Ip filter table – Brocade Virtual ADX MIB Reference (Supporting ADX v03.1.00) User Manual
Page 133

Brocade Virtual ADX MIB Reference
121
53-1003312-01
IP filter table
IP filter table
An IP filter is an access policy that determines whether the device forwards or drops IP packets. A
filter consists of source and destination IP information and the action to take when a packet
matches the values in the filter.
The following objects define IP Filters. They are available in all products.
snRtIpStaticRouteRowStatus
brcdIp.1.2.2.2.1.6
Syntax: Integer
Read-write
Controls the management of the table rows. The values that can
be written are:
•
delete(3) – Delete the row
•
create(4) – Create a new row
•
modify(5) – Modify an existing row
If the row exists, then a SET with a value of create(4) returns a
"bad value" error. Deleted rows are removed from the table
immediately.
The following values can be returned on reads:
•
noSuch(0) – No such row
•
other(1) – Row is inoperative
•
valid(2) – Row exists and is valid
snRtIpStaticRouteDistance
brcdIp.1.2.2.2.1.7
Syntax: Integer
Read-write
Specifies the administrative distance of the route. When
comparing equal routes to a destination, the Layer 3 Switch
prefers lower administrative distances over higher ones.
Valid values: 1 – 255
Default: 1
Name, OID, and Syntax
Access
Description
Name, OID, and Syntax
Access
Description
snRtIpFilterTable
brcdIp.1.2.2.3
None
IP Filter Table.
snRtIpFilterEntry
brcdIp.1.2.2.3.1
None
An entry in the IP Filter Table
snRtIpFilterIndex
brcdIp.1.2.2.3.1.1
Syntax: Integer32
Read only
Shows the index for an entry in the IP Filter Table.
snRtIpFilterAction
brcdIp.1.2.2.3.1.2
Syntax: Integer
Read-write
Determines what action to take if the IP packet matches this filter.
•
deny(0)
•
permit(1)
•
qosEnabled(2)
Once you configure an IP access policy, the device denies all IP packets
by default unless you explicitly permit them. Thus, if you want the device
to permit all IP packets except the ones that you filter out, you must
configure the last IP access policy to permit all IP packets.