CTRON-SSR-POLICY-MIB
119 objects
This module defines a schema to control filters on a device capable of Layer 3 filters also called Access Control Lists (ACLs) and at layer 2. It may also be used to configure static IP routes that use other IP header fields in addition to destination IP address.
Imported Objects
| CTRON-SSR-SMI-MIB | ssrMibs |
| Q-BRIDGE-MIB | dot1qVlanStaticEntry |
| SNMPv2-CONF | MODULE-COMPLIANCE OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Gauge32 Integer32 IpAddress MODULE-IDENTITY OBJECT-TYPE TimeTicks |
| SNMPv2-TC | DisplayString MacAddress RowStatus TEXTUAL-CONVENTION TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.52.2501.1.12 | NodepolL3Group | |||
| 1.3.6.1.4.1.52.2501.1.12.1 | ScalarpolAclServer | read-write | current | This is true when Access Control Lists (ACLs) are defined by a Policy Server else false. At boot, this value is false. After the first valid set of any policy … |
| 1.3.6.1.4.1.52.2501.1.12.2 | ScalarpolAclNumber | read-only | current | The number of Layer 3 Access Control Lists defined in the SSR. |
| 1.3.6.1.4.1.52.2501.1.12.3 | ScalarpolAclLastChanged | read-only | current | The time the Access Control List were last changed. |
| 1.3.6.1.4.1.52.2501.1.12.4 | TablepolAclTable | not-accessible | current | A list of Access Control List entries. |
| 1.3.6.1.4.1.52.2501.1.12.4.1 | RowpolAclEntry | not-accessible | current | A record containing a Access Control List. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.1 | ColumnpolAclName | read-only | current | The administratively assigned name to this static route entry. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.2 | ColumnpolAclItem | read-only | current | This row's unique identifier within a given ACL set. Member of the ACL set are numbered from 1 to 256. If Item is set to 0, and rowStatus is destroy, all rows … |
| 1.3.6.1.4.1.52.2501.1.12.4.1.3 | ColumnpolAclRestriction | read-write | current | The permissions/restrictions given to this static route entry. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.4 | ColumnpolAclProtocol | read-write | current | The IETF protocol this ACL applies to. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.5 | ColumnpolAclSrcIp | read-write | current | The source L3 IP Address this ACL applies to. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.6 | ColumnpolAclSrcMask | read-write | current | The source L3 IP Mask this ACL Applies to. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.7 | ColumnpolAclDstIp | read-write | current | The source L3 IP Address this ACL applies to. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.8 | ColumnpolAclDstMask | read-write | current | The source L3 IP Mask this ACL Applies to. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.9 | ColumnpolAclTOS | read-write | current | The source L3 IP Type of Service field. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.10 | ColumnpolAclSrcPort | read-write | current | The source L3 IP source port/socket ACL applies to. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.11 | ColumnpolAclDstPort | read-write | current | The source L3 IP destination port/socket ACL applies to. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.12 | ColumnpolAclSrcOperator | read-write | current | polAclSrcPort is compared using this operator. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.13 | ColumnpolAclDstOperator | read-write | current | polAclDstPort is compared using this operator. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.14 | ColumnpolAclSrcHighRange | read-write | current | The high range source L3 IP port. Used only when SrcOperator == range. polAclSrcPort is used as the lower bounds of the range. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.15 | ColumnpolAclDstHighRange | read-write | current | The high range destination L3 IP port. Used only when SrcOperator == range. polAclDstPort is used as the lower bounds of the range. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.16 | ColumnpolAclAuditTrail | read-write | current | Flows matching this ACL are logged for Accounting when true. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.17 | ColumnpolAclCheckpoint | read-write | current | How long to keep flow at which point a checkpoint should be done. A checkpoint may trigger earlier than this time should the maximum batch size be reached. |
| 1.3.6.1.4.1.52.2501.1.12.4.1.18 | ColumnpolAclRowStatus | read-write | current | SNMP V2 RowStatus control for this table. |
| 1.3.6.1.4.1.52.2501.1.12.5 | ScalarpolAclServiceNumber | read-only | current | The number of Layer 3 Access Control Lists in service in the SSR. |
| 1.3.6.1.4.1.52.2501.1.12.6 | ScalarpolAclServiceLastChanged | read-only | current | The time the ACLs in service were last changed. |
| 1.3.6.1.4.1.52.2501.1.12.7 | TablepolAclServiceTable | not-accessible | current | A list of ACL's currently in service. |
| 1.3.6.1.4.1.52.2501.1.12.7.1 | RowpolAclServiceEntry | not-accessible | current | A record containing a Access Control Lists applied to Interfaces. |
| 1.3.6.1.4.1.52.2501.1.12.7.1.1 | ColumnpolAclServiceIfIndex | read-only | current | The ifIndex of the IP Interface the ACL is applied to. An SSR IP Interface has ifType 142 |
| 1.3.6.1.4.1.52.2501.1.12.7.1.2 | ColumnpolAclName2 | read-only | current | The name of the ACL applied to the particular port. |
| 1.3.6.1.4.1.52.2501.1.12.7.1.3 | ColumnpolAclServiceDirection | read-write | current | The direction the ACL is applied to the particular port. |
| 1.3.6.1.4.1.52.2501.1.12.7.1.6 | ColumnpolAclServiceRowStatus | read-write | current | SNMP V2 RowStatus control for this table. |
| 1.3.6.1.4.1.52.2501.1.12.9 | ScalarpolAclRemoteAllowed | read-only | current | Remote Policy Configuration is allowed when true only local (to SSR) policy may be applied. |
| 1.3.6.1.4.1.52.2501.1.12.10 | ScalarpolAclInterfaceNumber | read-only | current | The number of Layer 3 Interfaces in service in the SSR. |
| 1.3.6.1.4.1.52.2501.1.12.11 | ScalarpolAclInterfaceLastChanged | read-only | current | The time the Interfaces in service were last changed with regard to policy. |
| 1.3.6.1.4.1.52.2501.1.12.12 | TablepolAclInterfaceTable | not-accessible | current | A list of IP Interfaces in service and their policy status. Each IP Interface can be defined to use local static policy or remote dynamic policy in the config. |
| 1.3.6.1.4.1.52.2501.1.12.12.1 | RowpolAclInterfaceEntry | not-accessible | current | A record containing a Access Control Lists applied to Interfaces. |
| 1.3.6.1.4.1.52.2501.1.12.12.1.1 | ColumnpolAclInterfaceIfIndex | read-only | current | The ifIndex of the IP Interface the ACL is applied to. |
| 1.3.6.1.4.1.52.2501.1.12.12.1.2 | ColumnpolAclInterfaceDirection | read-only | current | The direction the ACL is applied to the particular port. |
| 1.3.6.1.4.1.52.2501.1.12.12.1.3 | ColumnpolAclPolicyStatus | read-only | current | Rules for what type of management can apply ACLs to a particular interface. If set to remote, then a Policy Manager via SNMP may change dynamically the ACLs ap… |
| 1.3.6.1.4.1.52.2501.1.15 | NodepolL4Group | |||
| 1.3.6.1.4.1.52.2501.1.15.1 | ScalarpolL4PolicyBasedRoutingEnabled | read-only | current | The state of Policy Based Routing on this network element. |
| 1.3.6.1.4.1.52.2501.1.15.5 | ScalarpolL4NumRouters | read-only | current | The number of next hop routers currently available. |
| 1.3.6.1.4.1.52.2501.1.15.10 | ScalarpolL4NextHopTableLastChange | read-only | current | The value of sysUpTime when a row was last added or deleted from polL4NextHopTable. |
| 1.3.6.1.4.1.52.2501.1.15.20 | TablepolL4NextHopTable | not-accessible | current | A list of next hop IP routers. |
| 1.3.6.1.4.1.52.2501.1.15.20.1 | RowpolL4NextHopEntry | not-accessible | current | An entry contains the status of a next hop router. |
| 1.3.6.1.4.1.52.2501.1.15.20.1.1 | ColumnpolL4NextHopRouter | read-only | current | The IP Address of the next hop router flow will be sent to. |
| 1.3.6.1.4.1.52.2501.1.15.20.1.2 | ColumnpolL4NextHopState | read-only | current | The current status of the polL4NextHopRouter. If no entry found when a policy route is activated, then arp for the request the state will be waitingForArp(2). … |
| 1.3.6.1.4.1.52.2501.1.15.20.1.3 | ColumnpolL4NextHopPortOfExit | read-only | current | IfIndex of port we learned this router on or else zero if not known. |
| 1.3.6.1.4.1.52.2501.1.15.20.1.4 | ColumnpolL4NextHopMacAddress | read-only | current | MAC Address of next hop router learned from ARP. |
| 1.3.6.1.4.1.52.2501.1.15.20.1.5 | ColumnpolL4NextHopLastChange | read-only | current | The value of sysUpTime when this polL4NextHopState changed. |
| 1.3.6.1.4.1.52.2501.1.15.25 | ScalarpolL4lowControlTableLastChange | read-only | current | The value of sysUpTime when a row was last added or deleted from polL4lowControlTable. |
| 1.3.6.1.4.1.52.2501.1.15.26 | ScalarpolL4NumPolicies | read-only | current | The number of policies currently available. |
| 1.3.6.1.4.1.52.2501.1.15.30 | TablepolL4lowControlTable | not-accessible | current | Contains Control rows that indicate which flows have been redirected. As flows are aged out and recreated, these rules will enforce flow redirection policy. |
| 1.3.6.1.4.1.52.2501.1.15.30.1 | RowpolL4lowControlEntry | not-accessible | current | This table is an ordered collection of route policies. For SSR, this maps to the command: ip-policy Name [permit|deny] acl acl-list |
| 1.3.6.1.4.1.52.2501.1.15.30.1.1 | ColumnpolL4PolicyName | not-accessible | current | A unique name for this flow policy. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.2 | ColumnpolL4PolicySequence | not-accessible | current | The evaluation order of this object. When two objects have the same value, the value of the instance value decides which is evaluated first. than higher number… |
| 1.3.6.1.4.1.52.2501.1.15.30.1.3 | ColumnpolL4PolicyInstance | not-accessible | current | The sequence of this policy based route. Lower numbers have higher precedence than higher numbers. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.4 | ColumnpolL4PolicyType | read-create | current | Controls if packets are forwarded or not for this policy. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.5 | ColumnpolL4PolicyAction | read-create | current | Define when this policy should be used during normal packet forwarding process. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.6 | ColumnpolL4PolicyMatch | read-create | current | Up to twenty (20) separate ACLs may be defined to match for this policy. This object is mandatory. Use active row from polAclTable. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.7 | ColumnpolL4PolicyNextHops | read-create | current | Up to for IpAddresses may be specified to route data to next. Load balancing If more than one next hop ip address is specified, the default load balancing sche… |
| 1.3.6.1.4.1.52.2501.1.15.30.1.8 | ColumnpolL4PolicyLoading | read-create | current | When more than one next hop is defined and available, set loading policy here. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.9 | ColumnpolL4PolicyWatch | read-create | current | When True, use icmp echo to actively maintain status of next hop. This is useful to prevent data sinks with static routes. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.10 | ColumnpolL4lowCreationTime | read-only | current | The value of sysUpTime when policy went was created then activated. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.11 | ColumnpolL4lowActiveGates | read-only | current | The number of currently active nexthop gateways. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.12 | ColumnpolL4lowAppliedTimes | read-only | current | The number of times this policy was used. |
| 1.3.6.1.4.1.52.2501.1.15.30.1.13 | ColumnpolL4lowControlStatus | read-create | current | Entries in active state cause a flow to remain programmed with the next hop router specified. If the next hop router goes down, the rowStatus will become inact… |
| 1.3.6.1.4.1.52.2501.1.15.35 | NodepolL4GroupStats | |||
| 1.3.6.1.4.1.52.2501.1.15.35.1 | ScalarpolL4lowLostRouters | read-only | current | The count of times routers were disabled from NextHopTable due to lost contact. |
| 1.3.6.1.4.1.52.2501.1.15.35.2 | ScalarpolL4lowControlTableActivates | read-only | current | The count of successful activations of flow control policies made. |
| 1.3.6.1.4.1.52.2501.1.15.35.3 | ScalarpolL4lowControlTableActivateFails | read-only | current | The count of unsuccessful flow control policies made. |
| 1.3.6.1.4.1.52.2501.1.15.35.4 | ScalarpolL4lowArpMappingChanges | read-only | current | The count of mac to next hop IP address mapping changes affecting policy based route tables. |
| 1.3.6.1.4.1.52.2501.1.15.35.16 | ScalarpolL4lowIcmpRedirects | read-only | current | The count of next hop route redirects received that match a policy in the polL4lowControlTable. This can help to determine if bad route policies are in effect. |
| 1.3.6.1.4.1.52.2501.1.15.35.17 | ScalarpolL4lowMatchAttempts | read-only | current | The count of total number of policy based flow lookups made against policy based route table. |
| 1.3.6.1.4.1.52.2501.1.16 | NodepolL2Group | |||
| 1.3.6.1.4.1.52.2501.1.16.1 | ScalarpolL2FilterNumber | read-only | current | The number of Layer 3 Access Control Lists defined in the SSR. |
| 1.3.6.1.4.1.52.2501.1.16.2 | ScalarpolL2FilterLastChanged | read-only | current | The time the Access Control List were last changed. |
| 1.3.6.1.4.1.52.2501.1.16.3 | TablepolL2FilterTable | not-accessible | current | A list of Layer 2 filters. |
| 1.3.6.1.4.1.52.2501.1.16.3.1 | RowpolL2FilterEntry | not-accessible | current | An entry containing a layer 2 filter. |
| 1.3.6.1.4.1.52.2501.1.16.3.1.1 | ColumnpolL2FilterIndex | not-accessible | current | A unique index into the table representing a single filter entry. This value will remain unique and the relationship between the index and the underlying filte… |
| 1.3.6.1.4.1.52.2501.1.16.3.1.2 | ColumnpolL2FilterDesc | read-create | current | A string used to describe the filter. It should contain the creator IP address, and other descriptive information about the filter. It is recommended that name… |
| 1.3.6.1.4.1.52.2501.1.16.3.1.3 | ColumnpolL2FilterType | read-create | current | The types of filters, as explained below. static-entry Based on the restrictions and the presence of source, destination MAC address they can be of three types… |
| 1.3.6.1.4.1.52.2501.1.16.3.1.4 | ColumnpolL2FilterRestrictions | read-create | current | The first 3 restrictions, allow, disallow, force apply when the filterType is static-entry. When polL2FilterType is addressFilter or portAddressLock, this obje… |
| 1.3.6.1.4.1.52.2501.1.16.3.1.5 | ColumnpolL2FilterSrcMacAddr | read-create | current | The source MAC address, which is present in case of a Flow, that has been learned by the switch. |
| 1.3.6.1.4.1.52.2501.1.16.3.1.6 | ColumnpolL2FilterDstMacAddr | read-create | current | The destination MAC address which has been learned. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). |
| 1.3.6.1.4.1.52.2501.1.16.3.1.7 | ColumnpolL2FilterVlanId | read-create | current | The VLAN the destination MAC address belongs to. The default VLAN is id 1 on SSR. This object may not be modified if the associated. polL2FilterStatus object i… |
| 1.3.6.1.4.1.52.2501.1.16.3.1.8 | ColumnpolL2FilterInPorts | read-create | current | The set of Ports to which this filter applies on input. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). |
| 1.3.6.1.4.1.52.2501.1.16.3.1.9 | ColumnpolL2FilterOutPorts | read-create | current | The set of ports to which this filter applies on output. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). |
| 1.3.6.1.4.1.52.2501.1.16.3.1.10 | ColumnpolL2FilterCreationTime | read-only | current | The value of sysUpTime when this filter was made active(1). |
| 1.3.6.1.4.1.52.2501.1.16.3.1.11 | ColumnpolL2FilterStatus | read-create | current | SMIv2 RowStatus control for this table. Use createAndWait or createAndGo to create a filter, use destroy to remove an entry or notInService to disengage a filt… |
| 1.3.6.1.4.1.52.2501.1.16.4 | TablepolL2Dot1qVlanStaticTable | not-accessible | current | A table containing hardware specific VLAN behavior configuration information for VLANs created with the dot1qVlanStaticTable. Configuration information for eac… |
| 1.3.6.1.4.1.52.2501.1.16.4.1 | RowpolL2Dot1qVlanStaticEntry | not-accessible | current | An entry containing additional hardware specific objects for a dot1qVlanStaticEntry. |
| 1.3.6.1.4.1.52.2501.1.16.4.1.1 | ColumnpolL2Dot1qVlanStaticProtocols | read-create | current | Specifies the types of traffic that will be forwarded on this VLAN. Protocols not set in this definition will be filtered. The types of protocols supported on … |
| 1.3.6.1.4.1.52.2501.1.16.4.1.2 | ColumnpolL2Dot1qVlanStaticL4Bridging | read-create | current | If this object has a value of false(2), the L4 Bridging feature is not enabled on this VLAN. If this object has a value of true(1), the L4 Bridging feature is … |
| 1.3.6.1.4.1.52.2501.1.210 | IdentitypolicyMIB | This module defines a schema to control filters on a device capable of Layer 3 filters also called Access Control Lists (ACLs) and at layer 2. It may also be u… | ||
| 1.3.6.1.4.1.52.2501.1.210.2 | NodepolConformance | |||
| 1.3.6.1.4.1.52.2501.1.210.2.1 | NodepolCompliances | |||
| 1.3.6.1.4.1.52.2501.1.210.2.1.1 | CompliancepolComplianceV10 | deprecated | The compliance statement for the policyMIB. | |
| 1.3.6.1.4.1.52.2501.1.210.2.1.2 | CompliancepolComplianceV11 | deprecated | The compliance statement for the policyMIB for version 1.1. | |
| 1.3.6.1.4.1.52.2501.1.210.2.1.3 | CompliancepolComplianceV12 | current | The compliance statement for the policyMIB for version 1.2. | |
| 1.3.6.1.4.1.52.2501.1.210.2.1.4 | CompliancepolComplianceV13 | current | The compliance statement for the policyMIB for version 1.3. | |
| 1.3.6.1.4.1.52.2501.1.210.2.2 | NodepolGroups | |||
| 1.3.6.1.4.1.52.2501.1.210.2.2.1 | GrouppolGroupV10 | deprecated | A set of managed objects that make up version 1.0 of the SSR Flow Policy MIB. | |
| 1.3.6.1.4.1.52.2501.1.210.2.2.2 | GrouppolGroupV11 | deprecated | A set of managed objects that make up version 1.1 of the SSR Flow Policy MIB. | |
| 1.3.6.1.4.1.52.2501.1.210.2.2.3 | GrouppolGroupV12 | current | A set of managed objects that make up version 1.2 of the SSR Flow Policy MIB. | |
| 1.3.6.1.4.1.52.2501.1.210.2.2.4 | GrouppolGroupV13 | current | A set of managed objects that make up version 1.3 of the SSR Flow Policy MIB. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| InterfaceIndex | Integer32 (1..2147483647) | current | A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub- layer must r… |
| InterfaceIndexOrZero | Integer32 (0..2147483647) | current | This textual convention is an extension of the InterfaceIndex convention. The latter defines a greater than zero value used to identify an interface or interface sub-layer in the managed system. This extension permits t… |
| SSRFlowLoadPolicy | INTEGER { firstAvailable(2), roundRobin(3) } | current | round robin evenly distributes flows among the next hops. firstAvailable will make flows go to the first available next hop in the ordered list. |
| SSRFlowNextHopList | OCTET STRING (SIZE(1..4096)) | current | A blank separated list of from one to four l4fNextHopRouter ipaddresses or the keyword null. Null represents the null interface |
| SSRFlowPolicyAclList | OCTET STRING (SIZE(1..4096)) | current | A blank separated list of ACL names used to match flows against from the polAclTable. The keyword, everything, may be used to match all traffic. ASCII printable characters only |
| SSRFlowPolicyAction | INTEGER { policyBeforeRouteLookup(1), policyAfterRouteLookup(2), useOnlyPolicyLookup(3) } | current | When deciding when to apply policy there are three potential methods. policyBeforeRouteLookup provides a way to special case normal traffic patterns so that certain traffic can be routed according to policy. policyAfter… |
| SSRFlowPolicyType | INTEGER { permitFlow(1), denyFlow(2) } | current | Type of Flow Policy. permitFlow allows matching traffic to be forwarded. denyFlow causes matching traffic to be discarded. |
| SSRPortComparator | INTEGER { notused(1), eq(2), neq(3), lt(4), gt(5), range(6) } | current | Comparison operator used by ACL's to permit src/dst port addresses. |
| SSRPortList | OCTET STRING (SIZE (0..255)) | current | List of ifIndexes that make up the ports to apply a layer 2 filter to. The ifIndexes are numbered sparsely starting from 1. An example string might be: 1,2,32 1,6,9, Each ifIndex must represent a physical port or link a… |
| SSRProtocol | INTEGER { ip(1), tcp(2), udp(3), icmp(4), igmp(5), ipx(6), ipxsap(7), ipxrip(8) } | current | Protocols supported by L3 ACLs. |
| SSRsocketId | INTEGER (0..65535) | current | A TCP or UDP port or socket end point. |
| SSRVlanIndex | INTEGER (1..4100) | current | An 802.1Q VLAN Identifier with same semantics as Q-BRIDGE-MIB VlanId. SSR uses Vid 1 for the default VLAN. All ports by default belong to this VLAN unless assigned to one or more user defined VLANs. A value of 4100 is u… |