FOUNDRY-SN-IP-ACL-MIB

File: FOUNDRY-SN-IP-ACL-MIB.mib (46532 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC FOUNDRY-SN-ROOT-MIB
IF-MIB FOUNDRY-SN-IP-MIB FOUNDRY-SN-SWITCH-GROUP-MIB

Imported symbols

MODULE-IDENTITY OBJECT-TYPE IpAddress
Counter64 Unsigned32 Integer32
DisplayString MacAddress TruthValue
RowStatus TEXTUAL-CONVENTION router
InterfaceIndex ifIndex InterfaceIndexOrZero
RtrStatus PortQosTC FdryVlanIdOrNoneTC

Defined Types

SnRowStatus  
The status of a given row in the table.
TEXTUAL-CONVENTION    
  INTEGER other(1), valid(2), delete(3), create(4)  

Action  
The action to be taken on the packet after filtering is done.
TEXTUAL-CONVENTION    
  INTEGER deny(0), permit(1)  

TruthVal  
Boolean value.
TEXTUAL-CONVENTION    
  INTEGER false(0), true(1)  

FdryClauseIndexTC  
One-based clause index value within a given ACL number.
TEXTUAL-CONVENTION    
  Unsigned32  

AclNumber  
The Access control list number for an entry. The standard Access list is in the range <1-99>. The extended Access list is in the range <100-199>. The named standard Access list is in the range <200-299>. The named extended Access list is in the range <300-399>. The L2 Access list is in the range <400-1399>. The IPv6 named Access list is in the range <5000-5100>
TEXTUAL-CONVENTION    
  INTEGER 1..5100  

AclNameString  
The optional name for a given access-list. In general, the ACL number for a named ACL is in the range of 200 and 399.
TEXTUAL-CONVENTION    
  OCTET STRING Size(0..255)  

Operator  
The operation used within a given ACL filter to determine permit or deny.
TEXTUAL-CONVENTION    
  INTEGER eq(0), neq(1), lt(2), gt(3), range(4), undefined(7)  

IpProtocol  
The IP protocol number on which ACL can be applied.
TEXTUAL-CONVENTION    
  Integer32 0..255  

PrecedenceValue  
The IP precedence value on which ACL can be applied.
TEXTUAL-CONVENTION    
  INTEGER routine(0), priority(1), immediate(2), flash(3), flashoverride(4), critical(5), internet(6), network(7), undefined(8)  

TosValue  
The IP TOS value on which ACL can be applied.
TEXTUAL-CONVENTION    
  INTEGER normal(0), minMonetaryCost(1), maxReliability(2), tosValue3(3), maxThroughput(4), tosValue5(5), tosValue6(6), tosValue7(7), minDelay(8), tosValue9(9), tosValue10(10), tosValue11(11), tosValue12(12), tosValue13(13), tosValue14(14), tosValue15(15), undefined(16)  

Direction  
The packet flow direction within an interface for which ACL needs to be applied.
TEXTUAL-CONVENTION    
  INTEGER inbound(0), outbound(1)  

FdryEnetTypeOrZeroTC  
Ethernet Type field within the Ethernet-II frame
TEXTUAL-CONVENTION    
  INTEGER invalid(0), ipv4(1), arp(2), ipv6(3)  

SnAgAclEntry  
SEQUENCE    
  snAgAclIndex Integer32
  snAgAclNumber AclNumber
  snAgAclName DisplayString
  snAgAclAction Action
  snAgAclProtocol IpProtocol
  snAgAclSourceIp IpAddress
  snAgAclSourceMask IpAddress
  snAgAclSourceOperator Operator
  snAgAclSourceOperand1 INTEGER
  snAgAclSourceOperand2 INTEGER
  snAgAclDestinationIp IpAddress
  snAgAclDestinationMask IpAddress
  snAgAclDestinationOperator Operator
  snAgAclDestinationOperand1 INTEGER
  snAgAclDestinationOperand2 INTEGER
  snAgAclPrecedence PrecedenceValue
  snAgAclTos TosValue
  snAgAclEstablished RtrStatus
  snAgAclLogOption TruthVal
  snAgAclStandardFlag TruthVal
  snAgAclRowStatus SnRowStatus
  snAgAclFlowCounter Counter64
  snAgAclPacketCounter Counter64
  snAgAclComments DisplayString
  snAgAclIpPriority INTEGER
  snAgAclPriorityForce INTEGER
  snAgAclPriorityMapping INTEGER
  snAgAclDscpMarking INTEGER
  snAgAclDscpMapping INTEGER
  snAgAclIcmpCode INTEGER
  snAgAclParameters BITS
  snAgAclVlanId FdryVlanIdOrNoneTC
  snAgAclClauseString DisplayString

SnAgAclBindToPortEntry  
SEQUENCE    
  snAgAclPortNum Integer32
  snAgAclPortBindDirection Direction
  snAgAclNum Integer32
  snAgAclNameString DisplayString
  snAgBindPortListInVirtualInterface OCTET STRING
  snAgAclPortRowStatus SnRowStatus

SnAgAclIfBindEntry  
SEQUENCE    
  snAgAclIfBindIndex InterfaceIndex
  snAgAclIfBindDirection Direction
  snAgAclIfBindNum INTEGER
  snAgAclIfBindName DisplayString
  snAgAclIfBindVifPortList OCTET STRING
  snAgAclIfBindRowStatus SnRowStatus
  snAgAclIfBindDenyLogging INTEGER
  snAgAclIfIpv6BindName DisplayString

AgAclAccntEntry  
SEQUENCE    
  agAclAccntKind INTEGER
  agAclAccntIfIndex InterfaceIndex
  agAclAccntDirection Direction
  agAclAccntAclNumber AclNumber
  agAclAccntFilterId Unsigned32
  agAclAccntAclName AclNameString
  agAclAccntOneSecond Counter64
  agAclAccntOneMinute Counter64
  agAclAccntFiveMinute Counter64
  agAclAccntCumulative Counter64
  agAclAccntRaclDropCnt Counter64
  agAclAccntRaclFwdCnt Counter64
  agAclAccntRaclRemarkCnt Counter64
  agAclAccntRaclTotalCnt Counter64
  agAclAccntRaclTotalSWHitCountCnt Counter64

FdryL2AclNextClauseEntry  
SEQUENCE    
  fdryL2AclNextClauseIndex FdryClauseIndexTC

FdryL2AclEntry  
SEQUENCE    
  fdryL2AclNumber AclNumber
  fdryL2AclClauseIndex FdryClauseIndexTC
  fdryL2AclAction Action
  fdryL2AclSourceMac MacAddress
  fdryL2AclSourceMacMask MacAddress
  fdryL2AclDestinationMac MacAddress
  fdryL2AclDestinationMacMask MacAddress
  fdryL2AclVlanId FdryVlanIdOrNoneTC
  fdryL2AclEthernetType FdryEnetTypeOrZeroTC
  fdryL2AclDot1pPriority PortQosTC
  fdryL2AclDot1pPriorityForce PortQosTC
  fdryL2AclDot1pPriorityMapping PortQosTC
  fdryL2AclMirrorPackets TruthValue
  fdryL2AclLogEnable TruthValue
  fdryL2AclRowStatus RowStatus

FdryL2AclIfBindEntry  
SEQUENCE    
  fdryL2AclIfBindDirection Direction
  fdryL2AclIfBindAclNumber Unsigned32
  fdryL2AclIfBindRowStatus RowStatus

BrcdPbrAclAccntEntry  
SEQUENCE    
  brcdPbrAclAccntKind INTEGER
  brcdPbrAclAccntIfIndex InterfaceIndex
  brcdPbrSerialNumber INTEGER
  brcdPbrAclAccntAclInfo DisplayString

Defined Values

snAgAcl 6.4.1.1991.1.2.2.15
Copyright 1996-2010 Brocade Communications Systems, Inc. All rights reserved. This Brocade Communications Systems SNMP Management Information Base Specification embodies Brocade Communications Systems' confidential and proprietary intellectual property. Brocade Communications Systems retains all title and ownership in the Specification, including any revisions. This Specification is supplied AS IS, and Brocade Communications Systems makes no warranty, either express or implied, as to the use, operation, condition, or performance of the specification, and any unintended consequence it may on the user environment.
MODULE-IDENTITY    

snAgAclGlobal 6.4.1.1991.1.2.2.15.1
OBJECT IDENTIFIER    

snAgAclGblCurRowIndex 6.4.1.1991.1.2.2.15.1.1
The current row index of the ACL table entry.
OBJECT-TYPE    
  Integer32  

snAgAclGblAcctEnable 6.4.1.1991.1.2.2.15.1.2
Specifies the administration status of the ACL accounting. This object is not supported in CES/CER platforms.
OBJECT-TYPE    
  INTEGER disabled(0), enabled(1)  

snAgAclGblIfIPv4AcctClear 6.4.1.1991.1.2.2.15.1.3
Clears the IPv4 ACL accounting information for the given interface. If the value is 0 then it clears IPv4 ACL accounting information for all the interfaces.
OBJECT-TYPE    
  InterfaceIndexOrZero  

snAgAclGblIfIPv6AcctClear 6.4.1.1991.1.2.2.15.1.4
Clears the IPv6 ACL accounting information for the given interface. If the value is 0 then it clears IPv6 accounting information for all the interfaces.
OBJECT-TYPE    
  InterfaceIndexOrZero  

snAgAclGblRebindAclNumber 6.4.1.1991.1.2.2.15.1.5
The access-list number for rebind
OBJECT-TYPE    
  AclNumber  

snAgAclGblRebindAclName 6.4.1.1991.1.2.2.15.1.6
The access-list name for rebind.
OBJECT-TYPE    
  DisplayString  

brcdPbrAclAccntFilterAclName 6.4.1.1991.1.2.2.15.1.7
This object can be used to control the content of brcdPbrAclAccntTable. Any ACL filter that has a full or partial match with ACL name will not be returned in the brcdPbrAclAccntTable. If not specified, the default value is null and all ACL filters will be returned by the table.
OBJECT-TYPE    
  DisplayString  

brcdPbrAclAccntCounterType 6.4.1.1991.1.2.2.15.1.8
This contains ACL Number, ACL Name, ACL Filter Id, last five minutes and cumulative accounting data since the ACL was installed. Each field is separated by a pipe character i.e. 5MIN|CUMULATIVE|ACL Number|ACL Filter Id|ACL Name Depending on the value of brcdPbrAclAccntCounterType the corresponding counter will have the value while the other is zero.
OBJECT-TYPE    
  INTEGER cumulative(1), last5min(2)  

snAgAclTable 6.4.1.1991.1.2.2.15.2
Table of Access Control List
OBJECT-TYPE    
  SEQUENCE OF  
    SnAgAclEntry

snAgAclEntry 6.4.1.1991.1.2.2.15.2.1
An entry in the IP access control list table.
OBJECT-TYPE    
  SnAgAclEntry  

snAgAclIndex 6.4.1.1991.1.2.2.15.2.1.1
The Access control list item number for an entry. This is a unique number that identifies different Access list entries combined with the Access list name and Access list number. This one has to be unique even though the name and number are not unique for a given Access list with same or different source address, subnet mask, destination address and destination mask, protocol type, action (permit/deny) type and the operator (neq, eq, gt and, lt) which makes the index a unique tuple (name, number, itemnumber).
OBJECT-TYPE    
  Integer32  

snAgAclNumber 6.4.1.1991.1.2.2.15.2.1.2
The access-list number for this entry.
OBJECT-TYPE    
  AclNumber  

snAgAclName 6.4.1.1991.1.2.2.15.2.1.3
ACL name for an entry.
OBJECT-TYPE    
  DisplayString  

snAgAclAction 6.4.1.1991.1.2.2.15.2.1.4
Action to take if the ip packet matches with this access control list.
OBJECT-TYPE    
  Action  

snAgAclProtocol 6.4.1.1991.1.2.2.15.2.1.5
Transport protocol. Valid values for the IP protocol are: 0 = any IP protocol 1 = ICMP 2 = IGMP 3 = ggp 4 = ipencap 5 = st2 6 = TCP 7 = cbt 8 = egp 9 = igp 10 = bbn_rcc 11 = nvp 12 = pup 13 = argus 14 = emcon 15 = xnet 16 = chaos 17 = UDP 18 = mux 19 = dcn 20 = hmp 21 = prm 22 = xns_idp 23 = trunk1 24 = trunk2 25 = leaf1 26 = leaf2 27 = rdp 28 = irtp 29 = iso_tp4 30 = netblt 31 = mfe_nsp 32 = merit_inp 33 = sep 34 = threepc 35 = idpr 36 = xtp 37 = ddp 38 = idpr_cmtp 39 = tppp 40 = il 41 = ipv6 42 = sdrp 43 = ipv6_route 44 = ipv6_frag 45 = idrp 46 = rsvp 47 = gre 48 = mhrp 49 = bna 50 = esp 51 = ahp 52 = inlsp 53 = swipe 54 = narp 55 = mobile 56 = tlsp 57 = skip 58 = ipv6_icmp 59 = ipv6_nonxt 60 = ipv6_opts 62 = cftp 64 = sat_expak 65 = kryptolan 66 = rvd 67 = ippc 69 = sat_mon 70 = visa 71 = ipcv 72 = cpnx 73 = cphb 74 = wsn 75 = pvp 76 = br_sat_mon 77 = sun_nd 78 = wb_mon 79 = wb_expak 80 = iso_ip 81 = vmtp 82 = secure_vmtp 83 = vines 84 = ttp 85 = nsfnet_igp 86 = dgp 87 = tcf 88 = IGRP 89 = OSPF 90 = sprite_rpc 91 = larp 92 = mtp 93 = ax25 94 = ipip 95 = micp 96 = scc_sp 97 = etherip 98 = encap 100 = gmtp 101 = ifmp 102 = pnni 103 = pim 104 = aris 105 = scps 106 = qnx 107 = an 108 = ipcomp 109 = snp 110 = compaq_peer 111 = ipxinip 112 = vrrp 113 = pgm 115 = l2tp 116 = ddx 117 = iatp 118 = st 119 = srp 120 = uti 121 = smp 122 = sm 123 = ptp 124 = isis 125 = fire 126 = crtp 127 = crdup 128 = sscopmce 129 = iplt 130 = sps 131 = pipe 132 = sctp 133 = fc 134 = rsvp_e2e_ignore 135 = mobility_header 136 = udplite 137 = mpls_in_ip 138 = manet 139 = hip 140 = shim6 254 = divert
OBJECT-TYPE    
  IpProtocol  

snAgAclSourceIp 6.4.1.1991.1.2.2.15.2.1.6
Source IP address.
OBJECT-TYPE    
  IpAddress  

snAgAclSourceMask 6.4.1.1991.1.2.2.15.2.1.7
Source IP subnet mask.
OBJECT-TYPE    
  IpAddress  

snAgAclSourceOperator 6.4.1.1991.1.2.2.15.2.1.8
Type of comparison to perform. For now, this only applys to tcp or udp to compare the port number
OBJECT-TYPE    
  Operator  

snAgAclSourceOperand1 6.4.1.1991.1.2.2.15.2.1.9
For now this only refers to transport protocol port number. 0 means NA
OBJECT-TYPE    
  INTEGER 0..65535  

snAgAclSourceOperand2 6.4.1.1991.1.2.2.15.2.1.10
For now this only refers to transport protocol port number. Used in ICMP Protocol to convey the ICMP Type value. 0 means NA. Valid values for ICMP Type: 1 = Echo reply 4 = Destination unreachable 5 = Source quench 6 = Redirect 9 = Echo request 10=Router advertisement 11=Router solicitation 12=Time exceeded 13=Parameter problem 14=Timestamp request 15=Timestamp reply 16=Information request 17=Information reply 18=Address mask request 19=Address mask reply.
OBJECT-TYPE    
  INTEGER 0..65535  

snAgAclDestinationIp 6.4.1.1991.1.2.2.15.2.1.11
Destination IP address.
OBJECT-TYPE    
  IpAddress  

snAgAclDestinationMask 6.4.1.1991.1.2.2.15.2.1.12
Destination IP subnet mask.
OBJECT-TYPE    
  IpAddress  

snAgAclDestinationOperator 6.4.1.1991.1.2.2.15.2.1.13
Type of comparison to perform. For now, this only applys to tcp or udp to compare the port number
OBJECT-TYPE    
  Operator  

snAgAclDestinationOperand1 6.4.1.1991.1.2.2.15.2.1.14
For now this only refers to transport protocol port number. 0 means NA
OBJECT-TYPE    
  INTEGER 0..65535  

snAgAclDestinationOperand2 6.4.1.1991.1.2.2.15.2.1.15
For now this only refers to transport protocol port number. 0 means NA
OBJECT-TYPE    
  INTEGER 0..65535  

snAgAclPrecedence 6.4.1.1991.1.2.2.15.2.1.16
This refers to IP precedence value in the range <0-7> critical(5), flash(3), flash-override(4), immediate(2), internet(6), network(7), priority(1), routine(0)
OBJECT-TYPE    
  PrecedenceValue  

snAgAclTos 6.4.1.1991.1.2.2.15.2.1.17
This refers to the IP type of service value in range <0-15>, which is the sum of numeric vlaues of the following options - match packets with maximum reliability TOS (2) match packets with maximum throughput TOS (4) match packets with minimum delay (8) match packets with minimum monetary cost TOS (1) match packets with normal TOS (0)
OBJECT-TYPE    
  TosValue  

snAgAclEstablished 6.4.1.1991.1.2.2.15.2.1.18
Enable/Disable the filtering of established TCP packets of which the ACK or RESET flag is on. This additional filter only applies to TCP transport protocol.
OBJECT-TYPE    
  RtrStatus  

snAgAclLogOption 6.4.1.1991.1.2.2.15.2.1.19
Log flag
OBJECT-TYPE    
  TruthVal  

snAgAclStandardFlag 6.4.1.1991.1.2.2.15.2.1.20
Return whether the ACL is standard or extended, 1 for standard ACL
OBJECT-TYPE    
  TruthVal  

snAgAclRowStatus 6.4.1.1991.1.2.2.15.2.1.21
To create or delete a access list entry.
OBJECT-TYPE    
  SnRowStatus  

snAgAclFlowCounter 6.4.1.1991.1.2.2.15.2.1.22
Approximate count of flows matching individual ACL entry.
OBJECT-TYPE    
  Counter64  

snAgAclPacketCounter 6.4.1.1991.1.2.2.15.2.1.23
Accurate count of packets matching individual ACL entry.
OBJECT-TYPE    
  Counter64  

snAgAclComments 6.4.1.1991.1.2.2.15.2.1.24
Remark description of individual ACL entry.
OBJECT-TYPE    
  DisplayString  

snAgAclIpPriority 6.4.1.1991.1.2.2.15.2.1.25
QoS priority option for IP ACL entry.
OBJECT-TYPE    
  INTEGER 0..3  

snAgAclPriorityForce 6.4.1.1991.1.2.2.15.2.1.26
Force packet outgoing priority. Not defined(4)
OBJECT-TYPE    
  INTEGER 0..4  

snAgAclPriorityMapping 6.4.1.1991.1.2.2.15.2.1.27
Map incoming packet priority. Not defined(8)
OBJECT-TYPE    
  INTEGER 0..8  

snAgAclDscpMarking 6.4.1.1991.1.2.2.15.2.1.28
Mark packets with given DSCP value. Not defined(64)
OBJECT-TYPE    
  INTEGER 0..64  

snAgAclDscpMapping 6.4.1.1991.1.2.2.15.2.1.29
Map incoming DSCP value. Not defined(64)
OBJECT-TYPE    
  INTEGER 0..64  

snAgAclIcmpCode 6.4.1.1991.1.2.2.15.2.1.30
ICMP Message Code value. Used in combination with ICMP Message Type (use snAgAclSourceOperand2) to setup an ICMP filter. This object is not used with any other protocol. 0 means NA. Supported values Type: Echo reply -------------- 1 = Echo reply Type: Destination unreachable ------------------------- 1 = Network unreachable 2 = Host unreachable 3 = Protocol unreachable 4 = Port unreachable 5 = Fragmentation needed by don't fragment bit set 6 = Source route failed 7 = Destination network unknown 8 = Destination host unknown 9 = Source host isolated 10 = Destination network administratively prohibited 11=Destination host administratively prohibited 12=Network unreachable for TOS 13=Host unreachable for TOS 14=Communication administratively prohibited by filter 15=Host precedence violation 16=Precedence cutoff in effect Type: Source quench ------------------ 1 = Source quench Type: Redirect ------------ 1 = Redirect for network 2 = Redirect for host 3 = Redirect for TOS and network 4 = Redirect for TOS and host Type: Echo request ----------------- 1 = Echo request Type: Router advertisement ------------------------ 1 = Router advertisement Type: Router solicitation --------------------- 1 = Router solicitation Type: Time exceeded ------------------ 1 = Time to live equals 0 during transmit 2 = Time to live equals 0 during reassembly Type: Parameter problem --------------------- 1 = IP header bad (catchall error) 2 = Required option missing Type: Timestamp request ---------------------- 1 = Timestamp request Type: Timestamp reply ------------------- 1 = Timestamp reply Type: Information request ---------------------- 1 = Information request Type: Information reply -------------------- 1 = Information reply Type: Address mask request ------------------------ 1 = Address mask request Type: Address mask reply ---------------------- 1 = Address mask reply
OBJECT-TYPE    
  INTEGER 0..255  

snAgAclParameters 6.4.1.1991.1.2.2.15.2.1.31
This mask represents multiple parameters configured for this ACL. Bit 0 specified in the BITS construct is the MS bit of the first octet. Bit 0: Match fragmented IP packets Bit 1: Match non-fragmented IP packets Bit 2: Match only TCP packets with SYN Bit set. Valid only if snAgAclSourceOperator or snAgAclDestinationOperator is set to TCP. Bit 3: Permit packets that fail RPF check Bit 4: Mirror packets matching ACL permit clause Bit 5: Send packets matching ACL permit clause to sFlow collector Bit 6: Set dscp-mapping. The value is given by snAgAclDscpMarking Bit 7: Set dscp-marking. The value is given by snAgAclDscpMapping
OBJECT-TYPE    
  BITS matchFragmentedPackets(0), matchNonFragmentedPackets(1), matchTcpSynSetPackets(2), permitFailedRPFCheckPackets(3), mirrorPermitPackets(4), sendPermitPacketsToSflowCollector(5), dscpMappingFlagSet(6), dscpMarkingFlagSet(7)  

snAgAclVlanId 6.4.1.1991.1.2.2.15.2.1.32
Optional VLAN ID to match against that of the incoming packet. By default, the VLAN ID field is ignored during the match. In this case, value 0 is returned.
OBJECT-TYPE    
  FdryVlanIdOrNoneTC  

snAgAclClauseString 6.4.1.1991.1.2.2.15.2.1.33
Returns the equivalent filter clause string.
OBJECT-TYPE    
  DisplayString  

snAgAclBindToPortTable 6.4.1.1991.1.2.2.15.3
Table of ACL binding to port for router
OBJECT-TYPE    
  SEQUENCE OF  
    SnAgAclBindToPortEntry

snAgAclBindToPortEntry 6.4.1.1991.1.2.2.15.3.1
An entry in the ACL-binding-to-port table.
OBJECT-TYPE    
  SnAgAclBindToPortEntry  

snAgAclPortNum 6.4.1.1991.1.2.2.15.3.1.1
Binding-to port num, either physical port or virtual interface.
OBJECT-TYPE    
  Integer32  

snAgAclPortBindDirection 6.4.1.1991.1.2.2.15.3.1.2
ACL port direction, inbound or outbound
OBJECT-TYPE    
  Direction  

snAgAclNum 6.4.1.1991.1.2.2.15.3.1.3
Defined ACL number
OBJECT-TYPE    
  Integer32  

snAgAclNameString 6.4.1.1991.1.2.2.15.3.1.4
Defined ACL name
OBJECT-TYPE    
  DisplayString  

snAgBindPortListInVirtualInterface 6.4.1.1991.1.2.2.15.3.1.5
Port list for binding virtual interface
OBJECT-TYPE    
  OCTET STRING  

snAgAclPortRowStatus 6.4.1.1991.1.2.2.15.3.1.6
To create or delete a ACL port entry.
OBJECT-TYPE    
  SnRowStatus  

snAgAclIfBindTable 6.4.1.1991.1.2.2.15.4
Table of ACL binding to port for router
OBJECT-TYPE    
  SEQUENCE OF  
    SnAgAclIfBindEntry

snAgAclIfBindEntry 6.4.1.1991.1.2.2.15.4.1
An entry in the ACL-binding-to-port table.
OBJECT-TYPE    
  SnAgAclIfBindEntry  

snAgAclIfBindIndex 6.4.1.1991.1.2.2.15.4.1.1
Binding-to port num, either physical port or virtual interface.
OBJECT-TYPE    
  InterfaceIndex  

snAgAclIfBindDirection 6.4.1.1991.1.2.2.15.4.1.2
ACL port direction, inbound or outbound
OBJECT-TYPE    
  Direction  

snAgAclIfBindNum 6.4.1.1991.1.2.2.15.4.1.3
The id of the IPv4 ACL bound to this Interface (0 represents named ACL)
OBJECT-TYPE    
  INTEGER 0..199  

snAgAclIfBindName 6.4.1.1991.1.2.2.15.4.1.4
The name of the IPv4 ACL name bound to this Interface
OBJECT-TYPE    
  DisplayString Size(0..255)  

snAgAclIfBindVifPortList 6.4.1.1991.1.2.2.15.4.1.5
This object specifies the port list for binding virtual interface. Each port index is an ifIndex, if there are consecutive 4 or more ifIndex then, they will be encoded like below. Encoding and decoding scheme is range based: Each range prefix with 0000 (2 octets) where 0000 is not valid ifIndex. Next 2 octets indicates lower range ifIndex, followed by 2 octets of higher range ifIndex. Individual(non range) ones will be displayed as it is. Ex: port list: 0001..0005 0015 0032..0047 Port list in PDU: 0000 0001 0005 000f 0000 0020 002f.
OBJECT-TYPE    
  OCTET STRING  

snAgAclIfBindRowStatus 6.4.1.1991.1.2.2.15.4.1.6
To create or delete a ACL port entry.
OBJECT-TYPE    
  SnRowStatus  

snAgAclIfBindDenyLogging 6.4.1.1991.1.2.2.15.4.1.7
Enable or disable deny logging.
OBJECT-TYPE    
  INTEGER disable(0), enable(1)  

snAgAclIfIpv6BindName 6.4.1.1991.1.2.2.15.4.1.8
The name of the IPv6 ACL name bound to this Interface
OBJECT-TYPE    
  DisplayString Size(0..200)  

agAclAccntTable 6.4.1.1991.1.2.2.15.5
Table of ACL Accounting Statistics for router
OBJECT-TYPE    
  SEQUENCE OF  
    AgAclAccntEntry

agAclAccntEntry 6.4.1.1991.1.2.2.15.5.1
An entry in the ACL-binding-to-port table.
OBJECT-TYPE    
  AgAclAccntEntry  

agAclAccntKind 6.4.1.1991.1.2.2.15.5.1.1
Kind of ACL Accounting statistics needed. ipv4PolicyBasedRouting(2) and ipv6PolicyBasedRouting(6) are implemented in brcdPbrAclAccntTable. Agent will fail for GET on ipv4PolicyBasedRouting(2) and ipv6PolicyBasedRouting(6) wheresas for GET_NEXT it will skip these. The enum value ipv6ReceiveAcl(7) is not supported on CES/CER devices.
OBJECT-TYPE    
  INTEGER ipv4(0), l2(1), rateLimit(3), receiveAcl(4), ipv6(5), ipv6ReceiveAcl(7)  

agAclAccntIfIndex 6.4.1.1991.1.2.2.15.5.1.2
Physical or virtual interface on which ACL accounting is desired. For Receive ACL, we use the lowest port of the management module as value for this object.
OBJECT-TYPE    
  InterfaceIndex  

agAclAccntDirection 6.4.1.1991.1.2.2.15.5.1.3
ACL port direction, inbound or outbound. For receive-acl kind, direction cannot be outbound.
OBJECT-TYPE    
  Direction  

agAclAccntAclNumber 6.4.1.1991.1.2.2.15.5.1.4
The access-list number for this entry.
OBJECT-TYPE    
  AclNumber  

agAclAccntFilterId 6.4.1.1991.1.2.2.15.5.1.5
FilterId within a given ACL. This is a zero based value.
OBJECT-TYPE    
  Unsigned32  

agAclAccntAclName 6.4.1.1991.1.2.2.15.5.1.6
ACL name for an entry, if applicable. Otherwise, null string is returned.
OBJECT-TYPE    
  AclNameString  

agAclAccntOneSecond 6.4.1.1991.1.2.2.15.5.1.7
Last one second accounting data.
OBJECT-TYPE    
  Counter64  

agAclAccntOneMinute 6.4.1.1991.1.2.2.15.5.1.8
Last one minute accounting data.
OBJECT-TYPE    
  Counter64  

agAclAccntFiveMinute 6.4.1.1991.1.2.2.15.5.1.9
Last five minute accounting data.
OBJECT-TYPE    
  Counter64  

agAclAccntCumulative 6.4.1.1991.1.2.2.15.5.1.10
Cummulative accounting data since the ACL was installed.
OBJECT-TYPE    
  Counter64  

agAclAccntRaclDropCnt 6.4.1.1991.1.2.2.15.5.1.11
Receive-ACL drop counter used for rate limiting. Not used for other ACL kind. The value returned is per ACL, instead of per filter within the ACL.
OBJECT-TYPE    
  Counter64  

agAclAccntRaclFwdCnt 6.4.1.1991.1.2.2.15.5.1.12
Receive-ACL forward counter used for rate limiting. Not used for other ACL kind. The value returned is per ACL, instead of per filter within the ACL.
OBJECT-TYPE    
  Counter64  

agAclAccntRaclRemarkCnt 6.4.1.1991.1.2.2.15.5.1.13
Receive-ACL remark counter used for rate limiting. Not used for other ACL kind. The value returned is per ACL, instead of per filter within the ACL.
OBJECT-TYPE    
  Counter64  

agAclAccntRaclTotalCnt 6.4.1.1991.1.2.2.15.5.1.14
Receive-ACL total counter used for rate limiting. Not used for other ACL kind. The value returned is per ACL, instead of per filter within the ACL.
OBJECT-TYPE    
  Counter64  

agAclAccntRaclTotalSWHitCountCnt 6.4.1.1991.1.2.2.15.5.1.15
Receive-ACL cumulative software hit counter. Not used for other ACL kind. The value returned is per ACL, instead of per filter within the ACL.
OBJECT-TYPE    
  Counter64  

fdryL2AclNextClauseTable 6.4.1.1991.1.2.2.15.6
This read-only table contains the list of next lowest available clause index that can be used for creating a new instance in the fdryL2AclTable. The clause index values will not change as a result of switchovers or hitless upgrades, but may change as a result of a device reload (though the relative order of persistent entries would remain the same).
OBJECT-TYPE    
  SEQUENCE OF  
    FdryL2AclNextClauseEntry

fdryL2AclNextClauseEntry 6.4.1.1991.1.2.2.15.6.1
An entry specifying the next lowest available clause index for this ACL number.
OBJECT-TYPE    
  FdryL2AclNextClauseEntry  

fdryL2AclNextClauseIndex 6.4.1.1991.1.2.2.15.6.1.1
The next lowest available clause index for a given ACL number. The maximum value of this object is the configured maximum number of clauses for a L2 ACL.
OBJECT-TYPE    
  FdryClauseIndexTC  

fdryL2AclTable 6.4.1.1991.1.2.2.15.7
Table of Layer 2 Access Control Lists. Layer 2 ACLs filter traffic based on any of the following fields: - Source MAC address and source MAC mask - Destination MAC address and destination MAC mask - VLAN ID - Ethernet type. For a given ACL number, one can have 64 (default) to 256 clauses. The clause index values will not change as a result of switchovers or hitless upgrades, but may change as a result of a device reload (though the relative order of persistent entries would remain the same).
OBJECT-TYPE    
  SEQUENCE OF  
    FdryL2AclEntry

fdryL2AclEntry 6.4.1.1991.1.2.2.15.7.1
An entry in the L2 Access Control List table.
OBJECT-TYPE    
  FdryL2AclEntry  

fdryL2AclNumber 6.4.1.1991.1.2.2.15.7.1.1
The access-list number for this entry. For L2ACL, the valid values are between 400 and 599.
OBJECT-TYPE    
  AclNumber  

fdryL2AclClauseIndex 6.4.1.1991.1.2.2.15.7.1.2
The index of the clause within a given ACL number. During row creation, the clause index value should match with the next available clause index for a given ACL number. It is advisable to first do a Get operation on the fdryL2AclNextClauseTable for a given ACL number, and use the value of fdryL2AclNextClauseIndex returned by the agent.
OBJECT-TYPE    
  FdryClauseIndexTC  

fdryL2AclAction 6.4.1.1991.1.2.2.15.7.1.3
Action to take if the ingress L2 packet matches this ACL.
OBJECT-TYPE    
  Action  

fdryL2AclSourceMac 6.4.1.1991.1.2.2.15.7.1.4
Optional Source MAC address. By default, it matches with any source MAC within a packet.
OBJECT-TYPE    
  MacAddress  

fdryL2AclSourceMacMask 6.4.1.1991.1.2.2.15.7.1.5
Optional Source MAC address mask. For Set operation, this object can only be used in conjunction with fdryL2AclSourceMac. By default, it matches with any source MAC within a packet. it matches with any source MAC within a packet. To match on the first two bytes of the address aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case, the clause matches all source MAC addresses that contain 'aabb' as the first two bytes and any values in the remaining bytes of the MAC address.
OBJECT-TYPE    
  MacAddress  

fdryL2AclDestinationMac 6.4.1.1991.1.2.2.15.7.1.6
Optional destination MAC address. By default, it matches with any destination MAC within a packet.
OBJECT-TYPE    
  MacAddress  

fdryL2AclDestinationMacMask 6.4.1.1991.1.2.2.15.7.1.7
Optional destination MAC address mask. For Set operation, this object can only be used in conjunction with fdryL2AclDestinationMac. By default, it matches with any destination MAC within a packet. To match on the first two bytes of the address aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case, the clause matches all destination MAC addresses that contain 'aabb' as the first two bytes and any values in the remaining bytes of the MAC address.
OBJECT-TYPE    
  MacAddress  

fdryL2AclVlanId 6.4.1.1991.1.2.2.15.7.1.8
Optional VLAN ID to match against that of the incoming packet. By default, the VLAN ID field is ignored during the match. In this case, value 0 is returned.
OBJECT-TYPE    
  FdryVlanIdOrNoneTC  

fdryL2AclEthernetType 6.4.1.1991.1.2.2.15.7.1.9
Optional Ethernet Type to match against the etype field of the incoming packet. By default, etype field is ignored during the match.
OBJECT-TYPE    
  FdryEnetTypeOrZeroTC  

fdryL2AclDot1pPriority 6.4.1.1991.1.2.2.15.7.1.10
The priority option assigns traffic that matches the ACL to a hardware forwarding queue. In addition to changing the internal forwarding priority, if the outgoing interface is an 802.1q interface, this option maps the specified priority to its equivalent 802.1p (QoS) priority and marks the packet with the new 802.1p priority. This option is applicable for inbound ACLs only. This object is not supported in RX, where it always returns enum value invalid. NOTE: fdryL2AclDot1pPriority following fdryL2AclDot1pPriorityForce cannot be used together in an ACL entry.
OBJECT-TYPE    
  PortQosTC  

fdryL2AclDot1pPriorityForce 6.4.1.1991.1.2.2.15.7.1.11
The priority-force option assigns packets of outgoing traffic that match the ACL to a specific hardware forwarding queue, even though the incoming packet may be assigned to another queue. This option is applicable for inbound ACLs only. This object is not supported in RX, where it always returns enum value invalid. NOTE: fdryL2AclDot1pPriority following fdryL2AclDot1pPriorityForce cannot be used together in an ACL entry.
OBJECT-TYPE    
  PortQosTC  

fdryL2AclDot1pPriorityMapping 6.4.1.1991.1.2.2.15.7.1.12
The priority-mapping option matches on the packets 802.1p value. This option does not change the packets forwarding priority through the device or mark the packet. This keyword is applicable for both inbound and outbound ACLs. This object is not supported in RX, where it always returns enum value invalid.
OBJECT-TYPE    
  PortQosTC  

fdryL2AclMirrorPackets 6.4.1.1991.1.2.2.15.7.1.13
Mirror packets matching ACL permit clause.
OBJECT-TYPE    
  TruthValue  

fdryL2AclLogEnable 6.4.1.1991.1.2.2.15.7.1.14
Optional parameter to enable logging only when deny clause is specified. Note that traffic denied by implicit deny mechanism is not subject to logging. The implicit deny kicks in when the traffic does not match any of the clauses and there is no 'permit any any' clause specified at the end.
OBJECT-TYPE    
  TruthValue  

fdryL2AclRowStatus 6.4.1.1991.1.2.2.15.7.1.15
The row status variable, used according to installation and removal conventions for conceptual rows. Setting this object to active(1) or createAndGo(4) results in the addition of a L2 ACL filter in the router. Duplicate entry will be rejected during row creation. As part of row creation, we support only appending to this table. Row insertion may not be supported. Setting this object to destroy(6) removes the associated filter from the router. Other values in the enumeration are not used.
OBJECT-TYPE    
  RowStatus  

fdryL2AclIfBindTable 6.4.1.1991.1.2.2.15.8
Table of L2 ACL binding to port. - One cannot bind Layer 2 ACLs and Layer 3 ACLs to the same port. However, one can configure a port to use Layer 2 ACLs, and another port on the same device to use Layer 3 ACLs. - In general, Layer 2 ACLs cannot be bound to virtual interfaces, unlike L3 ACLs. - One cannot modify an existing Layer 2 ACL clause. For that, one must unbind the ACL, delete it and make a new clause.
OBJECT-TYPE    
  SEQUENCE OF  
    FdryL2AclIfBindEntry

fdryL2AclIfBindEntry 6.4.1.1991.1.2.2.15.8.1
An entry in the L2ACL binding table which lists the ACL bindings to a port.
OBJECT-TYPE    
  FdryL2AclIfBindEntry  

fdryL2AclIfBindDirection 6.4.1.1991.1.2.2.15.8.1.1
Direction in which this ACL should be applied on this port.
OBJECT-TYPE    
  Direction  

fdryL2AclIfBindAclNumber 6.4.1.1991.1.2.2.15.8.1.2
The ACL number that is to be bound to given physical interface. The valid values for L2 numbered ACLs are between 400 and 599.
OBJECT-TYPE    
  Unsigned32  

fdryL2AclIfBindRowStatus 6.4.1.1991.1.2.2.15.8.1.3
The row status variable, used according to installation and removal conventions for conceptual rows. Setting this object to active(1) or createAndGo(4) results in the binding of a L2 ACL with a given physical port. Setting this object to destroy(6) unbinds this L2 ACL from the port. Other values in the enumeration are not used.
OBJECT-TYPE    
  RowStatus  

brcdPbrAclAccntTable 6.4.1.1991.1.2.2.15.9
Table of PBR ACL Accounting Statistics for router.
OBJECT-TYPE    
  SEQUENCE OF  
    BrcdPbrAclAccntEntry

brcdPbrAclAccntEntry 6.4.1.1991.1.2.2.15.9.1
An entry in the PBR ACL-binding-to-port table.
OBJECT-TYPE    
  BrcdPbrAclAccntEntry  

brcdPbrAclAccntKind 6.4.1.1991.1.2.2.15.9.1.1
Kind of PBR ACL Accounting statistics needed.
OBJECT-TYPE    
  INTEGER ipv4PolicyBasedRouting(1), ipv6PolicyBasedRouting(2)  

brcdPbrAclAccntIfIndex 6.4.1.1991.1.2.2.15.9.1.2
Physical or virtual interface on which ACL accounting is desired
OBJECT-TYPE    
  InterfaceIndex  

brcdPbrSerialNumber 6.4.1.1991.1.2.2.15.9.1.3
This is a running number and may change if an acl or routemap is modified
OBJECT-TYPE    
  INTEGER 0..2147483647  

brcdPbrAclAccntAclInfo 6.4.1.1991.1.2.2.15.9.1.4
This contains ACL Number, ACL Name, ACL Filter Id, last five minutes and cumulative accounting data since the ACL was installed. Each field is separated by a pipe character i.e. 5MIN|CUMULATIVE|ACL Number|ACL Filter Id|ACL Name
OBJECT-TYPE    
  DisplayString