Home/Catalog/CIENA-CES-ACL-MIB

CIENA-CES-ACL-MIB

AI MIB Summary

The CIENA-CES-ACL-MIB enables the monitoring and configuration of Access Control List (ACL) rules and associated alarm notifications on Ciena Carrier Ethernet Service (CES) platforms. It provides granular visibility into packet filtering policies, rule hit counts, and event triggers for security and traffic management enforcement.

This module defines the ACL details and the associated notifications.

Main OID:

cienaCesAclMIB.1.3.6.1.4.1.1271.2.1.25

Objects

Active

Status

Dependencies

Imported Objects

Objects

50 total

Object Name	Syntax	OID
cienaCesAclMIBThis module defines the ACL details and the associated notifications. MODULE-IDENTITY `.1.3.6.1.4.1.1271.2.1.25`	MODULE-IDENTITY	`.1.3.6.1.4.1.1271.2.1.25`
cienaCesAclMIBObjects OBJECT IDENTIFIER `.1.3.6.1.4.1.1271.2.1.25.1`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.1271.2.1.25.1`
cienaCesAclGlobal OBJECT IDENTIFIER `.1.3.6.1.4.1.1271.2.1.25.1.1`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.1271.2.1.25.1.1`
cienaCesAclAdminStateThis object indicates the global IP ACL state.ro CienaGlobalState (CIENA-TC) `.1.3.6.1.4.1.1271.2.1.25.1.1.1`	CienaGlobalState (CIENA-TC)	`.1.3.6.1.4.1.1271.2.1.25.1.1.1`
cienaCesAclCacheHitThis object indicates the number of lookups satisfied by a cache hit.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.1.2`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.1.2`
cienaCesAclNoHitThis object indicates the number of lookups that failed because the source ip address did not match a table entry.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.1.3`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.1.3`
cienaCesAclBadPortThis object indicates the number of lookups that failed because the ingress port was disallowed by a table entry.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.1.4`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.1.4`
cienaCesAclBadDscpThis object indicates the number of lookups that failed because the ingress DSCP value was disallowed by a table entry.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.1.5`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.1.5`
cienaCesAclOperStateThis object indicates the current operational state of the IP ACL system.ro CienaGlobalState (CIENA-TC) `.1.3.6.1.4.1.1271.2.1.25.1.1.6`	CienaGlobalState (CIENA-TC)	`.1.3.6.1.4.1.1271.2.1.25.1.1.6`
cienaCesAclInUseEntriesThis object indicates the number of IP ACL rules that are currently configured.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.1.7`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.1.7`
cienaCesAclMaxEntriesThis object indicates the maximum number of IP ACL rules that can be configured.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.1.8`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.1.8`
cienaCesAclBadProtocolThis object indicates the number of lookups that failed because protocol didn't match protocol allowed for matching src/dst subnetro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.1.9`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.1.9`
cienaCesAclRules OBJECT IDENTIFIER `.1.3.6.1.4.1.1271.2.1.25.1.2`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.1271.2.1.25.1.2`
cienaCesAclTableThe (conceptual) table listing the parameters for the IP ACL table.deprecated SEQUENCE OF CienaCesAclEntry `.1.3.6.1.4.1.1271.2.1.25.1.2.1`	SEQUENCE OF CienaCesAclEntry	`.1.3.6.1.4.1.1271.2.1.25.1.2.1`
cienaCesAclEntryAn entry (conceptual row) in the cienaCesAclTable.deprecated CienaCesAclEntry `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1`	CienaCesAclEntry	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1`
cienaCesAclEntryInetAddrTypeThis object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesAclEntryInetAddr and cienaCesAclEntryInetPrefixLength. When representing: ipv4 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv6 from RFC 4001deprecated InetAddressType (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.1`	InetAddressType (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.1`
cienaCesAclEntryInetAddrThis object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesAclEntryInetAddrType and should be compliant with RFC 4001 InetAddressType.rodeprecated InetAddress (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.2`	InetAddress (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.2`
cienaCesAclEntryInetPrefixLengthThis object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesAclEntryInetAddrType.deprecated InetAddressPrefixLength (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.3`	InetAddressPrefixLength (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.3`
cienaCesAclEntryHitsThis object indicates the number of lookups that matched the table entry.rodeprecated Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.4`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.4`
cienaCesAclEntryBadPortThis object indicates the number of lookups that failed because the ingress port was disallowed by the table entry.rodeprecated Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.5`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.5`
cienaCesAclEntryDscpMaskThis object indicates the DSCP values for which IP packets are allowed to ingress. The mask is big endian and each bit, numbered from 0 to 63, represents a DSCP value numbered from 0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.rodeprecated OCTET STRING `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.6`	OCTET STRING	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.6`
cienaCesAclEntryBadDscpThis object indicates the number of lookups that failed because the ingress DSCP value was disallowed by the table entry.rodeprecated Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.7`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.7`
cienaCesAclEntryPortBitMaskThis object indicates the physical ports on which frames will be allowed to ingress from. The mask is big endian and each bit, numbered from 0 to 63, represents a physical port numbered from 1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all ports.rodeprecated OCTET STRING `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.8`	OCTET STRING	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.8`
cienaCesAclEntryNotifInetAddrTypeThis object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesAclEntryNotifInetAddr and cienaCesAclEntryNotifInetPrefixLength. When representing: ipv4 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv6 from RFC 4001rodeprecated InetAddressType (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.9`	InetAddressType (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.9`
cienaCesAclEntryNotifInetAddrThis object indicates the IP network address that will be authorized. This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType and should be compliant with RFC 4001 InetAddressType.rodeprecated InetAddress (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.10`	InetAddress (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.10`
cienaCesAclEntryNotifInetPrefixLengthThis object indicates the prefix length for the IP network that will be authorized. This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType.rodeprecated InetAddressPrefixLength (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.11`	InetAddressPrefixLength (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.1.1.11`
cienaCesExtAclTableThe (conceptual) table listing the parameters for the extended IP ACL table. SEQUENCE OF CienaCesExtAclEntry `.1.3.6.1.4.1.1271.2.1.25.1.2.2`	SEQUENCE OF CienaCesExtAclEntry	`.1.3.6.1.4.1.1271.2.1.25.1.2.2`
cienaCesExtAclEntryAn entry (conceptual row) in the cienaCesExtAclTable. CienaCesExtAclEntry `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1`	CienaCesExtAclEntry	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1`
cienaCesExtAclEntrySrcInetAddrTypeThis object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntrySrcInetAddr and cienaCesExtAclEntrySrcInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv6 from RFC 4001 InetAddressType (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.1`	InetAddressType (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.1`
cienaCesExtAclEntrySrcInetAddrThis object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntrySrcInetAddrType and should be compliant with RFC 4001 InetAddressType. InetAddress `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.2`	InetAddress	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.2`
cienaCesExtAclEntrySrcInetPrefixLenThis object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntrySrcInetAddrType. InetAddressPrefixLength (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.3`	InetAddressPrefixLength (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.3`
cienaCesExtAclEntryDstInetAddrTypeThis object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntryDstInetAddr and cienaCesExtAclEntryDstInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntryDstInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntryDstInetAddr should be compliant with InetAddressIPv6 from RFC 4001 InetAddressType (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.4`	InetAddressType (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.4`
cienaCesExtAclEntryDstInetAddrThis object indicates the destination IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryDstInetAddrType and should be compliant with RFC 4001 InetAddressType. InetAddress `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.5`	InetAddress	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.5`
cienaCesExtAclEntryDstInetPrefixLenThis object indicates the prefix length for the destination IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryDstInetAddrType. InetAddressPrefixLength (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.6`	InetAddressPrefixLength (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.6`
cienaCesExtAclEntryNotifSrcInetAddrTypeDuplicate of cienaCesExtAclEntrySrcInetAddrType for display purposes. This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntrySrcInetAddr and cienaCesExtAclEntrySrcInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv6 from RFC 4001ro InetAddressType (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.7`	InetAddressType (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.7`
cienaCesExtAclEntryNotifSrcInetAddrDuplicate of cienaCesExtAclEntrySrcInetAddr for display purposes. This object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifSrcInetAddrType and should be compliant with RFC 4001 InetAddressType.ro InetAddress (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.8`	InetAddress (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.8`
cienaCesExtAclEntryNotifSrcInetPrefixLenDuplicate of cienaCesExtAclEntrySrcInetPrefixLen for display purposes. This object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifSrcInetAddrType.ro InetAddressPrefixLength (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.9`	InetAddressPrefixLength (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.9`
cienaCesExtAclEntryNotifDstInetAddrTypeDuplicate of cienaCesExtAclEntryDstInetAddrType for display purposes. This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntryNotifDstInetAddr and cienaCesExtAclEntryNotifDstInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with InetAddressIPv6 from RFC 4001ro InetAddressType (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.10`	InetAddressType (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.10`
cienaCesExtAclEntryNotifDstInetAddrDuplicate of cienaCesExtAclEntryDstInetAddr for display purposes. This object indicates the destination IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifDstInetAddrType and should be compliant with RFC 4001 InetAddressType.ro InetAddress (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.11`	InetAddress (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.11`
cienaCesExtAclEntryNotifDstInetPrefixLenDuplicate of cienaCesExtAclEntryDstInetPrefixLen for display purposes. This object indicates the prefix length for the destination IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifDstInetAddrType.ro InetAddressPrefixLength (INET-ADDRESS-MIB) `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.12`	InetAddressPrefixLength (INET-ADDRESS-MIB)	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.12`
cienaCesExtAclEntryHitsThis object indicates the number of lookups that matched the table entry.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.13`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.13`
cienaCesExtAclEntryBadPortThis object indicates the number of lookups that failed because the ingress port was disallowed by the table entry.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.14`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.14`
cienaCesExtAclEntryDscpMaskThis object indicates the DSCP values for which IP packets are allowed to ingress. The mask is big endian and each bit, numbered from 0 to 63, represents a DSCP value numbered from 0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.ro OCTET STRING `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.15`	OCTET STRING	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.15`
cienaCesExtAclEntryBadDscpThis object indicates the number of lookups that failed because the ingress DSCP value was disallowed by the table entry.ro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.16`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.16`
cienaCesExtAclEntryPortBitMaskThis object indicates the physical ports on which frames will be allowed to ingress from. The mask is big endian and each bit, numbered from 0 to 63, represents a physical port numbered from 1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all ports.ro OCTET STRING `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.17`	OCTET STRING	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.17`
cienaCesExtAclEntryProtocolList of protocols allowed for the ACL entry.ro Bits `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18`	Bits	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18`
cienaCesExtAclEntryBadProtocolThis object indicates the number of lookups that failed because the protocol value did't match what was in the ACL entry with IP address(es) matchingro Counter32 `.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.19`	Counter32	`.1.3.6.1.4.1.1271.2.1.25.1.2.2.1.19`
cienaCesAclMIBConformance OBJECT IDENTIFIER `.1.3.6.1.4.1.1271.2.1.25.3`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.1271.2.1.25.3`
cienaCesAclMIBCompliances OBJECT IDENTIFIER `.1.3.6.1.4.1.1271.2.1.25.3.1`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.1271.2.1.25.3.1`
cienaCesAclMIBGroups OBJECT IDENTIFIER `.1.3.6.1.4.1.1271.2.1.25.3.2`	OBJECT IDENTIFIER	`.1.3.6.1.4.1.1271.2.1.25.3.2`