CTRON-SSR-POLICY-MIB

File: CTRON-SSR-POLICY-MIB.mib (53948 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC SNMPv2-CONF
Q-BRIDGE-MIB CTRON-SSR-SMI-MIB

Imported symbols

MODULE-IDENTITY OBJECT-TYPE TimeTicks
IpAddress Counter32 Gauge32
Integer32 TEXTUAL-CONVENTION DisplayString
RowStatus TruthValue MacAddress
MODULE-COMPLIANCE OBJECT-GROUP dot1qVlanStaticEntry
ssrMibs

Defined Types

InterfaceIndex  
A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub- layer must remain constant at least from one re- initialization of the entity's network management system to the next re-initialization.
TEXTUAL-CONVENTION    
  Integer32 1..2147483647  

InterfaceIndexOrZero  
This textual convention is an extension of the InterfaceIndex convention. The latter defines a greater than zero value used to identify an interface or interface sub-layer in the managed system. This extension permits the additional value of zero. the value zero is object-specific and must therefore be defined as part of the description of any object which uses this syntax. Examples of the usage of zero might include situations where interface was unknown, or when none or all interfaces need to be referenced.
TEXTUAL-CONVENTION    
  Integer32 0..2147483647  

SSRPortComparator  
Comparison operator used by ACL's to permit src/dst port addresses.
TEXTUAL-CONVENTION    
  INTEGER notused(1), eq(2), neq(3), lt(4), gt(5), range(6)  

SSRProtocol  
Protocols supported by L3 ACLs.
TEXTUAL-CONVENTION    
  INTEGER ip(1), tcp(2), udp(3), icmp(4), igmp(5), ipx(6), ipxsap(7), ipxrip(8)  

SSRsocketId  
A TCP or UDP port or socket end point.
TEXTUAL-CONVENTION    
  INTEGER 0..65535  

SSRVlanIndex  
An 802.1Q VLAN Identifier with same semantics as Q-BRIDGE-MIB VlanId. SSR uses Vid 1 for the default VLAN. All ports by default belong to this VLAN unless assigned to one or more user defined VLANs. A value of 4100 is used to match all VLANs. 4094 to 4099 are reserved local VLAN ids on the SSR.
TEXTUAL-CONVENTION    
  INTEGER 1..4100  

SSRPortList  
List of ifIndexes that make up the ports to apply a layer 2 filter to. The ifIndexes are numbered sparsely starting from 1. An example string might be: 1,2,32 1,6,9, Each ifIndex must represent a physical port or link aggregation aka Smart Trunk ifType of propMultiplexor(54). Note ifIndexes may change across system resets per RFC 2233.
TEXTUAL-CONVENTION    
  OCTET STRING Size(0..255)  

SSRFlowPolicyType  
Type of Flow Policy. permitFlow allows matching traffic to be forwarded. denyFlow causes matching traffic to be discarded.
TEXTUAL-CONVENTION    
  INTEGER permitFlow(1), denyFlow(2)  

SSRFlowPolicyAction  
When deciding when to apply policy there are three potential methods. policyBeforeRouteLookup provides a way to special case normal traffic patterns so that certain traffic can be routed according to policy. policyAfterRouteLookup is useful when a default route does not exist and the traffic to route does not match existing route tables. useOnlyPolicyLookup bypasses normal route lookup altogether.
TEXTUAL-CONVENTION    
  INTEGER policyBeforeRouteLookup(1), policyAfterRouteLookup(2), useOnlyPolicyLookup(3)  

SSRFlowPolicyAclList  
A blank separated list of ACL names used to match flows against from the polAclTable. The keyword, everything, may be used to match all traffic. ASCII printable characters only
TEXTUAL-CONVENTION    
  OCTET STRING Size(1..4096)  

SSRFlowNextHopList  
A blank separated list of from one to four l4fNextHopRouter ipaddresses or the keyword null. Null represents the null interface
TEXTUAL-CONVENTION    
  OCTET STRING Size(1..4096)  

SSRFlowLoadPolicy  
round robin evenly distributes flows among the next hops. firstAvailable will make flows go to the first available next hop in the ordered list.
TEXTUAL-CONVENTION    
  INTEGER firstAvailable(2), roundRobin(3)  

PolAclEntry  
SEQUENCE    
  polAclName DisplayString
  polAclItem INTEGER
  polAclRestriction INTEGER
  polAclProtocol SSRProtocol
  polAclSrcIp IpAddress
  polAclSrcMask IpAddress
  polAclDstIp IpAddress
  polAclDstMask IpAddress
  polAclTOS INTEGER
  polAclSrcPort SSRsocketId
  polAclDstPort SSRsocketId
  polAclSrcOperator SSRPortComparator
  polAclDstOperator SSRPortComparator
  polAclSrcHighRange INTEGER
  polAclDstHighRange INTEGER
  polAclAuditTrail TruthValue
  polAclCheckpoint INTEGER
  polAclRowStatus RowStatus

PolAclServiceEntry  
SEQUENCE    
  polAclServiceIfIndex InterfaceIndex
  polAclName2 DisplayString
  polAclServiceDirection INTEGER
  polAclServiceRowStatus RowStatus

PolAclInterfaceEntry  
SEQUENCE    
  polAclInterfaceIfIndex InterfaceIndex
  polAclInterfaceDirection INTEGER
  polAclPolicyStatus INTEGER

PolL2FilterEntry  
SEQUENCE    
  polL2FilterIndex INTEGER
  polL2FilterDesc DisplayString
  polL2FilterType INTEGER
  polL2FilterRestrictions INTEGER
  polL2FilterDstMacAddr MacAddress
  polL2FilterSrcMacAddr MacAddress
  polL2FilterVlanId SSRVlanIndex
  polL2FilterInPorts SSRPortList
  polL2FilterOutPorts SSRPortList
  polL2FilterCreationTime TimeTicks
  polL2FilterStatus RowStatus

PolL2Dot1qVlanStaticEntry  
SEQUENCE    
  polL2Dot1qVlanStaticProtocols BITS
  polL2Dot1qVlanStaticL4Bridging TruthValue

PolL4NextHopEntry  
SEQUENCE    
  polL4NextHopRouter IpAddress
  polL4NextHopState INTEGER
  polL4NextHopPortOfExit InterfaceIndexOrZero
  polL4NextHopMacAddress MacAddress
  polL4NextHopLastChange TimeTicks

PolL4lowControlEntry  
SEQUENCE    
  polL4PolicyName DisplayString
  polL4PolicySequence Integer32
  polL4PolicyInstance Integer32
  polL4PolicyType SSRFlowPolicyType
  polL4PolicyAction SSRFlowPolicyAction
  polL4PolicyMatch SSRFlowPolicyAclList
  polL4PolicyNextHops SSRFlowNextHopList
  polL4PolicyLoading SSRFlowLoadPolicy
  polL4PolicyWatch TruthValue
  polL4lowCreationTime TimeTicks
  polL4lowActiveGates Gauge32
  polL4lowAppliedTimes Counter32
  polL4lowControlStatus RowStatus

Defined Values

policyMIB 1.3.6.1.4.1.52.2501.1.210
This module defines a schema to control filters on a device capable of Layer 3 filters also called Access Control Lists (ACLs) and at layer 2. It may also be used to configure static IP routes that use other IP header fields in addition to destination IP address.
MODULE-IDENTITY    

polL3Group 1.3.6.1.4.1.52.2501.1.12
OBJECT IDENTIFIER    

polAclServer 1.3.6.1.4.1.52.2501.1.12.1
This is true when Access Control Lists (ACLs) are defined by a Policy Server else false. At boot, this value is false. After the first valid set of any policy object, the value changes to true.
OBJECT-TYPE    
  TruthValue  

polAclNumber 1.3.6.1.4.1.52.2501.1.12.2
The number of Layer 3 Access Control Lists defined in the SSR.
OBJECT-TYPE    
  INTEGER 0..2147483647  

polAclLastChanged 1.3.6.1.4.1.52.2501.1.12.3
The time the Access Control List were last changed.
OBJECT-TYPE    
  TimeTicks  

polAclTable 1.3.6.1.4.1.52.2501.1.12.4
A list of Access Control List entries.
OBJECT-TYPE    
  SEQUENCE OF  
    PolAclEntry

polAclEntry 1.3.6.1.4.1.52.2501.1.12.4.1
A record containing a Access Control List.
OBJECT-TYPE    
  PolAclEntry  

polAclName 1.3.6.1.4.1.52.2501.1.12.4.1.1
The administratively assigned name to this static route entry.
OBJECT-TYPE    
  DisplayString  

polAclItem 1.3.6.1.4.1.52.2501.1.12.4.1.2
This row's unique identifier within a given ACL set. Member of the ACL set are numbered from 1 to 256. If Item is set to 0, and rowStatus is destroy, all rows for this set are destroyed.
OBJECT-TYPE    
  INTEGER 0..256  

polAclRestriction 1.3.6.1.4.1.52.2501.1.12.4.1.3
The permissions/restrictions given to this static route entry.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

polAclProtocol 1.3.6.1.4.1.52.2501.1.12.4.1.4
The IETF protocol this ACL applies to.
OBJECT-TYPE    
  SSRProtocol  

polAclSrcIp 1.3.6.1.4.1.52.2501.1.12.4.1.5
The source L3 IP Address this ACL applies to.
OBJECT-TYPE    
  IpAddress  

polAclSrcMask 1.3.6.1.4.1.52.2501.1.12.4.1.6
The source L3 IP Mask this ACL Applies to.
OBJECT-TYPE    
  IpAddress  

polAclDstIp 1.3.6.1.4.1.52.2501.1.12.4.1.7
The source L3 IP Address this ACL applies to.
OBJECT-TYPE    
  IpAddress  

polAclDstMask 1.3.6.1.4.1.52.2501.1.12.4.1.8
The source L3 IP Mask this ACL Applies to.
OBJECT-TYPE    
  IpAddress  

polAclTOS 1.3.6.1.4.1.52.2501.1.12.4.1.9
The source L3 IP Type of Service field.
OBJECT-TYPE    
  INTEGER 0..15  

polAclSrcPort 1.3.6.1.4.1.52.2501.1.12.4.1.10
The source L3 IP source port/socket ACL applies to.
OBJECT-TYPE    
  SSRsocketId  

polAclDstPort 1.3.6.1.4.1.52.2501.1.12.4.1.11
The source L3 IP destination port/socket ACL applies to.
OBJECT-TYPE    
  SSRsocketId  

polAclSrcOperator 1.3.6.1.4.1.52.2501.1.12.4.1.12
polAclSrcPort is compared using this operator.
OBJECT-TYPE    
  SSRPortComparator  

polAclDstOperator 1.3.6.1.4.1.52.2501.1.12.4.1.13
polAclDstPort is compared using this operator.
OBJECT-TYPE    
  SSRPortComparator  

polAclSrcHighRange 1.3.6.1.4.1.52.2501.1.12.4.1.14
The high range source L3 IP port. Used only when SrcOperator == range. polAclSrcPort is used as the lower bounds of the range.
OBJECT-TYPE    
  INTEGER -1..65535  

polAclDstHighRange 1.3.6.1.4.1.52.2501.1.12.4.1.15
The high range destination L3 IP port. Used only when SrcOperator == range. polAclDstPort is used as the lower bounds of the range.
OBJECT-TYPE    
  INTEGER -1..65535  

polAclAuditTrail 1.3.6.1.4.1.52.2501.1.12.4.1.16
Flows matching this ACL are logged for Accounting when true.
OBJECT-TYPE    
  TruthValue  

polAclCheckpoint 1.3.6.1.4.1.52.2501.1.12.4.1.17
How long to keep flow at which point a checkpoint should be done. A checkpoint may trigger earlier than this time should the maximum batch size be reached.
OBJECT-TYPE    
  INTEGER hourly(1), daily(2), weekly(3), monthly(4), endofcall(5)  

polAclRowStatus 1.3.6.1.4.1.52.2501.1.12.4.1.18
SNMP V2 RowStatus control for this table.
OBJECT-TYPE    
  RowStatus  

polAclServiceNumber 1.3.6.1.4.1.52.2501.1.12.5
The number of Layer 3 Access Control Lists in service in the SSR.
OBJECT-TYPE    
  INTEGER 0..2147483647  

polAclServiceLastChanged 1.3.6.1.4.1.52.2501.1.12.6
The time the ACLs in service were last changed.
OBJECT-TYPE    
  TimeTicks  

polAclServiceTable 1.3.6.1.4.1.52.2501.1.12.7
A list of ACL's currently in service.
OBJECT-TYPE    
  SEQUENCE OF  
    PolAclServiceEntry

polAclServiceEntry 1.3.6.1.4.1.52.2501.1.12.7.1
A record containing a Access Control Lists applied to Interfaces.
OBJECT-TYPE    
  PolAclServiceEntry  

polAclServiceIfIndex 1.3.6.1.4.1.52.2501.1.12.7.1.1
The ifIndex of the IP Interface the ACL is applied to. An SSR IP Interface has ifType 142
OBJECT-TYPE    
  InterfaceIndex  

polAclName2 1.3.6.1.4.1.52.2501.1.12.7.1.2
The name of the ACL applied to the particular port.
OBJECT-TYPE    
  DisplayString  

polAclServiceDirection 1.3.6.1.4.1.52.2501.1.12.7.1.3
The direction the ACL is applied to the particular port.
OBJECT-TYPE    
  INTEGER ingress(1), egress(2), both(3)  

polAclServiceRowStatus 1.3.6.1.4.1.52.2501.1.12.7.1.6
SNMP V2 RowStatus control for this table.
OBJECT-TYPE    
  RowStatus  

polAclRemoteAllowed 1.3.6.1.4.1.52.2501.1.12.9
Remote Policy Configuration is allowed when true only local (to SSR) policy may be applied.
OBJECT-TYPE    
  TruthValue  

polAclInterfaceNumber 1.3.6.1.4.1.52.2501.1.12.10
The number of Layer 3 Interfaces in service in the SSR.
OBJECT-TYPE    
  INTEGER 0..2147483647  

polAclInterfaceLastChanged 1.3.6.1.4.1.52.2501.1.12.11
The time the Interfaces in service were last changed with regard to policy.
OBJECT-TYPE    
  TimeTicks  

polAclInterfaceTable 1.3.6.1.4.1.52.2501.1.12.12
A list of IP Interfaces in service and their policy status. Each IP Interface can be defined to use local static policy or remote dynamic policy in the config.
OBJECT-TYPE    
  SEQUENCE OF  
    PolAclInterfaceEntry

polAclInterfaceEntry 1.3.6.1.4.1.52.2501.1.12.12.1
A record containing a Access Control Lists applied to Interfaces.
OBJECT-TYPE    
  PolAclInterfaceEntry  

polAclInterfaceIfIndex 1.3.6.1.4.1.52.2501.1.12.12.1.1
The ifIndex of the IP Interface the ACL is applied to.
OBJECT-TYPE    
  InterfaceIndex  

polAclInterfaceDirection 1.3.6.1.4.1.52.2501.1.12.12.1.2
The direction the ACL is applied to the particular port.
OBJECT-TYPE    
  INTEGER ingress(1), egress(2), both(3)  

polAclPolicyStatus 1.3.6.1.4.1.52.2501.1.12.12.1.3
Rules for what type of management can apply ACLs to a particular interface. If set to remote, then a Policy Manager via SNMP may change dynamically the ACLs applied to an interface. Note, ACLs applied dynamically are not maintained across system reboot. Use local ACLs to setup the basic rules then apply dynamic rules as necessary.
OBJECT-TYPE    
  INTEGER local(1), remote(2)  

polL2Group 1.3.6.1.4.1.52.2501.1.16
OBJECT IDENTIFIER    

polL2FilterNumber 1.3.6.1.4.1.52.2501.1.16.1
The number of Layer 3 Access Control Lists defined in the SSR.
OBJECT-TYPE    
  INTEGER 0..2147483647  

polL2FilterLastChanged 1.3.6.1.4.1.52.2501.1.16.2
The time the Access Control List were last changed.
OBJECT-TYPE    
  TimeTicks  

polL2FilterTable 1.3.6.1.4.1.52.2501.1.16.3
A list of Layer 2 filters.
OBJECT-TYPE    
  SEQUENCE OF  
    PolL2FilterEntry

polL2FilterEntry 1.3.6.1.4.1.52.2501.1.16.3.1
An entry containing a layer 2 filter.
OBJECT-TYPE    
  PolL2FilterEntry  

polL2FilterIndex 1.3.6.1.4.1.52.2501.1.16.3.1.1
A unique index into the table representing a single filter entry. This value will remain unique and the relationship between the index and the underlying filter is valid until the next reboot.
OBJECT-TYPE    
  INTEGER 1..65535  

polL2FilterDesc 1.3.6.1.4.1.52.2501.1.16.3.1.2
A string used to describe the filter. It should contain the creator IP address, and other descriptive information about the filter. It is recommended that names be unique within a given filter type. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
OBJECT-TYPE    
  DisplayString Size(0..25)  

polL2FilterType 1.3.6.1.4.1.52.2501.1.16.3.1.3
The types of filters, as explained below. static-entry Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-static-entry - All frames with a source address equal to srcMAC, coming through any of the inPorts will be allowed/disallowed to go to any port that is a member of the outPorts list. destination-static-entry - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be allowed/ disallowed/forced to go to any port that is a member of the outPorts list. flow-static-entry - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be allowed/disallowed to go to any port that is a member of the outPorts list. Ports must be in flow-bridging mode in order to use filters with both src and dst mac specified. address-filter Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-address-filter - All frames with a source address equal to srcMAC, coming through any of the inPorts will be filtered out. destination-address-filter - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be filtered out. flow-filter - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be filtered out. Ports must be in flow mode in order to set a filter using both source and destination address. port-address-lock This locks a source address to a port. It allows learning of srcMAC addresses only on any of the ports in inPorts. The following objects are mandatory and must be set by mgmt station to activate a row: polL2FilterDesc, polL2FilterSrcMacAddr, polL2FilterInPorts secure-port This blocks all traffic in a given direction to a port. Used with static entries, it is effective in allowing only certain well defined source/destination mac addresses. The following objects must be set by mgmt station to activate an entry: polL2FilterDesc, r, polL2FilterInPorts This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
OBJECT-TYPE    
  INTEGER staticEntry(1), addressFilter(2), portAddressLock(3), securePort(4)  

polL2FilterRestrictions 1.3.6.1.4.1.52.2501.1.16.3.1.4
The first 3 restrictions, allow, disallow, force apply when the filterType is static-entry. When polL2FilterType is addressFilter or portAddressLock, this object does not apply. For securePort, the blockIngress, blockEgress values apply. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
OBJECT-TYPE    
  INTEGER allow(1), disallow(2), force(3), none(4), blockIngress(5), blockEgress(6)  

polL2FilterSrcMacAddr 1.3.6.1.4.1.52.2501.1.16.3.1.5
The source MAC address, which is present in case of a Flow, that has been learned by the switch.
OBJECT-TYPE    
  MacAddress  

polL2FilterDstMacAddr 1.3.6.1.4.1.52.2501.1.16.3.1.6
The destination MAC address which has been learned. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
OBJECT-TYPE    
  MacAddress  

polL2FilterVlanId 1.3.6.1.4.1.52.2501.1.16.3.1.7
The VLAN the destination MAC address belongs to. The default VLAN is id 1 on SSR. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
OBJECT-TYPE    
  SSRVlanIndex  

polL2FilterInPorts 1.3.6.1.4.1.52.2501.1.16.3.1.8
The set of Ports to which this filter applies on input. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
OBJECT-TYPE    
  SSRPortList  

polL2FilterOutPorts 1.3.6.1.4.1.52.2501.1.16.3.1.9
The set of ports to which this filter applies on output. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
OBJECT-TYPE    
  SSRPortList  

polL2FilterCreationTime 1.3.6.1.4.1.52.2501.1.16.3.1.10
The value of sysUpTime when this filter was made active(1).
OBJECT-TYPE    
  TimeTicks  

polL2FilterStatus 1.3.6.1.4.1.52.2501.1.16.3.1.11
SMIv2 RowStatus control for this table. Use createAndWait or createAndGo to create a filter, use destroy to remove an entry or notInService to disengage a filter without destroying it. A row in the notReady state has not had all the mandatory objects set.
OBJECT-TYPE    
  RowStatus  

polL2Dot1qVlanStaticTable 1.3.6.1.4.1.52.2501.1.16.4
A table containing hardware specific VLAN behavior configuration information for VLANs created with the dot1qVlanStaticTable. Configuration information for each VLAN configured into the device by (local or network) management.
OBJECT-TYPE    
  SEQUENCE OF  
    PolL2Dot1qVlanStaticEntry

polL2Dot1qVlanStaticEntry 1.3.6.1.4.1.52.2501.1.16.4.1
An entry containing additional hardware specific objects for a dot1qVlanStaticEntry.
OBJECT-TYPE    
  PolL2Dot1qVlanStaticEntry  

polL2Dot1qVlanStaticProtocols 1.1.3.6.1.4.1.52.2501.1.16.4.1.1
Specifies the types of traffic that will be forwarded on this VLAN. Protocols not set in this definition will be filtered. The types of protocols supported on this VLAN corresponds to the type option in the CLI command vlan create . If no protocols are specified, all protocols are forwarded. This corresponds to the port-based CLI option. reserved(0) - this bit is reserved and has no defined behavior. bridged-protocols(1) - this VLAN supports all bridged protocols excluding IP and IPX. Includes appletalk(4), dec(5), sna(6), and ipv6(7) if none of these protocols are set. If any are set, only those that are set are included. ip(2) - this VLAN supports IP protocol. ipx(3) - this VLAN supports IPX protocol. appletalk(4) - this VLAN supports Appletalk protocol. dec(5) - this VLAN supports DEC protocol. sna(6) - this VLAN supports SNA protocol. ipv6(7) - this VLAN supports IPv6 protocol.
OBJECT-TYPE    
  BITS reserved(0), bridged-protocols(1), ip(2), ipx(3), appletalk(4), dec(5), sna(6), ipv6(7)  

polL2Dot1qVlanStaticL4Bridging 1.3.6.1.4.1.52.2501.1.16.4.1.2
If this object has a value of false(2), the L4 Bridging feature is not enabled on this VLAN. If this object has a value of true(1), the L4 Bridging feature is enabled for this VLAN. This corresponds to the CLI command vlan enable l4-bridging.
OBJECT-TYPE    
  TruthValue  

polL4Group 1.3.6.1.4.1.52.2501.1.15
OBJECT IDENTIFIER    

polL4PolicyBasedRoutingEnabled 1.3.6.1.4.1.52.2501.1.15.1
The state of Policy Based Routing on this network element.
OBJECT-TYPE    
  TruthValue  

polL4NumRouters 1.3.6.1.4.1.52.2501.1.15.5
The number of next hop routers currently available.
OBJECT-TYPE    
  INTEGER 0..10  

polL4NextHopTableLastChange 1.3.6.1.4.1.52.2501.1.15.10
The value of sysUpTime when a row was last added or deleted from polL4NextHopTable.
OBJECT-TYPE    
  TimeTicks  

polL4NextHopTable 1.3.6.1.4.1.52.2501.1.15.20
A list of next hop IP routers.
OBJECT-TYPE    
  SEQUENCE OF  
    PolL4NextHopEntry

polL4NextHopEntry 1.3.6.1.4.1.52.2501.1.15.20.1
An entry contains the status of a next hop router.
OBJECT-TYPE    
  PolL4NextHopEntry  

polL4NextHopRouter 1.3.6.1.4.1.52.2501.1.15.20.1.1
The IP Address of the next hop router flow will be sent to.
OBJECT-TYPE    
  IpAddress  

polL4NextHopState 1.3.6.1.4.1.52.2501.1.15.20.1.2
The current status of the polL4NextHopRouter. If no entry found when a policy route is activated, then arp for the request the state will be waitingForArp(2). If a reply is found the state will go to macAcquired(3) else noArpReply(4). If NextHop is not local, mac is actual nexthop router.
OBJECT-TYPE    
  INTEGER unknown(1), waitingForArp(2), macAcquired(3), noArpReply(4)  

polL4NextHopPortOfExit 1.3.6.1.4.1.52.2501.1.15.20.1.3
IfIndex of port we learned this router on or else zero if not known.
OBJECT-TYPE    
  InterfaceIndexOrZero  

polL4NextHopMacAddress 1.3.6.1.4.1.52.2501.1.15.20.1.4
MAC Address of next hop router learned from ARP.
OBJECT-TYPE    
  MacAddress  

polL4NextHopLastChange 1.3.6.1.4.1.52.2501.1.15.20.1.5
The value of sysUpTime when this polL4NextHopState changed.
OBJECT-TYPE    
  TimeTicks  

polL4lowControlTableLastChange 1.3.6.1.4.1.52.2501.1.15.25
The value of sysUpTime when a row was last added or deleted from polL4lowControlTable.
OBJECT-TYPE    
  TimeTicks  

polL4NumPolicies 1.3.6.1.4.1.52.2501.1.15.26
The number of policies currently available.
OBJECT-TYPE    
  INTEGER 0..100000  

polL4lowControlTable 1.3.6.1.4.1.52.2501.1.15.30
Contains Control rows that indicate which flows have been redirected. As flows are aged out and recreated, these rules will enforce flow redirection policy.
OBJECT-TYPE    
  SEQUENCE OF  
    PolL4lowControlEntry

polL4lowControlEntry 1.3.6.1.4.1.52.2501.1.15.30.1
This table is an ordered collection of route policies. For SSR, this maps to the command: ip-policy Name [permit|deny] acl acl-list
OBJECT-TYPE    
  PolL4lowControlEntry  

polL4PolicyName 1.3.6.1.4.1.52.2501.1.15.30.1.1
A unique name for this flow policy.
OBJECT-TYPE    
  DisplayString  

polL4PolicySequence 1.3.6.1.4.1.52.2501.1.15.30.1.2
The evaluation order of this object. When two objects have the same value, the value of the instance value decides which is evaluated first. than higher numbers.
OBJECT-TYPE    
  Integer32 1..65535  

polL4PolicyInstance 1.3.6.1.4.1.52.2501.1.15.30.1.3
The sequence of this policy based route. Lower numbers have higher precedence than higher numbers.
OBJECT-TYPE    
  Integer32 1..65535  

polL4PolicyType 1.3.6.1.4.1.52.2501.1.15.30.1.4
Controls if packets are forwarded or not for this policy.
OBJECT-TYPE    
  SSRFlowPolicyType  

polL4PolicyAction 1.3.6.1.4.1.52.2501.1.15.30.1.5
Define when this policy should be used during normal packet forwarding process.
OBJECT-TYPE    
  SSRFlowPolicyAction  

polL4PolicyMatch 1.3.6.1.4.1.52.2501.1.15.30.1.6
Up to twenty (20) separate ACLs may be defined to match for this policy. This object is mandatory. Use active row from polAclTable.
OBJECT-TYPE    
  SSRFlowPolicyAclList  

polL4PolicyNextHops 1.3.6.1.4.1.52.2501.1.15.30.1.7
Up to for IpAddresses may be specified to route data to next. Load balancing If more than one next hop ip address is specified, the default load balancing scheme is round robin. This object is mandatory. Use objects from polL4NextHopTable.
OBJECT-TYPE    
  SSRFlowNextHopList  

polL4PolicyLoading 1.3.6.1.4.1.52.2501.1.15.30.1.8
When more than one next hop is defined and available, set loading policy here.
OBJECT-TYPE    
  SSRFlowLoadPolicy  

polL4PolicyWatch 1.3.6.1.4.1.52.2501.1.15.30.1.9
When True, use icmp echo to actively maintain status of next hop. This is useful to prevent data sinks with static routes.
OBJECT-TYPE    
  TruthValue  

polL4lowCreationTime 1.3.6.1.4.1.52.2501.1.15.30.1.10
The value of sysUpTime when policy went was created then activated.
OBJECT-TYPE    
  TimeTicks  

polL4lowActiveGates 1.3.6.1.4.1.52.2501.1.15.30.1.11
The number of currently active nexthop gateways.
OBJECT-TYPE    
  Gauge32  

polL4lowAppliedTimes 1.3.6.1.4.1.52.2501.1.15.30.1.12
The number of times this policy was used.
OBJECT-TYPE    
  Counter32  

polL4lowControlStatus 1.3.6.1.4.1.52.2501.1.15.30.1.13
Entries in active state cause a flow to remain programmed with the next hop router specified. If the next hop router goes down, the rowStatus will become inactive. New flows that match this specification will assume this next hop router over any other route directive. This assumes polL4PolicyBasedRouteState value is true.
OBJECT-TYPE    
  RowStatus  

polL4GroupStats 1.3.6.1.4.1.52.2501.1.15.35
OBJECT IDENTIFIER    

polL4lowLostRouters 1.3.6.1.4.1.52.2501.1.15.35.1
The count of times routers were disabled from NextHopTable due to lost contact.
OBJECT-TYPE    
  Counter32  

polL4lowControlTableActivates 1.3.6.1.4.1.52.2501.1.15.35.2
The count of successful activations of flow control policies made.
OBJECT-TYPE    
  Counter32  

polL4lowControlTableActivateFails 1.3.6.1.4.1.52.2501.1.15.35.3
The count of unsuccessful flow control policies made.
OBJECT-TYPE    
  Counter32  

polL4lowArpMappingChanges 1.3.6.1.4.1.52.2501.1.15.35.4
The count of mac to next hop IP address mapping changes affecting policy based route tables.
OBJECT-TYPE    
  Counter32  

polL4lowIcmpRedirects 1.3.6.1.4.1.52.2501.1.15.35.16
The count of next hop route redirects received that match a policy in the polL4lowControlTable. This can help to determine if bad route policies are in effect.
OBJECT-TYPE    
  Counter32  

polL4lowMatchAttempts 1.3.6.1.4.1.52.2501.1.15.35.17
The count of total number of policy based flow lookups made against policy based route table.
OBJECT-TYPE    
  Counter32  

polConformance 1.3.6.1.4.1.52.2501.1.210.2
OBJECT IDENTIFIER    

polCompliances 1.3.6.1.4.1.52.2501.1.210.2.1
OBJECT IDENTIFIER    

polGroups 1.3.6.1.4.1.52.2501.1.210.2.2
OBJECT IDENTIFIER    

polComplianceV10 1.3.6.1.4.1.52.2501.1.210.2.1.1
The compliance statement for the policyMIB.
MODULE-COMPLIANCE    

polComplianceV11 1.3.6.1.4.1.52.2501.1.210.2.1.2
The compliance statement for the policyMIB for version 1.1.
MODULE-COMPLIANCE    

polComplianceV12 1.3.6.1.4.1.52.2501.1.210.2.1.3
The compliance statement for the policyMIB for version 1.2.
MODULE-COMPLIANCE    

polComplianceV13 1.3.6.1.4.1.52.2501.1.210.2.1.4
The compliance statement for the policyMIB for version 1.3.
MODULE-COMPLIANCE    

polGroupV10 1.3.6.1.4.1.52.2501.1.210.2.2.1
A set of managed objects that make up version 1.0 of the SSR Flow Policy MIB.
OBJECT-GROUP    

polGroupV11 1.3.6.1.4.1.52.2501.1.210.2.2.2
A set of managed objects that make up version 1.1 of the SSR Flow Policy MIB.
OBJECT-GROUP    

polGroupV12 1.3.6.1.4.1.52.2501.1.210.2.2.3
A set of managed objects that make up version 1.2 of the SSR Flow Policy MIB.
OBJECT-GROUP    

polGroupV13 1.3.6.1.4.1.52.2501.1.210.2.2.4
A set of managed objects that make up version 1.3 of the SSR Flow Policy MIB.
OBJECT-GROUP