CIENA-CES-ACCESS-LIST-MIB
AI MIB Summary
The CIENA-CES-ACCESS-LIST-MIB enables remote monitoring and configuration of hardware-based Access Control List (ACL) profiles and rules on Ciena Carrier Ethernet Service (CES) platforms. It exposes specific objects for retrieving ACL rule definitions and tracking per-rule traffic statistics, including packet and byte counters, to facilitate granular policy enforcement analysis.
This MIB module defines objects that describe Hardware ACLs (Access Control Lists). The MIB describes different objects that enable the network administrator to remotely view ACL profile/rule, configuration in addition to monitoring ACL rule statistics.
Main OID:
cienaCesAccessListMIB.1.3.6.1.4.1.1271.2.1.35
82
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
82 total| Object Name |
|---|
cienaCesAccessListMIBThis MIB module defines objects that describe Hardware
ACLs (Access Control Lists).
The MIB describes different objects that enable the
network administrator to remotely view ACL profile/rule,
configuration in addition to monitoring ACL rule statistics. MODULE-IDENTITY .1.3.6.1.4.1.1271.2.1.35 |
cienaCesAccessListMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.35.1 |
cienaCesAclConfiguration OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.35.1.1 |
cienaCesAclGlobalConfig OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.35.1.1.1 |
cienaCesAclAdminStatusIndicates whether the ACL feature is globally enabled or disabled.ro CienaGlobalState (CIENA-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.1.1 |
cienaCesAclFilterModeIndicates which global ACL device mode is currently in use.ro Enumeration .1.3.6.1.4.1.1271.2.1.35.1.1.1.2 |
cienaCesAclNumAclProfileDefsIndicates the total number of configured ACL profile definitions on the device.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.1.3 |
cienaCesAclRemainingAclProfileDefsIndicates the number of remaining ACL profile definitions that can be configured on the device.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.1.4 |
cienaCesAclNumAclRuleDefsIndicates the total number of configured ACL rule definitions on the device.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.1.5 |
cienaCesAclRemainingAclRuleDefsIndicates the number of remaining ACL rule definitions that can be configured on the device.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.1.6 |
cienaCesAclProfileConfigTableA table of ACL profiles configured on the device. Each
entry contains the ACL profile configuration data. SEQUENCE OF CienaCesAclProfileConfigTableEntry .1.3.6.1.4.1.1271.2.1.35.1.1.2 |
cienaCesAclProfileConfigTableEntryAn entry containing the ACL profile configuration data. CienaCesAclProfileConfigTableEntry .1.3.6.1.4.1.1271.2.1.35.1.1.2.1 |
cienaCesAclProfileIdThe unique identifier of this ACL profile. Integer32 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.1 |
cienaCesAclProfileNameThe unique name of this ACL profile.ro DisplayString .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.2 |
cienaCesAclProfileAdminStateThe configured administrative State of the ACL profile.ro CienaGlobalState (CIENA-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.3 |
cienaCesAclProfileOperStateThe Operational State of the ACL profile.
A profile is operationally enabled if it is administratively enabled
and attached to at least one interface. It is otherwise disabled.
Note that the ACL feature must also be globally enabled for
any profile to be operationally enabled.ro CienaGlobalState (CIENA-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.4 |
cienaCesAclProfileDefaultFilterActionThe configured default filter action for this ACL profile.ro AclFilterAction .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.5 |
cienaCesAclProfileNumRulesThe number of ACL rules configured in this profile. There will always
be at least one rule defined in each profile - the default rule.ro Integer32 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.6 |
cienaCesAclProfileAttachedInterfacesThe number of interfaces to which this profile is attached.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.7 |
cienaCesAclRuleConfigTableA table of ACL rules configured on the device. Each
entry contains the ACL rule configuration data. SEQUENCE OF CienaCesAclRuleConfigTableEntry .1.3.6.1.4.1.1271.2.1.35.1.1.3 |
cienaCesAclRuleConfigTableEntryAn entry containing the ACL rule configuration data. CienaCesAclRuleConfigTableEntry .1.3.6.1.4.1.1271.2.1.35.1.1.3.1 |
cienaCesAclRulePrecedenceThe unique precedence value (within the profile) of this ACL rule. Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.1 |
cienaCesAclRuleNameThe unique name (within the profile) of this ACL rule.ro DisplayString .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.2 |
cienaCesAclRuleFilterActionThe configured filter action for this ACL rule.ro AclFilterAction .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.3 |
cienaCesAclRuleMatchAnyTrue if the ACL rule matches any traffic, False otherwise.
Matching on any traffic automatically disregards all the remaining fields.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.4 |
cienaCesAclRuleMatchSrcMacAddrTrue if the ACL rule matches on the source MAC address, False otherwise.
When True, the cienaCesAclRuleSrcMacAddr and cienaCesAclRuleSrcMacAddrMask fields
will contain the source MAC address and mask that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.5 |
cienaCesAclRuleSrcMacAddrContains the source MAC address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.6 |
cienaCesAclRuleSrcMacAddrMaskContains the source MAC address mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.7 |
cienaCesAclRuleMatchDstMacAddrTrue if the ACL rule matches on the destination MAC address, False otherwise.
When True, the cienaCesAclRuleDstMacAddr and cienaCesAclRuleDstMacAddrMask fields
will contain the destination MAC address and mask that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.8 |
cienaCesAclRuleDstMacAddrContains the destination MAC address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.9 |
cienaCesAclRuleDstMacAddrMaskContains the destination MAC address mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.ro MacAddress (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.10 |
cienaCesAclRuleMatchOuterVidTrue if the ACL rule matches on the outer VID, False otherwise.
When True, the cienaCesAclRuleOuterVid and cienaCesAclRuleOuterVidMask fields
will contain the outer VID value and mask that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.11 |
cienaCesAclRuleOuterVidContains the outer VID that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.12 |
cienaCesAclRuleOuterVidMaskContains the outer VID mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.13 |
cienaCesAclRuleMatchOuterPcpTrue if the ACL rule matches on the outer PCP, False otherwise.
When True, the cienaCesAclRuleOuterPcp and cienaCesAclRuleOuterPcpMask fields
will contain the outer PCP value and mask that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.14 |
cienaCesAclRuleOuterPcpContains the outer PCP that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.15 |
cienaCesAclRuleOuterPcpMaskContains the outer PCP mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.16 |
cienaCesAclRuleMatchOuterDeiTrue if the ACL rule matches on the outer DEI bit, False otherwise.
When True, the cienaCesAclRuleOuterDei field
will contain the outer DEI value that is to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.17 |
cienaCesAclRuleOuterDeiContains the outer DEI bit that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterDei field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.18 |
cienaCesAclRuleMatchBaseEtypeTrue if the ACL rule matches on the base ethertype, False otherwise.
When True, the cienaCesAclRuleBaseEtype field
will contain the base ethertype value that is to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.19 |
cienaCesAclRuleBaseEtypeContains the base ethertype that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchBaseEtype field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.20 |
cienaCesAclRuleMatchSrcIpAddrTrue if the ACL rule matches on the source IP address, False otherwise.
When True, the cienaCesAclRuleSrcIpAddrType field will contain the
IP address type (IPv4 or IPv6) and the cienaCesAclRuleSrcIpAddr and
cienaCesAclRuleSrcIpAddrPrefixLength fields will contain the IP address
value and mask that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.21 |
cienaCesAclRuleSrcIpAddrTypeIdentifies the address family of the source IP address (IPv4/IPv6). This field is
not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to Falsero InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.22 |
cienaCesAclRuleSrcIpAddrContains the source IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.23 |
cienaCesAclRuleSrcIpAddrPrefixLengthContains the prefix length of the source IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.ro InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.24 |
cienaCesAclRuleMatchDstIpAddrTrue if the ACL rule matches on the destination IP address, False otherwise.
When True, the cienaCesAclRuleDstIpAddrType field will contain the
IP address type (IPv4 or IPv6) and the cienaCesAclRuleDstIpAddr and
cienaCesAclRuleDstIpAddrPrefixLength fields will contain the IP address
value and mask that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.25 |
cienaCesAclRuleDstIpAddrTypeIdentifies the address family of the destination IP address (IPv4/IPv6).
This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to Falsero InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.26 |
cienaCesAclRuleDstIpAddrContains the destination IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.27 |
cienaCesAclRuleDstIpAddrPrefixLengthContains the prefix length of the destination IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.ro InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.28 |
cienaCesAclRuleMatchIpProtocolTrue if the ACL rule matches on the IP protocol, False otherwise.
When True, the cienaCesAclRuleIpProtocol field
will contain the IP protocol value that is to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.29 |
cienaCesAclRuleIpProtocolContains the IP protocol value that is to be matched by this rule. This field is
not applicable when the cienaCesAclRuleMatchIpProtocol field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.30 |
cienaCesAclRuleMatchDscpTrue if the ACL rule matches on the DSCP value, False otherwise.
When True, the cienaCesAclRuleDscp and cienaCesAclRuleDscpMask fields
will contain the DSCP value and mask that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.31 |
cienaCesAclRuleDscpContains the DSCP value that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.32 |
cienaCesAclRuleDscpMaskContains the outer DSCP mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.ro Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.33 |
cienaCesAclRuleMatchL4SrcPortIndicates the type of L4 source port matching that the ACL rule is performing.
A value of 'any' indicates that the rule matches any L4 source port.
A value of 'single' indicates that the rules matches on a single L4 source port
specified in the cienaCesAclRuleL4SrcPort field. A value of 'range' indicates that
the rule matches on a range of ports, with the cienaCesAclRuleL4SrcPort field specifiying
the lower bound and the cienaCesAclRuleL4SrcPortUpper specifying the upper bound of the range.ro AclL4PortMatchType .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.34 |
cienaCesAclRuleL4SrcPortContains the lower bound or single L4 source port value that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4SrcPort.
This field is not applicable when the cienaCesAclRuleMatchL4SrcPort field is set to 'any'.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.35 |
cienaCesAclRuleL4SrcPortUpperContains the upper bound of the L4 source port range that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4SrcPort.
This field is not applicable when the cienaCesAclRuleMatchL4SrcPort field is set to 'any' or 'single'.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.36 |
cienaCesAclRuleMatchL4DstPortIndicates the type of L4 destination port matching that the ACL rule is performing.
A value of 'any' indicates that the rule matches any L4 destination port.
A value of 'single' indicates that the rules matches on a single L4 destination port
specified in the cienaCesAclRuleL4SrcPort field. A value of 'range' indicates that
the rule matches on a range of ports, with the cienaCesAclRuleL4DstPort field specifiying
the lower bound and the cienaCesAclRuleL4DstPortUpper specifying the upper bound of the range.ro AclL4PortMatchType .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.37 |
cienaCesAclRuleL4DstPortContains the lower bound or single L4 destination port value that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4DstPort.
This field is not applicable when the cienaCesAclRuleMatchL4DstPort field is set to 'any'.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.38 |
cienaCesAclRuleL4DstPortUpperContains the upper bound of the L4 destination port range that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4DstPort.
This field is not applicable when the cienaCesAclRuleMatchL4DstPort field is set to 'any' or 'single'.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.39 |
cienaCesAclRuleMatchL4DstProtocolIndicates the L4 destination protocol name that is to be matched by this rule.
A value of 'any' indicates that the rule will match any protocol. Note that
this field is mutually exclusive with cienaCesAclRuleMatchL4DstPort - i.e. only
one of these fields can have a value different from 'any' at a given time.ro AclL4DstProtocol .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.40 |
cienaCesAclRuleMatchIpFragmentIndicates the type of IP fragment matching that is to be matched by this rule.
A value of 'any' indicates that the rule will match both fragmented and non-fragmented
packets. A value of 'fragment' indicates that the rule will match only fragmented packets.
A value of 'nonfragment' indicates that the rule will match only non-fragmented (head) packets.ro AclIpFragmentMatchType .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.41 |
cienaCesAclRuleMatchTcpFlagsTrue if the ACL rule matches on specific TCP Flags, False otherwise.
When True, the cienaCesAclRuleTcpFlags field will contain the TCP Flags
that are to be matched by this rule.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42 |
cienaCesAclRuleTcpFlagsContains a comma-separated uppercase string list of TCP Flags
that are to be matched by this rule, i.e. 'SYN,ACK,RST,...'.
This field is not applicable when the cienaCesAclRuleMatchTcpFlags
field is set to False.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.43 |
cienaCesAclProfileAttachmentTableA table showing the interface attachments for each
profile on the device. Each entry contains the name of
the interface and the traffic direction on which the profile is applied. SEQUENCE OF CienaCesAclProfileAttachmentTableEntry .1.3.6.1.4.1.1271.2.1.35.1.1.4 |
cienaCesAclProfileAttachmentTableEntryAn entry containing the ACL profile attachment data. CienaCesAclProfileAttachmentTableEntry .1.3.6.1.4.1.1271.2.1.35.1.1.4.1 |
cienaCesAclInterfaceTypeThe type of the interface to which this ACL profile is attached. AclInterfaceType .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.1 |
cienaCesAclInterfaceIdThe ID of the interface to which this ACL profile is attached. Integer32 .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.2 |
cienaCesAclInterfaceNameThe name of the interface to which this ACL profile is attached.ro DisplayString .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.3 |
cienaCesAclDirectionThe interface's traffic direction (ingress/egress) on which the ACL profile is applied.ro AclTrafficDirection .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.4 |
cienaCesAclStatistics OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.35.1.2 |
cienaCesAclProfileGlobalRuleStatsTableA table of global ACL profile rule statistics. Global ACL profile rule statistics
are the aggregate counts of the hit statistics for all instances of the ACL profile's rules. SEQUENCE OF CienaCesAclProfileGlobalRuleStatsTableEntry .1.3.6.1.4.1.1271.2.1.35.1.2.1 |
cienaCesAclProfileGlobalRuleStatsTableEntryAn entry containing the ACL profile global rule hit statistics. CienaCesAclProfileGlobalRuleStatsTableEntry .1.3.6.1.4.1.1271.2.1.35.1.2.1.1 |
cienaCesAclGlobalRuleStatsPacketCountThe number of packets that matched this ACL rule.ro Counter64 .1.3.6.1.4.1.1271.2.1.35.1.2.1.1.1 |
cienaCesAclGlobalRuleStatsByteCountThe number of bytes that matched this ACL rule.ro Counter64 .1.3.6.1.4.1.1271.2.1.35.1.2.1.1.2 |
cienaCesAclProfileRuleInstanceStatsTableA table of ACL profile rule instance statistics. These ACL rule hit statistics are
specific to the rules applied on the particular interface. SEQUENCE OF CienaCesAclProfileRuleInstanceStatsTableEntry .1.3.6.1.4.1.1271.2.1.35.1.2.2 |
cienaCesAclProfileRuleInstanceStatsTableEntryAn entry containing the ACL profile rule instance hit statistics. CienaCesAclProfileRuleInstanceStatsTableEntry .1.3.6.1.4.1.1271.2.1.35.1.2.2.1 |
cienaCesAclRuleInstanceStatsPacketCountThe number of packets that matched this ACL rule instance.ro Counter64 .1.3.6.1.4.1.1271.2.1.35.1.2.2.1.1 |
cienaCesAclRuleInstanceStatsByteCountThe number of bytes that matched this ACL rule instance.ro Counter64 .1.3.6.1.4.1.1271.2.1.35.1.2.2.1.2 |
cienaCesAccessListMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.35.2 |
cienaCesAccessListMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.35.2.1 |
cienaCesAccessListMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.35.2.2 |