MAY ( pcelsValueName )
)
The pcelsValueName attribute type may be used as naming attribute for
pcelsValueAuxClass entries. This attribute type is of syntax
Directory String [LDAP_SYNTAX]. It has an equality matching rule of
caseIgnoreMatch, an ordering matching rule of caseIgnoreOrderingMatch
and a substrings matching rule of caseIgnoreSubstringsMatch
[LDAP_SYNTAX]. Attributes of this type can only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.19
NAME ’pcelsValueName’
DESC ’The user-friendly name of a value’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
5.17. The Subclasses of pcelsValueAuxClass
The following classes are derived from the pcelsValueAuxClass class.
They are mapped from the corresponding subclasses of the PolicyValue
class [PCIM_EXT]. All the classes defined below are auxiliary object
classes.
The pcelsIPv4AddrValueAuxClass class represents a policy value that
provides an unordered set of IPv4 addresses, IPv4 address ranges or
hosts. It is mapped from the PolicyIPv4AddrValue class [PCIM_EXT].
The pcelsIPv4AddrValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.41
NAME ’pcelsIPv4AddrValueAuxClass’
DESC ’Provides IPv4 addresses’
SUP pcelsValueAuxClass
AUXILIARY
MUST ( pcelsIPv4AddrList )
)
The pcelsIPv4AddrList attribute type represents an unordered set of
IPv4 addresses, IPv4 address ranges or hosts. It is mapped from the
PolicyIPv4AddrValue.IPv4AddrList property [PCIM_EXT]. This attribute
type is of syntax Directory String [LDAP_SYNTAX]. It has an equality
matching rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. The only allowed values for attributes of this
type are strings conforming to any of the formats defined for the
IPv4AddrList property [PCIM_EXT].
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.20
NAME ’pcelsIPv4AddrList’
DESC ’Unordered set of IPv4 addresses, IPv4 address ranges or
hosts’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
The pcelsIPv6AddrValueAuxClass class represents a policy value that
provides an unordered set of IPv6 addresses, IPv6 address ranges or
hosts. It is mapped from the PolicyIPv6AddrValue class [PCIM_EXT].
The pcelsIPv6AddrValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.42
NAME ’pcelsIPv6AddrValueAuxClass’
DESC ’Provides IPv6 addresses’
SUP pcelsValueAuxClass
AUXILIARY
MUST ( pcelsIPv6AddrList )
)
The pcelsIPv6AddrList attribute type represents an unordered set of
IPv6 addresses, IPv6 address ranges or hosts. It is mapped from the
PolicyIPv6AddrValue.IPv6AddrList property [PCIM_EXT]. This attribute
type is of syntax Directory String [LDAP_SYNTAX]. It has an equality
matching rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. The only allowed values for attributes of this
type are strings conforming to any of the formats defined for the
IPv6AddrList property [PCIM_EXT].
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.21
NAME ’pcelsIPv6AddrList’
DESC ’Unordered set of IPv6 addresses, IPv6 address ranges or
hosts’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
The pcelsMACAddrValueAuxClass class represents a policy value that
provides an unordered set of MAC addresses or MAC address ranges. It
is mapped from the PolicyMACAddrValue class [PCIM_EXT].
The pcelsMACAddrValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.43
NAME ’pcelsMACAddrValueAuxClass’
DESC ’Provides MAC addresses’
SUP pcelsValueAuxClass
AUXILIARY
MUST ( pcelsMACAddrList )
)
The pcelsMACAddrList attribute type represents an unordered set of
MAC addresses or MAC address ranges. It is mapped from the
PolicyMACAddrValue.MACAddrList property [PCIM_EXT]. This attribute
type is of syntax Directory String [LDAP_SYNTAX]. It has an equality
matching rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. The only allowed values for attributes of this
type are strings conforming to any of the formats defined for the
MACAddrList property [PCIM_EXT].
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.22
NAME ’pcelsMACAddrList’
DESC ’Unordered set of MAC addresses or MAC address ranges’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
The pcelsStringValueAuxClass class represents a policy value that
provides an unordered set of strings with wildcards. It is mapped
from the PolicyStringValue class [PCIM_EXT].
The pcelsStringValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.44
NAME ’pcelsStringValueAuxClass’
DESC ’Provides string values’
SUP pcelsValueAuxClass
AUXILIARY
MUST ( pcelsStringList )
)
The pcelsStringList attribute type represents an unordered set of
strings with wildcards. It is mapped from the
PolicyStringValue.StringList property [PCIM_EXT]. This attribute
type is of syntax Directory String [LDAP_SYNTAX]. It has an equality
matching rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. The only allowed values for attributes of this
type are strings conforming to the format defined for the StringList
property [PCIM_EXT].
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.23
NAME ’pcelsStringList’
DESC ’Unordered set of strings with wildcards’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
The pcelsBitStringValueAuxClass class represents a policy value that
provides an unordered set of bit strings or bit string ranges. It is
mapped from the PolicyBitStringValue class [PCIM_EXT].
The pcelsBitStringValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.45
NAME ’pcelsBitStringValueAuxClass’
DESC ’Provides bit strings’
SUP pcelsValueAuxClass
AUXILIARY
MUST ( pcelsBitStringList )
)
The pcelsBitStringList attribute type represents an unordered set of
bit strings or bit string ranges. It is mapped from the
PolicyBitStringValue.BitStringList property [PCIM_EXT]. This
attribute type is of syntax Directory String [LDAP_SYNTAX]. It has
an equality matching rule of caseIgnoreMatch, an ordering matching
rule of caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. The only allowed values for attributes of this
type are strings conforming to any of the formats defined for the
BitStringList property [PCIM_EXT].
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.24
NAME ’pcelsBitStringList’
DESC ’Unordered set of bit strings or bit string ranges’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
The pcelsIntegerValueAuxClass class represents a policy value that
provides an unordered set of integers or integer ranges. It is
mapped from the PolicyIntegerValue class [PCIM_EXT].
The pcelsIntegerValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.46
NAME ’pcelsIntegerValueAuxClass’
DESC ’Provides integer values’
SUP pcelsValueAuxClass
AUXILIARY
MUST ( pcelsIntegerList )
)
The pcelsIntegerList attribute type represents an unordered set of
integers or integer ranges. It is mapped from the
PolicyIntegerValue.IntegerList property [PCIM_EXT]. This attribute
type is of syntax Directory String [LDAP_SYNTAX]. It has an equality
matching rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. The only allowed values for attributes of this
type are strings conforming to the format defined for the IntegerList
property [PCIM_EXT].
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.25
NAME ’pcelsIntegerList’
DESC ’Unordered set of integers or integer ranges’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
The pcelsBooleanValueAuxClass class represents a policy value that
provides a boolean. It is mapped from the PolicyIntegerValue class
[PCIM_EXT].
The pcelsBooleanValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.47
NAME ’pcelsBooleanValueAuxClass’
DESC ’Provides a boolean value.’
SUP pcelsValueAuxClass
AUXILIARY
MUST ( pcelsBoolean )
)
The pcelsBoolean attribute type represents a boolean. It is mapped
from the PolicyBooleanValue.BooleanValue property [PCIM_EXT]. This
attribute type is of syntax Boolean [LDAP_SYNTAX]. It has an
equality matching rule of booleanMatch [LDAP_MATCH]. Attributes of
this type can only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.26
NAME ’pcelsBoolean’
DESC ’Boolean value’
EQUALITY booleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE
)
5.18. The Three Reusable Policy Container Classes
The pcelsReusableContainer class represents a container of reusable
policy elements. It is mapped from the ReusablePolicyContainer class
[PCIM_EXT]. The pcelsReusableContainer class is derived from the
pcimRepository class [PCLS]. To maximize flexibility, the
pcelsReusableContainer class is defined as abstract. An auxiliary
subclass pcelsReusableContainerAuxClass enables the attachment of a
reusable policy container to an existing entry, while a structural
subclass pcelsReusableContainerInstance permits the representation of
a reusable policy container as a standalone entry.
The elements contained in a reusable policy container are aggregated
via subordination to a pcelsReusableContainer instance (DIT
containment). A reusable policy container can include the elements
of another reusable policy container by aggregating the container
itself. This is realized by DIT containment when the policy
containers are subordinated to one another, or by reference when the
aggregating policy container references the aggregated one using the
attribute pcelsReusableContainerList.
The pcelsReusableContainer class is defined as follows:
( 1.3.6.1.1.9.1.48
NAME ’pcelsReusableContainer’
DESC ’Container for reusable policy information’
SUP pcimRepository
ABSTRACT
MAY ( pcelsReusableContainerName
$ pcelsReusableContainerList )
)
The pcelsReusableContainerAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.49
NAME ’pcelsReusableContainerAuxClass ’
DESC ’Container for reusable policy information’
SUP pcelsReusableContainer
AUXILIARY
)
The pcelsReusableContainerInstance class is defined as follows:
( 1.3.6.1.1.9.1.50
NAME ’pcelsReusableContainerInstance’
DESC ’Container for reusable policy information’
SUP pcelsReusableContainer
STRUCTURAL
)
The pcelsReusableContainerName attribute type may be used as naming
attribute for pcelsReusableContainer entries. This attribute type is
of syntax Directory String [LDAP_SYNTAX]. It has an equality
matching rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.27
NAME ’pcelsReusableContainerName’
DESC ’User-friendly name of a reusable policy container’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
The pcelsReusableContainerList attribute type realizes the
ContainedDomain association [PCIM_EXT]. This attribute type is of
syntax DN [LDAP_SYNTAX]. It has an equality matching rule of
distinguishedNameMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. The only allowed values for
pcelsReusableContainerList attributes are DNs of
pcelsReusableContainer entries. In a pcelsReusableContainer, the
pcelsReusableContainerList attribute represents the associations
between this reusable policy container and others for the purpose of
including them as nested containers.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.28
NAME ’pcelsReusableContainerList’
DESC ’Unordered set of DNs of pcelsReusableContainer entries’
EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
)
Note: PCELS implementations SHOULD support pcelsReusableContainer and
its two subclasses and MAY also support the two subclasses of
pcimRepository [PCLS].
5.19. The Structural Class pcelsRoleCollection
The pcelsRoleCollection class represents a collection of managed
elements that share a common role. It is mapped from the
PolicyRoleCollection class [PCIM_EXT]. The pcelsRoleCollection class
is a structural object class and it is derived from the pcimPolicy
class [PCLS].
The pcelsRoleCollection class is defined as follows:
( 1.3.6.1.1.9.1.51
NAME ’pcelsRoleCollection’
DESC ’Collection of managed elements that share a common role’
SUP pcimPolicy
STRUCTURAL
MUST ( pcelsRole )
MAY ( pcelsRoleCollectionName
$ pcelsElementList )
)
The pcelsRole attribute type represents the role associated with a
collection of managed elements. It is mapped from the
PolicyRoleCollection.PolicyRole property [PCIM_EXT]. This attribute
type is of syntax Directory String [LDAP_SYNTAX]. It has an equality
matching rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.29
NAME ’pcelsRole’
DESC ’String representing a role.’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
The pcelsRoleCollectionName attribute type may be used as naming
attribute for pcelsRoleCollection entries. This attribute type is of
syntax Directory String [LDAP_SYNTAX]. It has an equality matching
rule of caseIgnoreMatch, an ordering matching rule of
caseIgnoreOrderingMatch and a substrings matching rule of
caseIgnoreSubstringsMatch [LDAP_SYNTAX]. Attributes of this type can
only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.30
NAME ’pcelsRoleCollectionName’
DESC ’User-friendly name of a role collection’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
The pcelsElementList attribute type realizes the
ElementInPolicyRoleCollection association [PCIM_EXT]. This attribute
type is of syntax DN [LDAP_SYNTAX]. It has an equality matching rule
of distinguishedNameMatch [LDAP_SYNTAX]. Attributes of this type can
have multiple values. In a pcelsRoleCollection, the pcelsElementList
attribute represents the associations between this role collection
and its members.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.31
NAME ’pcelsElementList’
DESC ’Unordered set of managed elements’
EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
)
5.20. The Abstract Class pcelsFilterEntryBase
The pcelsFilterEntryBase class is the base class for defining message
or packet filters. It is mapped from the FilterEntryBase class
[PCIM_EXT]. The pcelsFilterEntryBase class is an abstract object
class and it is derived from the pcimPolicy class [PCLS].
The pcelsFilterEntryBase class is defined as follows:
( 1.3.6.1.1.9.1.52
NAME ’pcelsFilterEntryBase’
DESC ’Base class for message or packet filters’
SUP pcimPolicy
ABSTRACT
MAY ( pcelsFilterName
$ pcelsFilterIsNegated )
)
The pcelsFilterName attribute type may be used as naming attribute
for pcelsFilterEntryBase entries. This attribute type is of syntax
Directory String [LDAP_SYNTAX]. It has an equality matching rule of
caseIgnoreMatch, an ordering matching rule of caseIgnoreOrderingMatch
and a substrings matching rule of caseIgnoreSubstringsMatch
[LDAP_SYNTAX]. Attributes of this type can only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.32
NAME ’pcelsFilterName’
DESC ’User-friendly name of a filter entry’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
The pcelsFilterIsNegated attribute type indicates whether the match
information specified in a pcelsFilterEntryBase is negated or not.
It is mapped from the FilterEntryBase.IsNegated property [PCIM_EXT].
This attribute type is of syntax Boolean [LDAP_SYNTAX]. It has an
equality matching rule of booleanMatch [LDAP_MATCH]. Attributes of
this type can only have a single value. If this attribute is missing
from a pcelsFilterEntryBase instance, applications MUST assume that
the filter is not negated.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.33
NAME ’pcelsFilterIsNegated’
DESC ’Indicates whether the filter is negated’
EQUALITY booleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE
)
5.21. The Structural Class pcelsIPHeadersFilter
The pcelsIPHeadersFilter class provides the most commonly required
attributes for performing filtering on IP, TCP or UDP headers. It is
mapped from the IpHeadersFilter class [PCIM_EXT]. It is a structural
object class derived from the pcelsFilterEntryBase class.
The pcelsIPHeadersFilter class is defined as follows:
( 1.3.6.1.1.9.1.53
NAME ’pcelsIPHeadersFilter’
DESC ’IP header filter’
SUP pcelsFilterEntryBase
STRUCTURAL
MAY ( pcelsIPHdrVersion
$ pcelsIPHdrSourceAddress
$ pcelsIPHdrSourceAddressEndOfRange
$ pcelsIPHdrSourceMask
$ pcelsIPHdrDestAddress
$ pcelsIPHdrDestAddressEndOfRange
$ pcelsIPHdrDestMask
$ pcelsIPHdrProtocolID
$ pcelsIPHdrSourcePortStart
$ pcelsIPHdrSourcePortEnd
$ pcelsIPHdrDestPortStart
$ pcelsIPHdrDestPortEnd
$ pcelsIPHdrDSCPList
$ pcelsIPHdrFlowLabel )
)
Applications MUST assume ’all values’ for optional (MAY) attributes
not present in a pcelsIPHeadersFilter entry.
[PCIM_EXT] defines several constraints for the IpHeadersFilter class
and its properties. All these constraints (even those that, for
brevity, are not reiterated in this document) apply to the
pcelsIPHeadersFilter class and its attributes. A
pcelsIPHeadersFilter entry that violates any of these constraints
SHOULD be treated as invalid and the policy rules or groups
associated to this entry SHOULD be treated as being disabled, meaning
that the execution of such policy rules or groups SHOULD be stopped.
The pcelsIPHdrVersion attribute type indicates the version of the IP
addresses to be filtered on. It is mapped from the
IpHeadersFilter.HdrIpVersion property [PCIM_EXT]. This attribute
type is of syntax Integer [LDAP_SYNTAX]. It has an equality matching
rule of integerMatch [LDAP_SYNTAX] and an ordering matching rule of
integerOrderingMatch [LDAP_MATCH]. Attributes of this type can only
have a single value. The only allowed values for attributes of this
type are 4 and 6.
In a pcelsIPHeadersFilter entry, the pcelsIPHdrVersion attribute type
determines the size for the IP version dependent attribute values.
These attributes are: pcelsIPHdrSourceAddress,
pcelsIPHdrSourceAddressEndOfRange, pcelsIPHdrSourceMask,
pcelsIPHdrDestAddress, pcelsIPHdrDestAddressEndOfRange and
pcelsIPHdrDestMask. Their valid values are as follows:
for IPv4: OctetStrings with a size of 4
for IPv6: OctetStrings with a size of 16 or 20
If the pcelsIPHdrVersion attribute is missing from a
pcelsFilterEntryBase instance, then the filter does not consider IP
version in selecting matching packets. In this case, the IP version
dependent attributes (listed above) must not be present in the filter
entry.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.34
NAME ’pcelsIPHdrVersion’
DESC ’IP version’
EQUALITY integerMatch
ORDERING integerOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE
)
The pcelsIPHdrSourceAddress attribute type represents a source IP
address. It is mapped from the IpHeadersFilter.HdrSrcAddress
property [PCIM_EXT]. This attribute type is of syntax OctetString
[LDAP_SYNTAX]. It has an equality matching rule of octetStringMatch
[LDAP_SCHEMA] and an ordering matching rule of
octetStringOrderingMatch [LDAP_MATCH]. Attributes of this type can
only have a single value. The only allowed values for attributes of
this type are octet strings with a size of 4, 16, or 20.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.35
NAME ’pcelsIPHdrSourceAddress’
DESC ’Source IP address’
EQUALITY octetStringMatch
ORDERING octetStringOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
SINGLE-VALUE
)
The pcelsIPHdrSourceAddressEndOfRange attribute type represents the
end of a range of source IP addresses. It is mapped from the
IpHeadersFilter.HdrSrcAddressEndOfRange property [PCIM_EXT]. This
attribute type is of syntax OctetString [LDAP_SYNTAX]. It has an
equality matching rule of octetStringMatch [LDAP_SCHEMA] and an
ordering matching rule of octetStringOrderingMatch [LDAP_MATCH].
Attributes of this type can only have a single value. The only
allowed values for attributes of this type are octet strings with a
size of 4, 16, or 20.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.36
NAME ’pcelsIPHdrSourceAddressEndOfRange’
DESC ’End of a range of source IP addresses’
EQUALITY octetStringMatch
ORDERING octetStringOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
SINGLE-VALUE
)
The pcelsIPHdrSourceMask attribute type represents the mask to be
used in comparing the source IP address. It is mapped from the
IpHeadersFilter.HdrSrcMask property [PCIM_EXT]. This attribute type
is of syntax OctetString [LDAP_SYNTAX]. It has an equality matching
rule of octetStringMatch [LDAP_SCHEMA] and an ordering matching rule
of octetStringOrderingMatch [LDAP_MATCH]. Attributes of this type
can only have a single value. The only allowed values for attributes
of this type are octet strings with a size of 4, 16, or 20.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.37
NAME ’pcelsIPHdrSourceMask’
DESC ’Mask to be used in comparing the source IP address’
EQUALITY octetStringMatch
ORDERING octetStringOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
SINGLE-VALUE
)
The pcelsIPHdrDestAddress attribute type represents a destination IP
address. It is mapped from the IpHeadersFilter.HdrDestAddress
property [PCIM_EXT]. This attribute type is of syntax OctetString
[LDAP_SYNTAX]. It has an equality matching rule of octetStringMatch
[LDAP_SCHEMA] and an ordering matching rule of
octetStringOrderingMatch [LDAP_MATCH]. Attributes of this type can
only have a single value. The only allowed values for attributes of
this type are octet strings with a size of 4, 16, or 20.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.38
NAME ’pcelsIPHdrDestAddress’