CTRON-SSR-POLICY-MIB
- Registered at
- 1.3.6.1.4.1.52.2501.1.121.3.6.1.4.1.52.2501.1.151.3.6.1.4.1.52.2501.1.161.3.6.1.4.1.52.2501.1.210
- Last updated
- 2003-12-19 17:12
- Organization
- Enterasys Networks, Inc
- Revisions
- 2003-12-19 17:12, 2003-07-21 15:01, 2000-07-15 00:00, 1999-08-11 00:00, 1999-07-21 00:00, 1998-08-04 00:00
- Namespace
- enterasys
- Source file
CTRON-SSR-POLICY-MIB- Digest
sha256:477b432c43c1a952d0fd52e5c5cf923ab9995b99be72e5717a28a140317eb2ff
Description
This module defines a schema to control filters on a device capable of Layer 3 filters also called Access Control Lists (ACLs) and at layer 2. It may also be used to configure static IP routes that use other IP header fields in addition to destination IP address.
Contact
Postal: Enterasys Networks 50 Minuteman Rd. Andover, MA 01810-1008 USA Phone: +1 978 684 1000 E-mail: support@enterasys.com WWW: http://www.enterasys.com
Imports
| From | Symbols |
|---|---|
| CTRON-SSR-SMI-MIB | ssrMibs |
| Q-BRIDGE-MIB | dot1qVlanStaticEntry |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter32, Gauge32, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, TimeTicks, iso |
| SNMPv2-TC | DisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue |
Imported by
1 module(s) in this corpus import this one.
Load order
Every file a consumer needs in order to load this module, dependencies first.
BRIDGE-MIB CTRON-OIDS CTRON-SSR-POLICY-MIB CTRON-SSR-SMI-MIB IANAifType-MIB IF-MIB P-BRIDGE-MIB Q-BRIDGE-MIB RFC1158-MIB RFC1271-MIB RMON-MIB RMON2-MIB SNMP-FRAMEWORK-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC TOKEN-RING-RMON-MIB
Textual conventions
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| InterfaceIndex TEXTUAL-CONVENTION A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub- layer must remain constant at least from one re- initialization of the entity's network management system to the next re-initialization. | current | |||
| InterfaceIndexOrZero TEXTUAL-CONVENTION This textual convention is an extension of the InterfaceIndex convention. The latter defines a greater than zero value used to identify an interface or interface sub-layer in the managed system. This extension permits the additional value of zero. the value zero is object-specific and must therefore be defined as part of the description of any object which uses this syntax. Examples of the usage of zero might include situations where interface was unknown, or when none or all interfaces need to be referenced. | current | |||
| SSRFlowLoadPolicy TEXTUAL-CONVENTION round robin evenly distributes flows among the next hops. firstAvailable will make flows go to the first available next hop in the ordered list. | current | |||
| SSRFlowNextHopList TEXTUAL-CONVENTION A blank separated list of from one to four l4fNextHopRouter ipaddresses or the keyword null. Null represents the null interface | current | |||
| SSRFlowPolicyAclList TEXTUAL-CONVENTION A blank separated list of ACL names used to match flows against from the polAclTable. The keyword, everything, may be used to match all traffic. ASCII printable characters only | current | |||
| SSRFlowPolicyAction TEXTUAL-CONVENTION When deciding when to apply policy there are three potential methods. policyBeforeRouteLookup provides a way to special case normal traffic patterns so that certain traffic can be routed according to policy. policyAfterRouteLookup is useful when a default route does not exist and the traffic to route does not match existing route tables. useOnlyPolicyLookup bypasses normal route lookup altogether. | current | |||
| SSRFlowPolicyType TEXTUAL-CONVENTION Type of Flow Policy. permitFlow allows matching traffic to be forwarded. denyFlow causes matching traffic to be discarded. | current | |||
| SSRPortComparator TEXTUAL-CONVENTION Comparison operator used by ACL's to permit src/dst port addresses. | current | |||
| SSRPortList TEXTUAL-CONVENTION List of ifIndexes that make up the ports to apply a layer 2 filter to. The ifIndexes are numbered sparsely starting from 1. An example string might be: 1,2,32 1,6,9, Each ifIndex must represent a physical port or link aggregation aka Smart Trunk ifType of propMultiplexor(54). Note ifIndexes may change across system resets per RFC 2233. | current | |||
| SSRProtocol TEXTUAL-CONVENTION Protocols supported by L3 ACLs. | current | |||
| SSRVlanIndex TEXTUAL-CONVENTION An 802.1Q VLAN Identifier with same semantics as Q-BRIDGE-MIB VlanId. SSR uses Vid 1 for the default VLAN. All ports by default belong to this VLAN unless assigned to one or more user defined VLANs. A value of 4100 is used to match all VLANs. 4094 to 4099 are reserved local VLAN ids on the SSR. | current | |||
| SSRsocketId TEXTUAL-CONVENTION A TCP or UDP port or socket end point. | current |
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| polL3Group OBJECT-IDENTITY | 1.3.6.1.4.1.52.2501.1.12 | |||
| polAclServer OBJECT-TYPE This is true when Access Control Lists (ACLs) are defined by a Policy Server else false. At boot, this value is false. After the first valid set of any policy object, the value changes to true. | 1.3.6.1.4.1.52.2501.1.12.1 | TruthValue | read-write | current |
| polAclNumber OBJECT-TYPE The number of Layer 3 Access Control Lists defined in the SSR. | 1.3.6.1.4.1.52.2501.1.12.2 | INTEGER (0..2147483647) | read-only | current |
| polAclLastChanged OBJECT-TYPE The time the Access Control List were last changed. | 1.3.6.1.4.1.52.2501.1.12.3 | TimeTicks | read-only | current |
| polAclTable OBJECT-TYPE A list of Access Control List entries. | 1.3.6.1.4.1.52.2501.1.12.4 | not-accessible | current | |
| polAclEntry OBJECT-TYPE A record containing a Access Control List. | 1.3.6.1.4.1.52.2501.1.12.4.1 | not-accessible | current | |
| polAclName OBJECT-TYPE The administratively assigned name to this static route entry. | 1.3.6.1.4.1.52.2501.1.12.4.1.1 | DisplayString | read-only | current |
| polAclItem OBJECT-TYPE This row's unique identifier within a given ACL set. Member of the ACL set are numbered from 1 to 256. If Item is set to 0, and rowStatus is destroy, all rows for this set are destroyed. | 1.3.6.1.4.1.52.2501.1.12.4.1.2 | INTEGER (0..256) | read-only | current |
| polAclRestriction OBJECT-TYPE The permissions/restrictions given to this static route entry. | 1.3.6.1.4.1.52.2501.1.12.4.1.3 | INTEGER {permit(1), deny(2)} | read-write | current |
| polAclProtocol OBJECT-TYPE The IETF protocol this ACL applies to. | 1.3.6.1.4.1.52.2501.1.12.4.1.4 | SSRProtocol | read-write | current |
| polAclSrcIp OBJECT-TYPE The source L3 IP Address this ACL applies to. | 1.3.6.1.4.1.52.2501.1.12.4.1.5 | IpAddress | read-write | current |
| polAclSrcMask OBJECT-TYPE The source L3 IP Mask this ACL Applies to. | 1.3.6.1.4.1.52.2501.1.12.4.1.6 | IpAddress | read-write | current |
| polAclDstIp OBJECT-TYPE The source L3 IP Address this ACL applies to. | 1.3.6.1.4.1.52.2501.1.12.4.1.7 | IpAddress | read-write | current |
| polAclDstMask OBJECT-TYPE The source L3 IP Mask this ACL Applies to. | 1.3.6.1.4.1.52.2501.1.12.4.1.8 | IpAddress | read-write | current |
| polAclTOS OBJECT-TYPE The source L3 IP Type of Service field. | 1.3.6.1.4.1.52.2501.1.12.4.1.9 | INTEGER (0..15) | read-write | current |
| polAclSrcPort OBJECT-TYPE The source L3 IP source port/socket ACL applies to. | 1.3.6.1.4.1.52.2501.1.12.4.1.10 | SSRsocketId | read-write | current |
| polAclDstPort OBJECT-TYPE The source L3 IP destination port/socket ACL applies to. | 1.3.6.1.4.1.52.2501.1.12.4.1.11 | SSRsocketId | read-write | current |
| polAclSrcOperator OBJECT-TYPE polAclSrcPort is compared using this operator. | 1.3.6.1.4.1.52.2501.1.12.4.1.12 | SSRPortComparator | read-write | current |
| polAclDstOperator OBJECT-TYPE polAclDstPort is compared using this operator. | 1.3.6.1.4.1.52.2501.1.12.4.1.13 | SSRPortComparator | read-write | current |
| polAclSrcHighRange OBJECT-TYPE The high range source L3 IP port. Used only when SrcOperator == range. polAclSrcPort is used as the lower bounds of the range. | 1.3.6.1.4.1.52.2501.1.12.4.1.14 | INTEGER (-1..65535) | read-write | current |
| polAclDstHighRange OBJECT-TYPE The high range destination L3 IP port. Used only when SrcOperator == range. polAclDstPort is used as the lower bounds of the range. | 1.3.6.1.4.1.52.2501.1.12.4.1.15 | INTEGER (-1..65535) | read-write | current |
| polAclAuditTrail OBJECT-TYPE Flows matching this ACL are logged for Accounting when true. | 1.3.6.1.4.1.52.2501.1.12.4.1.16 | TruthValue | read-write | current |
| polAclCheckpoint OBJECT-TYPE How long to keep flow at which point a checkpoint should be done. A checkpoint may trigger earlier than this time should the maximum batch size be reached. | 1.3.6.1.4.1.52.2501.1.12.4.1.17 | INTEGER {hourly(1), daily(2), weekly(3), monthly(4), endofcall(5)} | read-write | current |
| polAclRowStatus OBJECT-TYPE SNMP V2 RowStatus control for this table. | 1.3.6.1.4.1.52.2501.1.12.4.1.18 | RowStatus | read-write | current |
| polAclServiceNumber OBJECT-TYPE The number of Layer 3 Access Control Lists in service in the SSR. | 1.3.6.1.4.1.52.2501.1.12.5 | INTEGER (0..2147483647) | read-only | current |
| polAclServiceLastChanged OBJECT-TYPE The time the ACLs in service were last changed. | 1.3.6.1.4.1.52.2501.1.12.6 | TimeTicks | read-only | current |
| polAclServiceTable OBJECT-TYPE A list of ACL's currently in service. | 1.3.6.1.4.1.52.2501.1.12.7 | not-accessible | current | |
| polAclServiceEntry OBJECT-TYPE A record containing a Access Control Lists applied to Interfaces. | 1.3.6.1.4.1.52.2501.1.12.7.1 | not-accessible | current | |
| polAclServiceIfIndex OBJECT-TYPE The ifIndex of the IP Interface the ACL is applied to. An SSR IP Interface has ifType 142 | 1.3.6.1.4.1.52.2501.1.12.7.1.1 | InterfaceIndex | read-only | current |
| polAclName2 OBJECT-TYPE The name of the ACL applied to the particular port. | 1.3.6.1.4.1.52.2501.1.12.7.1.2 | DisplayString | read-only | current |
| polAclServiceDirection OBJECT-TYPE The direction the ACL is applied to the particular port. | 1.3.6.1.4.1.52.2501.1.12.7.1.3 | INTEGER {ingress(1), egress(2), both(3)} | read-write | current |
| polAclServiceRowStatus OBJECT-TYPE SNMP V2 RowStatus control for this table. | 1.3.6.1.4.1.52.2501.1.12.7.1.6 | RowStatus | read-write | current |
| polAclRemoteAllowed OBJECT-TYPE Remote Policy Configuration is allowed when true only local (to SSR) policy may be applied. | 1.3.6.1.4.1.52.2501.1.12.9 | TruthValue | read-only | current |
| polAclInterfaceNumber OBJECT-TYPE The number of Layer 3 Interfaces in service in the SSR. | 1.3.6.1.4.1.52.2501.1.12.10 | INTEGER (0..2147483647) | read-only | current |
| polAclInterfaceLastChanged OBJECT-TYPE The time the Interfaces in service were last changed with regard to policy. | 1.3.6.1.4.1.52.2501.1.12.11 | TimeTicks | read-only | current |
| polAclInterfaceTable OBJECT-TYPE A list of IP Interfaces in service and their policy status. Each IP Interface can be defined to use local static policy or remote dynamic policy in the config. | 1.3.6.1.4.1.52.2501.1.12.12 | not-accessible | current | |
| polAclInterfaceEntry OBJECT-TYPE A record containing a Access Control Lists applied to Interfaces. | 1.3.6.1.4.1.52.2501.1.12.12.1 | not-accessible | current | |
| polAclInterfaceIfIndex OBJECT-TYPE The ifIndex of the IP Interface the ACL is applied to. | 1.3.6.1.4.1.52.2501.1.12.12.1.1 | InterfaceIndex | read-only | current |
| polAclInterfaceDirection OBJECT-TYPE The direction the ACL is applied to the particular port. | 1.3.6.1.4.1.52.2501.1.12.12.1.2 | INTEGER {ingress(1), egress(2), both(3)} | read-only | current |
| polAclPolicyStatus OBJECT-TYPE Rules for what type of management can apply ACLs to a particular interface. If set to remote, then a Policy Manager via SNMP may change dynamically the ACLs applied to an interface. Note, ACLs applied dynamically are not maintained across system reboot. Use local ACLs to setup the basic rules then apply dynamic rules as necessary. | 1.3.6.1.4.1.52.2501.1.12.12.1.3 | INTEGER {local(1), remote(2)} | read-only | current |
| polL4Group OBJECT-IDENTITY | 1.3.6.1.4.1.52.2501.1.15 | |||
| polL4PolicyBasedRoutingEnabled OBJECT-TYPE The state of Policy Based Routing on this network element. | 1.3.6.1.4.1.52.2501.1.15.1 | TruthValue | read-only | current |
| polL4NumRouters OBJECT-TYPE The number of next hop routers currently available. | 1.3.6.1.4.1.52.2501.1.15.5 | INTEGER (0..10) | read-only | current |
| polL4NextHopTableLastChange OBJECT-TYPE The value of sysUpTime when a row was last added or deleted from polL4NextHopTable. | 1.3.6.1.4.1.52.2501.1.15.10 | TimeTicks | read-only | current |
| polL4NextHopTable OBJECT-TYPE A list of next hop IP routers. | 1.3.6.1.4.1.52.2501.1.15.20 | not-accessible | current | |
| polL4NextHopEntry OBJECT-TYPE An entry contains the status of a next hop router. | 1.3.6.1.4.1.52.2501.1.15.20.1 | not-accessible | current | |
| polL4NextHopRouter OBJECT-TYPE The IP Address of the next hop router flow will be sent to. | 1.3.6.1.4.1.52.2501.1.15.20.1.1 | IpAddress | read-only | current |
| polL4NextHopState OBJECT-TYPE The current status of the polL4NextHopRouter. If no entry found when a policy route is activated, then arp for the request the state will be waitingForArp(2). If a reply is found the state will go to macAcquired(3) else noArpReply(4). If NextHop is not local, mac is actual nexthop router. | 1.3.6.1.4.1.52.2501.1.15.20.1.2 | INTEGER {unknown(1), waitingForArp(2), macAcquired(3), noArpReply(4)} | read-only | current |
| polL4NextHopPortOfExit OBJECT-TYPE IfIndex of port we learned this router on or else zero if not known. | 1.3.6.1.4.1.52.2501.1.15.20.1.3 | InterfaceIndexOrZero | read-only | current |
| polL4NextHopMacAddress OBJECT-TYPE MAC Address of next hop router learned from ARP. | 1.3.6.1.4.1.52.2501.1.15.20.1.4 | MacAddress | read-only | current |
| polL4NextHopLastChange OBJECT-TYPE The value of sysUpTime when this polL4NextHopState changed. | 1.3.6.1.4.1.52.2501.1.15.20.1.5 | TimeTicks | read-only | current |
| polL4lowControlTableLastChange OBJECT-TYPE The value of sysUpTime when a row was last added or deleted from polL4lowControlTable. | 1.3.6.1.4.1.52.2501.1.15.25 | TimeTicks | read-only | current |
| polL4NumPolicies OBJECT-TYPE The number of policies currently available. | 1.3.6.1.4.1.52.2501.1.15.26 | INTEGER (0..100000) | read-only | current |
| polL4lowControlTable OBJECT-TYPE Contains Control rows that indicate which flows have been redirected. As flows are aged out and recreated, these rules will enforce flow redirection policy. | 1.3.6.1.4.1.52.2501.1.15.30 | not-accessible | current | |
| polL4lowControlEntry OBJECT-TYPE This table is an ordered collection of route policies. For SSR, this maps to the command: ip-policy Name [permit|deny] acl acl-list | 1.3.6.1.4.1.52.2501.1.15.30.1 | not-accessible | current | |
| polL4PolicyName OBJECT-TYPE A unique name for this flow policy. | 1.3.6.1.4.1.52.2501.1.15.30.1.1 | DisplayString | not-accessible | current |
| polL4PolicySequence OBJECT-TYPE The evaluation order of this object. When two objects have the same value, the value of the instance value decides which is evaluated first. than higher numbers. | 1.3.6.1.4.1.52.2501.1.15.30.1.2 | Integer32 (1..65535) | not-accessible | current |
| polL4PolicyInstance OBJECT-TYPE The sequence of this policy based route. Lower numbers have higher precedence than higher numbers. | 1.3.6.1.4.1.52.2501.1.15.30.1.3 | Integer32 (1..65535) | not-accessible | current |
| polL4PolicyType OBJECT-TYPE Controls if packets are forwarded or not for this policy. | 1.3.6.1.4.1.52.2501.1.15.30.1.4 | SSRFlowPolicyType | read-create | current |
| polL4PolicyAction OBJECT-TYPE Define when this policy should be used during normal packet forwarding process. | 1.3.6.1.4.1.52.2501.1.15.30.1.5 | SSRFlowPolicyAction | read-create | current |
| polL4PolicyMatch OBJECT-TYPE Up to twenty (20) separate ACLs may be defined to match for this policy. This object is mandatory. Use active row from polAclTable. | 1.3.6.1.4.1.52.2501.1.15.30.1.6 | SSRFlowPolicyAclList | read-create | current |
| polL4PolicyNextHops OBJECT-TYPE Up to for IpAddresses may be specified to route data to next. Load balancing If more than one next hop ip address is specified, the default load balancing scheme is round robin. This object is mandatory. Use objects from polL4NextHopTable. | 1.3.6.1.4.1.52.2501.1.15.30.1.7 | SSRFlowNextHopList | read-create | current |
| polL4PolicyLoading OBJECT-TYPE When more than one next hop is defined and available, set loading policy here. | 1.3.6.1.4.1.52.2501.1.15.30.1.8 | SSRFlowLoadPolicy | read-create | current |
| polL4PolicyWatch OBJECT-TYPE When True, use icmp echo to actively maintain status of next hop. This is useful to prevent data sinks with static routes. | 1.3.6.1.4.1.52.2501.1.15.30.1.9 | TruthValue | read-create | current |
| polL4lowCreationTime OBJECT-TYPE The value of sysUpTime when policy went was created then activated. | 1.3.6.1.4.1.52.2501.1.15.30.1.10 | TimeTicks | read-only | current |
| polL4lowActiveGates OBJECT-TYPE The number of currently active nexthop gateways. | 1.3.6.1.4.1.52.2501.1.15.30.1.11 | Gauge32 | read-only | current |
| polL4lowAppliedTimes OBJECT-TYPE The number of times this policy was used. | 1.3.6.1.4.1.52.2501.1.15.30.1.12 | Counter32 | read-only | current |
| polL4lowControlStatus OBJECT-TYPE Entries in active state cause a flow to remain programmed with the next hop router specified. If the next hop router goes down, the rowStatus will become inactive. New flows that match this specification will assume this next hop router over any other route directive. This assumes polL4PolicyBasedRouteState value is true. | 1.3.6.1.4.1.52.2501.1.15.30.1.13 | RowStatus | read-create | current |
| polL4GroupStats OBJECT-IDENTITY | 1.3.6.1.4.1.52.2501.1.15.35 | |||
| polL4lowLostRouters OBJECT-TYPE The count of times routers were disabled from NextHopTable due to lost contact. | 1.3.6.1.4.1.52.2501.1.15.35.1 | Counter32 | read-only | current |
| polL4lowControlTableActivates OBJECT-TYPE The count of successful activations of flow control policies made. | 1.3.6.1.4.1.52.2501.1.15.35.2 | Counter32 | read-only | current |
| polL4lowControlTableActivateFails OBJECT-TYPE The count of unsuccessful flow control policies made. | 1.3.6.1.4.1.52.2501.1.15.35.3 | Counter32 | read-only | current |
| polL4lowArpMappingChanges OBJECT-TYPE The count of mac to next hop IP address mapping changes affecting policy based route tables. | 1.3.6.1.4.1.52.2501.1.15.35.4 | Counter32 | read-only | current |
| polL4lowIcmpRedirects OBJECT-TYPE The count of next hop route redirects received that match a policy in the polL4lowControlTable. This can help to determine if bad route policies are in effect. | 1.3.6.1.4.1.52.2501.1.15.35.16 | Counter32 | read-only | current |
| polL4lowMatchAttempts OBJECT-TYPE The count of total number of policy based flow lookups made against policy based route table. | 1.3.6.1.4.1.52.2501.1.15.35.17 | Counter32 | read-only | current |
| polL2Group OBJECT-IDENTITY | 1.3.6.1.4.1.52.2501.1.16 | |||
| polL2FilterNumber OBJECT-TYPE The number of Layer 3 Access Control Lists defined in the SSR. | 1.3.6.1.4.1.52.2501.1.16.1 | INTEGER (0..2147483647) | read-only | current |
| polL2FilterLastChanged OBJECT-TYPE The time the Access Control List were last changed. | 1.3.6.1.4.1.52.2501.1.16.2 | TimeTicks | read-only | current |
| polL2FilterTable OBJECT-TYPE A list of Layer 2 filters. | 1.3.6.1.4.1.52.2501.1.16.3 | not-accessible | current | |
| polL2FilterEntry OBJECT-TYPE An entry containing a layer 2 filter. | 1.3.6.1.4.1.52.2501.1.16.3.1 | not-accessible | current | |
| polL2FilterIndex OBJECT-TYPE A unique index into the table representing a single filter entry. This value will remain unique and the relationship between the index and the underlying filter is valid until the next reboot. | 1.3.6.1.4.1.52.2501.1.16.3.1.1 | INTEGER (1..65535) | not-accessible | current |
| polL2FilterDesc OBJECT-TYPE A string used to describe the filter. It should contain the creator IP address, and other descriptive information about the filter. It is recommended that names be unique within a given filter type. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.2 | DisplayString (SIZE(0..25)) | read-create | current |
| polL2FilterType OBJECT-TYPE The types of filters, as explained below. static-entry Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-static-entry - All frames with a source address equal to srcMAC, coming through any of the inPorts will be allowed/disallowed to go to any port that is a member of the outPorts list. destination-static-entry - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be allowed/ disallowed/forced to go to any port that is a member of the outPorts list. flow-static-entry - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be allowed/disallowed to go to any port that is a member of the outPorts list. Ports must be in flow-bridging mode in order to use filters with both src and dst mac specified. address-filter Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-address-filter - All frames with a source address equal to srcMAC, coming through any of the inPorts will be filtered out. destination-address-filter - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be filtered out. flow-filter - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be filtered out. Ports must be in flow mode in order to set a filter using both source and destination address. port-address-lock This locks a source address to a port. It allows learning of srcMAC addresses only on any of the ports in inPorts. The following objects are mandatory and must be set by mgmt station to activate a row: polL2FilterDesc, polL2FilterSrcMacAddr, polL2FilterInPorts secure-port This blocks all traffic in a given direction to a port. Used with static entries, it is effective in allowing only certain well defined source/destination mac addresses. The following objects must be set by mgmt station to activate an entry: polL2FilterDesc, r, polL2FilterInPorts This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.3 | INTEGER {staticEntry(1), addressFilter(2), portAddressLock(3), securePort(4)} | read-create | current |
| polL2FilterRestrictions OBJECT-TYPE The first 3 restrictions, allow, disallow, force apply when the filterType is static-entry. When polL2FilterType is addressFilter or portAddressLock, this object does not apply. For securePort, the blockIngress, blockEgress values apply. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.4 | INTEGER {allow(1), disallow(2), force(3), none(4), blockIngress(5), blockEgress(6)} | read-create | current |
| polL2FilterSrcMacAddr OBJECT-TYPE The source MAC address, which is present in case of a Flow, that has been learned by the switch. | 1.3.6.1.4.1.52.2501.1.16.3.1.5 | MacAddress | read-create | current |
| polL2FilterDstMacAddr OBJECT-TYPE The destination MAC address which has been learned. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.6 | MacAddress | read-create | current |
| polL2FilterVlanId OBJECT-TYPE The VLAN the destination MAC address belongs to. The default VLAN is id 1 on SSR. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.7 | SSRVlanIndex | read-create | current |
| polL2FilterInPorts OBJECT-TYPE The set of Ports to which this filter applies on input. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.8 | SSRPortList | read-create | current |
| polL2FilterOutPorts OBJECT-TYPE The set of ports to which this filter applies on output. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.9 | SSRPortList | read-create | current |
| polL2FilterCreationTime OBJECT-TYPE The value of sysUpTime when this filter was made active(1). | 1.3.6.1.4.1.52.2501.1.16.3.1.10 | TimeTicks | read-only | current |
| polL2FilterStatus OBJECT-TYPE SMIv2 RowStatus control for this table. Use createAndWait or createAndGo to create a filter, use destroy to remove an entry or notInService to disengage a filter without destroying it. A row in the notReady state has not had all the mandatory objects set. | 1.3.6.1.4.1.52.2501.1.16.3.1.11 | RowStatus | read-create | current |
| polL2Dot1qVlanStaticTable OBJECT-TYPE A table containing hardware specific VLAN behavior configuration information for VLANs created with the dot1qVlanStaticTable. Configuration information for each VLAN configured into the device by (local or network) management. | 1.3.6.1.4.1.52.2501.1.16.4 | not-accessible | current | |
| polL2Dot1qVlanStaticEntry OBJECT-TYPE An entry containing additional hardware specific objects for a dot1qVlanStaticEntry. | 1.3.6.1.4.1.52.2501.1.16.4.1 | not-accessible | current | |
| polL2Dot1qVlanStaticProtocols OBJECT-TYPE Specifies the types of traffic that will be forwarded on this VLAN. Protocols not set in this definition will be filtered. The types of protocols supported on this VLAN corresponds to the type option in the CLI command vlan create <vlan name> <type>. If no protocols are specified, all protocols are forwarded. This corresponds to the port-based CLI option. reserved(0) - this bit is reserved and has no defined behavior. bridged-protocols(1) - this VLAN supports all bridged protocols excluding IP and IPX. Includes appletalk(4), dec(5), sna(6), and ipv6(7) if none of these protocols are set. If any are set, only those that are set are included. ip(2) - this VLAN supports IP protocol. ipx(3) - this VLAN supports IPX protocol. appletalk(4) - this VLAN supports Appletalk protocol. dec(5) - this VLAN supports DEC protocol. sna(6) - this VLAN supports SNA protocol. ipv6(7) - this VLAN supports IPv6 protocol. | 1.3.6.1.4.1.52.2501.1.16.4.1.1 | Bits {reserved(0), bridged-protocols(1), ip(2), ipx(3), appletalk(4), dec(5), sna(6), ipv6(7)} | read-create | current |
| polL2Dot1qVlanStaticL4Bridging OBJECT-TYPE If this object has a value of false(2), the L4 Bridging feature is not enabled on this VLAN. If this object has a value of true(1), the L4 Bridging feature is enabled for this VLAN. This corresponds to the CLI command vlan enable l4-bridging. | 1.3.6.1.4.1.52.2501.1.16.4.1.2 | TruthValue | read-create | current |
| polConformance OBJECT-IDENTITY | 1.3.6.1.4.1.52.2501.1.210.2 | |||
| polCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.52.2501.1.210.2.1 | |||
| polGroups OBJECT-IDENTITY | 1.3.6.1.4.1.52.2501.1.210.2.2 |
Conformance
| Name | OID | Status |
|---|---|---|
| polComplianceV10 MODULE-COMPLIANCE The compliance statement for the policyMIB. | 1.3.6.1.4.1.52.2501.1.210.2.1.1 | deprecated |
| polComplianceV11 MODULE-COMPLIANCE The compliance statement for the policyMIB for version 1.1. | 1.3.6.1.4.1.52.2501.1.210.2.1.2 | deprecated |
| polComplianceV12 MODULE-COMPLIANCE The compliance statement for the policyMIB for version 1.2. | 1.3.6.1.4.1.52.2501.1.210.2.1.3 | current |
| polComplianceV13 MODULE-COMPLIANCE The compliance statement for the policyMIB for version 1.3. | 1.3.6.1.4.1.52.2501.1.210.2.1.4 | current |
| polGroupV10 OBJECT-GROUP A set of managed objects that make up version 1.0 of the SSR Flow Policy MIB. | 1.3.6.1.4.1.52.2501.1.210.2.2.1 | deprecated |
| polGroupV11 OBJECT-GROUP A set of managed objects that make up version 1.1 of the SSR Flow Policy MIB. | 1.3.6.1.4.1.52.2501.1.210.2.2.2 | deprecated |
| polGroupV12 OBJECT-GROUP A set of managed objects that make up version 1.2 of the SSR Flow Policy MIB. | 1.3.6.1.4.1.52.2501.1.210.2.2.3 | current |
| polGroupV13 OBJECT-GROUP A set of managed objects that make up version 1.3 of the SSR Flow Policy MIB. | 1.3.6.1.4.1.52.2501.1.210.2.2.4 | current |