-- This file is corresponding to Release 6.3.1.100 from 2003/03/10 00:00:00
-- (C)opyright 1991-1999 BinTec Communications AG, All Rights Reserved
-- $RCSfile: mibsif,v $ 
-- $Revision: 1.8 $ 

BIANCA-BRICK-SIF-MIB DEFINITIONS ::= BEGIN
 
        IMPORTS
            IpAddress, Counter
                FROM RFC1155-SMI
 
            OBJECT-TYPE
                FROM RFC-1212;

    org         OBJECT IDENTIFIER ::= { iso 3 }
    dod         OBJECT IDENTIFIER ::= { org 6 }
    internet    OBJECT IDENTIFIER ::= { dod 1 }
    private     OBJECT IDENTIFIER ::= { internet 4 }
    enterprises OBJECT IDENTIFIER ::= { private 1 }
    bintec      OBJECT IDENTIFIER ::= { enterprises 272 }
    bibo        OBJECT IDENTIFIER ::= { bintec 4 }
    biboip      OBJECT IDENTIFIER
        ::= { bibo 5 }

-- Stateful Inspection MIB

	ipSifAliasAddressTable OBJECT-TYPE
	    SYNTAX SEQUENCE OF IpSifAliasAddressEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contains a alias Address Entry Index,Ip,Mask,Interface "
        ::= { biboip 28 }

        ipSifAliasAddressEntry OBJECT-TYPE
            SYNTAX IpSifAliasAddressEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contents a Stateful inspection Firewall description for a
		alias Name"
            INDEX { ipSifAliasAddressAlias }
        ::= { ipSifAliasAddressTable 1 }

	
	IpSifAliasAddressEntry ::=
            SEQUENCE {
	        ipSifAliasAddressIndex		INTEGER,
                ipSifAliasAddressAlias		DisplayString, 
		ipSifAliasAddressAddress   	IpAddress,
		ipSifAliasAddressMask		IpAddress,
		ipSifAliasAddressInterface	INTEGER,
		ipSifAliasAddressMode           INTEGER
           }


	ipSifAliasAddressIndex OBJECT-TYPE
	    SYNTAX INTEGER
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "The Index for the address alias"
        ::= { ipSifAliasAddressEntry 1 }


        ipSifAliasAddressAlias OBJECT-TYPE
            SYNTAX DisplayString
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "Alias Name for the Address Entry"
        ::= { ipSifAliasAddressEntry 2 }

        ipSifAliasAddressAddress OBJECT-TYPE
            SYNTAX IpAddress
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "The ip-address for the Alias"
        ::= { ipSifAliasAddressEntry 3 }

        ipSifAliasAddressMask OBJECT-TYPE
            SYNTAX IpAddress
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "The ip Mask for the Alias"
        ::= { ipSifAliasAddressEntry 4 }

        ipSifAliasAddressInterface OBJECT-TYPE
            SYNTAX INTEGER 
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "The interface index for the alias"
        ::= { ipSifAliasAddressEntry 5 }


        ipSifAliasAddressMode OBJECT-TYPE
            SYNTAX INTEGER { 
	    	interface(1),
		address(2),
		delete(3)
	    } 
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "Address or Interface Mode"
        ::= { ipSifAliasAddressEntry 6 }


	ipSifAliasServiceTable OBJECT-TYPE
	    SYNTAX SEQUENCE OF IpSifAliasServiceEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contains a alias Service Entry Protocol,Port,Range "
        ::= { biboip 29 }


	ipSifAliasServiceEntry OBJECT-TYPE
	    SYNTAX IpSifAliasServiceEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contains a alias Service Entry Protocol,Port,Range "
            INDEX { ipSifAliasServiceAlias }
        ::= { ipSifAliasServiceTable 1 }


	IpSifAliasServiceEntry ::=
            SEQUENCE {
	        ipSifAliasServiceIndex          INTEGER,
                ipSifAliasServiceAlias		DisplayString, 
		ipSifAliasServiceProtocol   	INTEGER,
		ipSifAliasServicePort		INTEGER,
		ipSifAliasServiceRange		INTEGER
           }
        
	ipSifAliasServiceIndex OBJECT-TYPE
	    SYNTAX INTEGER
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "The Index for the address alias"
        ::= { ipSifAliasServiceEntry 1 }


	ipSifAliasServiceAlias OBJECT-TYPE
	    SYNTAX DisplayString
            ACCESS read-write
            STATUS mandatory
            DESCRIPTION
                "Alias Name for the Service Entry"
        ::= { ipSifAliasServiceEntry 2 }


	ipSifAliasServiceProtocol OBJECT-TYPE
	    SYNTAX INTEGER {
		icmp(1), 
		ggp(3), 
		ip(4),
		tcp(6), 
		egp(8),
		igp(9), 
		pup(12),
		chaos(16),
		udp(17), 
		hmp(20), 
		xns-idp(22), 
		rdp(27),
		rsvp(46),
		gre(47),
		esp(50),
		ah(51),
		tlsp(56),
		skip(57),
		kryptolan(65),
		iso-ip(80),
		igrp(88),
		ospf(89),
		ipip(94),
		ipx-in-ip(111),
		vrrp(112),
		l2tp(115),
		local(250),
		internet(251),
		netmeeting(252),
		udptcp(253),
		any(254),
		delete(255),
		dont-verify(256)
    	    } 
	    ACCESS read-write
	    STATUS mandatory
	    DESCRIPTION
	    	"The protocol for the Service alias"
	    ::= { ipSifAliasServiceEntry 3 }
	

	ipSifAliasServicePort OBJECT-TYPE
	    SYNTAX INTEGER ( -1..65535 )
	    ACCESS read-write
	    STATUS mandatory
	    DESCRIPTION
	    	"The Port for the Service Alias."
	::= { ipSifAliasServiceEntry 4 }

	ipSifAliasServiceRange OBJECT-TYPE
	    SYNTAX INTEGER ( 1..65535 )
	    ACCESS read-write
	    STATUS mandatory
	    DESCRIPTION
	    	"The Port Range for the Service Alias."
	::= { ipSifAliasServiceEntry 5 }


        ipSifAliasTable OBJECT-TYPE
            SYNTAX SEQUENCE OF IpSifAliasEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contains both static and temporary entries of DNS records "
        ::= { biboip 30 }

        ipSifAliasEntry OBJECT-TYPE
            SYNTAX IpSifAliasEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contents a Stateful inspection Firewall description for a
		filter in with alias Names"
            INDEX { ipSifAliasOrder }
        ::= { ipSifAliasTable 1 }

        IpSifAliasEntry ::=
            SEQUENCE {
                ipSifAliasOrder		INTEGER, 
		ipSifAliasSource   	INTEGER,
		ipSifAliasDestination	INTEGER,
		ipSifAliasService	INTEGER,
		ipSifAliasAction   	INTEGER
           }

	
	ipSifAliasOrder OBJECT-TYPE
	    SYNTAX INTEGER
	    ACCESS read-write
	    STATUS mandatory
            DESCRIPTION
		"The Order for the Stateful Inspection Entry rule"
	::= { ipSifAliasEntry 1 }
	

	ipSifAliasSource OBJECT-TYPE
		SYNTAX	INTEGER
		ACCESS	read-write
		STATUS  mandatory
		DESCRIPTION
		   "The alias Source Index for the Entry"
	::= { ipSifAliasEntry 2 }


	ipSifAliasDestination OBJECT-TYPE
		SYNTAX	INTEGER
		ACCESS	read-write
		STATUS  mandatory
		DESCRIPTION
		   "The alias Destination Index for the Entry"
	::= { ipSifAliasEntry 3 }

	ipSifAliasService OBJECT-TYPE
		SYNTAX	INTEGER
		ACCESS	read-write
		STATUS  mandatory
		DESCRIPTION
		   "The alias Protocol/service Index for Entry"
	::= { ipSifAliasEntry 4 }


	ipSifAliasAction OBJECT-TYPE
	    SYNTAX INTEGER {
		    access(1),
		    deny(2),
		    reject(3),
		    delete(255)
	    }
	    ACCESS  read-write
	    STATUS  mandatory
	    DESCRIPTION
		   "The Rule for the Filter"
	::= { ipSifAliasEntry 5 }


        ipSifRejectTable OBJECT-TYPE
            SYNTAX SEQUENCE OF IpSifRejectEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contains actually rejected Frames with Source Destination "
        ::= { biboip 31 }

	ipSifRejectEntry OBJECT-TYPE
	    SYNTAX IpSifRejectEntry
	    ACCESS not-accessible
	    STATUS  mandatory
	    DESCRIPTION
	       ""
	    INDEX   { ipSifRejectIndex }
	::= { ipSifRejectTable 1 }

	IpSifRejectEntry ::=
            SEQUENCE {
                ipSifRejectIndex	INTEGER, 
		ipSifRejectSource   	IpAddress,
		ipSifRejectDestination	IpAddress,
		ipSifRejectRejects      INTEGER,
		ipSifRejectSilence      INTEGER,
		ipSifRejectProtocol	INTEGER,
		ipSifRejectPortLo  	INTEGER,
		ipSifRejectPortHigh     INTEGER
           }
	
	ipSifRejectIndex OBJECT-TYPE	
	    SYNTAX INTEGER
	    ACCESS read-only
	    STATUS mandatory
            DESCRIPTION
		"The Index for the Reject Entry"
	::= { ipSifRejectEntry 1 }
	

	ipSifRejectSource OBJECT-TYPE
	    SYNTAX IpAddress
	    ACCESS read-only
	    STATUS  mandatory
	    DESCRIPTION
	    	"The Reject Source for the Entry"
	    ::= { ipSifRejectEntry 2 }


	ipSifRejectDestination OBJECT-TYPE
	    SYNTAX IpAddress
	    ACCESS read-only
	    STATUS mandatory
	    DESCRIPTION
		"The Reject Destination Index for the Entry"
	    ::= { ipSifRejectEntry 3 }


	ipSifRejectRejects OBJECT-TYPE
	    SYNTAX INTEGER
	    ACCESS read-only
	    
	    STATUS mandatory
	    DESCRIPTION
		"Count of rejected frames"
	    ::= { ipSifRejectEntry 4 }


	ipSifRejectSilence OBJECT-TYPE
	    SYNTAX INTEGER
	    ACCESS read-only
	    STATUS mandatory
	    DESCRIPTION
		"Last reject in seconds"
	    ::= { ipSifRejectEntry 5 }


	ipSifRejectProtocol OBJECT-TYPE
	    SYNTAX INTEGER 
	    ACCESS read-only
	    STATUS mandatory
	    DESCRIPTION
		   "The protocol of the rejected Packet"
	::= { ipSifRejectEntry 6 }


	ipSifRejectPortLo OBJECT-TYPE
	    SYNTAX INTEGER 
	    ACCESS  read-only
	    STATUS  mandatory
	    DESCRIPTION
		   "The lowest Port rejected"
	::= { ipSifRejectEntry 7 }

	ipSifRejectPortHigh OBJECT-TYPE
	    SYNTAX INTEGER 
	    ACCESS  read-only
	    STATUS  mandatory
	    DESCRIPTION
		   "The highest port rejected"
	::= { ipSifRejectEntry 8 }

	ipSifExpectTable OBJECT-TYPE
            SYNTAX SEQUENCE OF IpSifExpectEntry
            ACCESS not-accessible
            STATUS mandatory
            DESCRIPTION
                "Contains expected Sessions with  Source Destination "
        ::= { biboip 35 }

	ipSifExpectEntry OBJECT-TYPE
	    SYNTAX IpSifExpectEntry
	    ACCESS not-accessible
	    STATUS  mandatory
	    DESCRIPTION
	       ""
	    INDEX   { ipSifExpectIndex }
	::= { ipSifExpectTable 1 }

	IpSifExpectEntry ::=
            SEQUENCE {
                ipSifExpectIndex	INTEGER, 
		ipSifExpectSource   	IpAddress,
		ipSifExpectDestination	IpAddress,
		ipSifExpectProtocol	INTEGER,
		ipSifExpectSourcePort  	INTEGER,
		ipSifExpectDestPort     INTEGER
           }
	
	ipSifExpectIndex OBJECT-TYPE	
	    SYNTAX INTEGER
	    ACCESS read-only
	    STATUS mandatory
            DESCRIPTION
		"The index for the expected Session"
	::= { ipSifExpectEntry 1 }
	

	ipSifExpectSource OBJECT-TYPE
	    SYNTAX IpAddress
	    ACCESS read-only
	    STATUS mandatory
	    DESCRIPTION
	    	"The Source for the Expected Session"
	    ::= { ipSifExpectEntry 2 }


	ipSifExpectDestination OBJECT-TYPE
	    SYNTAX IpAddress
	    ACCESS read-only
	    STATUS mandatory
	    DESCRIPTION
		"The Destination for the expected Session"
	    ::= { ipSifExpectEntry 3 }

	ipSifExpectProtocol OBJECT-TYPE
	    SYNTAX INTEGER 
	    ACCESS read-only
	    STATUS mandatory
	    DESCRIPTION
		   "The protocol of the expected Session"
	::= { ipSifExpectEntry 4 }


	ipSifExpectSourcePort OBJECT-TYPE
	    SYNTAX INTEGER 
	    ACCESS  read-only
	    STATUS  mandatory
	    DESCRIPTION
		   "The Source Port of the expected Session"
	::= { ipSifExpectEntry 5 }

	ipSifExpectDestPort OBJECT-TYPE
	    SYNTAX INTEGER 
	    ACCESS  read-only
	    STATUS  mandatory
	    DESCRIPTION
		   "The Destination Port of the expected Session"
	::= { ipSifExpectEntry 6 }

	
	
	ipSif OBJECT IDENTIFIER
	::= { biboip 37 }
	

	ipSifAdminStatus  OBJECT-TYPE
	   SYNTAX  INTEGER {
	   	disable(1),
		enable(2)
	    }
	    ACCESS  read-write
	    STATUS  mandatory
	    DESCRIPTION
	    	"Disable or enbale Stateful Inspection Firewall"
	::= { ipSif 1} 
	

	ipSifUdpTimeout OBJECT-TYPE
	    SYNTAX  INTEGER (30..86400) 
	    ACCESS  read-write
	    STATUS  mandatory
	    DESCRIPTION
	    	"Timeout on inactive UDP Session"
	::= { ipSif 2 } 


	ipSifTcpTimeout OBJECT-TYPE
	    SYNTAX  INTEGER (30..86400) 
	    ACCESS  read-write
	    STATUS  mandatory
	    DESCRIPTION
	    	"Timeout on inactive TCP Session"
	::= { ipSif 3 } 


	ipSifPPTPTimeout OBJECT-TYPE
	    SYNTAX  INTEGER (30..86400) 
	    ACCESS  read-write
	    STATUS  mandatory
	    DESCRIPTION
	    	"Timeout on inactive PPTP Session"
	::= { ipSif 4 }


	ipSifDefaultTimeout OBJECT-TYPE
	    SYNTAX  INTEGER (30..86400) 
	    ACCESS  read-write
	    STATUS  mandatory
	    DESCRIPTION
	    	"Timeout on all other ip Sessions"
	::= { ipSif 5 } 

END