FOUNDRY-SN-IP-ACL-MIB
File:
FOUNDRY-SN-IP-ACL-MIB.mib (46532 bytes)
Imported modules
Imported symbols
Defined Types
| SnRowStatus |
|
| The status of a given row in the table. |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
other(1), valid(2), delete(3), create(4) |
|
| Action |
|
| The action to be taken on the packet after filtering is done. |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
deny(0), permit(1) |
|
| TruthVal |
|
| Boolean value. |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
false(0), true(1) |
|
| AclNumber |
|
| The Access control list number for an entry.
The standard Access list is in the range <1-99>.
The extended Access list is in the range <100-199>.
The named standard Access list is in the range <200-299>.
The named extended Access list is in the range <300-399>.
The L2 Access list is in the range <400-1399>.
The IPv6 named Access list is in the range <5000-5100> |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
1..5100 |
|
| AclNameString |
|
| The optional name for a given access-list. In general, the ACL number
for a named ACL is in the range of 200 and 399. |
| TEXTUAL-CONVENTION |
|
|
|
| |
OCTET STRING |
Size(0..255) |
|
| Operator |
|
| The operation used within a given ACL filter to determine permit or deny. |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
eq(0), neq(1), lt(2), gt(3), range(4), undefined(7) |
|
| IpProtocol |
|
| The IP protocol number on which ACL can be applied. |
| TEXTUAL-CONVENTION |
|
|
|
| |
Integer32 |
0..255 |
|
| PrecedenceValue |
|
| The IP precedence value on which ACL can be applied. |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
routine(0), priority(1), immediate(2), flash(3), flashoverride(4), critical(5), internet(6), network(7), undefined(8) |
|
| TosValue |
|
| The IP TOS value on which ACL can be applied. |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
normal(0), minMonetaryCost(1), maxReliability(2), tosValue3(3), maxThroughput(4), tosValue5(5), tosValue6(6), tosValue7(7), minDelay(8), tosValue9(9), tosValue10(10), tosValue11(11), tosValue12(12), tosValue13(13), tosValue14(14), tosValue15(15), undefined(16) |
|
| Direction |
|
| The packet flow direction within an interface for which ACL needs to be applied. |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
inbound(0), outbound(1) |
|
| FdryEnetTypeOrZeroTC |
|
| Ethernet Type field within the Ethernet-II frame |
| TEXTUAL-CONVENTION |
|
|
|
| |
INTEGER |
invalid(0), ipv4(1), arp(2), ipv6(3) |
|
| SnAgAclEntry |
|
| SEQUENCE |
|
|
|
| |
snAgAclIndex |
Integer32 |
|
| |
snAgAclNumber |
AclNumber |
|
| |
snAgAclName |
DisplayString |
|
| |
snAgAclAction |
Action |
|
| |
snAgAclProtocol |
IpProtocol |
|
| |
snAgAclSourceIp |
IpAddress |
|
| |
snAgAclSourceMask |
IpAddress |
|
| |
snAgAclSourceOperator |
Operator |
|
| |
snAgAclSourceOperand1 |
INTEGER |
|
| |
snAgAclSourceOperand2 |
INTEGER |
|
| |
snAgAclDestinationIp |
IpAddress |
|
| |
snAgAclDestinationMask |
IpAddress |
|
| |
snAgAclDestinationOperator |
Operator |
|
| |
snAgAclDestinationOperand1 |
INTEGER |
|
| |
snAgAclDestinationOperand2 |
INTEGER |
|
| |
snAgAclPrecedence |
PrecedenceValue |
|
| |
snAgAclTos |
TosValue |
|
| |
snAgAclEstablished |
RtrStatus |
|
| |
snAgAclLogOption |
TruthVal |
|
| |
snAgAclStandardFlag |
TruthVal |
|
| |
snAgAclRowStatus |
SnRowStatus |
|
| |
snAgAclFlowCounter |
Counter64 |
|
| |
snAgAclPacketCounter |
Counter64 |
|
| |
snAgAclComments |
DisplayString |
|
| |
snAgAclIpPriority |
INTEGER |
|
| |
snAgAclPriorityForce |
INTEGER |
|
| |
snAgAclPriorityMapping |
INTEGER |
|
| |
snAgAclDscpMarking |
INTEGER |
|
| |
snAgAclDscpMapping |
INTEGER |
|
| |
snAgAclIcmpCode |
INTEGER |
|
| |
snAgAclParameters |
BITS |
|
| |
snAgAclVlanId |
FdryVlanIdOrNoneTC |
|
| |
snAgAclClauseString |
DisplayString |
|
| SnAgAclBindToPortEntry |
|
| SEQUENCE |
|
|
|
| |
snAgAclPortNum |
Integer32 |
|
| |
snAgAclPortBindDirection |
Direction |
|
| |
snAgAclNum |
Integer32 |
|
| |
snAgAclNameString |
DisplayString |
|
| |
snAgBindPortListInVirtualInterface |
OCTET STRING |
|
| |
snAgAclPortRowStatus |
SnRowStatus |
|
| SnAgAclIfBindEntry |
|
| SEQUENCE |
|
|
|
| |
snAgAclIfBindIndex |
InterfaceIndex |
|
| |
snAgAclIfBindDirection |
Direction |
|
| |
snAgAclIfBindNum |
INTEGER |
|
| |
snAgAclIfBindName |
DisplayString |
|
| |
snAgAclIfBindVifPortList |
OCTET STRING |
|
| |
snAgAclIfBindRowStatus |
SnRowStatus |
|
| |
snAgAclIfBindDenyLogging |
INTEGER |
|
| |
snAgAclIfIpv6BindName |
DisplayString |
|
| AgAclAccntEntry |
|
| SEQUENCE |
|
|
|
| |
agAclAccntKind |
INTEGER |
|
| |
agAclAccntIfIndex |
InterfaceIndex |
|
| |
agAclAccntDirection |
Direction |
|
| |
agAclAccntAclNumber |
AclNumber |
|
| |
agAclAccntFilterId |
Unsigned32 |
|
| |
agAclAccntAclName |
AclNameString |
|
| |
agAclAccntOneSecond |
Counter64 |
|
| |
agAclAccntOneMinute |
Counter64 |
|
| |
agAclAccntFiveMinute |
Counter64 |
|
| |
agAclAccntCumulative |
Counter64 |
|
| |
agAclAccntRaclDropCnt |
Counter64 |
|
| |
agAclAccntRaclFwdCnt |
Counter64 |
|
| |
agAclAccntRaclRemarkCnt |
Counter64 |
|
| |
agAclAccntRaclTotalCnt |
Counter64 |
|
| |
agAclAccntRaclTotalSWHitCountCnt |
Counter64 |
|
| FdryL2AclEntry |
|
| SEQUENCE |
|
|
|
| |
fdryL2AclNumber |
AclNumber |
|
| |
fdryL2AclClauseIndex |
FdryClauseIndexTC |
|
| |
fdryL2AclAction |
Action |
|
| |
fdryL2AclSourceMac |
MacAddress |
|
| |
fdryL2AclSourceMacMask |
MacAddress |
|
| |
fdryL2AclDestinationMac |
MacAddress |
|
| |
fdryL2AclDestinationMacMask |
MacAddress |
|
| |
fdryL2AclVlanId |
FdryVlanIdOrNoneTC |
|
| |
fdryL2AclEthernetType |
FdryEnetTypeOrZeroTC |
|
| |
fdryL2AclDot1pPriority |
PortQosTC |
|
| |
fdryL2AclDot1pPriorityForce |
PortQosTC |
|
| |
fdryL2AclDot1pPriorityMapping |
PortQosTC |
|
| |
fdryL2AclMirrorPackets |
TruthValue |
|
| |
fdryL2AclLogEnable |
TruthValue |
|
| |
fdryL2AclRowStatus |
RowStatus |
|
| FdryL2AclIfBindEntry |
|
| SEQUENCE |
|
|
|
| |
fdryL2AclIfBindDirection |
Direction |
|
| |
fdryL2AclIfBindAclNumber |
Unsigned32 |
|
| |
fdryL2AclIfBindRowStatus |
RowStatus |
|
| BrcdPbrAclAccntEntry |
|
| SEQUENCE |
|
|
|
| |
brcdPbrAclAccntKind |
INTEGER |
|
| |
brcdPbrAclAccntIfIndex |
InterfaceIndex |
|
| |
brcdPbrSerialNumber |
INTEGER |
|
| |
brcdPbrAclAccntAclInfo |
DisplayString |
|
Defined Values
| snAgAcl |
6.4.1.1991.1.2.2.15 |
| Copyright 1996-2010 Brocade Communications Systems, Inc.
All rights reserved.
This Brocade Communications Systems SNMP Management Information Base Specification
embodies Brocade Communications Systems' confidential and proprietary
intellectual property. Brocade Communications Systems retains all
title and ownership in the Specification, including any revisions.
This Specification is supplied AS IS, and Brocade Communications Systems makes
no warranty, either express or implied, as to the use,
operation, condition, or performance of the specification, and any unintended
consequence it may on the user environment. |
| MODULE-IDENTITY |
|
|
|
| snAgAclGblAcctEnable |
6.4.1.1991.1.2.2.15.1.2 |
| Specifies the administration status of the ACL accounting.
This object is not supported in CES/CER platforms. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
disabled(0), enabled(1) |
|
| snAgAclGblIfIPv4AcctClear |
6.4.1.1991.1.2.2.15.1.3 |
| Clears the IPv4 ACL accounting information for the given interface.
If the value is 0 then it clears IPv4 ACL accounting information for all the
interfaces. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
InterfaceIndexOrZero |
|
|
| snAgAclGblIfIPv6AcctClear |
6.4.1.1991.1.2.2.15.1.4 |
| Clears the IPv6 ACL accounting information for the given interface.
If the value is 0 then it clears IPv6 accounting information for all the
interfaces. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
InterfaceIndexOrZero |
|
|
| brcdPbrAclAccntFilterAclName |
6.4.1.1991.1.2.2.15.1.7 |
| This object can be used to control the content of brcdPbrAclAccntTable.
Any ACL filter that has a full or partial match with ACL name
will not be returned in the brcdPbrAclAccntTable.
If not specified, the default value is null and all ACL filters will be
returned by the table. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
DisplayString |
|
|
| brcdPbrAclAccntCounterType |
6.4.1.1991.1.2.2.15.1.8 |
| This contains ACL Number, ACL Name, ACL Filter Id, last five minutes and
cumulative accounting data since the ACL was installed.
Each field is separated by a pipe character
i.e. 5MIN|CUMULATIVE|ACL Number|ACL Filter Id|ACL Name
Depending on the value of brcdPbrAclAccntCounterType the corresponding
counter will have the value while the other is zero. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
cumulative(1), last5min(2) |
|
| snAgAclTable |
6.4.1.1991.1.2.2.15.2 |
| Table of Access Control List |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SEQUENCE OF |
|
|
| |
|
SnAgAclEntry |
|
| snAgAclEntry |
6.4.1.1991.1.2.2.15.2.1 |
| An entry in the IP access control list table. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SnAgAclEntry |
|
|
| snAgAclIndex |
6.4.1.1991.1.2.2.15.2.1.1 |
| The Access control list item number for an entry. This is a unique
number that identifies different Access list entries combined with
the Access list name and Access list number. This one has to be
unique even though the name and number are not unique for a given
Access list with same or different source address, subnet mask,
destination address and destination mask, protocol type, action
(permit/deny) type and the operator (neq, eq, gt and, lt) which
makes the index a unique tuple (name, number, itemnumber). |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Integer32 |
|
|
| snAgAclNumber |
6.4.1.1991.1.2.2.15.2.1.2 |
| The access-list number for this entry. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
AclNumber |
|
|
| snAgAclName |
6.4.1.1991.1.2.2.15.2.1.3 |
| ACL name for an entry. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
DisplayString |
|
|
| snAgAclAction |
6.4.1.1991.1.2.2.15.2.1.4 |
| Action to take if the ip packet matches with this access control list. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
Action |
|
|
| snAgAclProtocol |
6.4.1.1991.1.2.2.15.2.1.5 |
| Transport protocol. Valid values for the IP protocol are:
0 = any IP protocol
1 = ICMP
2 = IGMP
3 = ggp
4 = ipencap
5 = st2
6 = TCP
7 = cbt
8 = egp
9 = igp
10 = bbn_rcc
11 = nvp
12 = pup
13 = argus
14 = emcon
15 = xnet
16 = chaos
17 = UDP
18 = mux
19 = dcn
20 = hmp
21 = prm
22 = xns_idp
23 = trunk1
24 = trunk2
25 = leaf1
26 = leaf2
27 = rdp
28 = irtp
29 = iso_tp4
30 = netblt
31 = mfe_nsp
32 = merit_inp
33 = sep
34 = threepc
35 = idpr
36 = xtp
37 = ddp
38 = idpr_cmtp
39 = tppp
40 = il
41 = ipv6
42 = sdrp
43 = ipv6_route
44 = ipv6_frag
45 = idrp
46 = rsvp
47 = gre
48 = mhrp
49 = bna
50 = esp
51 = ahp
52 = inlsp
53 = swipe
54 = narp
55 = mobile
56 = tlsp
57 = skip
58 = ipv6_icmp
59 = ipv6_nonxt
60 = ipv6_opts
62 = cftp
64 = sat_expak
65 = kryptolan
66 = rvd
67 = ippc
69 = sat_mon
70 = visa
71 = ipcv
72 = cpnx
73 = cphb
74 = wsn
75 = pvp
76 = br_sat_mon
77 = sun_nd
78 = wb_mon
79 = wb_expak
80 = iso_ip
81 = vmtp
82 = secure_vmtp
83 = vines
84 = ttp
85 = nsfnet_igp
86 = dgp
87 = tcf
88 = IGRP
89 = OSPF
90 = sprite_rpc
91 = larp
92 = mtp
93 = ax25
94 = ipip
95 = micp
96 = scc_sp
97 = etherip
98 = encap
100 = gmtp
101 = ifmp
102 = pnni
103 = pim
104 = aris
105 = scps
106 = qnx
107 = an
108 = ipcomp
109 = snp
110 = compaq_peer
111 = ipxinip
112 = vrrp
113 = pgm
115 = l2tp
116 = ddx
117 = iatp
118 = st
119 = srp
120 = uti
121 = smp
122 = sm
123 = ptp
124 = isis
125 = fire
126 = crtp
127 = crdup
128 = sscopmce
129 = iplt
130 = sps
131 = pipe
132 = sctp
133 = fc
134 = rsvp_e2e_ignore
135 = mobility_header
136 = udplite
137 = mpls_in_ip
138 = manet
139 = hip
140 = shim6
254 = divert
|
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
IpProtocol |
|
|
| snAgAclSourceOperator |
6.4.1.1991.1.2.2.15.2.1.8 |
| Type of comparison to perform. For now, this only applys to tcp or udp
to compare the port number |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
Operator |
|
|
| snAgAclSourceOperand1 |
6.4.1.1991.1.2.2.15.2.1.9 |
| For now this only refers to transport protocol port number. 0 means NA |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..65535 |
|
| snAgAclSourceOperand2 |
6.4.1.1991.1.2.2.15.2.1.10 |
| For now this only refers to transport protocol port number.
Used in ICMP Protocol to convey the ICMP Type
value. 0 means NA.
Valid values for ICMP Type:
1 = Echo reply
4 = Destination unreachable
5 = Source quench
6 = Redirect
9 = Echo request
10=Router advertisement
11=Router solicitation
12=Time exceeded
13=Parameter problem
14=Timestamp request
15=Timestamp reply
16=Information request
17=Information reply
18=Address mask request
19=Address mask reply.
|
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..65535 |
|
| snAgAclDestinationOperator |
6.4.1.1991.1.2.2.15.2.1.13 |
| Type of comparison to perform. For now, this only applys to tcp or udp
to compare the port number |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
Operator |
|
|
| snAgAclDestinationOperand1 |
6.4.1.1991.1.2.2.15.2.1.14 |
| For now this only refers to transport protocol port number. 0 means NA |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..65535 |
|
| snAgAclDestinationOperand2 |
6.4.1.1991.1.2.2.15.2.1.15 |
| For now this only refers to transport protocol port number. 0 means NA |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..65535 |
|
| snAgAclPrecedence |
6.4.1.1991.1.2.2.15.2.1.16 |
| This refers to IP precedence value in the range <0-7>
critical(5),
flash(3),
flash-override(4),
immediate(2),
internet(6),
network(7),
priority(1),
routine(0) |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
PrecedenceValue |
|
|
| snAgAclTos |
6.4.1.1991.1.2.2.15.2.1.17 |
| This refers to the IP type of service value in range <0-15>, which is
the sum of numeric vlaues of the following options -
match packets with maximum reliability TOS (2)
match packets with maximum throughput TOS (4)
match packets with minimum delay (8)
match packets with minimum monetary cost TOS (1)
match packets with normal TOS (0) |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
TosValue |
|
|
| snAgAclEstablished |
6.4.1.1991.1.2.2.15.2.1.18 |
| Enable/Disable the filtering of established TCP packets of which the
ACK or RESET flag is on. This additional filter only applies to TCP
transport protocol. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
RtrStatus |
|
|
| snAgAclStandardFlag |
6.4.1.1991.1.2.2.15.2.1.20 |
| Return whether the ACL is standard or extended, 1 for standard ACL |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
TruthVal |
|
|
| snAgAclRowStatus |
6.4.1.1991.1.2.2.15.2.1.21 |
| To create or delete a access list entry. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
SnRowStatus |
|
|
| snAgAclFlowCounter |
6.4.1.1991.1.2.2.15.2.1.22 |
| Approximate count of flows matching individual ACL entry. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Counter64 |
|
|
| snAgAclPacketCounter |
6.4.1.1991.1.2.2.15.2.1.23 |
| Accurate count of packets matching individual ACL entry. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Counter64 |
|
|
| snAgAclIpPriority |
6.4.1.1991.1.2.2.15.2.1.25 |
| QoS priority option for IP ACL entry. |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..3 |
|
| snAgAclPriorityForce |
6.4.1.1991.1.2.2.15.2.1.26 |
| Force packet outgoing priority. Not defined(4) |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..4 |
|
| snAgAclPriorityMapping |
6.4.1.1991.1.2.2.15.2.1.27 |
| Map incoming packet priority. Not defined(8) |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..8 |
|
| snAgAclDscpMarking |
6.4.1.1991.1.2.2.15.2.1.28 |
| Mark packets with given DSCP value. Not defined(64) |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..64 |
|
| snAgAclDscpMapping |
6.4.1.1991.1.2.2.15.2.1.29 |
| Map incoming DSCP value. Not defined(64) |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..64 |
|
| snAgAclIcmpCode |
6.4.1.1991.1.2.2.15.2.1.30 |
| ICMP Message Code value. Used in combination with
ICMP Message Type (use snAgAclSourceOperand2) to
setup an ICMP filter. This object is not used with any
other protocol. 0 means NA.
Supported values
Type: Echo reply
--------------
1 = Echo reply
Type: Destination unreachable
-------------------------
1 = Network unreachable
2 = Host unreachable
3 = Protocol unreachable
4 = Port unreachable
5 = Fragmentation needed by don't fragment bit set
6 = Source route failed
7 = Destination network unknown
8 = Destination host unknown
9 = Source host isolated
10 = Destination network administratively prohibited
11=Destination host administratively prohibited
12=Network unreachable for TOS
13=Host unreachable for TOS
14=Communication administratively prohibited by filter
15=Host precedence violation
16=Precedence cutoff in effect
Type: Source quench
------------------
1 = Source quench
Type: Redirect
------------
1 = Redirect for network
2 = Redirect for host
3 = Redirect for TOS and network
4 = Redirect for TOS and host
Type: Echo request
-----------------
1 = Echo request
Type: Router advertisement
------------------------
1 = Router advertisement
Type: Router solicitation
---------------------
1 = Router solicitation
Type: Time exceeded
------------------
1 = Time to live equals 0 during transmit
2 = Time to live equals 0 during reassembly
Type: Parameter problem
---------------------
1 = IP header bad (catchall error)
2 = Required option missing
Type: Timestamp request
----------------------
1 = Timestamp request
Type: Timestamp reply
-------------------
1 = Timestamp reply
Type: Information request
----------------------
1 = Information request
Type: Information reply
--------------------
1 = Information reply
Type: Address mask request
------------------------
1 = Address mask request
Type: Address mask reply
----------------------
1 = Address mask reply |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..255 |
|
| snAgAclParameters |
6.4.1.1991.1.2.2.15.2.1.31 |
| This mask represents multiple parameters configured for this ACL.
Bit 0 specified in the BITS construct is the MS bit of the first octet.
Bit 0: Match fragmented IP packets
Bit 1: Match non-fragmented IP packets
Bit 2: Match only TCP packets with SYN Bit set. Valid only if snAgAclSourceOperator
or snAgAclDestinationOperator is set to TCP.
Bit 3: Permit packets that fail RPF check
Bit 4: Mirror packets matching ACL permit clause
Bit 5: Send packets matching ACL permit clause to sFlow collector
Bit 6: Set dscp-mapping. The value is given by snAgAclDscpMarking
Bit 7: Set dscp-marking. The value is given by snAgAclDscpMapping
|
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
BITS |
matchFragmentedPackets(0), matchNonFragmentedPackets(1), matchTcpSynSetPackets(2), permitFailedRPFCheckPackets(3), mirrorPermitPackets(4), sendPermitPacketsToSflowCollector(5), dscpMappingFlagSet(6), dscpMarkingFlagSet(7) |
|
| snAgAclVlanId |
6.4.1.1991.1.2.2.15.2.1.32 |
| Optional VLAN ID to match against that of the incoming packet.
By default, the VLAN ID field is ignored during the match. In this case,
value 0 is returned. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
FdryVlanIdOrNoneTC |
|
|
| snAgAclBindToPortEntry |
6.4.1.1991.1.2.2.15.3.1 |
| An entry in the ACL-binding-to-port table. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SnAgAclBindToPortEntry |
|
|
| snAgAclPortNum |
6.4.1.1991.1.2.2.15.3.1.1 |
| Binding-to port num, either physical port or virtual interface. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Integer32 |
|
|
| snAgAclNum |
6.4.1.1991.1.2.2.15.3.1.3 |
| Defined ACL number |
| Status: current |
Access: read-write |
| OBJECT-TYPE |
|
|
|
| |
Integer32 |
|
|
| snAgAclIfBindEntry |
6.4.1.1991.1.2.2.15.4.1 |
| An entry in the ACL-binding-to-port table. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SnAgAclIfBindEntry |
|
|
| snAgAclIfBindIndex |
6.4.1.1991.1.2.2.15.4.1.1 |
| Binding-to port num, either physical port or virtual interface. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
InterfaceIndex |
|
|
| snAgAclIfBindNum |
6.4.1.1991.1.2.2.15.4.1.3 |
| The id of the IPv4 ACL bound to this Interface (0 represents named ACL) |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..199 |
|
| snAgAclIfBindName |
6.4.1.1991.1.2.2.15.4.1.4 |
| The name of the IPv4 ACL name bound to this Interface |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
DisplayString |
Size(0..255) |
|
| snAgAclIfBindVifPortList |
6.4.1.1991.1.2.2.15.4.1.5 |
| This object specifies the port list for binding virtual interface.
Each port index is an ifIndex, if there are consecutive 4 or more
ifIndex then, they will be encoded like below.
Encoding and decoding scheme is range based: Each range prefix with
0000 (2 octets) where 0000 is not valid ifIndex. Next 2 octets
indicates lower range ifIndex, followed by 2 octets of higher range
ifIndex. Individual(non range) ones will be displayed as it is.
Ex: port list: 0001..0005 0015 0032..0047
Port list in PDU: 0000 0001 0005 000f 0000 0020 002f. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
OCTET STRING |
|
|
| snAgAclIfBindDenyLogging |
6.4.1.1991.1.2.2.15.4.1.7 |
| Enable or disable deny logging. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
disable(0), enable(1) |
|
| snAgAclIfIpv6BindName |
6.4.1.1991.1.2.2.15.4.1.8 |
| The name of the IPv6 ACL name bound to this Interface |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
DisplayString |
Size(0..200) |
|
| agAclAccntTable |
6.4.1.1991.1.2.2.15.5 |
| Table of ACL Accounting Statistics for router |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SEQUENCE OF |
|
|
| |
|
AgAclAccntEntry |
|
| agAclAccntEntry |
6.4.1.1991.1.2.2.15.5.1 |
| An entry in the ACL-binding-to-port table. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
AgAclAccntEntry |
|
|
| agAclAccntKind |
6.4.1.1991.1.2.2.15.5.1.1 |
| Kind of ACL Accounting statistics needed. ipv4PolicyBasedRouting(2)
and ipv6PolicyBasedRouting(6) are implemented in brcdPbrAclAccntTable.
Agent will fail for GET on ipv4PolicyBasedRouting(2) and
ipv6PolicyBasedRouting(6) wheresas for GET_NEXT it will skip these.
The enum value ipv6ReceiveAcl(7) is not supported on CES/CER devices. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
ipv4(0), l2(1), rateLimit(3), receiveAcl(4), ipv6(5), ipv6ReceiveAcl(7) |
|
| agAclAccntIfIndex |
6.4.1.1991.1.2.2.15.5.1.2 |
| Physical or virtual interface on which ACL accounting is desired.
For Receive ACL, we use the lowest port of the management module
as value for this object. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
InterfaceIndex |
|
|
| agAclAccntDirection |
6.4.1.1991.1.2.2.15.5.1.3 |
| ACL port direction, inbound or outbound. For receive-acl kind, direction cannot be outbound. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
Direction |
|
|
| agAclAccntAclNumber |
6.4.1.1991.1.2.2.15.5.1.4 |
| The access-list number for this entry. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
AclNumber |
|
|
| agAclAccntFilterId |
6.4.1.1991.1.2.2.15.5.1.5 |
| FilterId within a given ACL. This is a zero based value. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
Unsigned32 |
|
|
| agAclAccntAclName |
6.4.1.1991.1.2.2.15.5.1.6 |
| ACL name for an entry, if applicable. Otherwise, null string is returned. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
AclNameString |
|
|
| agAclAccntCumulative |
6.4.1.1991.1.2.2.15.5.1.10 |
| Cummulative accounting data since the ACL was installed. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Counter64 |
|
|
| agAclAccntRaclDropCnt |
6.4.1.1991.1.2.2.15.5.1.11 |
| Receive-ACL drop counter used for rate limiting. Not used for other ACL kind.
The value returned is per ACL, instead of per filter within the ACL. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Counter64 |
|
|
| agAclAccntRaclFwdCnt |
6.4.1.1991.1.2.2.15.5.1.12 |
| Receive-ACL forward counter used for rate limiting. Not used for other ACL kind.
The value returned is per ACL, instead of per filter within the ACL. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Counter64 |
|
|
| agAclAccntRaclTotalCnt |
6.4.1.1991.1.2.2.15.5.1.14 |
| Receive-ACL total counter used for rate limiting. Not used for other ACL kind.
The value returned is per ACL, instead of per filter within the ACL. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Counter64 |
|
|
| agAclAccntRaclTotalSWHitCountCnt |
6.4.1.1991.1.2.2.15.5.1.15 |
| Receive-ACL cumulative software hit counter. Not used for other ACL kind.
The value returned is per ACL, instead of per filter within the ACL. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
Counter64 |
|
|
| fdryL2AclNextClauseTable |
6.4.1.1991.1.2.2.15.6 |
| This read-only table contains the list of next lowest available clause index that
can be used for creating a new instance in the fdryL2AclTable.
The clause index values will not change as a result of switchovers or hitless upgrades,
but may change as a result of a device reload (though the relative order of persistent
entries would remain the same).
|
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SEQUENCE OF |
|
|
| |
|
FdryL2AclNextClauseEntry |
|
| fdryL2AclNextClauseEntry |
6.4.1.1991.1.2.2.15.6.1 |
| An entry specifying the next lowest available clause index for this ACL number. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
FdryL2AclNextClauseEntry |
|
|
| fdryL2AclNextClauseIndex |
6.4.1.1991.1.2.2.15.6.1.1 |
| The next lowest available clause index for a given ACL number. The maximum value
of this object is the configured maximum number of clauses for a L2 ACL. |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
FdryClauseIndexTC |
|
|
| fdryL2AclTable |
6.4.1.1991.1.2.2.15.7 |
| Table of Layer 2 Access Control Lists. Layer 2 ACLs filter traffic
based on any of the following fields:
- Source MAC address and source MAC mask
- Destination MAC address and destination MAC mask
- VLAN ID
- Ethernet type.
For a given ACL number, one can have 64 (default) to 256 clauses.
The clause index values will not change as a result of switchovers or hitless upgrades,
but may change as a result of a device reload (though the relative order of persistent
entries would remain the same).
|
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SEQUENCE OF |
|
|
| |
|
FdryL2AclEntry |
|
| fdryL2AclEntry |
6.4.1.1991.1.2.2.15.7.1 |
| An entry in the L2 Access Control List table. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
FdryL2AclEntry |
|
|
| fdryL2AclNumber |
6.4.1.1991.1.2.2.15.7.1.1 |
| The access-list number for this entry.
For L2ACL, the valid values are between 400 and 599. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
AclNumber |
|
|
| fdryL2AclClauseIndex |
6.4.1.1991.1.2.2.15.7.1.2 |
| The index of the clause within a given ACL number.
During row creation, the clause index value should match
with the next available clause index for a given ACL number.
It is advisable to first do a Get operation on the
fdryL2AclNextClauseTable for a given ACL number, and use
the value of fdryL2AclNextClauseIndex returned by the agent. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
FdryClauseIndexTC |
|
|
| fdryL2AclAction |
6.4.1.1991.1.2.2.15.7.1.3 |
| Action to take if the ingress L2 packet matches this ACL. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
Action |
|
|
| fdryL2AclSourceMac |
6.4.1.1991.1.2.2.15.7.1.4 |
| Optional Source MAC address. By default, it matches with
any source MAC within a packet. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
MacAddress |
|
|
| fdryL2AclSourceMacMask |
6.4.1.1991.1.2.2.15.7.1.5 |
| Optional Source MAC address mask.
For Set operation, this object can only be used in
conjunction with fdryL2AclSourceMac.
By default, it matches with any source MAC within a packet.
it matches with any source MAC within a packet.
To match on the first two bytes of the address
aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case,
the clause matches all source MAC addresses that contain
'aabb' as the first two bytes and any values in the
remaining bytes of the MAC address. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
MacAddress |
|
|
| fdryL2AclDestinationMac |
6.4.1.1991.1.2.2.15.7.1.6 |
| Optional destination MAC address.
By default, it matches with any destination MAC within a packet. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
MacAddress |
|
|
| fdryL2AclDestinationMacMask |
6.4.1.1991.1.2.2.15.7.1.7 |
| Optional destination MAC address mask.
For Set operation, this object can only be used in
conjunction with fdryL2AclDestinationMac.
By default, it matches with any destination MAC within a packet.
To match on the first two bytes of the address
aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case,
the clause matches all destination MAC addresses that contain
'aabb' as the first two bytes and any values in the
remaining bytes of the MAC address. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
MacAddress |
|
|
| fdryL2AclVlanId |
6.4.1.1991.1.2.2.15.7.1.8 |
| Optional VLAN ID to match against that of the incoming packet.
By default, the VLAN ID field is ignored during the match. In this case,
value 0 is returned. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
FdryVlanIdOrNoneTC |
|
|
| fdryL2AclEthernetType |
6.4.1.1991.1.2.2.15.7.1.9 |
| Optional Ethernet Type to match against the etype field
of the incoming packet.
By default, etype field is ignored during the match. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
FdryEnetTypeOrZeroTC |
|
|
| fdryL2AclDot1pPriority |
6.4.1.1991.1.2.2.15.7.1.10 |
| The priority option assigns traffic that matches the ACL to a
hardware forwarding queue. In addition to changing the internal
forwarding priority, if the outgoing interface is an 802.1q interface,
this option maps the specified priority to its equivalent 802.1p (QoS)
priority and marks the packet with the new 802.1p priority.
This option is applicable for inbound ACLs only.
This object is not supported in RX, where it always returns
enum value invalid.
NOTE: fdryL2AclDot1pPriority following fdryL2AclDot1pPriorityForce
cannot be used together in an ACL entry. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
PortQosTC |
|
|
| fdryL2AclDot1pPriorityForce |
6.4.1.1991.1.2.2.15.7.1.11 |
| The priority-force option assigns packets of outgoing traffic
that match the ACL to a specific hardware forwarding queue,
even though the incoming packet may be assigned to another queue.
This option is applicable for inbound ACLs only.
This object is not supported in RX, where it always returns
enum value invalid.
NOTE: fdryL2AclDot1pPriority following fdryL2AclDot1pPriorityForce
cannot be used together in an ACL entry. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
PortQosTC |
|
|
| fdryL2AclDot1pPriorityMapping |
6.4.1.1991.1.2.2.15.7.1.12 |
| The priority-mapping option matches on the packets 802.1p value.
This option does not change the packets forwarding priority through
the device or mark the packet. This keyword is applicable for both
inbound and outbound ACLs.
This object is not supported in RX, where it always returns
enum value invalid. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
PortQosTC |
|
|
| fdryL2AclLogEnable |
6.4.1.1991.1.2.2.15.7.1.14 |
| Optional parameter to enable logging only when deny clause
is specified. Note that traffic denied by implicit deny mechanism is not
subject to logging. The implicit deny kicks in when the traffic
does not match any of the clauses and there is no 'permit any any'
clause specified at the end. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
TruthValue |
|
|
| fdryL2AclRowStatus |
6.4.1.1991.1.2.2.15.7.1.15 |
| The row status variable, used according to installation
and removal conventions for conceptual rows. Setting this
object to active(1) or createAndGo(4) results in the
addition of a L2 ACL filter in the router. Duplicate entry will
be rejected during row creation. As part of row creation, we
support only appending to this table. Row insertion may not
be supported.
Setting this object to destroy(6) removes the associated filter
from the router. Other values in the enumeration are not used.
|
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
RowStatus |
|
|
| fdryL2AclIfBindTable |
6.4.1.1991.1.2.2.15.8 |
| Table of L2 ACL binding to port.
- One cannot bind Layer 2 ACLs and Layer 3 ACLs to the same port.
However, one can configure a port to use Layer 2 ACLs, and
another port on the same device to use Layer 3 ACLs.
- In general, Layer 2 ACLs cannot be bound to virtual interfaces, unlike L3 ACLs.
- One cannot modify an existing Layer 2 ACL clause. For that, one must
unbind the ACL, delete it and make a new clause.
|
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
SEQUENCE OF |
|
|
| |
|
FdryL2AclIfBindEntry |
|
| fdryL2AclIfBindEntry |
6.4.1.1991.1.2.2.15.8.1 |
| An entry in the L2ACL binding table which lists the ACL bindings to a port.
|
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
FdryL2AclIfBindEntry |
|
|
| fdryL2AclIfBindDirection |
6.4.1.1991.1.2.2.15.8.1.1 |
| Direction in which this ACL should be applied on this port. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
Direction |
|
|
| fdryL2AclIfBindAclNumber |
6.4.1.1991.1.2.2.15.8.1.2 |
| The ACL number that is to be bound to given physical interface.
The valid values for L2 numbered ACLs are between 400 and 599. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
Unsigned32 |
|
|
| fdryL2AclIfBindRowStatus |
6.4.1.1991.1.2.2.15.8.1.3 |
| The row status variable, used according to installation
and removal conventions for conceptual rows. Setting this
object to active(1) or createAndGo(4) results in the
binding of a L2 ACL with a given physical port.
Setting this object to destroy(6) unbinds this L2 ACL from the port.
Other values in the enumeration are not used. |
| Status: current |
Access: read-create |
| OBJECT-TYPE |
|
|
|
| |
RowStatus |
|
|
| brcdPbrAclAccntEntry |
6.4.1.1991.1.2.2.15.9.1 |
| An entry in the PBR ACL-binding-to-port table. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
BrcdPbrAclAccntEntry |
|
|
| brcdPbrAclAccntKind |
6.4.1.1991.1.2.2.15.9.1.1 |
| Kind of PBR ACL Accounting statistics needed. |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
ipv4PolicyBasedRouting(1), ipv6PolicyBasedRouting(2) |
|
| brcdPbrSerialNumber |
6.4.1.1991.1.2.2.15.9.1.3 |
| This is a running number and may change if an acl or routemap is modified |
| Status: current |
Access: not-accessible |
| OBJECT-TYPE |
|
|
|
| |
INTEGER |
0..2147483647 |
|
| brcdPbrAclAccntAclInfo |
6.4.1.1991.1.2.2.15.9.1.4 |
| This contains ACL Number, ACL Name, ACL Filter Id, last five minutes and
cumulative accounting data since the ACL was installed.
Each field is separated by a pipe character
i.e. 5MIN|CUMULATIVE|ACL Number|ACL Filter Id|ACL Name |
| Status: current |
Access: read-only |
| OBJECT-TYPE |
|
|
|
| |
DisplayString |
|
|