beautypg.com

Ip filter table – Brocade Virtual ADX MIB Reference (Supporting ADX v03.1.00) User Manual

Page 133

background image

Brocade Virtual ADX MIB Reference

121

53-1003312-01

IP filter table

IP filter table

An IP filter is an access policy that determines whether the device forwards or drops IP packets. A
filter consists of source and destination IP information and the action to take when a packet
matches the values in the filter.

The following objects define IP Filters. They are available in all products.

snRtIpStaticRouteRowStatus
brcdIp.1.2.2.2.1.6
Syntax: Integer

Read-write

Controls the management of the table rows. The values that can
be written are:

delete(3) – Delete the row

create(4) – Create a new row

modify(5) – Modify an existing row

If the row exists, then a SET with a value of create(4) returns a
"bad value" error. Deleted rows are removed from the table
immediately.
The following values can be returned on reads:

noSuch(0) – No such row

other(1) – Row is inoperative

valid(2) – Row exists and is valid

snRtIpStaticRouteDistance
brcdIp.1.2.2.2.1.7
Syntax: Integer

Read-write

Specifies the administrative distance of the route. When
comparing equal routes to a destination, the Layer 3 Switch
prefers lower administrative distances over higher ones.
Valid values: 1 – 255
Default: 1

Name, OID, and Syntax

Access

Description

Name, OID, and Syntax

Access

Description

snRtIpFilterTable
brcdIp.1.2.2.3

None

IP Filter Table.

snRtIpFilterEntry
brcdIp.1.2.2.3.1

None

An entry in the IP Filter Table

snRtIpFilterIndex
brcdIp.1.2.2.3.1.1
Syntax: Integer32

Read only

Shows the index for an entry in the IP Filter Table.

snRtIpFilterAction
brcdIp.1.2.2.3.1.2
Syntax: Integer

Read-write

Determines what action to take if the IP packet matches this filter.

deny(0)

permit(1)

qosEnabled(2)

Once you configure an IP access policy, the device denies all IP packets
by default unless you explicitly permit them. Thus, if you want the device
to permit all IP packets except the ones that you filter out, you must
configure the last IP access policy to permit all IP packets.