ARISTA-ACL-MIB
AI MIB Summary
The ARISTA-ACL-MIB enables SNMP-based monitoring and configuration of Access Control List (ACL) entries, including rule matching statistics, hit counts, and packet/byte counters, specifically on Arista EOS network devices.
The MIB module for managing Access Control Lists (ACLs) on Arista devices.
Main OID:
aristaAclMIB.1.3.6.1.4.1.30065.3.5
97
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
97 total| Object Name |
|---|
aristaAclMIBThe MIB module for managing Access Control Lists (ACLs) on
Arista devices. MODULE-IDENTITY .1.3.6.1.4.1.30065.3.5 |
aristaAcl OBJECT IDENTIFIER .1.3.6.1.4.1.30065.3.5.1 |
aristaIpAcl OBJECT IDENTIFIER .1.3.6.1.4.1.30065.3.5.1.1 |
aristaIpAclTableA table that contains IP ACLs that are configured on the switch. SEQUENCE OF AristaIpAclEntry .1.3.6.1.4.1.30065.3.5.1.1.1 |
aristaIpAclEntryInformation about a specific IP ACL that is configured on the
switch. AristaIpAclEntry .1.3.6.1.4.1.30065.3.5.1.1.1.1 |
aristaIpAclNameThe name of the IP ACL. DisplayString .1.3.6.1.4.1.30065.3.5.1.1.1.1.1 |
aristaIpAclReadOnlyThis attribute has value 'true(1)' if the IP ACL is
configured as read-only; otherwise, the value is
'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.1.1.2 |
aristaIpAclStatsEnabledThis attribute has value 'true(1)' if the IP ACL is
configured to have per-rule statistics enabled; otherwise,
the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.1.1.3 |
aristaIpAclCountersIncompleteThis attribute has value 'true(1)' if the IP ACL has
incomplete counter; otherwise, the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.1.1.4 |
aristaIpAclRuleTableA table that contains IP ACL rules that are configured on the
switch. SEQUENCE OF AristaIpAclRuleEntry .1.3.6.1.4.1.30065.3.5.1.1.2 |
aristaIpAclRuleEntryConfiguration information about a specific IP ACL rule. AristaIpAclRuleEntry .1.3.6.1.4.1.30065.3.5.1.1.2.1 |
aristaIpAclRuleSeqIdThis attribute is the sequence ID for this ACL rule. Unsigned32 .1.3.6.1.4.1.30065.3.5.1.1.2.1.1 |
aristaIpAclRuleProtoThis attribute is the IP protocol to be matched by this ACL
rule. The value 0 indicates the rule matches any IP
protocol.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.1.2.1.2 |
aristaIpAclRuleSrcThis attribute is the IP source address to be matched by this
ACL rule, subject to the aristaIpAclRuleSrcMask value.ro IpAddress .1.3.6.1.4.1.30065.3.5.1.1.2.1.3 |
aristaIpAclRuleSrcMaskThis attribute is the IP source-address mask in this ACL
rule. For the source address of the packet to match the rule,
the bitwise logical-AND of the address and this mask must be
equal to the value of aristaIpAclRuleSrc.ro IpAddress .1.3.6.1.4.1.30065.3.5.1.1.2.1.4 |
aristaIpAclRuleDestThis attribute is the IP destination address to be matched by
this ACL rule, subject to the aristaIpAclRuleDestMask value.ro IpAddress .1.3.6.1.4.1.30065.3.5.1.1.2.1.5 |
aristaIpAclRuleDestMaskThis attribute is the IP destination-address mask in this ACL
rule. For the destination address of the packet to match the rule,
the bitwise logical-AND of the address and this mask must be
equal to the value of aristaIpAclRuleDest.ro IpAddress .1.3.6.1.4.1.30065.3.5.1.1.2.1.6 |
aristaIpAclRuleL4PortSrcOperThis attribute determines TCP/UDP source-port matching
behavior in this ACL rule. If this attribute has value
'any(0)', then attribute aristaIpAclRuleL4PortsSrc is
ignored.ro AristaAclRangeOperator .1.3.6.1.4.1.30065.3.5.1.1.2.1.7 |
aristaIpAclRuleL4PortsSrcThis attribute is a list of TCP/UDP source ports to be
matched in this ACL rule. They are represented as decimal
strings, separated by spaces. A maximum of 10 ports is
allowed. Attribute aristaIpAclRuleL4PortSrcOper determines
how the source ports are matched in this ACL rule.ro OCTET STRING .1.3.6.1.4.1.30065.3.5.1.1.2.1.8 |
aristaIpAclRuleL4PortDestOperThis attribute determines TCP/UDP destination-port matching
behavior in this ACL rule. If this attribute has value
'any(0)', then attribute aristaIpAclRuleL4PortsDest is
ignored.ro AristaAclRangeOperator .1.3.6.1.4.1.30065.3.5.1.1.2.1.9 |
aristaIpAclRuleL4PortsDestThis attribute is a list of TCP/UDP destination ports to be
matched in this ACL rule. They are represented as decimal
strings, separated by spaces. A maximum of 10 ports is
allowed. Attribute aristaIpAclRuleL4PortDestOper determines
how the destination ports are matched in this ACL rule.ro OCTET STRING .1.3.6.1.4.1.30065.3.5.1.1.2.1.10 |
aristaIpAclRuleTtlOperThis attribute is the IP TTL (Time To Live) operation code
used in this ACL rule. Combined with attribute aristaIpAclRuleTtl,
it specifies the IP TTL matching behavior in this ACL rule.ro AristaAclRangeOperator .1.3.6.1.4.1.30065.3.5.1.1.2.1.11 |
aristaIpAclRuleTtlThis attribute is the IP TTL value in this ACL rule.
Attribute aristaIpAclRuleTtlOper determines how the TTL
values is matched in this ACL rule.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.1.2.1.12 |
aristaIpAclRuleTrackedThis attribute has the value 'true(1)' if this ACL rule is
tracked; otherwise, the value is 'false(2)'. A tracked rule
matches packets in existing ICMP/UDP/TCP connections.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.2.1.13 |
aristaIpAclRuleFragmentsThis attribute has value 'true(1)' if this ACL rule is
configured to match IP fragments; otherwise, the value is
'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.2.1.14 |
aristaIpAclRuleTcpFlagsThis attribute describes TCP flags that are matched by this
ACL rule.ro Bits .1.3.6.1.4.1.30065.3.5.1.1.2.1.15 |
aristaIpAclRuleEstablishedThis attribute has value 'true(1)' if this ACL rule matches
existing TCP connections; otherwise, the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.2.1.16 |
aristaIpAclRuleIcmpTypeThis attribute is the ICMP type that is matched by this ACL
rule. The attribute is ignored in the ACL rule if the value is
65535.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.1.2.1.17 |
aristaIpAclRuleIcmpCodeThis attribute is the ICMP code that is matched by this ACL
rule. The attribute is ignored in the ACL rule if the value is
65535.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.1.2.1.18 |
aristaIpAclRuleActionThis attribute is the action applied to this ACL rule.ro AristaAclRuleAction .1.3.6.1.4.1.30065.3.5.1.1.2.1.19 |
aristaIpAclRuleLogThis attribute has value 'true(1)' if logging is required in
this ACL rule; otherwise, the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.2.1.20 |
aristaIpAclRuleRemarkThis attribute is the remark string applied to this ACL rule.ro DisplayString .1.3.6.1.4.1.30065.3.5.1.1.2.1.21 |
aristaIpAclRuleStatsTableA table that contains statistics for IP ACL rules. SEQUENCE OF AristaIpAclRuleStatsEntry .1.3.6.1.4.1.30065.3.5.1.1.3 |
aristaIpAclRuleStatsEntryStatistics for a specific IP ACL rules. AristaIpAclRuleStatsEntry .1.3.6.1.4.1.30065.3.5.1.1.3.1 |
aristaIpAclRuleTimeMarkA TimeFilter for this entry. See the TimeFilter textual
convention to see how this works. TimeFilter (RMON2-MIB) .1.3.6.1.4.1.30065.3.5.1.1.3.1.1 |
aristaIpAclRuleStatsPktCountThis attribute is the number of packets that this ACL rule
matched.ro Counter64 .1.3.6.1.4.1.30065.3.5.1.1.3.1.2 |
aristaIpAclRuleStatsLastUpdateTimeThe value of sysUpTime at the time the
aristaIpAclRuleStatsPktCount was last updated for this ACL rule.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.1.3.1.3 |
aristaMacAcl OBJECT IDENTIFIER .1.3.6.1.4.1.30065.3.5.1.2 |
aristaMacAclTableA table that contains MAC ACLs that are configured on the switch. SEQUENCE OF AristaMacAclEntry .1.3.6.1.4.1.30065.3.5.1.2.1 |
aristaMacAclEntryInformation about a specific MAC ACL that is configured on
the switch. AristaMacAclEntry .1.3.6.1.4.1.30065.3.5.1.2.1.1 |
aristaMacAclNameThe name of the MAC ACL. DisplayString .1.3.6.1.4.1.30065.3.5.1.2.1.1.1 |
aristaMacAclReadOnlyThis attribute has value 'true(1)' if the MAC ACL is
configured as read-only; otherwise, the value is
'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.1.1.2 |
aristaMacAclStatsEnabledThis attribute has value 'true(1)' if the MAC ACL is
configured to have per-entry statistics enabled; otherwise,
the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.1.1.3 |
aristaMacAclCountersIncompleteThis attribute has value 'true(1)' if the MAC ACL has
incomplete counter statistics; otherwise, the value is
'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.1.1.4 |
aristaMacAclRuleTableA table that contains MAC ACL rules that are configured on
the switch. SEQUENCE OF AristaMacAclRuleEntry .1.3.6.1.4.1.30065.3.5.1.2.2 |
aristaMacAclRuleEntryConfiguration information about a specific MAC ACL rule. AristaMacAclRuleEntry .1.3.6.1.4.1.30065.3.5.1.2.2.1 |
aristaMacAclRuleSeqIdThis attribute is the sequence ID for this ACL rule. Unsigned32 .1.3.6.1.4.1.30065.3.5.1.2.2.1.1 |
aristaMacAclRuleSrcThis attribute is the MAC source address to be matched by
this ACL rule, subject to the aristaMacAclRuleSrcMask value.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.2.1.2 |
aristaMacAclRuleSrcMaskThis attribute is the MAC source-address mask in this ACL
rule. For the source address of the packet to match the rule,
the bitwise logical-AND of the address and this mask must be
equal to the value of aristaMacAclRuleSrc.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.2.1.3 |
aristaMacAclRuleDestThis attribute is the MAC destination address to be matched
by this ACL rule, subject to the aristaMacAclRuleSrcMask value.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.2.1.4 |
aristaMacAclRuleDestMaskThis attribute is the MAC destination-address mask in this ACL
rule. For the destination address of the packet to match the rule,
the bitwise logical-AND of the address and this mask must be
equal to the value of aristaMacAclRuleDest.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.2.1.5 |
aristaMacAclRuleProtoThis attribute is the MAC protocol number to be matched by
this ACL rule. The protocol value 4294967295 (0xFFFFFFFF) is
a value that indicates the rule matches any
protocol.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.2.2.1.6 |
aristaMacAclRuleActionThis attribute is the action applied to this ACL rule.ro AristaAclRuleAction .1.3.6.1.4.1.30065.3.5.1.2.2.1.7 |
aristaMacAclRuleLogThis attribute has value 'true(1)' if logging is required in
this ACL rule; otherwise, the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.2.1.8 |
aristaMacAclRuleRemarkThis attribute is the remark string applied to this ACL rule.ro DisplayString .1.3.6.1.4.1.30065.3.5.1.2.2.1.9 |
aristaMacAclRuleStatsTableA table that contains statistics information for MAC ACL rules. SEQUENCE OF AristaMacAclRuleStatsEntry .1.3.6.1.4.1.30065.3.5.1.2.3 |
aristaMacAclRuleStatsEntryStatistics for MAC ACL rules. AristaMacAclRuleStatsEntry .1.3.6.1.4.1.30065.3.5.1.2.3.1 |
aristaMacAclRuleTimeMarkA TimeFilter for this entry. See the TimeFilter textual
convention to see how this works. TimeFilter (RMON2-MIB) .1.3.6.1.4.1.30065.3.5.1.2.3.1.1 |
aristaMacAclRuleStatsPktCountThis attribute is the number of packets that this ACL rule
matched.ro Counter64 .1.3.6.1.4.1.30065.3.5.1.2.3.1.2 |
aristaMacAclRuleStatsLastUpdateTimeThe value of sysUpTime at the time the
aristaMacAclRuleStatsPktCount was last updated for this ACL rule.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.2.3.1.3 |
aristaIpv6Acl OBJECT IDENTIFIER .1.3.6.1.4.1.30065.3.5.1.3 |
aristaIpv6AclTableA table that contains IPv6 ACLs that are configured on the
switch. SEQUENCE OF AristaIpv6AclEntry .1.3.6.1.4.1.30065.3.5.1.3.1 |
aristaIpv6AclEntryInformation about a specific IPv6 ACL that is configured on
the switch. AristaIpv6AclEntry .1.3.6.1.4.1.30065.3.5.1.3.1.1 |
aristaIpv6AclNameThe name of the IPv6 ACL. DisplayString .1.3.6.1.4.1.30065.3.5.1.3.1.1.1 |
aristaIpv6AclReadOnlyThis attribute has value 'true(1)' if the IPv6 ACL is
configured as read-only; otherwise, the value is
'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.3.1.1.2 |
aristaIpv6AclStatsEnabledThis attribute has value 'true(1)' if the IPv6 ACL is
configured to have per-entry statistics enabled; otherwise,
the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.3.1.1.3 |
aristaIpv6AclCountersIncompleteThis attribute has value 'true(1)' if the IPv6 ACL has
incomplete counter statistics; otherwise, the value is
'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.3.1.1.4 |
aristaIpv6AclRuleTableA table that contains IPv6 ACL rules that are configured on
the switch. SEQUENCE OF AristaIpv6AclRuleEntry .1.3.6.1.4.1.30065.3.5.1.3.2 |
aristaIpv6AclRuleEntryConfiguration information about a specific IPv6 ACL rule. AristaIpv6AclRuleEntry .1.3.6.1.4.1.30065.3.5.1.3.2.1 |
aristaIpv6AclRuleSeqIdThis attribute is the sequence ID for this ACL rule. Unsigned32 .1.3.6.1.4.1.30065.3.5.1.3.2.1.1 |
aristaIpv6AclRuleProtoThis attribute is the IPv6 upper layer protocol to be matched
by this ACL rule. The value 0 indicates the rule matches any
IPv6 protocol.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.3.2.1.2 |
aristaIpv6AclRuleSrcThis attribute is the IPv6 source address to be matched by this
ACL rule, subject to the aristaIpv6AclRuleSrcMask value.ro InetAddressIPv6 (INET-ADDRESS-MIB) .1.3.6.1.4.1.30065.3.5.1.3.2.1.3 |
aristaIpv6AclRuleSrcMaskThis attribute is the IPv6 source-address mask in this ACL
rule. For the source address of the packet to match the rule,
the bitwise logical-AND of the address and this mask must be
equal to the value of aristaIpv6AclRuleSrc.ro InetAddressIPv6 (INET-ADDRESS-MIB) .1.3.6.1.4.1.30065.3.5.1.3.2.1.4 |
aristaIpv6AclRuleDestThis attribute is the IPv6 destination address to be matched by
this ACL rule, subject to the aristaIpv6AclRuleDestMask value.ro InetAddressIPv6 (INET-ADDRESS-MIB) .1.3.6.1.4.1.30065.3.5.1.3.2.1.5 |
aristaIpv6AclRuleDestMaskThis attribute is the IPv6 destination-address mask in this ACL
rule. For the destination address of the packet to match the rule,
the bitwise logical-AND of the address and this mask must be
equal to the value of aristaIpv6AclRuleDest.ro InetAddressIPv6 (INET-ADDRESS-MIB) .1.3.6.1.4.1.30065.3.5.1.3.2.1.6 |
aristaIpv6AclRuleL4PortSrcOperThis attribute determines TCP/UDP source-port matching
behavior in this ACL rule. If this attribute has value
'any(0)', then attribute aristaIpv6AclRuleL4PortsSrc is
ignored.ro AristaAclRangeOperator .1.3.6.1.4.1.30065.3.5.1.3.2.1.7 |
aristaIpv6AclRuleL4PortsSrcThis attribute is a list of TCP/UDP source ports to be
matched in this ACL rule. They are represented as decimal
strings, separated by spaces. A maximum of 10 ports is
allowed. Attribute aristaIpv6AclRuleL4PortSrcOper determines
how the source ports are matched in this ACL rule.ro OCTET STRING .1.3.6.1.4.1.30065.3.5.1.3.2.1.8 |
aristaIpv6AclRuleL4PortDestOperThis attribute determines TCP/UDP destination-port matching
behavior in this ACL rule. If this attribute has value
'any(0)', then attribute aristaIpv6AclRuleL4PortsDest is
ignored.ro AristaAclRangeOperator .1.3.6.1.4.1.30065.3.5.1.3.2.1.9 |
aristaIpv6AclRuleL4PortsDestThis attribute is a list of TCP/UDP destination ports to be
matched in this ACL rule. They are represented as decimal
strings, separated by spaces. A maximum of 10 ports is
allowed. Attribute aristaIpv6AclRuleL4PortDestOper determines
how the destination ports are matched in this ACL rule.ro OCTET STRING .1.3.6.1.4.1.30065.3.5.1.3.2.1.10 |
aristaIpv6AclRuleHopLimitOperThis attribute is the IPv6 Hop Limit operation code used in
this ACL rule. Combined with attribute
aristaIpv6AclRuleHopLimit, it specifies the IPv6 Hop Limit
matching behavior in this ACL rule.ro AristaAclRangeOperator .1.3.6.1.4.1.30065.3.5.1.3.2.1.11 |
aristaIpv6AclRuleHopLimitThis attribute is the IPv6 Hop Limit value in this ACL
rule. Attribute aristaIpv6AclRuleHopLimitOper determines how
the Hop Limit values is matched in this ACL rule.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.3.2.1.12 |
aristaIpv6AclRuleTcpFlagsThis attribute describes TCP flags that are matched by this
ACL rule.ro Bits .1.3.6.1.4.1.30065.3.5.1.3.2.1.13 |
aristaIpv6AclRuleEstablishedThis attribute has value 'true(1)' if this ACL rule matches
existing TCP connections; otherwise, the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.3.2.1.14 |
aristaIpv6AclRuleIcmpTypeThis attribute is the ICMP type that is matched by this ACL
rule. The attribute is ignored in the ACL rule if the value is
65535.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.3.2.1.15 |
aristaIpv6AclRuleIcmpCodeThis attribute is the ICMP code that is matched by this ACL
rule. The attribute is ignored in the ACL rule if the value is
65535.ro Unsigned32 .1.3.6.1.4.1.30065.3.5.1.3.2.1.16 |
aristaIpv6AclRuleActionThis attribute is the action applied to this ACL rule.ro AristaAclRuleAction .1.3.6.1.4.1.30065.3.5.1.3.2.1.17 |
aristaIpv6AclRuleLogThis attribute has value 'true(1)' if logging is required in
this ACL rule; otherwise, the value is 'false(2)'.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.3.2.1.18 |
aristaIpv6AclRuleRemarkThis attribute is the remark string applied to this ACL rule.ro DisplayString .1.3.6.1.4.1.30065.3.5.1.3.2.1.19 |
aristaIpv6AclRuleStatsTableA table that contains statistics information for IPv6 ACL rules. SEQUENCE OF AristaIpv6AclRuleStatsEntry .1.3.6.1.4.1.30065.3.5.1.3.3 |
aristaIpv6AclRuleStatsEntryStatistics for IPv6 ACL rules. AristaIpv6AclRuleStatsEntry .1.3.6.1.4.1.30065.3.5.1.3.3.1 |
aristaIpv6AclRuleTimeMarkA TimeFilter for this entry. See the TimeFilter textual
convention to see how this works. TimeFilter (RMON2-MIB) .1.3.6.1.4.1.30065.3.5.1.3.3.1.1 |
aristaIpv6AclRuleStatsPktCountThis attribute is the number of packets that this ACL rule
matched.ro Counter64 .1.3.6.1.4.1.30065.3.5.1.3.3.1.2 |
aristaIpv6AclRuleStatsLastUpdateTimeThe value of sysUpTime at the time the
aristaIpv6AclRuleStatsPktCount was last updated for this ACL
rule.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.30065.3.5.1.3.3.1.3 |
aristaAclDpSupportFlagsThis attribute describes the data-plane ACL support matrix. If
data-plane ACLs are supported, the acl bit is 1; otherwise, other
bits are 0. If data-plane ACLs are supported, the logging, counter
and routerAcl bits indicate whether the data plane supports those
features for ACLs.ro Bits .1.3.6.1.4.1.30065.3.5.1.4 |
aristaAclConformance OBJECT IDENTIFIER .1.3.6.1.4.1.30065.3.5.2 |
aristaAclCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.30065.3.5.2.1 |
aristaAclGroups OBJECT IDENTIFIER .1.3.6.1.4.1.30065.3.5.2.2 |