| OID symbolic | OID numeric | Type | Access | Description |
|---|
| cjnIpAListMgmt | 1.3.6.1.4.1.1751.2.43.3.5 | | | The IP Access List Table for the Cajun Router. |
| ipACListCtlTable | 1.3.6.1.4.1.1751.2.43.3.5.1 | | not-accessible | This table is used to add/delete access list.
This table maintain a list of access lists in the
system. Each access list is made up of a group of access
rule. The access rules are stored in the ipACRuleTable. |
| ipACListCtlEntry | 1.3.6.1.4.1.1751.2.43.3.5.1.1 | | not-accessible | The information concerning one of the IP access list. |
| OCT ipACListCtlName | 1.3.6.1.4.1.1751.2.43.3.5.1.1.1 | OCTET STRING | read-write | Entry Name. Access List Name.
If this instance is a string that represent a number,
the following rules applies:
1 to 99 - ipACListCtlType must set to standard
101 to 199 - ipACListCtlType must set to extended
others - cannot be created
If this instance is a string that does not represent a number,
the ipACListCtlType must be set before ipACListCtlStatus becomes
active. |
| INT ipACListCtlType | 1.3.6.1.4.1.1751.2.43.3.5.1.1.2 | INTEGER | read-write | Type of Access List:
unset (0)
standard (1)
extended (2)
This instance cannot be changed once ipACListCtlStatus becomes
active. The value of this instance must compile with the rule
listed in the ipACListCtlName instance. |
| ROW ipACListCtlStatus | 1.3.6.1.4.1.1751.2.43.3.5.1.1.3 | RowStatus | read-write | For creation/deletion of IP access control statement.
active (1) -- is set when both ipACListCtlName and ipACListCtlType is set.
notInService (2) -- is set when ipACListCtlName or ipACListCtlType is not set.
notReady (3)
createAndGo (4) -- is set on creating new access list.
createAndWait (5)
destroy (6) -- is set on destroying an existed access list.
The management should inspect the ipACRuleTable and delete all the related entries.
An entry in the ipACRuleTable is related to this entry if ipACListCtlName equals ipACRuleName. |
| ipACRuleTable | 1.3.6.1.4.1.1751.2.43.3.5.2 | | not-accessible | This table is used to add/delete individual access rule statement
in an access list. |
| ipACRuleEntry | 1.3.6.1.4.1.1751.2.43.3.5.2.1 | | not-accessible | The ipAccessRuleEntry control all the conditional fields and its
parameters for an access rule. |
| OCT ipACRuleName | 1.3.6.1.4.1.1751.2.43.3.5.2.1.1 | OCTET STRING | read-write | Entry Name. Access List Name. This object identifies which access list this
access rule belongs to. This object shall identify the instance
of the ipACListCtlEntry object. |
| INT ipACRuleSubIndex | 1.3.6.1.4.1.1751.2.43.3.5.2.1.2 | INTEGER | read-write | Entry sub index. Each access list entry may has multiple rules.
This sub index identified each rule. |
| INT ipACRuleOwner | 1.3.6.1.4.1.1751.2.43.3.5.2.1.3 | INTEGER | read-write | The string identifies the media which was used to create/modify
this access rule. Local indicates creation via web, cli or snmp.
external indicates an external client (ie. CajunRules) |
| IP ipACRuleSrcAddr | 1.3.6.1.4.1.1751.2.43.3.5.2.1.4 | IpAddress | read-write | The IP address of the source address. A value of 0 in
ipACListSrcMask indicates this is a DON'T CARE field. |
| IP ipACRuleSrcAddrWild | 1.3.6.1.4.1.1751.2.43.3.5.2.1.5 | IpAddress | read-write | This field specifies the wildcard of the source IP address. |
| IP ipACRuleSrcMask | 1.3.6.1.4.1.1751.2.43.3.5.2.1.6 | IpAddress | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. The MASK address of the source address. A value of
0 indicates this field and ipACListSrcAddr are DON'T CARE |
| IP ipACRuleSrcMaskWild | 1.3.6.1.4.1.1751.2.43.3.5.2.1.7 | IpAddress | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. This field specifies the wildcard of the source IP mask. |
| IP ipACRuleDstAddr | 1.3.6.1.4.1.1751.2.43.3.5.2.1.8 | IpAddress | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. The IP address of the destination address. A value of 0 in
ipAccessListDstMask indicates this is a DON'T CARE field. |
| IP ipACRuleDstAddrWild | 1.3.6.1.4.1.1751.2.43.3.5.2.1.9 | IpAddress | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. This field specifies the wildcard of the destination IP address. |
| IP ipACRuleDstMask | 1.3.6.1.4.1.1751.2.43.3.5.2.1.10 | IpAddress | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. The MASK address of the destination address. A value of 0 indicates
this field and ipACListDstAddr are DON'T CARE |
| IP ipACRuleDstMaskWild | 1.3.6.1.4.1.1751.2.43.3.5.2.1.11 | IpAddress | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. This field specifies the wildcard of the destination IP mask. |
| INT ipACRuleOperation | 1.3.6.1.4.1.1751.2.43.3.5.2.1.12 | INTEGER | read-write | How to operate the IP ACCESS CONTROL statement,
on the receiving packet. |
| INT ipACRuleProtocol | 1.3.6.1.4.1.1751.2.43.3.5.2.1.13 | INTEGER | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. Over which protocol does the IP ACCESS CONTROL statement activate.
A value of 65536 is don't care. A value of 65537 means both TCP and UDP.
Note: Cajun P550 does not allow ipACListProtocol equal to TCP or UDP
because of hardware limitation. This limitation will be lift in the future. |
| INT ipACRuleL4SrcPortMin | 1.3.6.1.4.1.1751.2.43.3.5.2.1.14 | INTEGER | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536),
this field and ipACListL4SrcPortMax specifies a range of source ports.
This field specifies the lower bound of the port range for the access
rule. A value of 65536 is don't care. This field has no meaning if
ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536),
and it should be 65536. |
| INT ipACRuleL4SrcPortMax | 1.3.6.1.4.1.1751.2.43.3.5.2.1.15 | INTEGER | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536),
this field and ipACListL4SrcPortMin specifies a range of source ports.
This field specifies the upper bound of the port range for the access
rule. A value of 65536 is don't care. This field has no meaning if
ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536),
and it should be 65536. |
| INT ipACRuleL4DestPortMin | 1.3.6.1.4.1.1751.2.43.3.5.2.1.16 | INTEGER | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536),
this field and ipACListL4DestPortMax specifies a range of destination ports.
This field specifies the lower bound of the port range for the access
rule. A value of 65536 is don't care. This field has no meaning if
ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536),
and it should be 65536. |
| INT ipACRuleL4DestPortMax | 1.3.6.1.4.1.1751.2.43.3.5.2.1.17 | INTEGER | read-write | The instance is not writable if the corresponding ipACListCtlType
is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536),
this field and ipACListL4DestPortMin specifies a range of destination ports.
This field specifies the upper bound of the port range for the access
rule. A value of 65536 is don't care. This field has no meaning if
ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536),
and it should be 65536. |
| ROW ipACRuleStatus | 1.3.6.1.4.1.1751.2.43.3.5.2.1.18 | RowStatus | read-write | For create/delete of a IP access rule statement.
active (1)
notInService (2)
notReady (3)
createAndGo (4)
createAndWait (5)
destroy (6)
createAndWait and createAndGo is set on creating new access list.
destory is set on destroying access rule.
active is set when all the required instance is set in the entry. |
| T/F ipACRuleEstablished | 1.3.6.1.4.1.1751.2.43.3.5.2.1.19 | TruthValue | read-write | This field indicates an established TCP connection. |
| T/F ipACRuleLog | 1.3.6.1.4.1.1751.2.43.3.5.2.1.20 | TruthValue | read-write | This field indicates whether the access-list should log information. |
| cjnIpForwardCtlMgt | 1.3.6.1.4.1.1751.2.43.3.6 | | | |
| INT ipForwardCtlEnabled | 1.3.6.1.4.1.1751.2.43.3.6.1 | INTEGER | read-write | The object control the enable or disable the forwarding control
mechanism in the system. |
| OCT ipForwardCtlACName | 1.3.6.1.4.1.1751.2.43.3.6.2 | OCTET STRING | read-write | This object identifies which access list to use for IP forward
control. This object shall identify the instance of the
ipACListCtlEntry object. |
