BROCADE-ACL-MIB
- Registered at
- 1.3.6.1.4.1.1588.3.1.16
- Last updated
- 2018-05-29 12:00
- Organization
- Extreme Networks, Inc.
- Revisions
- 2018-05-29 12:00
- Namespace
- extreme
- Source file
BROCADE-ACL-MIB- Digest
sha256:3d429a5428af250ea3cffb84d4524d86cd7ff0310756459a3bf6bd753cac0b01
Description
MIB module for management of ACLs.
Contact
Postal: Extreme Networks, Inc. 6480 Via Del Oro San Jose, CA 95119 USA Phone: +1 408 579-2800 E-mail: support@extremenetworks.com WWW: http://www.extremenetworks.com
Imports
| From | Symbols |
|---|---|
| Brocade-REG-MIB | bcsiModules |
| IF-MIB | ifIndex |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso |
| SNMPv2-TC | DisplayString, MacAddress, TEXTUAL-CONVENTION, TruthValue |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
BROCADE-ACL-MIB Brocade-REG-MIB IANAifType-MIB IF-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC
Textual conventions
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| BcsiAclAction TEXTUAL-CONVENTION The action to be taken on the packet after filtering is done. | current | |||
| BcsiAclLevel TEXTUAL-CONVENTION ACLs can be defined at various levels of the OSI model | current | |||
| BcsiAclMacType TEXTUAL-CONVENTION Ways of representing the source mac address. The souce mac address will be accepted in the following 3 formats: Mac address in HHHH.HHHH.HHHH format, Any source mac address, Host specific mac address. | current | |||
| BcsiAclNameString TEXTUAL-CONVENTION The name for a given access-list. | current | |||
| BcsiAclType TEXTUAL-CONVENTION Type of ACL, extended or standard. | current | |||
| BcsiDropPrecedenceForce TEXTUAL-CONVENTION Represents Priority | current | |||
| BcsiPortQosTC TEXTUAL-CONVENTION The port QOS Priority hardware queue. 1 is lowest priority, 8 is the highest. | current | |||
| BcsiTrafficDirection TEXTUAL-CONVENTION The packet flow direction within an interface for which ACL needs to be applied. | current | |||
| BcsiVlanIdOrNoneTC TEXTUAL-CONVENTION The VLAN-ID that uniquely identifies a specific VLAN, or no VLAN. The special value of zero is used to indicate that no VLAN-ID is present or used. This can be used in any situation where an object or a table entry must refer either to a specific VLAN, or to no VLAN. Note that a MIB object that is defined using this TEXTUAL-CONVENTION should clarify the meaning of 'no VLAN' (i.e., the special value 0). | current | |||
| BcsiVlanTagFormat TEXTUAL-CONVENTION A VLAN can be untagged, single tagged or double tagged | current |
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| bcsiACLNotifications OBJECT-IDENTITY | 1.3.6.1.4.1.1588.3.1.16.0 | |||
| bcsiACLObjects OBJECT-IDENTITY | 1.3.6.1.4.1.1588.3.1.16.1 | |||
| bcsiAclNameToIdMappingTable OBJECT-TYPE This table maps the string name of an ACL to its numeric ACL ID for both L2 and L3 ACLs. | 1.3.6.1.4.1.1588.3.1.16.1.1 | not-accessible | current | |
| bcsiAclNameToAclIdMappingEntry OBJECT-TYPE An entry in the bcsiAclNameToIdMappingTable which lists the ACl-ID for ACL-Names. | 1.3.6.1.4.1.1588.3.1.16.1.1.1 | not-accessible | current | |
| bcsiAclNametoAclIdMappingAclName OBJECT-TYPE Name of the ACL. | 1.3.6.1.4.1.1588.3.1.16.1.1.1.1 | BcsiAclNameString | not-accessible | current |
| bcsiAclNametoAclIdMappingAclId OBJECT-TYPE Numeric ID of the ACL. | 1.3.6.1.4.1.1588.3.1.16.1.1.1.2 | Unsigned32 | read-only | current |
| bcsiAclNametoAclIdMappingAclType OBJECT-TYPE ACL can be of two types, namely standard and extended ACL. | 1.3.6.1.4.1.1588.3.1.16.1.1.1.3 | BcsiAclType | read-only | current |
| bcsiAclNametoAclIdMappingAclLevel OBJECT-TYPE Protocol Layer at which ACLs are applied. L2 and L3 are the supported levels. | 1.3.6.1.4.1.1588.3.1.16.1.1.1.4 | BcsiAclLevel | read-only | current |
| bcsiL2NamedAclRuleTable OBJECT-TYPE Table to display the L2 Named Access Control List Information listed below among others: - Source MAC address - Source MAC mask - Destination MAC address - Destination MAC mask - VLAN ID - Ethernet type | 1.3.6.1.4.1.1588.3.1.16.1.2 | not-accessible | current | |
| bcsiL2NamedAclRuleEntry OBJECT-TYPE An entry in the L2 Access Control List table. | 1.3.6.1.4.1.1588.3.1.16.1.2.1 | not-accessible | current | |
| bcsiL2NamedAclId OBJECT-TYPE Unique Numeric ID of ACL. It is the same as bcsiAclNametoAclIdMappingAclId in bcsiAclNameToIdMappingTable | 1.3.6.1.4.1.1588.3.1.16.1.2.1.1 | Unsigned32 | not-accessible | current |
| bcsiL2NamedAclSequenceNumber OBJECT-TYPE Sequence number is the number associated with rules of ACL | 1.3.6.1.4.1.1588.3.1.16.1.2.1.2 | Unsigned32 | not-accessible | current |
| bcsiL2NamedAclName OBJECT-TYPE Represents the name of each configured L2 named ACL. It is the same as bcsiAclNametoAclIdMappingAclName in bcsiAclNameToIdMappingTable | 1.3.6.1.4.1.1588.3.1.16.1.2.1.3 | BcsiAclNameString | read-only | current |
| bcsiL2NamedAclAction OBJECT-TYPE Action to take if the ingress L2 packet matches this ACL. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.4 | BcsiAclAction | read-only | current |
| bcsiL2NamedAclSourceType OBJECT-TYPE Source can be represented in three ways: 1. Mac address in HHHH.HHHH.HHHH format. 2. Any source mac address 3. Host specific mac address Interpretation of bcsiL2NamedAclSourceMacMask depends on the value of this object | 1.3.6.1.4.1.1588.3.1.16.1.2.1.5 | BcsiAclMacType | read-only | current |
| bcsiL2NamedAclSourceMac OBJECT-TYPE Optional Source MAC address. It depends on the value of bcsiL2NamedAclSourceType. For standard(1) value of bcsiL2NamedAclSourceType, bcsiL2NamedAclSourceMac is user specified value. For any(2) value of bcsiL2NamedAclSourceType, bcsiL2NamedAclSourceMac is 0. For host(3) value of bcsiL2NamedAclSourceType, bcsiL2NamedAclSourceMac is user specified value. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.6 | MacAddress | read-write | current |
| bcsiL2NamedAclSourceMacMask OBJECT-TYPE Optional Source MAC address mask. By default, it matches with any source MAC within a packet. To match on the first two bytes of the address aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case, the clause matches all source MAC addresses that contain 'aabb' as the first two bytes and any values in the remaining bytes of the MAC address. Applicable for Extended ACLs only. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.7 | MacAddress | read-write | current |
| bcsiL2NamedAclDestinationType OBJECT-TYPE Destination can be represented in three ways. 1. Mac address in HHHH.HHHH.HHHH format. 2. Any destination mac address 3. Host specific mac address Interpretation of bcsiL2NamedAclDestinationMacMask depends on the value of this object | 1.3.6.1.4.1.1588.3.1.16.1.2.1.8 | BcsiAclMacType | read-write | current |
| bcsiL2NamedAclDestinationMac OBJECT-TYPE Optional destination MAC address. By default, it matches with any destination MAC within a packet. It depends on the value of bcsiL2NamedAclDestinationType. For standard(1) value of bcsiL2NamedAclDestinationType, bcsiL2NamedAclDestinationMac is user specified value. For any(2) value of bcsiL2NamedAclDestinationType, bcsiL2NamedAclDestinationMac is 0. For host(3) value of bcsiL2NamedAclDestinationType, bcsiL2NamedAclDestinationMac is user specified value. Applicable for Extended ACLs only. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.9 | MacAddress | read-write | current |
| bcsiL2NamedAclDestinationMacMask OBJECT-TYPE Optional destination MAC address mask. By default, it matches with any destination MAC within a packet. To match on the first two bytes of the address aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case, the clause matches all destination MAC addresses that contain 'aabb' as the first two bytes and any values in the remaining bytes of the MAC address. Applicable for Extended ACLs only. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.10 | MacAddress | read-write | current |
| bcsiL2NamedAclCount OBJECT-TYPE Indicates if the user has enabled/disabled count for number of packets against which the configured action is taken, for a given rule | 1.3.6.1.4.1.1588.3.1.16.1.2.1.11 | TruthValue | read-write | current |
| bcsiL2NamedAclCopySflow OBJECT-TYPE Indicates whether to sample the packet for sflow collection or not | 1.3.6.1.4.1.1588.3.1.16.1.2.1.12 | TruthValue | read-write | current |
| bcsiL2NamedAclDropPrecedenceForce OBJECT-TYPE Force ingress drop precedence | 1.3.6.1.4.1.1588.3.1.16.1.2.1.13 | BcsiDropPrecedenceForce | read-write | current |
| bcsiL2NamedAclVlanTagFormat OBJECT-TYPE Vlan tag format can be of 3 types, namely single-tagged, double-tagged and untagged. When neither of these 3 types of tag are used, the feild is represented by 0. When the value of this field is single-tagged(1),bcsiL2NamedAclVlanId represents the Vlan ID. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.14 | BcsiVlanTagFormat | read-write | current |
| bcsiL2NamedAclInnerVlanId OBJECT-TYPE vlan ID of the tagged inner vlan. If bcsiL2NamedAclVlanTagFormat is double-tagged(2), then 0 value of this field indicates any. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.15 | BcsiVlanIdOrNoneTC | read-write | current |
| bcsiL2NamedAclOuterVlanId OBJECT-TYPE Vlan ID of the tagged outer vlan. If bcsiL2NamedAclVlanTagFormat is double-tagged(2), then 0 value of bcsiL2NamedAclInnerVlanId indicates any. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.16 | BcsiVlanIdOrNoneTC | read-write | current |
| bcsiL2NamedAclVlanId OBJECT-TYPE Optional VLAN ID to match against that of the incoming packet. By default, the VLAN ID field is ignored during the match. In this case, value 0 is returned. This field is interpreted as Vlan ID when bcsiL2NamedAclVlanTagFormat is either 0(not tagged) or 1(single-tagged). Supported for Extended ACL only. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.17 | BcsiVlanIdOrNoneTC | read-write | current |
| bcsiL2NamedAclEthernetType OBJECT-TYPE Ethernet Type to match against the 'Ethertype' field in the L2 header of the incoming packet. By default, etype field is ignored during the match. Applicable for Extended ACLs only. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.18 | Unsigned32 | read-write | current |
| bcsiL2NamedAclArpGuard OBJECT-TYPE Represents enabling/disabling of arp-gurad for a given ACL | 1.3.6.1.4.1.1588.3.1.16.1.2.1.19 | TruthValue | read-write | current |
| bcsiL2NamedAclDot1Priority OBJECT-TYPE The priority option assigns traffic that matches the ACL to a hardware forwarding queue. In addition to changing the internal forwarding priority, if the outgoing interface is an 802.1q interface, this option maps the specified priority to its equivalent 802.1p (QoS) priority and marks the packet with the new 802.1p priority. This option is applicable for inbound ACLs only. NOTE: bcsiL2NamedAclDot1Priority following bcsiL2NamedAclDot1PriorityForce cannot be used together in an ACL entry. Applicable for Extended ACLs only. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.20 | BcsiPortQosTC | read-write | current |
| bcsiL2NamedAclDot1PriorityForce OBJECT-TYPE The priority-force option assigns packets of outgoing traffic that match the ACL to a specific hardware forwarding queue, even though the incoming packet may be assigned to another queue. This option is applicable for inbound ACLs only. NOTE: bcsiL2NamedAclDot1Priority following bcsiL2NamedAclDot1PriorityForce cannot be used together in an ACL entry. Applicable for Extended ACL only | 1.3.6.1.4.1.1588.3.1.16.1.2.1.21 | BcsiPortQosTC | read-write | current |
| bcsiL2NamedAclMirrorPackets OBJECT-TYPE Mirror packets matching ACL permit clause. Applicable for Extended ACLs only | 1.3.6.1.4.1.1588.3.1.16.1.2.1.22 | TruthValue | read-write | current |
| bcsiL2NamedAclLogEnable OBJECT-TYPE Optional parameter to enable logging only when deny clause is specified. Note that traffic denied by implicit deny mechanism is not subject to logging. The implicit deny kicks in when the traffic does not match any of the clauses and there is no 'permit any any' clause specified at the end. | 1.3.6.1.4.1.1588.3.1.16.1.2.1.23 | TruthValue | read-write | current |
| bcsiAclIfBindTable OBJECT-TYPE Table for binding L2 and L3 ACLs to interfaces. - One cannot bind Layer 2 ACLs and Layer 3 ACLs to the same port. However, configuration can be made on one port to use Layer 2 ACLs, and another port on the same device to use Layer 3 ACLs. - In general, Layer 2 ACLs cannot be bound to virtual interfaces, unlike L3 ACLs. - One can not modify an existing Layer 2 ACL clause. For that, one must unbind the ACL, delete it and make a new clause. | 1.3.6.1.4.1.1588.3.1.16.1.3 | not-accessible | current | |
| bcsiAclIfBindEntry OBJECT-TYPE An entry in the L2 and L3 ACL binding table which lists the ACL bindings to an interface. | 1.3.6.1.4.1.1588.3.1.16.1.3.1 | not-accessible | current | |
| bcsiAclIfBindDirection OBJECT-TYPE Direction in which this ACL should be applied on this port. | 1.3.6.1.4.1.1588.3.1.16.1.3.1.1 | BcsiTrafficDirection | not-accessible | current |
| bcsiAclIfBindAclName OBJECT-TYPE Represents the Name of each configured L2 or L3 named ACL. It is the same as bcsiAclNametoAclIdMappingAclName in bcsiAclNameToIdMappingTable | 1.3.6.1.4.1.1588.3.1.16.1.3.1.2 | BcsiAclNameString | read-create | current |
| bcsiACLConformance OBJECT-IDENTITY | 1.3.6.1.4.1.1588.3.1.16.2 |