CIENA-CES-ACCESS-LIST-MIB
88 objects
This MIB module defines objects that describe Hardware ACLs (Access Control Lists). The MIB describes different objects that enable the network administrator to remotely view ACL profile/rule, configuration in addition to monitoring ACL rule statistics.
Imported Objects
| CIENA-SMI | cienaCesConfig |
| CIENA-TC | CienaGlobalState |
| INET-ADDRESS-MIB | InetAddress InetAddressPrefixLength InetAddressType InetPortNumber |
| SNMPv2-SMI | Counter64 Integer32 MODULE-IDENTITY OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | DisplayString MacAddress TEXTUAL-CONVENTION TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.1271.2.1.35 | IdentitycienaCesAccessListMIB | This MIB module defines objects that describe Hardware ACLs (Access Control Lists). The MIB describes different objects that enable the network administrator t… | ||
| 1.3.6.1.4.1.1271.2.1.35.1 | NodecienaCesAccessListMIBObjects | |||
| 1.3.6.1.4.1.1271.2.1.35.1.1 | NodecienaCesAclConfiguration | |||
| 1.3.6.1.4.1.1271.2.1.35.1.1.1 | NodecienaCesAclGlobalConfig | |||
| 1.3.6.1.4.1.1271.2.1.35.1.1.1.1 | ScalarcienaCesAclAdminStatus | read-only | current | Indicates whether the ACL feature is globally enabled or disabled. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.1.2 | ScalarcienaCesAclFilterMode | read-only | current | Indicates which global ACL device mode is currently in use. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.1.3 | ScalarcienaCesAclNumAclProfileDefs | read-only | current | Indicates the total number of configured ACL profile definitions on the device. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.1.4 | ScalarcienaCesAclRemainingAclProfileDefs | read-only | current | Indicates the number of remaining ACL profile definitions that can be configured on the device. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.1.5 | ScalarcienaCesAclNumAclRuleDefs | read-only | current | Indicates the total number of configured ACL rule definitions on the device. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.1.6 | ScalarcienaCesAclRemainingAclRuleDefs | read-only | current | Indicates the number of remaining ACL rule definitions that can be configured on the device. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2 | TablecienaCesAclProfileConfigTable | not-accessible | current | A table of ACL profiles configured on the device. Each entry contains the ACL profile configuration data. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1 | RowcienaCesAclProfileConfigTableEntry | not-accessible | current | An entry containing the ACL profile configuration data. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1.1 | ColumncienaCesAclProfileId | not-accessible | current | The unique identifier of this ACL profile. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1.2 | ColumncienaCesAclProfileName | read-only | current | The unique name of this ACL profile. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1.3 | ColumncienaCesAclProfileAdminState | read-only | current | The configured administrative State of the ACL profile. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1.4 | ColumncienaCesAclProfileOperState | read-only | current | The Operational State of the ACL profile. A profile is operationally enabled if it is administratively enabled and attached to at least one interface. It is ot… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1.5 | ColumncienaCesAclProfileDefaultFilterAction | read-only | current | The configured default filter action for this ACL profile. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1.6 | ColumncienaCesAclProfileNumRules | read-only | current | The number of ACL rules configured in this profile. There will always be at least one rule defined in each profile - the default rule. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.2.1.7 | ColumncienaCesAclProfileAttachedInterfaces | read-only | current | The number of interfaces to which this profile is attached. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3 | TablecienaCesAclRuleConfigTable | not-accessible | current | A table of ACL rules configured on the device. Each entry contains the ACL rule configuration data. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1 | RowcienaCesAclRuleConfigTableEntry | not-accessible | current | An entry containing the ACL rule configuration data. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.1 | ColumncienaCesAclRulePrecedence | not-accessible | current | The unique precedence value (within the profile) of this ACL rule. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.2 | ColumncienaCesAclRuleName | read-only | current | The unique name (within the profile) of this ACL rule. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.3 | ColumncienaCesAclRuleFilterAction | read-only | current | The configured filter action for this ACL rule. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.4 | ColumncienaCesAclRuleMatchAny | read-only | current | True if the ACL rule matches any traffic, False otherwise. Matching on any traffic automatically disregards all the remaining fields. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.5 | ColumncienaCesAclRuleMatchSrcMacAddr | read-only | current | True if the ACL rule matches on the source MAC address, False otherwise. When True, the cienaCesAclRuleSrcMacAddr and cienaCesAclRuleSrcMacAddrMask fields will… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.6 | ColumncienaCesAclRuleSrcMacAddr | read-only | current | Contains the source MAC address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.7 | ColumncienaCesAclRuleSrcMacAddrMask | read-only | current | Contains the source MAC address mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to F… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.8 | ColumncienaCesAclRuleMatchDstMacAddr | read-only | current | True if the ACL rule matches on the destination MAC address, False otherwise. When True, the cienaCesAclRuleDstMacAddr and cienaCesAclRuleDstMacAddrMask fields… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.9 | ColumncienaCesAclRuleDstMacAddr | read-only | current | Contains the destination MAC address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to F… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.10 | ColumncienaCesAclRuleDstMacAddrMask | read-only | current | Contains the destination MAC address mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.11 | ColumncienaCesAclRuleMatchOuterVid | read-only | current | True if the ACL rule matches on the outer VID, False otherwise. When True, the cienaCesAclRuleOuterVid and cienaCesAclRuleOuterVidMask fields will contain the … |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.12 | ColumncienaCesAclRuleOuterVid | read-only | current | Contains the outer VID that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.13 | ColumncienaCesAclRuleOuterVidMask | read-only | current | Contains the outer VID mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.14 | ColumncienaCesAclRuleMatchOuterPcp | read-only | current | True if the ACL rule matches on the outer PCP, False otherwise. When True, the cienaCesAclRuleOuterPcp and cienaCesAclRuleOuterPcpMask fields will contain the … |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.15 | ColumncienaCesAclRuleOuterPcp | read-only | current | Contains the outer PCP that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.16 | ColumncienaCesAclRuleOuterPcpMask | read-only | current | Contains the outer PCP mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.17 | ColumncienaCesAclRuleMatchOuterDei | read-only | current | True if the ACL rule matches on the outer DEI bit, False otherwise. When True, the cienaCesAclRuleOuterDei field will contain the outer DEI value that is to be… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.18 | ColumncienaCesAclRuleOuterDei | read-only | current | Contains the outer DEI bit that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterDei field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.19 | ColumncienaCesAclRuleMatchBaseEtype | read-only | current | True if the ACL rule matches on the base ethertype, False otherwise. When True, the cienaCesAclRuleBaseEtype field will contain the base ethertype value that i… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.20 | ColumncienaCesAclRuleBaseEtype | read-only | current | Contains the base ethertype that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchBaseEtype field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.21 | ColumncienaCesAclRuleMatchSrcIpAddr | read-only | current | True if the ACL rule matches on the source IP address, False otherwise. When True, the cienaCesAclRuleSrcIpAddrType field will contain the IP address type (IPv… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.22 | ColumncienaCesAclRuleSrcIpAddrType | read-only | current | Identifies the address family of the source IP address (IPv4/IPv6). This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.23 | ColumncienaCesAclRuleSrcIpAddr | read-only | current | Contains the source IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.24 | ColumncienaCesAclRuleSrcIpAddrPrefixLength | read-only | current | Contains the prefix length of the source IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr fie… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.25 | ColumncienaCesAclRuleMatchDstIpAddr | read-only | current | True if the ACL rule matches on the destination IP address, False otherwise. When True, the cienaCesAclRuleDstIpAddrType field will contain the IP address type… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.26 | ColumncienaCesAclRuleDstIpAddrType | read-only | current | Identifies the address family of the destination IP address (IPv4/IPv6). This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to Fa… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.27 | ColumncienaCesAclRuleDstIpAddr | read-only | current | Contains the destination IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to Fal… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.28 | ColumncienaCesAclRuleDstIpAddrPrefixLength | read-only | current | Contains the prefix length of the destination IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstIpAdd… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.29 | ColumncienaCesAclRuleMatchIpProtocol | read-only | current | True if the ACL rule matches on the IP protocol, False otherwise. When True, the cienaCesAclRuleIpProtocol field will contain the IP protocol value that is to … |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.30 | ColumncienaCesAclRuleIpProtocol | read-only | current | Contains the IP protocol value that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchIpProtocol field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.31 | ColumncienaCesAclRuleMatchDscp | read-only | current | True if the ACL rule matches on the DSCP value, False otherwise. When True, the cienaCesAclRuleDscp and cienaCesAclRuleDscpMask fields will contain the DSCP va… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.32 | ColumncienaCesAclRuleDscp | read-only | current | Contains the DSCP value that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.33 | ColumncienaCesAclRuleDscpMask | read-only | current | Contains the outer DSCP mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.34 | ColumncienaCesAclRuleMatchL4SrcPort | read-only | current | Indicates the type of L4 source port matching that the ACL rule is performing. A value of 'any' indicates that the rule matches any L4 source port. A value of … |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.35 | ColumncienaCesAclRuleL4SrcPort | read-only | current | Contains the lower bound or single L4 source port value that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4SrcPort. This field … |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.36 | ColumncienaCesAclRuleL4SrcPortUpper | read-only | current | Contains the upper bound of the L4 source port range that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4SrcPort. This field is … |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.37 | ColumncienaCesAclRuleMatchL4DstPort | read-only | current | Indicates the type of L4 destination port matching that the ACL rule is performing. A value of 'any' indicates that the rule matches any L4 destination port. A… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.38 | ColumncienaCesAclRuleL4DstPort | read-only | current | Contains the lower bound or single L4 destination port value that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4DstPort. This f… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.39 | ColumncienaCesAclRuleL4DstPortUpper | read-only | current | Contains the upper bound of the L4 destination port range that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4DstPort. This fiel… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.40 | ColumncienaCesAclRuleMatchL4DstProtocol | read-only | current | Indicates the L4 destination protocol name that is to be matched by this rule. A value of 'any' indicates that the rule will match any protocol. Note that this… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.41 | ColumncienaCesAclRuleMatchIpFragment | read-only | current | Indicates the type of IP fragment matching that is to be matched by this rule. A value of 'any' indicates that the rule will match both fragmented and non-frag… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42 | ColumncienaCesAclRuleMatchTcpFlags | read-only | current | True if the ACL rule matches on specific TCP Flags, False otherwise. When True, the cienaCesAclRuleTcpFlags field will contain the TCP Flags that are to be mat… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.43 | ColumncienaCesAclRuleTcpFlags | read-only | current | Contains a comma-separated uppercase string list of TCP Flags that are to be matched by this rule, i.e. 'SYN,ACK,RST,...'. This field is not applicable when th… |
| 1.3.6.1.4.1.1271.2.1.35.1.1.4 | TablecienaCesAclProfileAttachmentTable | not-accessible | current | A table showing the interface attachments for each profile on the device. Each entry contains the name of the interface and the traffic direction on which the … |
| 1.3.6.1.4.1.1271.2.1.35.1.1.4.1 | RowcienaCesAclProfileAttachmentTableEntry | not-accessible | current | An entry containing the ACL profile attachment data. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.4.1.1 | ColumncienaCesAclInterfaceType | not-accessible | current | The type of the interface to which this ACL profile is attached. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.4.1.2 | ColumncienaCesAclInterfaceId | not-accessible | current | The ID of the interface to which this ACL profile is attached. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.4.1.3 | ColumncienaCesAclInterfaceName | read-only | current | The name of the interface to which this ACL profile is attached. |
| 1.3.6.1.4.1.1271.2.1.35.1.1.4.1.4 | ColumncienaCesAclDirection | read-only | current | The interface's traffic direction (ingress/egress) on which the ACL profile is applied. |
| 1.3.6.1.4.1.1271.2.1.35.1.2 | NodecienaCesAclStatistics | |||
| 1.3.6.1.4.1.1271.2.1.35.1.2.1 | TablecienaCesAclProfileGlobalRuleStatsTable | not-accessible | current | A table of global ACL profile rule statistics. Global ACL profile rule statistics are the aggregate counts of the hit statistics for all instances of the ACL p… |
| 1.3.6.1.4.1.1271.2.1.35.1.2.1.1 | RowcienaCesAclProfileGlobalRuleStatsTableEntry | not-accessible | current | An entry containing the ACL profile global rule hit statistics. |
| 1.3.6.1.4.1.1271.2.1.35.1.2.1.1.1 | ColumncienaCesAclGlobalRuleStatsPacketCount | read-only | current | The number of packets that matched this ACL rule. |
| 1.3.6.1.4.1.1271.2.1.35.1.2.1.1.2 | ColumncienaCesAclGlobalRuleStatsByteCount | read-only | current | The number of bytes that matched this ACL rule. |
| 1.3.6.1.4.1.1271.2.1.35.1.2.2 | TablecienaCesAclProfileRuleInstanceStatsTable | not-accessible | current | A table of ACL profile rule instance statistics. These ACL rule hit statistics are specific to the rules applied on the particular interface. |
| 1.3.6.1.4.1.1271.2.1.35.1.2.2.1 | RowcienaCesAclProfileRuleInstanceStatsTableEntry | not-accessible | current | An entry containing the ACL profile rule instance hit statistics. |
| 1.3.6.1.4.1.1271.2.1.35.1.2.2.1.1 | ColumncienaCesAclRuleInstanceStatsPacketCount | read-only | current | The number of packets that matched this ACL rule instance. |
| 1.3.6.1.4.1.1271.2.1.35.1.2.2.1.2 | ColumncienaCesAclRuleInstanceStatsByteCount | read-only | current | The number of bytes that matched this ACL rule instance. |
| 1.3.6.1.4.1.1271.2.1.35.2 | NodecienaCesAccessListMIBConformance | |||
| 1.3.6.1.4.1.1271.2.1.35.2.1 | NodecienaCesAccessListMIBCompliances | |||
| 1.3.6.1.4.1.1271.2.1.35.2.2 | NodecienaCesAccessListMIBGroups |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| AclFilterAction | INTEGER { allow(1), deny(2) } | current | An enumeration value to indicate the filter action applied by an ACL rule. |
| AclInterfaceType | INTEGER { port(1), vlan(2), virtualswitch(3), ipinterface(4), remoteinterface(5), localinterface(6) } | current | An enumeration value to indicate the type of interface to which an ACL profile is attached. |
| AclIpFragmentMatchType | INTEGER { any(1), isfragment(2), notfragment(3) } | current | An enumeration value to indicate the type of IP fragment filtering to be done as part of an ACL rule. |
| AclL4DstProtocol | INTEGER { any(1), bgp(2), bootpclient(3), bootpserver(4), dhcpclient(5), dhcpserver(6), dhcpv6client(7), dhcpv6server(8), dns(9), ftp(10), http(11), ldp(12), ntp(13), olsr(14), rip(15), rpc(16), snmp(17), snmptrap(18), ssh(19), syslog(20), tacacs(21), telnet(22), tftp(23), twampctrl(24) } | current | An enumeration value to indicate the L4 destination protocol specified as part of an ACL rule filter term. |
| AclL4PortMatchType | INTEGER { any(1), single(2), range(3) } | current | An enumeration value to indicate the type of match to perform on an L4 src/dst port filter term. |
| AclTrafficDirection | INTEGER { ingress(1), egress(2) } | current | An enumeration value to indicate the traffic direction to which an ACL profile is applied. |