-- MIB file created 02-May-2006 15:23:02, by -- SMICng version 2.2.11-beta(PRO)(Solaris), January 20, 2001. Enterprise key cisco.com CISCO-FILTER-GROUP-MIB DEFINITIONS ::= BEGIN -- From file: "CISCO-FILTER-GROUP-MIB.my" -- Compile options "4 7 F H N O W 03 06 0B 0G 0N 0T" IMPORTS RowStatus, StorageType FROM SNMPv2-TC-v1 InetAddressType, InetAddress, InetPortNumber FROM INET-ADDRESS-MIB SnmpAdminString FROM SNMP-FRAMEWORK-MIB CiscoIpProtocol FROM CISCO-TC ciscoMgmt FROM CISCO-SMI Gauge FROM RFC1155-SMI OBJECT-TYPE FROM RFC-1212; ciscoFilterGroupMIB OBJECT IDENTIFIER ::= { ciscoMgmt 474 } -- MODULE-IDENTITY -- LastUpdated -- 200504270000Z -- OrgName -- Cisco System Inc. -- ContactInfo -- Cisco Systems -- Customer Service -- -- Postal: 170 West Tasman Drive, -- San Jose CA 95134-1706. -- USA -- -- Tel: +1 800 553-NETS -- -- E-mail: ip-acl@cisco.com -- Descr -- The MIB module is for creating and configuring -- object groups to support packet filtering and -- access control on IP and other protocols. -- -- The cfgFilterGroupTable allows users to create -- delete, and get information about filter groups. -- Filter groups are uniquely identified by the -- group names. Filter groups can either be of -- network, protocol, service and icmp and filter -- group type cannot be changed once it has been created. -- -- The cfgFilterNetworkGroupTable is used for managing -- information about IP Addresses. -- -- The cfgFilterIpProtocolGroupTable is used for managing -- information about protocols. -- -- The cfgFilterIpServiceGroupTable is used for managing -- information about services(ports). -- -- The cfgFilterICMPGroupTable is used for managing -- information about ICMP protocol. -- -- The cfgFilterNestedGroupTable is used for supporting -- nesting of filter groups(i.e configuring filter groups -- inside the other filter groups). -- -- Terminologies used: -- ICMP - Internet Control Message Protocol. -- RevDate -- 200504270000Z -- RevDescr -- Initial version of this MIB module. ciscoFilterGroupMIBNotifs OBJECT IDENTIFIER ::= { ciscoFilterGroupMIB 0 } ciscoFilterGroupMIBObjects OBJECT IDENTIFIER ::= { ciscoFilterGroupMIB 1 } ciscoFilterGroupMIBConform OBJECT IDENTIFIER ::= { ciscoFilterGroupMIB 2 } cfgFilterConfig OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBObjects 1 } ciscoFilterGroupMIBCompl OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBConform 1 } ciscoFilterGroupMIBGroups OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBConform 2 } CfgFilterGroupName ::= OCTET STRING(SIZE(0..64)) -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- This textual convention defines the filter -- group. Filter group provides a name for -- combining multiple types of objects of -- same category. The object value shall be -- an alphanumeric string. cfgFilterGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF CfgFilterGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used for creating/deleting filter groups. A filter group allows grouping of filter objects of same type. Filter group is identified by a name and this group can be used in other tables to simplify filter creation. Filter objects are Internet addresses, Internet Address masks, protocols, ports(services) and ICMP types." ::= { cfgFilterConfig 1 } cfgFilterGroupEntry OBJECT-TYPE SYNTAX CfgFilterGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "An entry in filter group table. Each entry contains information such as filter group type, filter description." INDEX { cfgFilterGroupName } ::= { cfgFilterGroupTable 1 } CfgFilterGroupEntry ::= SEQUENCE { cfgFilterGroupName CfgFilterGroupName, cfgFilterGroupType INTEGER, cfgFilterGroupDescription SnmpAdminString, cfgFilterGroupStorageType StorageType, cfgFilterGroupRowStatus RowStatus } cfgFilterGroupName OBJECT-TYPE SYNTAX CfgFilterGroupName -- Rsyntax OCTET STRING(SIZE(0..64)) ACCESS not-accessible STATUS mandatory DESCRIPTION "This object identifies unique name for the filter group." ::= { cfgFilterGroupEntry 1 } cfgFilterGroupType OBJECT-TYPE SYNTAX INTEGER { network(1), ipProtocol(2), ipService(3), icmp(4) } ACCESS read-write STATUS mandatory DESCRIPTION "This object identifies the type of the filter group. The possible values are: network (1) : specifies network group. This group contains information on the IP address and address mask. This information is available in cfgFilterNetworkGroupTable. ipProtocol (2) : specifies IP protocol group. This group contains protocol value. This information is available in cfgFilterIpProtocolGroupTable. ipService (3) : specifies IP service group. This group contains information on UDP/TCP port. This information is available in cfgFilterIpServiceGroupTable. icmp (4) : specifies the ICMP group. This group contains information on ICMP Message Type and ICMP message code. This information is available in cfgFilterICMPGroupTable. The value of this object cannot be changed when cfgFilterGroupRowStatus is 'active'." ::= { cfgFilterGroupEntry 2 } cfgFilterGroupDescription OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-write STATUS mandatory DESCRIPTION "This object is used for configuring description for the filter group." DEFVAL { "" } ::= { cfgFilterGroupEntry 3 } cfgFilterGroupStorageType OBJECT-TYPE SYNTAX StorageType -- Rsyntax INTEGER { -- other(1), -- volatile(2), -- nonVolatile(3), -- permanent(4), -- readOnly(5) -- } ACCESS read-write STATUS mandatory DESCRIPTION "The storage type for this conceptual row." DEFVAL { nonVolatile } ::= { cfgFilterGroupEntry 4 } cfgFilterGroupRowStatus OBJECT-TYPE SYNTAX RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object is used for adding/deleting entries in this table. This object can be set to 'active' only if cfgFilterGroupType is configured for the row." ::= { cfgFilterGroupEntry 5 } cfgFilterNetworkGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF CfgFilterNetworkGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used for adding/deleting network filter group. A network filter group is used to specify host IP addresses or subnet ranges. This is applicable only for the cfgFilterGroupType value of 'network'." ::= { cfgFilterConfig 2 } cfgFilterNetworkGroupEntry OBJECT-TYPE SYNTAX CfgFilterNetworkGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "An entry in network filter group table. Each entry contains information on the IP address and the mask value that can be used in filtering the packet. Multiple entries with the same value of cfgFilterGroupName belong to the same network filter group." INDEX { cfgFilterGroupName, cfgFilterNetworkGroupIndex } ::= { cfgFilterNetworkGroupTable 1 } CfgFilterNetworkGroupEntry ::= SEQUENCE { cfgFilterNetworkGroupIndex Gauge, cfgFilterNetworkAddressType InetAddressType, cfgFilterNetworkAddress InetAddress, cfgFilterNetworkMask InetAddress, cfgFilterNetworkStorageType StorageType, cfgFilterNetworkRowStatus RowStatus } cfgFilterNetworkGroupIndex OBJECT-TYPE SYNTAX Gauge ACCESS not-accessible STATUS mandatory DESCRIPTION "This object identifies an unique entry for a network filter group." ::= { cfgFilterNetworkGroupEntry 1 } cfgFilterNetworkAddressType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This is the internet address type of for the cfgFilterNetworkAddress and cfgFilterNetworkMask. The value of this object cannot be changed when cfgFilterGroupRowStatus is 'active'." ::= { cfgFilterNetworkGroupEntry 2 } cfgFilterNetworkAddress OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-write STATUS mandatory DESCRIPTION "The source/destination internet address to be configured. A value of zero causes all source/destination address to match in an IP filter where this group is used. The object value has to be consistent with the type specified in cfgFilterNetworkAddressType." DEFVAL { "0" } ::= { cfgFilterNetworkGroupEntry 3 } cfgFilterNetworkMask OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-write STATUS mandatory DESCRIPTION "This is the wild card mask for the cfgFilterNetworkAddress bits that must match. Presence of 0 bits in the mask indicate that corresponding bits in the cfgFilterNetworkAddress must match in order for the matching to be successful, and 1 bits are don't care bits in the matching. A value of zero causes only IP packets of source and destination address the same as cfgFilterNetworkAddress to match. This object value has to be consistent with the type specified in cfgFilterNetworkAddressType." DEFVAL { 'ffffffff'H } ::= { cfgFilterNetworkGroupEntry 4 } cfgFilterNetworkStorageType OBJECT-TYPE SYNTAX StorageType -- Rsyntax INTEGER { -- other(1), -- volatile(2), -- nonVolatile(3), -- permanent(4), -- readOnly(5) -- } ACCESS read-write STATUS mandatory DESCRIPTION "The storage type for this conceptual row." DEFVAL { nonVolatile } ::= { cfgFilterNetworkGroupEntry 5 } cfgFilterNetworkRowStatus OBJECT-TYPE SYNTAX RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object is used for adding/deleting entries in this table. This object can be set to 'active' only with valid value for cfgFilterNetworkAddressType object." ::= { cfgFilterNetworkGroupEntry 6 } cfgFilterIpProtocolGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF CfgFilterIpProtocolGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used for adding/deleting protocol filter group. A protocol filter group is used to specify protocol(s). This is applicable only for the cfgFilterGroupType value of 'ipProtocol'." ::= { cfgFilterConfig 3 } cfgFilterIpProtocolGroupEntry OBJECT-TYPE SYNTAX CfgFilterIpProtocolGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Each entry is an IP Protocol traffic filter within an IP filter profile. Entries with the same cfgFilterGroupName belong to the same protocol filter group." INDEX { cfgFilterGroupName, cfgFilterIpProtocolGroupIndex } ::= { cfgFilterIpProtocolGroupTable 1 } CfgFilterIpProtocolGroupEntry ::= SEQUENCE { cfgFilterIpProtocolGroupIndex Gauge, cfgFilterIpProtocolNumber CiscoIpProtocol, cfgFilterIpProtocolStorageType StorageType, cfgFilterIpProtocolGroupRowStatus RowStatus } cfgFilterIpProtocolGroupIndex OBJECT-TYPE SYNTAX Gauge ACCESS not-accessible STATUS mandatory DESCRIPTION "This index uniquely identifies the entries in this table." ::= { cfgFilterIpProtocolGroupEntry 1 } cfgFilterIpProtocolNumber OBJECT-TYPE SYNTAX CiscoIpProtocol -- Rsyntax INTEGER(0..255) ACCESS read-write STATUS mandatory DESCRIPTION "This object identifies the internet protocol number in the packets. These IP protocol numbers are defined in the Network Group Request For Comments(RFC) documents. For example, Cisco commonly used protocol includes: 1 - Internet Control Message Protocol (ICMP) 2 - Internet Gateway Message Protocol (IGMP) 4 - IP in IP tunneling 6 - Transmission Control Protocol (TCP) 9 - Cisco's IGRP routing protocol (IGRP) 17 - User Datagram Protocol (UDP) 47 - Cisco's GRE tunneling (GRE) 50 - Encapsulation Security Payload 51 - Authentication Header Protocol 88 - Cisco's EIGRP routing protocol 89 - OSPF routing protocol 94 - KA9Q NOS compatible IP over IP tunneling 103 - Protocol Independent Multicast 108 - Payload Compression Protocol." REFERENCE "RFC-790, ASSIGNED NUMBERS, September 1981, Section INTERNET PROTOCOL NUMBERS." DEFVAL { 0 } ::= { cfgFilterIpProtocolGroupEntry 2 } cfgFilterIpProtocolStorageType OBJECT-TYPE SYNTAX StorageType -- Rsyntax INTEGER { -- other(1), -- volatile(2), -- nonVolatile(3), -- permanent(4), -- readOnly(5) -- } ACCESS read-write STATUS mandatory DESCRIPTION "The storage type for this conceptual row." DEFVAL { nonVolatile } ::= { cfgFilterIpProtocolGroupEntry 3 } cfgFilterIpProtocolGroupRowStatus OBJECT-TYPE SYNTAX RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object is used for adding/deleting entries in this table. This object can be set to 'active' only with valid value for cfgFilterIpProtocolNumber object." ::= { cfgFilterIpProtocolGroupEntry 4 } cfgFilterIpServiceGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF CfgFilterIpServiceGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table is used for adding/deleting service filter group. A service filter group is used to specify specific or ranges of TCP/UDP ports to be defined. This filter group can be used as either the source port(s) or destination port(s) in the associated cfgFilterExtTable. This is applicable only for the cfgFilterGroupType value of 'ipService'." ::= { cfgFilterConfig 4 } cfgFilterIpServiceGroupEntry OBJECT-TYPE SYNTAX CfgFilterIpServiceGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Each entry is an IP Protocol traffic filter within an IP filter profile. Entries with the same cfgFilterGroupName belong to the same protocol filter group." INDEX { cfgFilterGroupName, cfgFilterIpServiceGroupIndex } ::= { cfgFilterIpServiceGroupTable 1 } CfgFilterIpServiceGroupEntry ::= SEQUENCE { cfgFilterIpServiceGroupIndex Gauge, cfgFilterIpServiceType INTEGER, cfgFilterIpServicePortLow InetPortNumber, cfgFilterIpServicePortHigh InetPortNumber, cfgFilterIpServiceStorageType StorageType, cfgFilterIpServiceGroupRowStatus RowStatus } cfgFilterIpServiceGroupIndex OBJECT-TYPE SYNTAX Gauge ACCESS not-accessible STATUS mandatory DESCRIPTION "This index uniquely identifies the entries in this table." ::= { cfgFilterIpServiceGroupEntry 1 } cfgFilterIpServiceType OBJECT-TYPE SYNTAX INTEGER { tcp(1), udp(2), tcpUdp(3) } ACCESS read-write STATUS mandatory DESCRIPTION "This object identifies the protocol type of the port for this group. The possible value(s) are : tcp(1) : TCP port. udp(2) : UDP port. tcpUdp(3) : TCP/UDP port. This value is applicable for a port which is same for both TCP and UDP." ::= { cfgFilterIpServiceGroupEntry 2 } cfgFilterIpServicePortLow OBJECT-TYPE SYNTAX InetPortNumber -- Rsyntax Gauge(0..65535) ACCESS read-write STATUS mandatory DESCRIPTION "This object identifies the source or destination port number. This is the inclusive lower bound of the transport-layer source/destination port range that is to be matched in the filter where this group is defined. This value must be equal to or less than the value specified for this entry in cfgFilterServicePortHigh." DEFVAL { 0 } ::= { cfgFilterIpServiceGroupEntry 3 } cfgFilterIpServicePortHigh OBJECT-TYPE SYNTAX InetPortNumber -- Rsyntax Gauge(0..65535) ACCESS read-write STATUS mandatory DESCRIPTION "This object identifies the source or destination port number. This is the inclusive upper bound of the transport-layer source/destination port range that is to be matched in the filter where this group is defined. This value must be equal to or greater than the value specified for this entry in cfgFilterServicePortLow. If this value is '0', the udp or tcp port number is ignored during matching." DEFVAL { 65535 } ::= { cfgFilterIpServiceGroupEntry 4 } cfgFilterIpServiceStorageType OBJECT-TYPE SYNTAX StorageType -- Rsyntax INTEGER { -- other(1), -- volatile(2), -- nonVolatile(3), -- permanent(4), -- readOnly(5) -- } ACCESS read-write STATUS mandatory DESCRIPTION "The storage type for this conceptual row." DEFVAL { nonVolatile } ::= { cfgFilterIpServiceGroupEntry 5 } cfgFilterIpServiceGroupRowStatus OBJECT-TYPE SYNTAX RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object is used for adding/deleting entries in this table. This object can be set to 'active' only with valid value for cfgFilterIpServiceType object." ::= { cfgFilterIpServiceGroupEntry 6 } cfgFilterICMPGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF CfgFilterICMPGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table contains lists of filters for ICMP Type filter group. An ICMP Type filter group can be configured with multiple entries each representing the ICMP message types and ICMP message code. This is applicable only for the cfgFilterGroupType value of 'icmp'." ::= { cfgFilterConfig 5 } cfgFilterICMPGroupEntry OBJECT-TYPE SYNTAX CfgFilterICMPGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "An entry in ICMP filter group table. Each entry contains information on the ICMP message type and ICMP code. Multiple Entries with the same value of cfgFilterGroupName belong to the same ICMP filter group." INDEX { cfgFilterGroupName, cfgFilterICMPGroupIndex } ::= { cfgFilterICMPGroupTable 1 } CfgFilterICMPGroupEntry ::= SEQUENCE { cfgFilterICMPGroupIndex Gauge, cfgFilterICMPType INTEGER, cfgFilterICMPCode INTEGER, cfgFilterICMPStorageType StorageType, cfgFilterICMPGroupRowStatus RowStatus } cfgFilterICMPGroupIndex OBJECT-TYPE SYNTAX Gauge ACCESS not-accessible STATUS mandatory DESCRIPTION "This index identifies an unique entry in this table." ::= { cfgFilterICMPGroupEntry 1 } cfgFilterICMPType OBJECT-TYPE SYNTAX INTEGER(-1..255) ACCESS read-write STATUS mandatory DESCRIPTION "This object specifies the ICMP message type to be configured in ICMP filter group. Setting this object to '-1' will make the filtering match any ICMP message type. Some of the commonly used ICMP Message types are: 0 - Echo Reply 3 - Destination Unreachable 4 - Source Quench 5 - Redirect 8 - Echo 11 - Time Exceeded 12 - Parameter Problem 13 - Timestamp 14 - Timestamp Reply 15 - Information Request 16 - Information Reply 17 - Mask Request 18 - Mask Reply 31 - Conversion Error 32 - Mobile Redirect." REFERENCE "RFC-792 INTERNET CONTROL MESSAGE PROTOCOL" DEFVAL { -1 } ::= { cfgFilterICMPGroupEntry 2 } cfgFilterICMPCode OBJECT-TYPE SYNTAX INTEGER(-1..255) ACCESS read-write STATUS mandatory DESCRIPTION "This object specifies the ICMP message code to be configured in ICMP filter group. Setting this object to '-1' will make the filtering match any ICMP code." REFERENCE "RFC-792 INTERNET CONTROL MESSAGE PROTOCOL" DEFVAL { -1 } ::= { cfgFilterICMPGroupEntry 3 } cfgFilterICMPStorageType OBJECT-TYPE SYNTAX StorageType -- Rsyntax INTEGER { -- other(1), -- volatile(2), -- nonVolatile(3), -- permanent(4), -- readOnly(5) -- } ACCESS read-write STATUS mandatory DESCRIPTION "The storage type for this conceptual row." DEFVAL { nonVolatile } ::= { cfgFilterICMPGroupEntry 4 } cfgFilterICMPGroupRowStatus OBJECT-TYPE SYNTAX RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object is used for adding/deleting entries in this table. This object can be set to 'active' only with valid value for cfgFilterICMPType object." ::= { cfgFilterICMPGroupEntry 5 } cfgFilterNestedGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF CfgFilterNestedGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table contains lists of filter groups that are configured in other filter group. This table is used for configuring a group as member of another group." ::= { cfgFilterConfig 6 } cfgFilterNestedGroupEntry OBJECT-TYPE SYNTAX CfgFilterNestedGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "An entry in nested filter group table. Each entry contains information on the a group that is configured in another group." INDEX { cfgFilterParentGroupName, cfgFilterNestedGroupName } ::= { cfgFilterNestedGroupTable 1 } CfgFilterNestedGroupEntry ::= SEQUENCE { cfgFilterParentGroupName CfgFilterGroupName, cfgFilterNestedGroupName CfgFilterGroupName, cfgFilterNestedStorageType StorageType, cfgFilterNestedGroupRowStatus RowStatus } cfgFilterParentGroupName OBJECT-TYPE SYNTAX CfgFilterGroupName -- Rsyntax OCTET STRING(SIZE(0..64)) ACCESS not-accessible STATUS mandatory DESCRIPTION "This object identifies the filter group that is previously created and to which another filter group identified by cfgFilterNestedGroupName will be added. The value for this object must correspond to entry in cfgFilterGroupTable." ::= { cfgFilterNestedGroupEntry 1 } cfgFilterNestedGroupName OBJECT-TYPE SYNTAX CfgFilterGroupName -- Rsyntax OCTET STRING(SIZE(0..64)) ACCESS not-accessible STATUS mandatory DESCRIPTION "This object identifies the filter group that is previously created and is being added to another filter group identified by cfgFilterParentGroupName. The value for this object must correspond to entry in cfgFilterGroupTable. The value for this object should not be same as the value of cfgFilterParentGroupName. The value for this object must be unique amongst the multiple instances with the same value of cfgFilterParentGroupName." ::= { cfgFilterNestedGroupEntry 2 } cfgFilterNestedStorageType OBJECT-TYPE SYNTAX StorageType -- Rsyntax INTEGER { -- other(1), -- volatile(2), -- nonVolatile(3), -- permanent(4), -- readOnly(5) -- } ACCESS read-write STATUS mandatory DESCRIPTION "The storage type for this conceptual row." DEFVAL { nonVolatile } ::= { cfgFilterNestedGroupEntry 3 } cfgFilterNestedGroupRowStatus OBJECT-TYPE SYNTAX RowStatus -- Rsyntax INTEGER { -- active(1), -- notInService(2), -- notReady(3), -- createAndGo(4), -- createAndWait(5), -- destroy(6) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object is used for adding/deleting entries in this table." ::= { cfgFilterNestedGroupEntry 4 } ciscoFilterObjectGroup OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBObjects 2 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- Configuration parameters for filter groups. -- objects -- cfgFilterGroupType, cfgFilterGroupDescription, -- cfgFilterGroupStorageType, cfgFilterGroupRowStatus ciscoFilterNetworkGroup OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBObjects 3 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- Configuration parameters for network filters. -- objects -- cfgFilterNetworkAddressType, cfgFilterNetworkAddress, -- cfgFilterNetworkMask, cfgFilterNetworkStorageType, -- cfgFilterNetworkRowStatus ciscoFilterIpProtocolGroup OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBObjects 4 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- Configuration parameters for protocol filters. -- objects -- cfgFilterIpProtocolNumber, cfgFilterIpProtocolStorageType, -- cfgFilterIpProtocolGroupRowStatus ciscoFilterIpServiceGroup OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBObjects 5 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- Configuration parameters for port filters. -- objects -- cfgFilterIpServiceType, cfgFilterIpServicePortLow, -- cfgFilterIpServicePortHigh, cfgFilterIpServiceStorageType, -- cfgFilterIpServiceGroupRowStatus ciscoFilterICMPGroup OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBObjects 6 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- Configuration parameters related to -- ICMP filter group. -- objects -- cfgFilterICMPType, cfgFilterICMPCode, -- cfgFilterICMPStorageType, cfgFilterICMPGroupRowStatus ciscoFilterNestedGroup OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBObjects 7 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- Configuration parameters related to -- nesting of filter group. -- objects -- cfgFilterNestedStorageType, cfgFilterNestedGroupRowStatus ciscoFilterGroupConfigMIBCompliance OBJECT IDENTIFIER ::= { ciscoFilterGroupMIBCompl 1 } -- MODULE-COMPLIANCE -- Status -- mandatory -- Descr -- The compliance statement for entities implementing -- the Cisco IP Protocol Filter MIB. -- Module -- >>current<< -- MandGroup -- ciscoFilterObjectGroup -- OptGroup -- ciscoFilterNetworkGroup -- OptGroup -- ciscoFilterIpProtocolGroup -- OptGroup -- ciscoFilterIpServiceGroup -- OptGroup -- ciscoFilterICMPGroup -- OptGroup -- ciscoFilterNestedGroup END