MIBs Depot

CIENA-CES-ACL-MIB

Registered at
1.3.6.1.4.1.1271.2.1.25
Last updated
2012-11-21 00:00
Organization
Ciena, Inc
Revisions
2012-11-21 00:00, 2012-05-01 00:00
Namespace
ciena
Source file
CIENA-CES-ACL-MIB
Digest
sha256:b67997ea55028738c594973edca45650ad08ac6b187a1d9d9f468d8377855668

Description

This module defines the ACL details and the associated notifications.

Contact

Mib Meister 115 North Sullivan Road Spokane Valley, WA 99037 USA Phone: +1 509 242 9000 Email: support@ciena.com

Imports

FromSymbols
CIENA-SMIcienaCesConfig
CIENA-TCCienaGlobalState
INET-ADDRESS-MIBInetAddress, InetAddressPrefixLength, InetAddressType
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMICounter32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso
SNMPv2-TCDisplayString, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

CIENA-CES-ACL-MIB
CIENA-SMI
CIENA-TC
INET-ADDRESS-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
cienaCesAclMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.1271.2.1.25.1
cienaCesAclGlobal
OBJECT-IDENTITY
1.3.6.1.4.1.1271.2.1.25.1.1
cienaCesAclAdminState
OBJECT-TYPE
This object indicates the global IP ACL state.
1.3.6.1.4.1.1271.2.1.25.1.1.1CienaGlobalStateread-onlycurrent
cienaCesAclCacheHit
OBJECT-TYPE
This object indicates the number of lookups satisfied by a cache hit.
1.3.6.1.4.1.1271.2.1.25.1.1.2Counter32read-onlycurrent
cienaCesAclNoHit
OBJECT-TYPE
This object indicates the number of lookups that failed because the source ip address did not match a table entry.
1.3.6.1.4.1.1271.2.1.25.1.1.3Counter32read-onlycurrent
cienaCesAclBadPort
OBJECT-TYPE
This object indicates the number of lookups that failed because the ingress port was disallowed by a table entry.
1.3.6.1.4.1.1271.2.1.25.1.1.4Counter32read-onlycurrent
cienaCesAclBadDscp
OBJECT-TYPE
This object indicates the number of lookups that failed because the ingress DSCP value was disallowed by a table entry.
1.3.6.1.4.1.1271.2.1.25.1.1.5Counter32read-onlycurrent
cienaCesAclOperState
OBJECT-TYPE
This object indicates the current operational state of the IP ACL system.
1.3.6.1.4.1.1271.2.1.25.1.1.6CienaGlobalStateread-onlycurrent
cienaCesAclInUseEntries
OBJECT-TYPE
This object indicates the number of IP ACL rules that are currently configured.
1.3.6.1.4.1.1271.2.1.25.1.1.7Counter32read-onlycurrent
cienaCesAclMaxEntries
OBJECT-TYPE
This object indicates the maximum number of IP ACL rules that can be configured.
1.3.6.1.4.1.1271.2.1.25.1.1.8Counter32read-onlycurrent
cienaCesAclBadProtocol
OBJECT-TYPE
This object indicates the number of lookups that failed because protocol didn't match protocol allowed for matching src/dst subnet
1.3.6.1.4.1.1271.2.1.25.1.1.9Counter32read-onlycurrent
cienaCesAclRules
OBJECT-IDENTITY
1.3.6.1.4.1.1271.2.1.25.1.2
cienaCesAclTable
OBJECT-TYPE
The (conceptual) table listing the parameters for the IP ACL table.
1.3.6.1.4.1.1271.2.1.25.1.2.1not-accessibledeprecated
cienaCesAclEntry
OBJECT-TYPE
An entry (conceptual row) in the cienaCesAclTable.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1not-accessibledeprecated
cienaCesAclEntryInetAddrType
OBJECT-TYPE
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesAclEntryInetAddr and cienaCesAclEntryInetPrefixLength. When representing: ipv4 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv6 from RFC 4001
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.1InetAddressTypenot-accessibledeprecated
cienaCesAclEntryInetAddr
OBJECT-TYPE
This object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesAclEntryInetAddrType and should be compliant with RFC 4001 InetAddressType.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.2InetAddressread-onlydeprecated
cienaCesAclEntryInetPrefixLength
OBJECT-TYPE
This object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesAclEntryInetAddrType.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.3InetAddressPrefixLengthnot-accessibledeprecated
cienaCesAclEntryHits
OBJECT-TYPE
This object indicates the number of lookups that matched the table entry.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.4Counter32read-onlydeprecated
cienaCesAclEntryBadPort
OBJECT-TYPE
This object indicates the number of lookups that failed because the ingress port was disallowed by the table entry.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.5Counter32read-onlydeprecated
cienaCesAclEntryDscpMask
OBJECT-TYPE
This object indicates the DSCP values for which IP packets are allowed to ingress. The mask is big endian and each bit, numbered from 0 to 63, represents a DSCP value numbered from 0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.6OCTET STRING (SIZE(8))read-onlydeprecated
cienaCesAclEntryBadDscp
OBJECT-TYPE
This object indicates the number of lookups that failed because the ingress DSCP value was disallowed by the table entry.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.7Counter32read-onlydeprecated
cienaCesAclEntryPortBitMask
OBJECT-TYPE
This object indicates the physical ports on which frames will be allowed to ingress from. The mask is big endian and each bit, numbered from 0 to 63, represents a physical port numbered from 1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all ports.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.8OCTET STRING (SIZE(8))read-onlydeprecated
cienaCesAclEntryNotifInetAddrType
OBJECT-TYPE
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesAclEntryNotifInetAddr and cienaCesAclEntryNotifInetPrefixLength. When representing: ipv4 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv6 from RFC 4001
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.9InetAddressTyperead-onlydeprecated
cienaCesAclEntryNotifInetAddr
OBJECT-TYPE
This object indicates the IP network address that will be authorized. This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType and should be compliant with RFC 4001 InetAddressType.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.10InetAddressread-onlydeprecated
cienaCesAclEntryNotifInetPrefixLength
OBJECT-TYPE
This object indicates the prefix length for the IP network that will be authorized. This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType.
1.3.6.1.4.1.1271.2.1.25.1.2.1.1.11InetAddressPrefixLengthread-onlydeprecated
cienaCesExtAclTable
OBJECT-TYPE
The (conceptual) table listing the parameters for the extended IP ACL table.
1.3.6.1.4.1.1271.2.1.25.1.2.2not-accessiblecurrent
cienaCesExtAclEntry
OBJECT-TYPE
An entry (conceptual row) in the cienaCesExtAclTable.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1not-accessiblecurrent
cienaCesExtAclEntrySrcInetAddrType
OBJECT-TYPE
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntrySrcInetAddr and cienaCesExtAclEntrySrcInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv6 from RFC 4001
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.1InetAddressTypenot-accessiblecurrent
cienaCesExtAclEntrySrcInetAddr
OBJECT-TYPE
This object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntrySrcInetAddrType and should be compliant with RFC 4001 InetAddressType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.2InetAddress (SIZE(16))not-accessiblecurrent
cienaCesExtAclEntrySrcInetPrefixLen
OBJECT-TYPE
This object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntrySrcInetAddrType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.3InetAddressPrefixLengthnot-accessiblecurrent
cienaCesExtAclEntryDstInetAddrType
OBJECT-TYPE
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntryDstInetAddr and cienaCesExtAclEntryDstInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntryDstInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntryDstInetAddr should be compliant with InetAddressIPv6 from RFC 4001
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.4InetAddressTypenot-accessiblecurrent
cienaCesExtAclEntryDstInetAddr
OBJECT-TYPE
This object indicates the destination IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryDstInetAddrType and should be compliant with RFC 4001 InetAddressType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.5InetAddress (SIZE(16))not-accessiblecurrent
cienaCesExtAclEntryDstInetPrefixLen
OBJECT-TYPE
This object indicates the prefix length for the destination IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryDstInetAddrType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.6InetAddressPrefixLengthnot-accessiblecurrent
cienaCesExtAclEntryNotifSrcInetAddrType
OBJECT-TYPE
Duplicate of cienaCesExtAclEntrySrcInetAddrType for display purposes. This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntrySrcInetAddr and cienaCesExtAclEntrySrcInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv6 from RFC 4001
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.7InetAddressTyperead-onlycurrent
cienaCesExtAclEntryNotifSrcInetAddr
OBJECT-TYPE
Duplicate of cienaCesExtAclEntrySrcInetAddr for display purposes. This object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifSrcInetAddrType and should be compliant with RFC 4001 InetAddressType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.8InetAddressread-onlycurrent
cienaCesExtAclEntryNotifSrcInetPrefixLen
OBJECT-TYPE
Duplicate of cienaCesExtAclEntrySrcInetPrefixLen for display purposes. This object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifSrcInetAddrType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.9InetAddressPrefixLengthread-onlycurrent
cienaCesExtAclEntryNotifDstInetAddrType
OBJECT-TYPE
Duplicate of cienaCesExtAclEntryDstInetAddrType for display purposes. This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntryNotifDstInetAddr and cienaCesExtAclEntryNotifDstInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with InetAddressIPv6 from RFC 4001
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.10InetAddressTyperead-onlycurrent
cienaCesExtAclEntryNotifDstInetAddr
OBJECT-TYPE
Duplicate of cienaCesExtAclEntryDstInetAddr for display purposes. This object indicates the destination IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifDstInetAddrType and should be compliant with RFC 4001 InetAddressType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.11InetAddressread-onlycurrent
cienaCesExtAclEntryNotifDstInetPrefixLen
OBJECT-TYPE
Duplicate of cienaCesExtAclEntryDstInetPrefixLen for display purposes. This object indicates the prefix length for the destination IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifDstInetAddrType.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.12InetAddressPrefixLengthread-onlycurrent
cienaCesExtAclEntryHits
OBJECT-TYPE
This object indicates the number of lookups that matched the table entry.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.13Counter32read-onlycurrent
cienaCesExtAclEntryBadPort
OBJECT-TYPE
This object indicates the number of lookups that failed because the ingress port was disallowed by the table entry.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.14Counter32read-onlycurrent
cienaCesExtAclEntryDscpMask
OBJECT-TYPE
This object indicates the DSCP values for which IP packets are allowed to ingress. The mask is big endian and each bit, numbered from 0 to 63, represents a DSCP value numbered from 0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.15OCTET STRING (SIZE(8))read-onlycurrent
cienaCesExtAclEntryBadDscp
OBJECT-TYPE
This object indicates the number of lookups that failed because the ingress DSCP value was disallowed by the table entry.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.16Counter32read-onlycurrent
cienaCesExtAclEntryPortBitMask
OBJECT-TYPE
This object indicates the physical ports on which frames will be allowed to ingress from. The mask is big endian and each bit, numbered from 0 to 63, represents a physical port numbered from 1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all ports.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.17OCTET STRING (SIZE(8))read-onlycurrent
cienaCesExtAclEntryProtocol
OBJECT-TYPE
List of protocols allowed for the ACL entry.
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18Bits {icmp(0), tcp(1), udp(2), all(15)}read-onlycurrent
cienaCesExtAclEntryBadProtocol
OBJECT-TYPE
This object indicates the number of lookups that failed because the protocol value did't match what was in the ACL entry with IP address(es) matching
1.3.6.1.4.1.1271.2.1.25.1.2.2.1.19Counter32read-onlycurrent
cienaCesAclMIBConformance
OBJECT-IDENTITY
1.3.6.1.4.1.1271.2.1.25.3
cienaCesAclMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.1271.2.1.25.3.1
cienaCesAclMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.1271.2.1.25.3.2