BROCADE-ACL-MIB
AI MIB Summary
The BROCADE-ACL-MIB enables SNMP-based configuration and monitoring of Access Control List (ACL) policies on Brocade Fibre Channel and Ethernet switches, specifically tracking rule definitions, hit counts, and packet drop statistics to enforce network segmentation and security.
MIB module for management of ACLs.
Main OID:
brocadeACLMIB.1.3.6.1.4.1.1588.3.1.16
39
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
39 total| Object Name |
|---|
brocadeACLMIBMIB module for management of ACLs. MODULE-IDENTITY .1.3.6.1.4.1.1588.3.1.16 |
bcsiACLNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.1588.3.1.16.0 |
bcsiACLObjects OBJECT IDENTIFIER .1.3.6.1.4.1.1588.3.1.16.1 |
bcsiAclNameToIdMappingTableThis table maps the string name of an ACL to its numeric ACL ID for both L2 and L3 ACLs. SEQUENCE OF BcsiAclNameToAclIdMappingEntry .1.3.6.1.4.1.1588.3.1.16.1.1 |
bcsiAclNameToAclIdMappingEntryAn entry in the bcsiAclNameToIdMappingTable which lists the ACl-ID for ACL-Names. BcsiAclNameToAclIdMappingEntry .1.3.6.1.4.1.1588.3.1.16.1.1.1 |
bcsiAclNametoAclIdMappingAclNameName of the ACL. BcsiAclNameString .1.3.6.1.4.1.1588.3.1.16.1.1.1.1 |
bcsiAclNametoAclIdMappingAclIdNumeric ID of the ACL.ro Unsigned32 .1.3.6.1.4.1.1588.3.1.16.1.1.1.2 |
bcsiAclNametoAclIdMappingAclTypeACL can be of two types, namely standard and extended ACL.ro BcsiAclType .1.3.6.1.4.1.1588.3.1.16.1.1.1.3 |
bcsiAclNametoAclIdMappingAclLevelProtocol Layer at which ACLs are applied. L2 and L3 are the supported levels.ro BcsiAclLevel .1.3.6.1.4.1.1588.3.1.16.1.1.1.4 |
bcsiL2NamedAclRuleTableTable to display the L2 Named Access Control List Information listed below among others:
- Source MAC address
- Source MAC mask
- Destination MAC address
- Destination MAC mask
- VLAN ID
- Ethernet type SEQUENCE OF BcsiL2NamedAclRuleEntry .1.3.6.1.4.1.1588.3.1.16.1.2 |
bcsiL2NamedAclRuleEntryAn entry in the L2 Access Control List table. BcsiL2NamedAclRuleEntry .1.3.6.1.4.1.1588.3.1.16.1.2.1 |
bcsiL2NamedAclIdUnique Numeric ID of ACL.
It is the same as bcsiAclNametoAclIdMappingAclId in bcsiAclNameToIdMappingTable Unsigned32 .1.3.6.1.4.1.1588.3.1.16.1.2.1.1 |
bcsiL2NamedAclSequenceNumberSequence number is the number associated with rules of ACL Unsigned32 .1.3.6.1.4.1.1588.3.1.16.1.2.1.2 |
bcsiL2NamedAclNameRepresents the name of each configured L2 named ACL.
It is the same as bcsiAclNametoAclIdMappingAclName in bcsiAclNameToIdMappingTablero BcsiAclNameString .1.3.6.1.4.1.1588.3.1.16.1.2.1.3 |
bcsiL2NamedAclActionAction to take if the ingress L2 packet matches this ACL.ro BcsiAclAction .1.3.6.1.4.1.1588.3.1.16.1.2.1.4 |
bcsiL2NamedAclSourceTypeSource can be represented in three ways:
1. Mac address in HHHH.HHHH.HHHH format.
2. Any source mac address
3. Host specific mac address
Interpretation of bcsiL2NamedAclSourceMacMask depends on the value of this objectro BcsiAclMacType .1.3.6.1.4.1.1588.3.1.16.1.2.1.5 |
bcsiL2NamedAclSourceMacOptional Source MAC address. It depends on the value of bcsiL2NamedAclSourceType.
For standard(1) value of bcsiL2NamedAclSourceType, bcsiL2NamedAclSourceMac is user specified value.
For any(2) value of bcsiL2NamedAclSourceType, bcsiL2NamedAclSourceMac is 0.
For host(3) value of bcsiL2NamedAclSourceType, bcsiL2NamedAclSourceMac is user specified value.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.6 |
bcsiL2NamedAclSourceMacMaskOptional Source MAC address mask.
By default, it matches with any source MAC within a packet.
To match on the first two bytes of the address
aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case,
the clause matches all source MAC addresses that contain
'aabb' as the first two bytes and any values in the
remaining bytes of the MAC address.
Applicable for Extended ACLs only.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.7 |
bcsiL2NamedAclDestinationTypeDestination can be represented in three ways.
1. Mac address in HHHH.HHHH.HHHH format.
2. Any destination mac address
3. Host specific mac address
Interpretation of bcsiL2NamedAclDestinationMacMask depends on the value of this objectrw BcsiAclMacType .1.3.6.1.4.1.1588.3.1.16.1.2.1.8 |
bcsiL2NamedAclDestinationMacOptional destination MAC address. By default, it matches with any destination MAC within a packet.
It depends on the value of bcsiL2NamedAclDestinationType.
For standard(1) value of bcsiL2NamedAclDestinationType, bcsiL2NamedAclDestinationMac is user specified value.
For any(2) value of bcsiL2NamedAclDestinationType, bcsiL2NamedAclDestinationMac is 0.
For host(3) value of bcsiL2NamedAclDestinationType, bcsiL2NamedAclDestinationMac is user specified value.
Applicable for Extended ACLs only.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.9 |
bcsiL2NamedAclDestinationMacMaskOptional destination MAC address mask.
By default, it matches with any destination MAC within a packet.
To match on the first two bytes of the address
aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case,
the clause matches all destination MAC addresses that contain
'aabb' as the first two bytes and any values in the
remaining bytes of the MAC address.
Applicable for Extended ACLs only.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.10 |
bcsiL2NamedAclCountIndicates if the user has enabled/disabled count for number of
packets against which the configured action is taken, for a given rulerw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.11 |
bcsiL2NamedAclCopySflowIndicates whether to sample the packet for sflow collection or notrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.12 |
bcsiL2NamedAclDropPrecedenceForceForce ingress drop precedencerw BcsiDropPrecedenceForce .1.3.6.1.4.1.1588.3.1.16.1.2.1.13 |
bcsiL2NamedAclVlanTagFormatVlan tag format can be of 3 types, namely single-tagged, double-tagged and untagged.
When neither of these 3 types of tag are used, the feild is represented by 0.
When the value of this field is single-tagged(1),bcsiL2NamedAclVlanId represents the Vlan ID.rw BcsiVlanTagFormat .1.3.6.1.4.1.1588.3.1.16.1.2.1.14 |
bcsiL2NamedAclInnerVlanIdvlan ID of the tagged inner vlan.
If bcsiL2NamedAclVlanTagFormat is double-tagged(2),
then 0 value of this field indicates any.rw BcsiVlanIdOrNoneTC .1.3.6.1.4.1.1588.3.1.16.1.2.1.15 |
bcsiL2NamedAclOuterVlanIdVlan ID of the tagged outer vlan.
If bcsiL2NamedAclVlanTagFormat is double-tagged(2),
then 0 value of bcsiL2NamedAclInnerVlanId indicates any.rw BcsiVlanIdOrNoneTC .1.3.6.1.4.1.1588.3.1.16.1.2.1.16 |
bcsiL2NamedAclVlanIdOptional VLAN ID to match against that of the incoming packet.
By default, the VLAN ID field is ignored during the match. In this case,
value 0 is returned.
This field is interpreted as Vlan ID when bcsiL2NamedAclVlanTagFormat is either
0(not tagged) or 1(single-tagged).
Supported for Extended ACL only.rw BcsiVlanIdOrNoneTC .1.3.6.1.4.1.1588.3.1.16.1.2.1.17 |
bcsiL2NamedAclEthernetTypeEthernet Type to match against the 'Ethertype' field
in the L2 header of the incoming packet.
By default, etype field is ignored during the match.
Applicable for Extended ACLs only.rw Unsigned32 .1.3.6.1.4.1.1588.3.1.16.1.2.1.18 |
bcsiL2NamedAclArpGuardRepresents enabling/disabling of arp-gurad for a given ACLrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.19 |
bcsiL2NamedAclDot1PriorityThe priority option assigns traffic that matches the ACL to a
hardware forwarding queue. In addition to changing the internal
forwarding priority, if the outgoing interface is an 802.1q interface,
this option maps the specified priority to its equivalent 802.1p (QoS)
priority and marks the packet with the new 802.1p priority.
This option is applicable for inbound ACLs only.
NOTE: bcsiL2NamedAclDot1Priority following bcsiL2NamedAclDot1PriorityForce
cannot be used together in an ACL entry.
Applicable for Extended ACLs only.rw BcsiPortQosTC .1.3.6.1.4.1.1588.3.1.16.1.2.1.20 |
bcsiL2NamedAclDot1PriorityForceThe priority-force option assigns packets of outgoing traffic
that match the ACL to a specific hardware forwarding queue,
even though the incoming packet may be assigned to another queue.
This option is applicable for inbound ACLs only.
NOTE: bcsiL2NamedAclDot1Priority following bcsiL2NamedAclDot1PriorityForce
cannot be used together in an ACL entry.
Applicable for Extended ACL onlyrw BcsiPortQosTC .1.3.6.1.4.1.1588.3.1.16.1.2.1.21 |
bcsiL2NamedAclMirrorPacketsMirror packets matching ACL permit clause.
Applicable for Extended ACLs onlyrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.22 |
bcsiL2NamedAclLogEnableOptional parameter to enable logging only when deny clause
is specified. Note that traffic denied by implicit deny mechanism is not
subject to logging. The implicit deny kicks in when the traffic
does not match any of the clauses and there is no 'permit any any'
clause specified at the end.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1588.3.1.16.1.2.1.23 |
bcsiAclIfBindTableTable for binding L2 and L3 ACLs to interfaces.
- One cannot bind Layer 2 ACLs and Layer 3 ACLs to the same port.
However, configuration can be made on one port to use Layer 2 ACLs, and
another port on the same device to use Layer 3 ACLs.
- In general, Layer 2 ACLs cannot be bound to virtual interfaces, unlike L3 ACLs.
- One can not modify an existing Layer 2 ACL clause. For that, one must
unbind the ACL, delete it and make a new clause. SEQUENCE OF BcsiAclIfBindEntry .1.3.6.1.4.1.1588.3.1.16.1.3 |
bcsiAclIfBindEntryAn entry in the L2 and L3 ACL binding table which lists the ACL bindings to an interface. BcsiAclIfBindEntry .1.3.6.1.4.1.1588.3.1.16.1.3.1 |
bcsiAclIfBindDirectionDirection in which this ACL should be applied on this port. BcsiTrafficDirection .1.3.6.1.4.1.1588.3.1.16.1.3.1.1 |
bcsiAclIfBindAclNameRepresents the Name of each configured L2 or L3 named ACL.
It is the same as bcsiAclNametoAclIdMappingAclName in bcsiAclNameToIdMappingTablerw BcsiAclNameString .1.3.6.1.4.1.1588.3.1.16.1.3.1.2 |
bcsiACLConformance OBJECT IDENTIFIER .1.3.6.1.4.1.1588.3.1.16.2 |
More MIBs from Brocade
Browse all BrocadeMIBs →SW-MIB
SW-MIB provides management and monitoring capabilities for Brocade Fibre Channel switches, exposing critical operational metrics such as port status, traffic counters, buffer credits, and fabric topology state. This module enables the collection of performance data and fault detection for storage area network (SAN) infrastructure via SNMP.
249 objects→
BROCADE-SYSTEM-MIB
The BROCADE-SYSTEM-MIB provides standard SNMP access to Brocade Fibre Channel and Ethernet switch system-level attributes, including device identity, hardware status, environmental sensors, and operational counters. It enables centralized monitoring of critical infrastructure health metrics such as temperature, fan status, power supply states, and system uptime across the Brocade SAN and LAN fabric.
82 objects→
LINK-INCIDENT-MIB
The LINK-INCIDENT-MIB module monitors FICON link incident and failure events for host and device connections to Brocade Fibre Channel switches within Fabos environments. It provides specific counters and status indicators to track link stability and fault conditions for FICON traffic traversing the switch fabric.
81 objects→
BROCADE-MPLS-MIB
The BROCADE-MPLS-MIB enables monitoring and management of Multi-Protocol Label Switching (MPLS) operational states and traffic statistics on Extreme Networks (formerly Brocade) routing platforms. It provides access to specific metrics including MPLS label forwarding table entries, LSP (Label Switched Path) status, and associated interface counters for troubleshooting label-switched network performance.
65 objects→
BROCADE-TMSTATS-MIB
The BROCADE-TMSTATS-MIB module provides SNMP access to performance counters and operational statistics for Brocade Traffic Manager (TM) hardware and software components, specifically monitoring data plane throughput, packet processing rates, buffer utilization, and traffic flow metrics.
53 objects→
BROCADE-OPTICAL-MONITORING-MIB
The BROCADE-OPTICAL-MONITORING-MIB enables SNMP-based monitoring of Brocade optical transceivers to track critical physical layer parameters including temperature, transmit power, receive power, and laser bias current. This module facilitates real-time health assessment and fault detection for fiber optic ports by exposing these analog sensor values for network management systems.
38 objects→