| OID symbolic | OID numeric | Type | Access | Description |
|---|
| org | 1.3 | | | |
| dod | 1.3.6 | | | |
| internet | 1.3.6.1 | | | |
| private | 1.3.6.1.4 | | | |
| enterprises | 1.3.6.1.4.1 | | | |
| bintec | 1.3.6.1.4.1.272 | | | |
| bibo | 1.3.6.1.4.1.272.4 | | | |
| biboipold | 1.3.6.1.4.1.272.4.5 | | | |
| ipAllowTable | 1.3.6.1.4.1.272.4.5.1 | | not-accessible | The ipAllowTable defines all allowed IP packets. Each
entry describes a subset of IP Packets, which are allowed
to be processed. The overall set of allowed IP packets is
the union of all subsets that are described in this table. If
at least one entry is defined in the ipAllowTable, only IP
datagrams which are allowed by the ipAllowTable are
processed by the BRICK. All other packets are refused.
Please note that the ipDenyTable overwrites the
ipAllowTable. IP datagrams specified in the ipDenyTable are
always refused, even if they are allowed by the
ipAllowTable.
Creating entries: Entries are created by setting the
ipAllowProtocolMode and ipAllowSrcIfIndexMode objects in
one operation (on one command line).
Deleting entries: Entries are deleted by setting the
ipAllowProtocolMode object to 'delete'. |
| ipAllowEntry | 1.3.6.1.4.1.272.4.5.1.1 | | not-accessible | |
| INT ipAllowProtocolMode | 1.3.6.1.4.1.272.4.5.1.1.1 | INTEGER | not-accessible | Specifies whether or not the protocol field of the IP
datagram header should be used to determine if the
datagram belongs to the subset of the entry.
dont-verify(1) = don't check the protocol field;
verify(2) = check the protocol field;
delete(3) = delete the entry from the table |
| INT ipAllowProtocol | 1.3.6.1.4.1.272.4.5.1.1.2 | INTEGER | not-accessible | If the ipAllowProtocolMode is set to 'verify', this object
specifies the protocol of IP datagrams belonging to the
subset described by this entry. Otherwise, this field has
no meaning. |
| INT ipAllowSrcIfIndexMode | 1.3.6.1.4.1.272.4.5.1.1.3 | INTEGER | not-accessible | This object specifies whether or not the originating
interface of the IP datagram should be checked to
determine whether a datagram belongs to the subset. |
| INT ipAllowSrcIfIndex | 1.3.6.1.4.1.272.4.5.1.1.4 | INTEGER | not-accessible | If ipAllowSrcIfIndexMode is set to 'verify', then this
object specifies the ifIndex of the datagrams belonging to
the subset defined by this entry. |
| IP ipAllowSrcAddr | 1.3.6.1.4.1.272.4.5.1.1.5 | IpAddress | not-accessible | This object specifies the set of IP addresses of
datagrams that belong to the subset defined by
this entry. |
| IP ipAllowSrcMask | 1.3.6.1.4.1.272.4.5.1.1.6 | IpAddress | not-accessible | This object specifies the set of IP addresses of data
grams that belong to the subset defined by this entry. |
| INT ipAllowSrcPortMode | 1.3.6.1.4.1.272.4.5.1.1.7 | INTEGER | not-accessible | This object specifies the range of source port numbers
of IP datagrams belonging to the subset.
ignore(1) = All ports: 0 ..65535;
specific(2) = a specific port number
i.e. ipAllowScrPort;
clients(3) = clientports: 1024 .. 4999,
32768..65535;
server(4) = server ports: 0..1023
5000..32767;
unpriv(5) = unprivileged ports:
1024..65535;
priv(6) = privileged ports:
0..1023 |
| INT ipAllowSrcPort | 1.3.6.1.4.1.272.4.5.1.1.8 | INTEGER | not-accessible | If ipAllowSrcPortMode is set to 'specific', then this
object contains a specific port number. Otherwise this
object is not used. |
| IP ipAllowDstAddr | 1.3.6.1.4.1.272.4.5.1.1.9 | IpAddress | not-accessible | This object specifies the set of IP addresses of
datagrams that belong to the subset defined by this entry. |
| IP ipAllowDstMask | 1.3.6.1.4.1.272.4.5.1.1.10 | IpAddress | not-accessible | This object specifies the set of IP addresses of
datagrams that belong to the subset defined by
this entry. |
| INT ipAllowDstPortMode | 1.3.6.1.4.1.272.4.5.1.1.11 | INTEGER | not-accessible | This object specifies the range of destination port
numbers of IP datagrams belonging to the subset.
ignore(1) = All ports: 0..65535;
specific(2) = a specific port number
i.e. ipAllowDstPort;
clients(3) = client ports: 1024..4999,
32768..65535;
server(4) = server ports. 0..1023,
5000..32767;
unpriv(5) = unprivileged ports:
1024..65535;
priv(6) = privileged ports:
0..1023 |
| INT ipAllowDstPort | 1.3.6.1.4.1.272.4.5.1.1.12 | INTEGER | not-accessible | If ipAllowDstPortMode is set to 'specific', then this
object contains a specific port number. Otherwise this
object is not used. |
| INT ipAllowSrcPortRange | 1.3.6.1.4.1.272.4.5.1.1.13 | INTEGER | not-accessible | This object can be used together with ipAllowSrcPort to
apply the rule to a port range, instead of a single port.
When ipAllowSrcPortMode is set to specific and this
object is not set to -1, than the rule applies to the
Range of ports from ipAllowSrcPort to ipAllowSrcPortRange.
When this object is set to -1, the rule applies only to
port ipAllowSrcPort. |
| INT ipAllowDstPortRange | 1.3.6.1.4.1.272.4.5.1.1.14 | INTEGER | not-accessible | This object can be used together with ipAllowDstPort to
apply the rule to a port range, instead of a single port.
When ipAllowDstPortMode is set to specific and this
object is not set to -1, than the rule applies to the
Range of ports from ipAllowDstPort to ipAllowDstPortRange.
When this object is set to -1, the rule applies only to
port ipAllowDstPort. |
| ipDenyTable | 1.3.6.1.4.1.272.4.5.2 | | not-accessible | The ipDenyTable defines all IP packets to be denied. Each
entry describes a subset of IP Packets, which are denied
processing. The overall set of denied IP packets is the
union of all subsets that are described in this table. The
ipDenyTable overwrites the ipAllowTable. IP datagrams
specified in the ipDenyTable are always refused, even if
they are allowed by the ipAllowTable.
Creating entries: Entries are created by setting the
ipDenyProtocolMode and ipDenySrcIfIndexMode objects in
one operation (i.e. on one command line).
Deleting entries: Entries are deleted by setting the
ipDenyProtocolMode object to 'delete'. |
| ipDenyEntry | 1.3.6.1.4.1.272.4.5.2.1 | | not-accessible | |
| INT ipDenyProtocolMode | 1.3.6.1.4.1.272.4.5.2.1.1 | INTEGER | not-accessible | Specifies whether or not the protocol field of the IP
datagram header should be used to determine if the
datagram belongs to the subset of this entry.
dont-verify(1) = don't check the protocol field;
verify(2) = check the protocol field;
delete(3) = delete the entry from the table |
| INT ipDenyProtocol | 1.3.6.1.4.1.272.4.5.2.1.2 | INTEGER | not-accessible | If the ipDenyProtocolMode is set to 'verify', this object
specifies the protocol of IP datagrams belonging to the
subset described by this entry. Otherwise, this field has
no meaning. |
| INT ipDenySrcIfIndexMode | 1.3.6.1.4.1.272.4.5.2.1.3 | INTEGER | not-accessible | This object specifies whether or not the originating
interface of the IP datagram should be checked to
determine whether a datagram belongs to this subset. |
| INT ipDenySrcIfIndex | 1.3.6.1.4.1.272.4.5.2.1.4 | INTEGER | not-accessible | If ipDenySrcIfIndexMode is set to 'verify', then this
object specifies the ifIndex of the datagrams belonging to the
subset defined by this entry. |
| IP ipDenySrcAddr | 1.3.6.1.4.1.272.4.5.2.1.5 | IpAddress | not-accessible | If ipDenySrcIfIndexMode is set to 'verify', then this
object specifies the ifIndex of the datagrams belonging to the
subset defined by this entry. |
| IP ipDenySrcMask | 1.3.6.1.4.1.272.4.5.2.1.6 | IpAddress | not-accessible | This object specifies the set of IP addresses of
datagrams that belong to the subset defined by this entry. |
| INT ipDenySrcPortMode | 1.3.6.1.4.1.272.4.5.2.1.7 | INTEGER | not-accessible | This object specifies the range of source port numbers
of IP datagrams belonging to this subset.
ignore(1) = All ports: 0..65535;
specific(2) = a specific port number
i.e. ipAllowDstPort;
clients(3) = client ports: 1024..4999,
32768..65535;
server(4) = server ports. 0..1023,
5000..32767;
unpriv(5) = unprivileged ports:
1024..65535;
priv(6) = privileged ports:
0..1023 |
| INT ipDenySrcPort | 1.3.6.1.4.1.272.4.5.2.1.8 | INTEGER | not-accessible | If ipDenySrcPortMode is set to 'specific', then this
object contains a specific port number. Otherwise this
object is not used. |
| IP ipDenyDstAddr | 1.3.6.1.4.1.272.4.5.2.1.9 | IpAddress | not-accessible | This object specifies the set of IP addresses of
datagrams that belong to the subset defined by this entry. |
| IP ipDenyDstMask | 1.3.6.1.4.1.272.4.5.2.1.10 | IpAddress | not-accessible | This object specifies the set of IP addresses of
datagrams that belong to the subset defined by this entry. |
| INT ipDenyDstPortMode | 1.3.6.1.4.1.272.4.5.2.1.11 | INTEGER | not-accessible | This object specifies the range of destination port
numbers of IP datagrams belonging to the subset.
ignore(1) = All ports: 0..65535;
specific(2) = a specific port number
i.e. ipAllowDstPort;
clients(3) = client ports: 1024..4999,
32768..65535;
server(4) = server ports. 0..1023,
5000..32767;
unpriv(5) = unprivileged ports:
1024..65535;
priv(6) = privileged ports:
0..1023 |
| INT ipDenyDstPort | 1.3.6.1.4.1.272.4.5.2.1.12 | INTEGER | not-accessible | If ipDenyDstPortMode is set to 'specific', then this
object contains a specific port number. Otherwise this
object is not used. |
| INT ipDenySrcPortRange | 1.3.6.1.4.1.272.4.5.2.1.13 | INTEGER | not-accessible | This object can be used together with ipDenySrcPort to
apply the rule to a port range, instead of a single port.
When ipDenySrcPortMode is set to specific and this
object is not set to -1, than the rule applies to the
Range of ports from ipDenySrcPort to ipDenySrcPortRange.
When this object is set to -1, the rule applies only to
port ipDenySrcPort. |
| INT ipDenyDstPortRange | 1.3.6.1.4.1.272.4.5.2.1.14 | INTEGER | not-accessible | This object can be used together with ipDenyDstPort to
apply the rule to a port range, instead of a single port.
When ipDenyDstPortMode is set to specific and this
object is not set to -1, than the rule applies to the
Range of ports from ipDenyDstPort to ipDenyDstPortRange.
When this object is set to -1, the rule applies only to
port ipDenyDstPort. |
