDP.
It specifies the type of comparison to be performed to TCP and UDP
packets:
•
greater(1) – The policy applies to TCP or UDP port numbers that
are greater than the value of the
object.
•
equal(2) – The policy applies to TCP or UDP port numbers that are
equal to the value of the
object.
•
less(3) – The policy applies to TCP or UDP port numbers that are
less than the value of the
object.
•
notEqual(4) – The policy applies to all TCP or UDP port numbers
except to those that are equal to the value of the
object.
snRtIpFilterOperand
brcdIp.1.2.2.3.1.9
Syntax: Integer
Read-write
Applies only if the value of the
object is TCP or
UDP.
Specifies the TCP or UDP port number that will be used in this filter.
Valid values: 0 – 65535. 0 means that this object is not applicable.
Name, OID, and syntax
Access
Description