CABH-SEC-MIB
122 objects
This MIB module supplies the basic management objects for the Security Portal Services.
Imported Objects
| CLAB-DEF-MIB | clabProjCableHome |
| DOCS-BPI2-MIB | --RFC2571 X509Certificate |
| DOCS-CABLE-DEVICE-MIB | docsDevFilterIpEntry |
| IF-MIB | InterfaceIndexOrZero |
| INET-ADDRESS-MIB | -- RFC2580 InetPortNumber InetAddress |
| RMON2-MIB | ZeroBasedCounter32 |
| SNMP-FRAMEWORK-MIB | --RFC3291 SnmpAdminString |
| SNMPv2-CONF | -- RFC2579 OBJECT-GROUP MODULE-COMPLIANCE |
| SNMPv2-SMI | Counter32 MODULE-IDENTITY OBJECT-TYPE Unsigned32 zeroDotZero |
| SNMPv2-TC | -- RFC2578 DateAndTime RowStatus TimeStamp TruthValue VariablePointer |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.4491.2.4.2 | IdentitycabhSecMib | This MIB module supplies the basic management objects for the Security Portal Services. | ||
| 1.3.6.1.4.1.4491.2.4.2.1 | NodecabhSecFwObjects | |||
| 1.3.6.1.4.1.4491.2.4.2.1.1 | NodecabhSecFwBase | |||
| 1.3.6.1.4.1.4491.2.4.2.1.1.1 | ScalarcabhSecFwPolicyFileEnable | read-write | deprecated | This parameter indicates whether or not to enable the firewall functionality. |
| 1.3.6.1.4.1.4491.2.4.2.1.1.2 | ScalarcabhSecFwPolicyFileURL | read-write | deprecated | A policy rule set file download is triggered when the value used to SET this object is different than the value in the cabhSecFwPolicySuccessfulFileURL object. |
| 1.3.6.1.4.1.4491.2.4.2.1.1.3 | ScalarcabhSecFwPolicyFileHash | read-write | deprecated | Hash of the contents of the rules set file, calculated and sent to the PS prior to sending the rules set file. For the SHA-1 authentication algorithm the lengt… |
| 1.3.6.1.4.1.4491.2.4.2.1.1.4 | ScalarcabhSecFwPolicyFileOperStatus | read-only | deprecated | inProgress(1) indicates a firewall configuration file download is underway. complete (2) indicates the firewall configuration file downloaded and configured su… |
| 1.3.6.1.4.1.4491.2.4.2.1.1.5 | ScalarcabhSecFwPolicyFileCurrentVersion | read-only | deprecated | The rule set version currently operating in the PS device. This object should be in the syntax used by the individual vendor to identify software versions. Any… |
| 1.3.6.1.4.1.4491.2.4.2.1.1.6 | ScalarcabhSecFwPolicySuccessfulFileURL | read-only | deprecated | Contains the location of the last successful downloaded policy rule set file in the format pointed in the reference. If a successful download has never occurre… |
| 1.3.6.1.4.1.4491.2.4.2.1.2 | NodecabhSecFwLogCtl | |||
| 1.3.6.1.4.1.4491.2.4.2.1.2.1 | ScalarcabhSecFwEventType1Enable | read-write | deprecated | This object enables or disables logging of type 1 firewall event messages. Type 1 event messages report attempts from both private and public clients to traver… |
| 1.3.6.1.4.1.4491.2.4.2.1.2.2 | ScalarcabhSecFwEventType2Enable | read-write | deprecated | This object enables or disables logging of type 2 firewall event messages. Type 2 event messages report identified Denial of Service attack attempts. |
| 1.3.6.1.4.1.4491.2.4.2.1.2.3 | ScalarcabhSecFwEventType3Enable | read-write | deprecated | Enables or disables logging of type 3 firewall event messages. Type 3 event messages report changes made to the following firewall management parameters: cabhS… |
| 1.3.6.1.4.1.4491.2.4.2.1.2.4 | ScalarcabhSecFwEventAttackAlertThreshold | read-write | deprecated | If the number of type 1 or 2 hacker attacks exceeds this threshold in the period define by cabhSecFwEventAttackAlertPeriod, a firewall message event MUST be lo… |
| 1.3.6.1.4.1.4491.2.4.2.1.2.5 | ScalarcabhSecFwEventAttackAlertPeriod | read-write | deprecated | Indicates the period to be used (in hours) for the cabhSecFwEventAttackAlertThreshold. This MIB variable should always keep track of the last x hours of events… |
| 1.3.6.1.4.1.4491.2.4.2.2 | NodecabhSecCertObjects | |||
| 1.3.6.1.4.1.4491.2.4.2.2.1 | ScalarcabhSecCertPsCert | read-only | current | The X509 DER-encoded PS certificate. |
| 1.3.6.1.4.1.4491.2.4.2.3 | NodecabhSecNotification | |||
| 1.3.6.1.4.1.4491.2.4.2.4 | NodecabhSecConformance | |||
| 1.3.6.1.4.1.4491.2.4.2.4.1 | NodecabhSecCompliances | |||
| 1.3.6.1.4.1.4491.2.4.2.4.1.1 | CompliancecabhSecCompliance | deprecated | The compliance statement for CableHome Security. | |
| 1.3.6.1.4.1.4491.2.4.2.4.1.2 | CompliancecabhSec2Compliance | current | The compliance statement for CableHome 1.1 Security. | |
| 1.3.6.1.4.1.4491.2.4.2.4.2 | NodecabhSecGroups | |||
| 1.3.6.1.4.1.4491.2.4.2.4.2.1 | GroupcabhSecGroup | deprecated | Group of objects in CableHome 1.0 Firewall MIB. | |
| 1.3.6.1.4.1.4491.2.4.2.4.2.2 | GroupcabhSecCertGroup | current | Group of objects in CableHome gateway for PS Certificate. | |
| 1.3.6.1.4.1.4491.2.4.2.4.2.3 | GroupcabhSecKerbGroup | current | Group of objects in CableHome gateway for Kerberos. | |
| 1.3.6.1.4.1.4491.2.4.2.4.2.4 | GroupcabhSec2Group | current | Group of objects in CableHome 1.1 Firewall MIB. | |
| 1.3.6.1.4.1.4491.2.4.2.5 | NodecabhSecMibObjects | |||
| 1.3.6.1.4.1.4491.2.4.2.5.3 | NodecabhSecKerbObjects | |||
| 1.3.6.1.4.1.4491.2.4.2.5.3.1 | NodecabhSecKerbBase | |||
| 1.3.6.1.4.1.4491.2.4.2.5.3.1.1 | ScalarcabhSecKerbPKINITGracePeriod | read-write | current | The PKINIT Grace Period is needed by the PS to know when it should start retrying to get a new ticket. The PS MUST obtain a new Kerberos ticket (with a PKINIT … |
| 1.3.6.1.4.1.4491.2.4.2.5.3.1.2 | ScalarcabhSecKerbTGSGracePeriod | read-write | current | The TGS Grace Period is needed by the PS to know when it should start retrying to get a new ticket. The PS MUST obtain a new Kerberos ticket (with a TGS Reques… |
| 1.3.6.1.4.1.4491.2.4.2.5.3.1.3 | ScalarcabhSecKerbUnsolicitedKeyMaxTimeout | read-write | current | This timeout applies to PS initiated AP-REQ/REP key management exchange with NMS. The maximum timeout is the value which may not be exceeded in the exponential… |
| 1.3.6.1.4.1.4491.2.4.2.5.3.1.4 | ScalarcabhSecKerbUnsolicitedKeyMaxRetries | read-write | current | The number of retries the PS is allowed for AP-REQ/REP key management exchange initiation with the NMS. This is the maximum number of retries before the PS giv… |
| 1.3.6.1.4.1.4491.2.4.2.5.4 | NodecabhSec2FwObjects | |||
| 1.3.6.1.4.1.4491.2.4.2.5.4.1 | NodecabhSec2FwBase | |||
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.1 | ScalarcabhSec2FwEnable | read-write | current | This parameter indicates whether to enable or disable the firewall. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.2 | ScalarcabhSec2FwPolicyFileURL | read-write | current | A policy rule set file download is triggered when the value used to SET this object is different than the value in the cabhSec2FwPolicySuccessfulFileURL object. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.3 | ScalarcabhSec2FwPolicyFileHash | read-write | current | Hash of the contents of the firewall configuration file. For the SHA-1 authentication algorithm the length of the hash is 160 bits. This hash value is encoded … |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.4 | ScalarcabhSec2FwPolicyFileOperStatus | read-only | current | InProgress(1) indicates a firewall configuration file download is underway. Complete(2) indicates the firewall configuration file was downloaded and processed … |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.5 | ScalarcabhSec2FwPolicyFileCurrentVersion | read-write | current | A label set by the cable operator that can be used to track various versions of configured rulesets. Once the label is set and configured rules are changed, it… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.6 | ScalarcabhSec2FwClearPreviousRuleset | read-write | current | If set to 'true', the PS MUST clear all entries in the docsDevFilterIpTable. Reading this value always returns false. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.7 | ScalarcabhSec2FwPolicySelection | read-write | current | This object allows for selection of the filtering policy as defined by the following options: factoryDefault (1) The firewall filters against the Factory Defau… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.8 | ScalarcabhSec2FwEventSetToFactory | read-write | current | If set to 'true', entries in cabhSec2FwEventControlEntry are set to their default values. Reading this value always returns false. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.9 | ScalarcabhSec2FwEventLastSetToFactory | read-only | current | The value of sysUpTime when cabhSec2FwEventSetToFactory was Last set to true. Zero if never reset. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.10 | ScalarcabhSec2FwPolicySuccessfulFileURL | read-only | current | Contains the location of the last successful downloaded policy rule set file in the format pointed in the reference. If a successful download has not yet occur… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.11 | ScalarcabhSec2FwConfiguredRulesetPriority | read-write | current | This object defines which Configured Ruleset filter rule has priority when a conflict exists between a filter rule in the docsDevFilterIpTable and a filter rul… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.1.12 | ScalarcabhSec2FwClearLocalRuleset | read-write | current | If set to 'true', the PS MUST clear all entries in the cabhSec2FwLocalFilterIpTable. Reading this value always returns false. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2 | NodecabhSec2FwEvent | |||
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1 | TablecabhSec2FwEventControlTable | not-accessible | current | This table controls the reporting of the Firewall Attacks events |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1 | RowcabhSec2FwEventControlEntry | not-accessible | current | Allows configuration of the reporting mechanisms for a particular type of attack. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1.1 | ColumncabhSec2FwEventType | not-accessible | current | Classification of the different types of attacks. Type 1 logs all attempts from both LAN and WAN clients to traverse the Firewall that violate the Security Pol… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1.2 | ColumncabhSec2FwEventEnable | read-write | current | Enables or disables counting and logging of firewall events by type as assigned by cabhSec2FwEventType. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1.3 | ColumncabhSec2FwEventThreshold | read-write | current | Number of attacks to count before sending the appropriate event by type as assigned by cabhSec2FwEventType. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1.4 | ColumncabhSec2FwEventInterval | read-write | current | Indicates the time interval in hours to count and log occurrences of a firewall event type as assigned in cabhSec2FwEventType. If this MIB has a value of zero … |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1.5 | ColumncabhSec2FwEventCount | read-only | current | Indicates the current count up to the cabhSec2FwEventThreshold value by type as assigned by cabhSec2FwEventType. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1.6 | ColumncabhSec2FwEventLogReset | read-write | current | Setting this object to true clears the log table for the specified event type. Reading this object always returns false. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.2.1.1.7 | ColumncabhSec2FwEventLogLastReset | read-only | current | The value of sysUpTime when cabhSec2FwEventLogReset was last set to true. Zero if never reset. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3 | NodecabhSec2FwLog | |||
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1 | TablecabhSec2FwLogTable | not-accessible | current | Contains a log of packet information as related to events enabled by the cable operator. The types are defined in the CableHome 1.1 specification and require v… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1 | RowcabhSec2FwLogEntry | not-accessible | current | Each entry contains the log of firewall events |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.1 | ColumncabhSec2FwLogIndex | not-accessible | current | A sequence number for the specific events under a cabhSec2FwEventType. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.2 | ColumncabhSec2FwLogEventType | read-only | current | Classification of the different types of attacks. Type 1 logs all attempts from both LAN and WAN clients to traverse the Firewall that violate the Security Pol… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.3 | ColumncabhSec2FwLogEventPriority | read-only | current | The priority level of this event as defined by CableHome Specification. If a priority is not assigned in the CableHome specification for a particular event the… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.4 | ColumncabhSec2FwLogEventId | read-only | current | The assigned event ID. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.5 | ColumncabhSec2FwLogTime | read-only | current | The time that this entry was created by the PS. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.6 | ColumncabhSec2FwLogIpProtocol | read-only | current | The IP Protocol. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.7 | ColumncabhSec2FwLogIpSourceAddr | read-only | current | The Source IP Address of the packet logged. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.8 | ColumncabhSec2FwLogIpDestAddr | read-only | current | The Destination IP Address of the packet logged. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.9 | ColumncabhSec2FwLogIpSourcePort | read-only | current | The Source IP Port of the packet logged. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.10 | ColumncabhSec2FwLogIpDestPort | read-only | current | The Source IP Port of the packet logged. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.11 | ColumncabhSec2FwLogMessageType | read-only | current | The ICMP defined types. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.12 | ColumncabhSec2FwLogReplayCount | read-only | current | The number of identical attack packets that were seen by the firewall based on cabhSec2FwLogIpProtocol, cabhSec2FwLogIpSourceAddr, cabhSec2FwLogIpDestAddr, cab… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.13 | ColumncabhSec2FwLogMIBPointer | read-only | current | Identifies if the cabhSec2FwPolicyFileURL or the cabhSec2FwEnable MIB object changed or an attempt was made to change it. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.14 | ColumncabhSec2FwLogMatchingFilterTableName | read-only | current | When applicable, cabhSec2FwLogMatchingFilterTableName indicates the filter table name containing the last filter rule matched that caused the event to be gener… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.15 | ColumncabhSec2FwLogMatchingFilterTableIndex | read-only | current | When applicable, cabhSec2FwLogMatchingFilterTableIndex indicates the filter table index if the last filter rule matched that caused the event to be generated. … |
| 1.3.6.1.4.1.4491.2.4.2.5.4.3.1.1.16 | ColumncabhSec2FwLogMatchingFilterDescr | read-only | current | When applicable, cabhSec2FwLogMatchingFilterDesc contains the description value found in the cabhSec2FwFilterScheduleDesc MIB object or the cabhSec2FwLocalFilt… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4 | NodecabhSec2FwFilter | |||
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.1 | TablecabhSec2FwFilterScheduleTable | not-accessible | current | Extends the filtering matching parameters of docsDevFilterIpTable defined in RFC 2669 for CableHome Residential Gateways to include time day intervals and days… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.1.1 | RowcabhSec2FwFilterScheduleEntry | not-accessible | current | Extended values for entries of docsDevFilterIpTable. If the PS has not aqcuire ToD the entire docsDevFilterIpEntry rule set is ignored. Note: A filter time per… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.1.1.1 | ColumncabhSec2FwFilterScheduleStartTime | read-create | current | The start time for matching the filter ruleset in the specified days indicated in cabhSec2FwFilterScheduleDOW. Time is represented in Military Time, e.g., 8:30… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.1.1.2 | ColumncabhSec2FwFilterScheduleEndTime | read-create | current | The end time for matching the filter rule for the days indicated in cabhSec2FwFilterScheduleDOW. The filter rule associated with this end time MUST not be disa… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.1.1.3 | ColumncabhSec2FwFilterScheduleDOW | read-create | current | If the day of week bit associated with the PS given day is '1', this object criteria matches. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.1.1.4 | ColumncabhSec2FwFilterScheduleDescr | read-create | current | A filter rule description configured by the cable operator or subscriber. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2 | TablecabhSec2FwFactoryDefaultFilterTable | not-accessible | current | Contains the firewall factory default ruleset as defined by the CableLabs CableHome 1.1 Specification. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1 | RowcabhSec2FwFactoryDefaultFilterEntry | not-accessible | current | Contains the firewall factory default ruleset. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.1 | ColumncabhSec2FwFactoryDefaultFilterIndex | not-accessible | current | Index used to order the application of filters. The filter with the lowest index is always applied first. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.2 | ColumncabhSec2FwFactoryDefaultFilterControl | read-only | current | If set to deny(1), all packets matching this filter will be discarded. If set to allow(2), all packets matching this filter will be accepted. The cabhSec2FwFac… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.3 | ColumncabhSec2FwFactoryDefaultFilterIfIndex | read-only | current | The index number assigned to this object MUST match to the IfIndex numbering assigned in the ifTable from the Interfaces Group MIB [RFC 2863], and as specified… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.4 | ColumncabhSec2FwFactoryDefaultFilterDirection | read-only | current | This value represents direction in relationship to the assigned cabhSec2FwFactoryDefaultFilterIfIndex in this particular rule, meaning that the PS MUST represe… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.5 | ColumncabhSec2FwFactoryDefaultFilterSaddr | read-only | current | The source IP address, or portion thereof, that is to be matched for this filter. The source address is first masked (and'ed) against cabhSec2FwFactoryDefaultF… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.6 | ColumncabhSec2FwFactoryDefaultFilterSmask | read-only | current | A bit mask that is to be applied to the source address prior to matching. This mask is not necessarily the same as a subnet mask, but 1's bits must be leftmost… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.7 | ColumncabhSec2FwFactoryDefaultFilterDaddr | read-only | current | The destination IP address, or portion thereof, that is to be matched for this filter. The destination address is first masked (and'ed) against cabhSec2FwFacto… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.8 | ColumncabhSec2FwFactoryDefaultFilterDmask | read-only | current | A bit mask that is to be applied to the destination address prior to matching. This mask is not necessarily the same as a subnet mask, but 1's bits must be lef… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.9 | ColumncabhSec2FwFactoryDefaultFilterProtocol | read-only | current | The protocol value that is to be matched. For example: icmp is 1, tcp is 6, udp is 17. A value of 65535 matches ANY protocol. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.10 | ColumncabhSec2FwFactoryDefaultFilterSourcePortLow | read-only | current | If cabhSec2FwFactoryDefaultFilterProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer source port range that is to be matched, othe… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.11 | ColumncabhSec2FwFactoryDefaultFilterSourcePortHigh | read-only | current | If cabhSec2FwFactoryDefaultFilterProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer source port range that is to be matched, othe… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.12 | ColumncabhSec2FwFactoryDefaultFilterDestPortLow | read-only | current | If cabhSec2FwFactoryDefaultFilterProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer destination port range that is to be matched,… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.13 | ColumncabhSec2FwFactoryDefaultFilterDestPortHigh | read-only | current | If cabhSec2FwFactoryDefaultFilterProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer destination port range that is to be matched,… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.2.1.14 | ColumncabhSec2FwFactoryDefaultFilterContinue | read-only | current | This value is always set to true so the PS MUST continue scanning and applying rules. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3 | TablecabhSec2FwLocalFilterIpTable | not-accessible | current | Contains a configured filtering Ruleset for the PS firewall. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1 | RowcabhSec2FwLocalFilterIpEntry | not-accessible | current | Contains a configured filter rule for the PS firewall. If the PS has not aqcuired ToD, entries that do not have default time settings are ignored. Note, that a… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.1 | ColumncabhSec2FwLocalFilterIpIndex | not-accessible | current | Index used to order the application of filters. The filter with the lowest index is always applied first. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.2 | ColumncabhSec2FwLocalFilterIpStatus | read-create | current | Controls and reflects the status of rows in this table. Creation of the rows may be done via either create-and-wait or create-and-go, but the filter is not app… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.3 | ColumncabhSec2FwLocalFilterIpControl | read-create | current | If set to deny(1), all packets matching this filter will be discarded. If set to allow(2), all packets matching this filter will be accepted. The cabhSec2FwLoc… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.4 | ColumncabhSec2FwLocalFilterIpIfIndex | read-create | current | The index number assigned to this object MUST match to the IfIndex numbering assigned in the ifTable from the Interfaces Group MIB [RFC 2863], and as specified… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.5 | ColumncabhSec2FwLocalFilterIpDirection | read-create | current | This value represents direction in relationship to the assigned cabhSec2FwLocalFilterIpIfIndex in this particular rule, meaning that the PS MUST represent traf… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.6 | ColumncabhSec2FwLocalFilterIpSaddr | read-create | current | The source IP address, or portion thereof, that is to be matched for this filter. The source address is first masked (and'ed) against cabhSec2FwLocalFilterIpSm… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.7 | ColumncabhSec2FwLocalFilterIpSmask | read-create | current | A bit mask that is to be applied to the source address prior to matching. This mask is not necessarily the same as a subnet mask, but 1's bits must be leftmost… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.8 | ColumncabhSec2FwLocalFilterIpDaddr | read-create | current | The destination IP address, or portion thereof, that is to be matched for this filter. The destination address is first masked (and'ed) against cabhSec2FwLocal… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.9 | ColumncabhSec2FwLocalFilterIpDmask | read-create | current | A bit mask that is to be applied to the destination address prior to matching. This mask is not necessarily the same as a subnet mask, but 1's bits must be lef… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.10 | ColumncabhSec2FwLocalFilterIpProtocol | read-create | current | The protocol value that is to be matched. For example: icmp is 1, tcp is 6, udp is 17. A value of 65535 matches ANY protocol. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.11 | ColumncabhSec2FwLocalFilterIpSourcePortLow | read-create | current | If cabhSec2FwLocalFilterIpProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer source port range that is to be matched, otherwise i… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.12 | ColumncabhSec2FwLocalFilterIpSourcePortHigh | read-create | current | If cabhSec2FwLocalFilterIpProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer source port range that is to be matched, otherwise i… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.13 | ColumncabhSec2FwLocalFilterIpDestPortLow | read-create | current | If cabhSec2FwLocalFilterIpProtocol is udp or tcp, this is the inclusive lower bound of the transport-layer destination port range that is to be matched, otherw… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.14 | ColumncabhSec2FwLocalFilterIpDestPortHigh | read-create | current | If cabhSec2FwLocalFilterIpProtocol is udp or tcp, this is the inclusive upper bound of the transport-layer destination port range that is to be matched, otherw… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.15 | ColumncabhSec2FwLocalFilterIpMatches | read-only | current | Counts the number of times this filter was matched. This object is initialized to 0 at boot, or at row creation, and is reset only upon reboot. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.16 | ColumncabhSec2FwLocalFilterIpContinue | read-only | current | This value is always set to true so the PS MUST continue scanning and applying rules. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.17 | ColumncabhSec2FwLocalFilterIpStartTime | read-create | current | The start time for matching the filter ruleset in the specified days indicated in cabhSec2FwLocalFilterIpDOW. Time is represented in Military Time, e.g., 8:30 … |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.18 | ColumncabhSec2FwLocalFilterIpEndTime | read-create | current | The end time for matching the filter ruleset for the days indicated in cabhSec2FwLocalFilterIpDOW. The filter rule associated with this end time MUST not be di… |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.19 | ColumncabhSec2FwLocalFilterIpDOW | read-create | current | If the day of week bit associated with the PS given day is '1', this object criteria matches. |
| 1.3.6.1.4.1.4491.2.4.2.5.4.4.3.1.20 | ColumncabhSec2FwLocalFilterIpDescr | read-create | current | A filter rule description configured by the cable operator or subscriber. |