The administrator's desired operational state for the interface: up, down, or testing, which blocks real traffic while diagnostics run. Because it's read-write, this is the object a management station can set remotely to shut an interface down, such as isolating a compromised segment, without console access, and comparing it against ifOperStatus reveals interfaces an admin disabled versus ones that failed on their own. Example: setting ifAdminStatus to down(2) on a specific gateway interface during an incident immediately blocks traffic there while leaving the rest of the box untouched.