CIENA-CES-ACL-MIB
The CIENA-CES-ACL-MIB enables the monitoring and configuration of Access Control List (ACL) rules and associated alarm notifications on Ciena Carrier Ethernet Service (CES) platforms. It provides granular visibility into packet filtering policies, rule hit counts, and event triggers for security and traffic management enforcement.
Imported Objects
Objects
50 total| Object Name |
|---|
cienaCesAclMIBThis module defines the ACL details and the
associated notifications. MODULE-IDENTITY .1.3.6.1.4.1.1271.2.1.25 |
cienaCesAclMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.25.1 |
cienaCesAclGlobal OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.25.1.1 |
cienaCesAclAdminStateThis object indicates the global IP ACL state.ro CienaGlobalState (CIENA-TC) .1.3.6.1.4.1.1271.2.1.25.1.1.1 |
cienaCesAclCacheHitThis object indicates the number of lookups satisfied by a cache hit.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.1.2 |
cienaCesAclNoHitThis object indicates the number of lookups that failed because the source
ip address did not match a table entry.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.1.3 |
cienaCesAclBadPortThis object indicates the number of lookups that failed because the ingress
port was disallowed by a table entry.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.1.4 |
cienaCesAclBadDscpThis object indicates the number of lookups that failed because the ingress
DSCP value was disallowed by a table entry.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.1.5 |
cienaCesAclOperStateThis object indicates the current operational state of the IP ACL system.ro CienaGlobalState (CIENA-TC) .1.3.6.1.4.1.1271.2.1.25.1.1.6 |
cienaCesAclInUseEntriesThis object indicates the number of IP ACL rules that are currently configured.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.1.7 |
cienaCesAclMaxEntriesThis object indicates the maximum number of IP ACL rules that can be configured.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.1.8 |
cienaCesAclBadProtocolThis object indicates the number of lookups that failed because protocol
didn't match protocol allowed for matching src/dst subnetro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.1.9 |
cienaCesAclRules OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.25.1.2 |
cienaCesAclTableThe (conceptual) table listing the parameters for the IP ACL table.deprecated SEQUENCE OF CienaCesAclEntry .1.3.6.1.4.1.1271.2.1.25.1.2.1 |
cienaCesAclEntryAn entry (conceptual row) in the cienaCesAclTable.deprecated CienaCesAclEntry .1.3.6.1.4.1.1271.2.1.25.1.2.1.1 |
cienaCesAclEntryInetAddrTypeThis object indicates the IP network type which will be authorized.
This OID specifies the Inet address type of the OIDs
cienaCesAclEntryInetAddr and cienaCesAclEntryInetPrefixLength.
When representing:
ipv4 : cienaCesAclEntryInetAddr should be compliant with
InetAddressIPv4 from RFC 4001
ipv6 : cienaCesAclEntryInetAddr should be compliant with
InetAddressIPv6 from RFC 4001deprecated InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.1 |
cienaCesAclEntryInetAddrThis object indicates the source IP network address that will
be authorized. This OID should be used in conjunction with
cienaCesAclEntryInetAddrType and should be compliant with RFC
4001 InetAddressType.rodeprecated InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.2 |
cienaCesAclEntryInetPrefixLengthThis object indicates the prefix length for the source IP network
that will be authorized. This OID should be used in conjunction
with cienaCesAclEntryInetAddrType.deprecated InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.3 |
cienaCesAclEntryHitsThis object indicates the number of lookups that matched the table entry.rodeprecated Counter32 .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.4 |
cienaCesAclEntryBadPortThis object indicates the number of lookups that failed because the ingress
port was disallowed by the table entry.rodeprecated Counter32 .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.5 |
cienaCesAclEntryDscpMaskThis object indicates the DSCP values for which IP packets
are allowed to ingress. The mask is big endian and each bit,
numbered from 0 to 63, represents a DSCP value numbered from
0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.rodeprecated OCTET STRING .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.6 |
cienaCesAclEntryBadDscpThis object indicates the number of lookups that failed because the ingress
DSCP value was disallowed by the table entry.rodeprecated Counter32 .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.7 |
cienaCesAclEntryPortBitMaskThis object indicates the physical ports on which frames will
be allowed to ingress from. The mask is big endian and each bit,
numbered from 0 to 63, represents a physical port numbered from
1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all ports.rodeprecated OCTET STRING .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.8 |
cienaCesAclEntryNotifInetAddrTypeThis object indicates the IP network type which will be authorized.
This OID specifies the Inet address type of the OIDs cienaCesAclEntryNotifInetAddr and
cienaCesAclEntryNotifInetPrefixLength.
When representing:
ipv4 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv4 from RFC 4001
ipv6 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv6 from RFC 4001rodeprecated InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.9 |
cienaCesAclEntryNotifInetAddrThis object indicates the IP network address that will be authorized.
This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType
and should be compliant with RFC 4001 InetAddressType.rodeprecated InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.10 |
cienaCesAclEntryNotifInetPrefixLengthThis object indicates the prefix length for the IP network that will be authorized.
This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType.rodeprecated InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.1.1.11 |
cienaCesExtAclTableThe (conceptual) table listing the parameters for the
extended IP ACL table. SEQUENCE OF CienaCesExtAclEntry .1.3.6.1.4.1.1271.2.1.25.1.2.2 |
cienaCesExtAclEntryAn entry (conceptual row) in the cienaCesExtAclTable. CienaCesExtAclEntry .1.3.6.1.4.1.1271.2.1.25.1.2.2.1 |
cienaCesExtAclEntrySrcInetAddrTypeThis object indicates the IP network type which will be authorized.
This OID specifies the Inet address type of the OIDs
cienaCesExtAclEntrySrcInetAddr and
cienaCesExtAclEntrySrcInetPrefixLen.
When representing:
ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with
InetAddressIPv4 from RFC 4001
ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with
InetAddressIPv6 from RFC 4001 InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.1 |
cienaCesExtAclEntrySrcInetAddrThis object indicates the source IP network address that will
be authorized. This OID should be used in conjunction with
cienaCesExtAclEntrySrcInetAddrType and should be compliant with RFC
4001 InetAddressType. InetAddress .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.2 |
cienaCesExtAclEntrySrcInetPrefixLenThis object indicates the prefix length for the source IP network
that will be authorized. This OID should be used in conjunction
with cienaCesExtAclEntrySrcInetAddrType. InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.3 |
cienaCesExtAclEntryDstInetAddrTypeThis object indicates the IP network type which will be authorized.
This OID specifies the Inet address type of the OIDs
cienaCesExtAclEntryDstInetAddr and
cienaCesExtAclEntryDstInetPrefixLen.
When representing:
ipv4 : cienaCesExtAclEntryDstInetAddr should be compliant with
InetAddressIPv4 from RFC 4001
ipv6 : cienaCesExtAclEntryDstInetAddr should be compliant with
InetAddressIPv6 from RFC 4001 InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.4 |
cienaCesExtAclEntryDstInetAddrThis object indicates the destination IP network address that will
be authorized. This OID should be used in conjunction with
cienaCesExtAclEntryDstInetAddrType and should be compliant with RFC
4001 InetAddressType. InetAddress .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.5 |
cienaCesExtAclEntryDstInetPrefixLenThis object indicates the prefix length for the destination IP network
that will be authorized. This OID should be used in conjunction
with cienaCesExtAclEntryDstInetAddrType. InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.6 |
cienaCesExtAclEntryNotifSrcInetAddrTypeDuplicate of cienaCesExtAclEntrySrcInetAddrType for display purposes.
This object indicates the IP network type which will be authorized.
This OID specifies the Inet address type of the OIDs
cienaCesExtAclEntrySrcInetAddr and
cienaCesExtAclEntrySrcInetPrefixLen.
When representing:
ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with
InetAddressIPv4 from RFC 4001
ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with
InetAddressIPv6 from RFC 4001ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.7 |
cienaCesExtAclEntryNotifSrcInetAddrDuplicate of cienaCesExtAclEntrySrcInetAddr for display purposes.
This object indicates the source IP network address that will
be authorized. This OID should be used in conjunction with
cienaCesExtAclEntryNotifSrcInetAddrType and should be compliant
with RFC 4001 InetAddressType.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.8 |
cienaCesExtAclEntryNotifSrcInetPrefixLenDuplicate of cienaCesExtAclEntrySrcInetPrefixLen for display purposes.
This object indicates the prefix length for the source IP network
that will be authorized. This OID should be used in conjunction
with cienaCesExtAclEntryNotifSrcInetAddrType.ro InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.9 |
cienaCesExtAclEntryNotifDstInetAddrTypeDuplicate of cienaCesExtAclEntryDstInetAddrType for display purposes.
This object indicates the IP network type which will be authorized.
This OID specifies the Inet address type of the OIDs
cienaCesExtAclEntryNotifDstInetAddr and
cienaCesExtAclEntryNotifDstInetPrefixLen.
When representing:
ipv4 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with
InetAddressIPv4 from RFC 4001
ipv6 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with
InetAddressIPv6 from RFC 4001ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.10 |
cienaCesExtAclEntryNotifDstInetAddrDuplicate of cienaCesExtAclEntryDstInetAddr for display purposes.
This object indicates the destination IP network address that will
be authorized. This OID should be used in conjunction with
cienaCesExtAclEntryNotifDstInetAddrType and should be compliant
with RFC 4001 InetAddressType.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.11 |
cienaCesExtAclEntryNotifDstInetPrefixLenDuplicate of cienaCesExtAclEntryDstInetPrefixLen for display purposes.
This object indicates the prefix length for the destination IP network
that will be authorized. This OID should be used in conjunction
with cienaCesExtAclEntryNotifDstInetAddrType.ro InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.12 |
cienaCesExtAclEntryHitsThis object indicates the number of lookups that matched the table entry.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.13 |
cienaCesExtAclEntryBadPortThis object indicates the number of lookups that failed because the ingress
port was disallowed by the table entry.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.14 |
cienaCesExtAclEntryDscpMaskThis object indicates the DSCP values for which IP packets
are allowed to ingress. The mask is big endian and each bit,
numbered from 0 to 63, represents a DSCP value numbered from
0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.ro OCTET STRING .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.15 |
cienaCesExtAclEntryBadDscpThis object indicates the number of lookups that failed because the ingress
DSCP value was disallowed by the table entry.ro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.16 |
cienaCesExtAclEntryPortBitMaskThis object indicates the physical ports on which frames will
be allowed to ingress from. The mask is big endian and each bit,
numbered from 0 to 63, represents a physical port numbered from
1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all
ports.ro OCTET STRING .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.17 |
cienaCesExtAclEntryProtocolList of protocols allowed for the ACL entry.ro Bits .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18 |
cienaCesExtAclEntryBadProtocolThis object indicates the number of lookups that failed because
the protocol value did't match what was in the ACL entry with IP
address(es) matchingro Counter32 .1.3.6.1.4.1.1271.2.1.25.1.2.2.1.19 |
cienaCesAclMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.25.3 |
cienaCesAclMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.25.3.1 |
cienaCesAclMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.1271.2.1.25.3.2 |
CIENA-CES-ACL-MIB Technical Reference Overview
The CIENA-CES-ACL-MIB SNMP MIB module published by Ciena defines 50 managed OID objects, including 39 scalar/column metrics, 2 SNMP tables, and 0 trap/notification events anchored at base OID .1.3.6.1.4.1.1271.2.1.25. Key tabular structures include cienaCesAclTable, cienaCesExtAclTable.
Key OID Definitions in CIENA-CES-ACL-MIB
.1.3.6.1.4.1.1271.2.1.25.1.2.1The (conceptual) table listing the parameters for the IP ACL table.
.1.3.6.1.4.1.1271.2.1.25.1.2.2The (conceptual) table listing the parameters for the extended IP ACL table.
.1.3.6.1.4.1.1271.2.1.25.1.1.1This object indicates the global IP ACL state.
.1.3.6.1.4.1.1271.2.1.25.1.1.2This object indicates the number of lookups satisfied by a cache hit.
.1.3.6.1.4.1.1271.2.1.25.1.1.3This object indicates the number of lookups that failed because the source ip address did not match a table entry.
.1.3.6.1.4.1.1271.2.1.25.1.1.4This object indicates the number of lookups that failed because the ingress port was disallowed by a table entry.
.1.3.6.1.4.1.1271.2.1.25.1.1.5This object indicates the number of lookups that failed because the ingress DSCP value was disallowed by a table entry.
.1.3.6.1.4.1.1271.2.1.25.1.1.6This object indicates the current operational state of the IP ACL system.
.1.3.6.1.4.1.1271.2.1.25.1.1.7This object indicates the number of IP ACL rules that are currently configured.
.1.3.6.1.4.1.1271.2.1.25.1.1.8This object indicates the maximum number of IP ACL rules that can be configured.
.1.3.6.1.4.1.1271.2.1.25.1.1.9This object indicates the number of lookups that failed because protocol didn't match protocol allowed for matching src/dst subnet
.1.3.6.1.4.1.1271.2.1.25.1.2.1.1An entry (conceptual row) in the cienaCesAclTable.
More MIBs from Ciena
Browse all CienaMIBs →The CIENA-CES-PM MIB module enables monitoring of performance statistics and error counters for Carrier Ethernet Service (CES) circuits on Ciena transport equipment. It provides access to specific PM metrics such as cell loss, delay, and jitter measurements required for Service Level Agreement (SLA) compliance verification.
The CIENA-CES-MPLS-MIB enables management of Multiprotocol Label Switching (MPLS) features and associated performance counters on Ciena LEOS-based Carrier Ethernet Services (CES) platforms. It provides visibility into MPLS session states, label bindings, and traffic statistics for provisioning and fault isolation within Ciena's transport network infrastructure.
The CIENA-WS-PM-MIB module enables SNMP-based retrieval of performance monitoring counters and statistics for Ciena Waveserver optical transport equipment. It specifically tracks operational metrics such as optical power levels, bit error rates, and interface utilization to facilitate network health assessment and fault isolation.
The CIENA-CES-CHASSIS-MIB enables monitoring and configuration of physical chassis attributes, including hardware inventory, slot status, and power supply states, on Ciena Carrier Ethernet Service (CES) platforms via SNMP. It facilitates the generation of chassis-specific traps to alert network operations on hardware failures, module insertions, or environmental threshold violations.
The CIENA-CES-DATAPLANE-MIB provides SNMP-based monitoring and management of the data plane interfaces, traffic statistics, and operational status for the Ciena CN5410 Carrier Ethernet Service platform. It enables administrators to track real-time packet throughput, error counters, and interface states to ensure the integrity of Carrier Ethernet services.
The CIENA-CES-CFM-MIB enables the configuration and monitoring of Connectivity Fault Management (CFM) operations on Ciena Carrier Ethernet Services (CES) platforms, specifically tracking maintenance association (MA) states, continuity check (CCM) message counters, and fault notification events for Layer 2 Ethernet service integrity.