ZHNFIREWALL
- Registered at
- 1.3.6.1.4.1.5504.2.5.45
- Last updated
- 2012-04-18 12:00
- Organization
- Zhone Technologies, Inc.
- Revisions
- 2012-04-18 12:00, 2012-02-03 12:00
- Namespace
- zhone
- Source file
ZHNFIREWALL- Digest
sha256:2f1f30a0e53a13cb0984b129ccfedb4f41e7457c3eaae4ad58c3f17c35a0408c
Description
This file defines the private Enterprise MIB extensions that define LAN Management Access Service Filters and Port Forwarding objects supported by the Zhone CPEs.
Contact
Zhone Technologies, Inc. Florida Design Center 8545 126th Avenue North Largo, FL 33773 Toll-Free: +1 877-ZHONE20 (+1 877-946-6320) Tel: +1-510-777-7000 Fax: +1-510-777-7001 E-mail: support@zhone.com
Imports
| From | Symbols |
|---|---|
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Gauge32, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, enterprises, iso |
| SNMPv2-TC | DisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue |
| ZHNLANDEVICE | lanDeviceIndex, lanEthernetIndex |
| Zhone | zhoneWtn |
| Zhone-TC | ZhoneRowStatus |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
IANAifType-MIB IF-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC ZHNFIREWALL ZHNLANDEVICE ZHNLAYER2BRIDGING Zhone Zhone-TC
Textual conventions
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| FirewallMgmtAccessServiceActions TEXTUAL-CONVENTION LAN Management Access Service actions to perform for the specified service. | current | |||
| FirewallMgmtAccessServiceValues TEXTUAL-CONVENTION LAN Management Access Services that can be blocked from the CPEs management network. | current | |||
| FirewallPortProtocolValues TEXTUAL-CONVENTION LAN Port Forwarding protocols that can be filtered, per port. | current | |||
| FirewallPortTypeValues TEXTUAL-CONVENTION LAN Port Forwarding actions supported. | current |
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| zhnFirewallObjects OBJECT-IDENTITY | 1.3.6.1.4.1.5504.2.5.45.1 | |||
| firewallMgmtAccessTable OBJECT-TYPE Table of LAN Management Access Service Filters | 1.3.6.1.4.1.5504.2.5.45.1.1 | not-accessible | current | |
| firewallMgmtAccessEntry OBJECT-TYPE Table of entries of LAN Management Access service filters. This table is used to configure management access on the device. It is useful in making the device management network by blocking protocols or services that are highly susceptible to external attacks. | 1.3.6.1.4.1.5504.2.5.45.1.1.1 | not-accessible | current | |
| firewallMgmtServiceIndex OBJECT-TYPE LAN Management Access Services Table index. Enumerated values: Http (1), Https (2), Ping (3), Snmp (4), SnmpTrap (5), Ssh (6), Telnet (7) | 1.3.6.1.4.1.5504.2.5.45.1.1.1.1 | FirewallMgmtAccessServiceValues | not-accessible | current |
| firewallMgmtService OBJECT-TYPE LAN Management Access Service description. | 1.3.6.1.4.1.5504.2.5.45.1.1.1.2 | OCTET STRING | read-only | current |
| firewallMgmtAction OBJECT-TYPE LAN Management Access Service filtering action. Enumerated values: Allow (1), Deny (2), Undefined (3) | 1.3.6.1.4.1.5504.2.5.45.1.1.1.3 | FirewallMgmtAccessServiceActions | read-write | current |
| firewallPortForwardingTable OBJECT-TYPE Table of LAN Port Forwarding Rules. Note that the rules in this table have no effect until the global firewall object (sysFirewallEnable) is enabled. | 1.3.6.1.4.1.5504.2.5.45.1.2 | not-accessible | current | |
| firewallPortForwardingEntry OBJECT-TYPE This table is used to configure port forwarding firewall rules for the device. | 1.3.6.1.4.1.5504.2.5.45.1.2.1 | not-accessible | current | |
| firewallPortForwardingIndex OBJECT-TYPE LAN Port Forwarding Rules index. | 1.3.6.1.4.1.5504.2.5.45.1.2.1.1 | Unsigned32 | not-accessible | current |
| firewallPortForwardingName OBJECT-TYPE Descriptive name for a LAN Port Forwarding Rule. | 1.3.6.1.4.1.5504.2.5.45.1.2.1.2 | OCTET STRING | read-write | current |
| firewallPortType OBJECT-TYPE Enumerated value of: portRange (1), -- Range indicates that any traffic on those ports will be -- sent to the private IP address. portRemap (2), -- Remap indicates that any traffic on those ports will be -- sent to the private IP address at the private port. dmz (3) -- When DMZ is chosen it is the only rule allowed on that -- interface. A DMZ rule is effectively the same as a Range -- rule with all ports included. Range rules are more secure -- than setting a DMZ rule, because Range rules allow specific -- ports or groups of ports to be opened up. | 1.3.6.1.4.1.5504.2.5.45.1.2.1.3 | FirewallPortTypeValues | read-write | current |
| firewallPortProtocol OBJECT-TYPE Enumerated value of: tcp (1), udp (2), tcpOrUdp (3), icmp (4), icmpv4 (5), none (6) | 1.3.6.1.4.1.5504.2.5.45.1.2.1.4 | FirewallPortProtocolValues | read-write | current |
| firewallPortPublicPortStart OBJECT-TYPE Lowest value port number for the range. | 1.3.6.1.4.1.5504.2.5.45.1.2.1.5 | Unsigned32 | read-write | current |
| firewallPortPublicPortEnd OBJECT-TYPE Highest value port number for the range. This can be equal to firewallPortPublicPortStart if there is only one port. | 1.3.6.1.4.1.5504.2.5.45.1.2.1.6 | Unsigned32 | read-write | current |
| firewallPortPrivatePort OBJECT-TYPE The port number with which to send the traffic. | 1.3.6.1.4.1.5504.2.5.45.1.2.1.7 | Unsigned32 | read-write | current |
| firewallPortPrivateIPAddress OBJECT-TYPE The port IP Address with which to send the traffic. | 1.3.6.1.4.1.5504.2.5.45.1.2.1.8 | IpAddress | read-write | current |
| firewallPortForwardingRowStatus OBJECT-TYPE The SNMP RowStatus of the current row. The following objects must be specified upon row creation: firewallPortForwardingName firewallPortPrivateIPAddress | 1.3.6.1.4.1.5504.2.5.45.1.2.1.9 | ZhoneRowStatus | read-write | current |
| zhnFirewallConformance OBJECT-IDENTITY | 1.3.6.1.4.1.5504.2.5.45.3 | |||
| zhnFirewallGroups OBJECT-IDENTITY | 1.3.6.1.4.1.5504.2.5.45.3.1 | |||
| zhnFirewallCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.5504.2.5.45.3.2 |
Conformance
| Name | OID | Status |
|---|---|---|
| zhnFirewallMgmtAccessGroup OBJECT-GROUP A collection of Zhone IP objects that describe the LAN Management Access Services that can be filtered for a particular LAN interface. | 1.3.6.1.4.1.5504.2.5.45.3.1.1 | current |
| zhnFirewallPortForwardingGroup OBJECT-GROUP A collection of Zhone IP objects that describe the LAN Port Forwarding Management rules for filtering protocols and ports for a particular LAN interface. | 1.3.6.1.4.1.5504.2.5.45.3.1.2 | current |
| zhnFirewallCompliance MODULE-COMPLIANCE The Compliance statement for SNMP entities which manage the Zhone CPE LAN Firewall Management Access Services and Port Forwarding Information | 1.3.6.1.4.1.5504.2.5.45.3.2.1 | current |