ENTERASYS-POLICY-PROFILE-MIB
AI MIB Summary
The ENTERASYS-POLICY-PROFILE-MIB enables SNMP-based monitoring and configuration of per-user policy profiles on Enterasys network edge and access devices. It facilitates the retrieval and management of specific user authentication and authorization parameters, including assigned access control lists and traffic shaping rules, to enforce granular network access policies.
This MIB module defines a portion of the SNMP enterprise MIBs under the Enterasys enterprise OID pertaining to the mapping of per user policy profiles for Enterasys network edge devices or access products.
Main OID:
etsysPolicyProfileMIB.1.3.6.1.4.1.5624.1.2.6
158
Objects
Active
Status
10
Dependencies
Imported Objects
Objects
158 total| Object Name |
|---|
etsysPolicyProfileMIBThis MIB module defines a portion of the SNMP enterprise
MIBs under the Enterasys enterprise OID pertaining to the
mapping of per user policy profiles for Enterasys network
edge devices or access products. MODULE-IDENTITY .1.3.6.1.4.1.5624.1.2.6 |
etsysPolicyNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.0 |
etsysPolicyRulePortHitNotificationThis notification indicates that a policy rule has matched
network traffic on a particular port. NOTIFICATION-TYPE .1.3.6.1.4.1.5624.1.2.6.0.1 |
etsysPolicyProfile OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.1 |
etsysPolicyProfileMaxEntriesThe maximum number of entries allowed in the
etsysPolicyProfileTable.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.1.1 |
etsysPolicyProfileNumEntriesThe current number of entries in the
etsysPolicyProfileTable.ro Gauge32 .1.3.6.1.4.1.5624.1.2.6.1.2 |
etsysPolicyProfileLastChangeThe sysUpTime at which the etsysPolicyProfileTable was last
modified.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.5624.1.2.6.1.3 |
etsysPolicyProfileTableNextAvailableIndexThis object indicates the numerically lowest available
index within this entity, which may be used for the value
of etsysPolicyProfileIndex in the creation of a new entry
in the etsysPolicyProfileTable.
An index is considered available if the index value falls
within the range of 1 to 65535 and is not being used to
index an existing entry in the etsysPolicyProfileTable
contained within this entity.
This value should only be considered a guideline for
management creation of etsysPolicyProfileEntries, there is
no requirement on management to create entries based upon
this index value.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.1.4 |
etsysPolicyProfileTableA table containing policy profiles. A policy is a group
of classification rules which may be applied on a per
user basis, to ports or to stations. SEQUENCE OF EtsysPolicyProfileEntry .1.3.6.1.4.1.5624.1.2.6.1.5 |
etsysPolicyProfileEntryConceptually defines a particular entry within the
etsysPolicyProfileTable. Entries within this table MUST be
considered non-volatile and MUST be maintained across
entity resets. EtsysPolicyProfileEntry .1.3.6.1.4.1.5624.1.2.6.1.5.1 |
etsysPolicyProfileIndexA unique arbitrary identifier for this Policy.
Since a policy will be applied to a user regardless of his
or her location in the network fabric policy names SHOULD
be unique within the entire network fabric. Policy IDs
and policy names MUST be unique within the scope of a single
managed entity. Integer32 .1.3.6.1.4.1.5624.1.2.6.1.5.1.1 |
etsysPolicyProfileNameAdministratively assigned textual description of this
Policy.
This object MUST NOT be modifiable while this entry's
RowStatus is active(1).rw SnmpAdminString .1.3.6.1.4.1.5624.1.2.6.1.5.1.2 |
etsysPolicyProfileRowStatusThis object allows for the dynamic creation and deletion
of entries within the etsysPolicyProfileTable as well as
the activation and deactivation of these entries.
When this object's value is active(1) the corresponding
row's etsysPolicyProfilePortVid, etsysPolicyProfilePriority,
and all entries within the etsysPolicyClassificationTable
indexed by this row's etsysPolicyProfileIndex are available
to be applied to network access ports or stations on the
managed entity.
All ports corresponding to rows within the
etsysPortPolicyProfileTable whose etsysPortPolicyProfileOperID
is equal to the etsysPolicyProfileIndex, shall have the
corresponding policy applied. Likewise, all stations
corresponding to rows within the etsysStationPolicyProfileTable
whose etsysStationPolicyProfileOperID is equal to the
etsysPolicyProfileIndex, shall have the corresponding policy
applied.
The value of etsysPortPolicyProfileOperID for each such row
in the etsysPortPolicyProfileTable will be equal to the
etsysPortPolicyProfileAdminID, unless the authorization
information from a source such as a RADIUS server indicates
to the contrary.
Refer to the specific objects within this MIB as well as
well as RFC2674, the CTRON-PRIORITY-CLASSIFY-MIB, the
CTRON-VLAN-CLASSIFY-MIB, and the CTRON-RATE-POLICING-MIB
for a complete explanation of the application and behavior
of these objects.
When this object's value is set to notInService(2) this
policy will not be applied to any rows within the
etsysPortPolicyProfileTable.
To allow policy profiles to be applied for security
implementations, setting this object's value from active(1)
to notInService(2) or destroy(6) SHALL fail if one or more
instances of etsysPortPolicyProfileOperID or
etsysStationPolicyProfileOperID currently reference
this entry's associated policy due to a set by an underlying
security protocol such as RADIUS.
For network functionality and clarity, setting this object
to destroy(6) SHALL fail if one or more instances of
etsysPortPolicyProfileOperID or etsysStationPolicyProfileOperID
currently references this entry's etsysPolicyProfileIndex.
Refer to the RowStatus convention for further details on
the behavior of this object.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.1.5.1.3 |
etsysPolicyProfilePortVidStatusThis object defines whether a PVID override should
be applied to ports which have this profile active.
enabled(1) means that any port with this policy active
will have this row's etsysPolicyProfilePortVid applied to
untagged frames or priority-tagged frames received on this
port.
disabled(2) means that etsysPolicyProfilePortVid will not
be applied. When this object is set to disabled(2) the
value of etsysPolicyProfilePortVid has no meaning.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.1.5.1.4 |
etsysPolicyProfilePortVidThis object defines the PVID of this profile.
If a port has an active policy and the policy's
etsysPolicyProfilePortVidStatus is set to enabled(1), the
etsysPolicyProfilePortVid will be applied to all untagged
frames arriving on the port that do not match any of the
policy classification rules.
Note that the 802.1Q PVID will still exist from a
management view but will NEVER be applied to traffic
arriving on a port that has an active policy and enabled
etsysPolicyProfilePortVid defined, since policy is applied
to traffic arriving on the port prior to the assignment of
a VLAN using the 802.1Q PVID.
The behavior of an enabled etsysPolicyProfilePortVid on
any associated port SHALL be identical to the behavior of
the dot1qPvid upon that port.
Note that two special, otherwise illegal, values of the
etsysPolicyProfilePortVid are used in defining the default
forwarding actions, to be used in conjunction with policy
classification rules, and do not result in packet tagging:
0 Indicates that the default forwarding action
is to drop all packets that do not match an
explicit rule.
4095 Indicates that the default forwarding action
is to forward any packets not matching any
explicit rules.rw Unsigned32 (0|1..4094|4095) .1.3.6.1.4.1.5624.1.2.6.1.5.1.5 |
etsysPolicyProfilePriorityStatusThis object defines whether a Class of Service
should be applied to ports which have this profile
active.
enabled(1) means that any port with this policy active
will have etsysPolicyProfilePriority applied to this port.
disabled(2) means that etsysPolicyProfilePriority will
not be applied. When this object is set to disabled(2)
the value of etsysPolicyProfilePriority has no meaning.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.1.5.1.6 |
etsysPolicyProfilePriorityThis object defines the default ingress Class of Service
of this profile.
If a port has an active policy and the policy's
etsysPolicyProfilePriorityStatus is set to enabled(1), the
etsysPolicyProfilePriority will be applied to all packets
arriving on the port that do not match any of the policy
classification rules.
Note that dot1dPortDefaultUserPriority will still exist
from a management view but will NEVER be applied to traffic
arriving on a port that has an active policy and enabled
etsysPolicyProfilePriority defined, since policy is applied
to traffic arriving on the port prior to the assignment of
a priority using dot1dPortDefaultUserPriority.
The behavior of an enabled etsysPolicyProfilePriority on
any associated port SHALL be identical to the behavior of
the dot1dPortDefaultUserPriority upon that port.rw Integer32 .1.3.6.1.4.1.5624.1.2.6.1.5.1.7 |
etsysPolicyProfileEgressVlansThe set of VLANs which are assigned by this policy to
egress on ports for which this policy is active. Changes
to a bit in this object affect the per-port per-VLAN
Registrar control for Registration Fixed for the relevant
GVRP state machine on each port for which this policy is
active. A VLAN may not be added in this set if it is
already a member of the set of VLANs in
etsysPolicyProfileForbiddenVlans. This object is
superseded on a per-port per-VLAN basis by any 'set' bits
in dot1qVlanStaticEgressPorts and
dot1qVlanForbiddenEgressPorts. The default value of this
object is a string of zeros.rw VlanList .1.3.6.1.4.1.5624.1.2.6.1.5.1.8 |
etsysPolicyProfileForbiddenVlansThe set of VLANs which are prohibited by this policy to
egress on ports for which this policy is active. Changes
to this object that cause a port to be included or
excluded affect the per-port per-VLAN Registrar control
for Registration Forbidden for the relevant GVRP state
machine on each port for which this policy is active. A
VLAN may not be added in this set if it is already a
member of the set of VLANs in etsysPolicyProfileEgressVlans.
This object is superseded on a per-port per-VLAN basis by
any 'set' bits in the dot1qVlanStaticEgressPorts and
dot1qVlanForbiddenEgressPorts. The default value of this
object is a string of zeros.rw VlanList .1.3.6.1.4.1.5624.1.2.6.1.5.1.9 |
etsysPolicyProfileUntaggedVlansThe set of VLANs which should transmit egress packets as
untagged on ports for which this policy is active. This
object is superseded on a per-port per-VLAN basis by any
'set' bits in dot1qVlanStaticUntaggedPorts.rw VlanList .1.3.6.1.4.1.5624.1.2.6.1.5.1.10 |
etsysPolicyProfileOverwriteTCIIf set, the information contained within the TCI field of
inbound, tagged packets will not be used by the device after
the ingress classification stage of packet relay. The net
effect will be that the TCI information may be used to classify
the packet, but will be overwritten (and ignored) by subsequent
stages of packet relay.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.1.5.1.11 |
etsysPolicyProfileRulePrecedenceEach octet will contain a single value representing the rule
type to be matched against, defined by the
PolicyClassificationRuleType textual convention. When read,
will return the currently operating rule matching precedence,
ordered from first consulted (in the first octet) to last
consulted (in the last octet). A set of a single octet of
0x00 will result in a reversion to the default precedence
ordering. A set of any other values will result in the
specified rule types being matched in the order specified,
followed by the remaining rules, in default precedence order.rw OCTET STRING .1.3.6.1.4.1.5624.1.2.6.1.5.1.12 |
etsysPolicyProfileVlanRFC3580MappingsThe set of VLANs which are currently being mapped onto this
policy profile by the etsysPolicyRFC3580MapTable. This only
refers to the mapping of vlan-tunnel-attributes returned from
RADIUS in an RFC3580 context.ro VlanList .1.3.6.1.4.1.5624.1.2.6.1.5.1.13 |
etsysPolicyProfileMirrorIndexA reference to a packet mirror destination (defined elsewhere).
A value of (-1) indicates no mirror is specified, but a mirror is
not explicitly prohibitted.
A value of (0) indicates that mirroring is explicitly prohibitted,
unless a high precedent source (a rule) has specified a mirror.rw Integer32 (-1|0|1..255) .1.3.6.1.4.1.5624.1.2.6.1.5.1.14 |
etsysPolicyProfileAuditSyslogEnableEnables the sending of a syslog message if no rule bound to this
profile has prohibited it.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.1.5.1.15 |
etsysPolicyProfileAuditTrapEnableEnables the sending of a SNMP NOTIFICATION if no rule bound to this
profile has prohibited it.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.1.5.1.16 |
etsysPolicyProfileDisablePortWill set the ifOperStatus of the port, on which the frame
which used this profile was received, to disable, if
if no rule bound to this profile has prohibited it.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.1.5.1.17 |
etsysPolicyProfileUsageListWhen read, a set bit indicates that this profile was used to
send a syslog or trap message for corresponding port. When set,
the native PortList will be bit-wise AND'ed with the set PortList,
allowing the agent to clear the usage indication.rw PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.1.5.1.18 |
etsysPolicyClassification OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.2 |
etsysPolicyClassificationMaxEntriesThe maximum number of entries allowed in the
etsysPolicyClassificationTable.rodeprecated Integer32 .1.3.6.1.4.1.5624.1.2.6.2.1 |
etsysPolicyClassificationNumEntriesThe current number of entries in the
etsysPolicyClassificationTable.rodeprecated Gauge32 .1.3.6.1.4.1.5624.1.2.6.2.2 |
etsysPolicyClassificationLastChangeThe sysUpTime at which the etsysPolicyClassificationTable
was last modified.rodeprecated TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.5624.1.2.6.2.3 |
etsysPolicyClassificationTableA table containing reference OIDs to entries within the
classification tables.
These classification tables include but may not be limited
to:
ctPriClassifyTable
ctVlanClassifyTable
ctRatePolicyingConfigTable
This table is used to map a list of classification rules to
an instance of the etsysPolicyProfileTable.deprecated SEQUENCE OF EtsysPolicyClassificationEntry .1.3.6.1.4.1.5624.1.2.6.2.4 |
etsysPolicyClassificationEntryDescribes a particular entry within the
etsysPolicyClassificationTable. Entries within this table
MUST be considered non-volatile and MUST be maintained
across entity resets.deprecated EtsysPolicyClassificationEntry .1.3.6.1.4.1.5624.1.2.6.2.4.1 |
etsysPolicyClassificationIndexAdministratively assigned unique value, greater than zero.
Each etsysPolicyClassificationIndex instance MUST be unique
within the scope of its associated etsysPolicyProfileIndex.deprecated Integer32 .1.3.6.1.4.1.5624.1.2.6.2.4.1.1 |
etsysPolicyClassificationOIDThis object follows the RowPointer textual convention and
is an OID reference to a classification rule.
This object MUST NOT be modifiable while this entry's
etsysPolicyClassificationStatus object has a value of
active(1).rwdeprecated RowPointer (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.2.4.1.2 |
etsysPolicyClassificationRowStatusThe status of this row.
When set to active(1) this entry's classification rule, as
referenced by etsysPolicyClassificationOID, becomes one of
its associated policy's set of rules.
When this entry's associated policy, as defined by
etsysPolicyProfileIndex, is active and assigned to a port
through the etsysPortPolicyProfileTable or to a station
through the etsysStationPolicyProfileTabbe, this
classification rule will be applied to the port or station.
The exact behavior of this application depends upon the
classification rule.
When this object is set to notInService(2) or notReady(3)
this entry is not considered one of its associated policy's
set of rules and this classification rule will not be
applied.
An entry MAY NOT be set to active(1) unless this row's
etsysPolicyClassificationOID is set to a valid
classification rule.rwdeprecated RowStatus (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.2.4.1.3 |
etsysPolicyClassificationIngressListThe ports on which an active policy profile has defined
this classification rule applies.rodeprecated PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.2.4.1.4 |
etsysPortPolicyProfile OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.3 |
etsysPortPolicyProfileLastChangesysUpTime at which the etsysPortPolicyProfileTable
was last modified.rodeprecated TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.5624.1.2.6.3.1 |
etsysPortPolicyProfileTableThis table allows for a one to one mapping between a
dot1dBasePort or an ifIndex and a Policy Profile.deprecated SEQUENCE OF EtsysPortPolicyProfileEntry .1.3.6.1.4.1.5624.1.2.6.3.2 |
etsysPortPolicyProfileEntryDescribes a particular entry within the
etsysPortPolicyProfileTable. Entries within this
table MUST be considered non-volatile and MUST be maintained
across entity resets.deprecated EtsysPortPolicyProfileEntry .1.3.6.1.4.1.5624.1.2.6.3.2.1 |
etsysPortPolicyProfileIndexTypeThis object defines the specific type of port this entry
represents.deprecated PortPolicyProfileIndexTypeTC .1.3.6.1.4.1.5624.1.2.6.3.2.1.1 |
etsysPortPolicyProfileIndexAn index value which represents a unique port of the type
defined by this entry's etsysPortPolicyProfileIndexType.deprecated Integer32 .1.3.6.1.4.1.5624.1.2.6.3.2.1.2 |
etsysPortPolicyProfileAdminIDThis object represents the desired Policy Profile for this
dot1dBasePort or this ifIndex.
Setting this object to any value besides zero (0) should,
if possible, immediately place this entry's dot1dBasePort
or ifIndex into the given Policy Profile.
This object and etsysPortPolicyProfileOperID may not be the
same if this object is set to a Policy (i.e. an instance of
the etsysPolicyProfileTable) which is not in an active state
or if the etsysPortPolicyProfileOperID has been set by an
underlying security protocol such as RADIUS.rwdeprecated PolicyProfileIDTC .1.3.6.1.4.1.5624.1.2.6.3.2.1.3 |
etsysPortPolicyProfileOperIDThis object is the current policy which is being applied to
this entry's dot1dBasePort. A value of zero(0) indicates
there is no policy being applied to this dot1dBasePort or
this ifIndex.
If the value of this object has been set by an underlying
security protocol such as RADIUS, sets to this entry's
etsysPortPolicyProfileAdminID MUST NOT change the value
of this object until such time as the security protocol
releases this object by setting it to a value of zero (0).rodeprecated PolicyProfileIDTC .1.3.6.1.4.1.5624.1.2.6.3.2.1.4 |
etsysPortPolicyProfileSummaryTableThis table provides aggregate port information on a per
policy, per port type basis. SEQUENCE OF EtsysPortPolicyProfileSummaryEntry .1.3.6.1.4.1.5624.1.2.6.3.3 |
etsysPortPolicyProfileSummaryEntryConceptually defines a particular entry within the
etsysPortPolicyProfileSummaryTable. EtsysPortPolicyProfileSummaryEntry .1.3.6.1.4.1.5624.1.2.6.3.3.1 |
etsysPortPolicyProfileSummaryIndexTypeThis object defines the specific type of port this entry
represents. PortPolicyProfileIndexTypeTC .1.3.6.1.4.1.5624.1.2.6.3.3.1.1 |
etsysPortPolicyProfileSummaryAdminIDAn aggregate list of all Ports currently supporting
rules which assign this profileIndex through
administrative means. Rules of this type have a
valid etsysPolicyRuleResult2 action and a
profileIndex of 0.ro PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.3.3.1.2 |
etsysPortPolicyProfileSummaryOperIDAn aggregate list of all Ports currently supporting
rules which assign this profileIndex through either
an administrative or dynamic means. The profileId
which will be assigned operationally, as frames are
handled are too be reported here.ro PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.3.3.1.3 |
etsysPortPolicyProfileSummaryDynamicIDAn aggregate list of all Ports currently supporting
rules which assign this profileIndex through a
dynamic means. For example the profileIndex returned
via a successful 802.1X supplicant authentication.ro PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.3.3.1.4 |
etsysPolicyVlanEgress OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.4 |
etsysStationPolicyProfile OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.5 |
etsysStationPolicyProfileMaxEntriesThe maximum number of entries allowed in the
etsysStationPolicyProfileTable. If this number is
exceeded, based on stations connecting to the edge
device, the oldest entries will be deleted.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.5.1 |
etsysStationPolicyProfileNumEntriesThe current number of entries in the
etsysStationPolicyProfileTable.ro Gauge32 .1.3.6.1.4.1.5624.1.2.6.5.2 |
etsysStationPolicyProfileLastChangesysUpTime at which the etsysStationPolicyProfileTable
was last modified.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.5624.1.2.6.5.3 |
etsysStationPolicyProfileTableThis table allows for a one to one mapping between a
station's identifying address and a Policy Profile. SEQUENCE OF EtsysStationPolicyProfileEntry .1.3.6.1.4.1.5624.1.2.6.5.4 |
etsysStationPolicyProfileEntryDescribes a particular entry within the
etsysStationPolicyProfileTable. Entries within this
table MUST be considered non-volatile and MUST be
maintained across entity resets. EtsysStationPolicyProfileEntry .1.3.6.1.4.1.5624.1.2.6.5.4.1 |
etsysStationPolicyProfileIndexAn index value which represents a unique station entry. Integer32 .1.3.6.1.4.1.5624.1.2.6.5.4.1.2 |
etsysStationIdentifierTypeIndicates the type of station identifying address contained
in etsysStationIdentifier.ro StationAddressType (ENTERASYS-UPN-TC-MIB) .1.3.6.1.4.1.5624.1.2.6.5.4.1.3 |
etsysStationIdentifierA value which represents a unique MAC Address, IP Address,
or other identifying address for a station, or other logical
and authenticatable sub-entity within a station, connected
to a port.ro StationAddress (ENTERASYS-UPN-TC-MIB) .1.3.6.1.4.1.5624.1.2.6.5.4.1.4 |
etsysStationPolicyProfileOperIDThis object is the current policy which is being applied to
this entry's MAC Address. A value of zero(0) indicates
there is no policy being applied to this MAC Address.
The value of this object reflects either the setting from an
underlying AAA service such as RADIUS, or the default setting
based on the etsysPortPolicyProfileAdminID for the port on
which the station is connected.
This object and the corresponding etsysPortPolicyProfileAdminID
will not be the same if this object has been set by an
underlying security protocol such as RADIUS.ro PolicyProfileIDTC .1.3.6.1.4.1.5624.1.2.6.5.4.1.5 |
etsysStationPolicyProfilePortTypeA textual convention that defines the specific type of port
designator the corresponding entry represents.ro PortPolicyProfileIndexTypeTC .1.3.6.1.4.1.5624.1.2.6.5.4.1.6 |
etsysStationPolicyProfilePortIDA value which represents the physical port, of the type
defined by this entry's etsysStationPolicyProfilePortType,
on which the associated station entity is connected. This
object is for convenience in cross referencing stations to
ports.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.5.4.1.7 |
etsysInvalidPolicyPolicy OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.6 |
etsysInvalidPolicyActionSpecifies the action that the edge device should take if asked
to apply an invalid or unknown policy.
applyDefaultPolicy(1) - Ignore the result and search for
the next policy assignment rule.
dropPackets(2) - Block traffic.
forwardPackets(3) - Forward traffic, as if no policy
had been assigned (via 802.1D/Q
rules).
Although dropPackets(2) is the most secure option, it may
not always be desirable.rw Enumeration .1.3.6.1.4.1.5624.1.2.6.6.1 |
etsysInvalidPolicyCountIncrements to indicate the number of times the device has
detected an invalid/unknown policy.ro Counter32 .1.3.6.1.4.1.5624.1.2.6.6.2 |
etsysPolicyProfileConformance OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.7 |
etsysPolicyProfileGroups OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.7.1 |
etsysPolicyProfileCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.7.2 |
etsysDevicePolicyProfile OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.8 |
etsysDevicePolicyProfileDefaultIf this value is non-zero, the value indicates
the etsysPolicyProfileEntry (and its associated
etsysPolicyClassificationTable entries) which
should be used by the device if the device is
incapable of using the profile (or specific parts
of the profile) explicitly applied to an inbound
frame. A value of zero indicates that no default
profile is currently active.rw Integer32 (0|1..65535) .1.3.6.1.4.1.5624.1.2.6.8.1 |
etsysPolicyCapability OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.9 |
etsysPolicyCapabilitiesA list of capabilities related to policies.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro Bits .1.3.6.1.4.1.5624.1.2.6.9.1 |
etsysPolicyDynaPIDRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of dynamically assigning a profile to the
network traffic described by the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.2 |
etsysPolicyAdminPIDRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of administratively assigning a profile to the
network traffic described by the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.3 |
etsysPolicyVlanRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of assigning a VlanId to the network traffic
described by the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.4 |
etsysPolicyCosRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of assigning a CoS to the network traffic
described by the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.5 |
etsysPolicyDropRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of discarding the network traffic described by
the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.6 |
etsysPolicyForwardRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of forwarding the network traffic described by
the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.7 |
etsysPolicySyslogRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of issuing syslog messages when the rule is used
to identify the network traffic described by the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.8 |
etsysPolicyTrapRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of issuing an SNMP notify (trap) messages when the
rule is used to identify the network traffic described by the
bit. A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.9 |
etsysPolicyDisablePortRuleCapabilitiesA list of rule types which are supported by this device for
the purpose of disabling the ingress port identified when the
rule matches the network traffic described by the bit.
A set bit, with the value 1, indicates support for the
described functionality. A clear bit, with the value
0, indicates the described functionality is not supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.10 |
etsysPolicySupportedPortListThe list ports which support policy profile assignment (i.e.
the ports which _do_ policy). This object may be useful to
management entities which desire to scope action to only those
ports which support policy. A port which appears in this list,
must support, at minimum, the assignment of a policy profile to
all traffic ingressing the port.ro PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.9.11 |
etsysPolicyEnabledTableThis table allows for the configuration of policy profile
assignment methods, per port, including the ability to disable
policy profile assignment, per port. In addition, a ports
capabilities, with respect to policy profile assignment are
reported. SEQUENCE OF EtsysPolicyEnabledTableEntry .1.3.6.1.4.1.5624.1.2.6.9.12 |
etsysPolicyEnabledTableEntryDescribes a particular entry within the
etsysPolicyEnabledTable. EtsysPolicyEnabledTableEntry .1.3.6.1.4.1.5624.1.2.6.9.12.1 |
etsysPolicyEnabledSupportedRuleTypesThe list of rule types which the devices supports for the
purpose of assigning policy profiles to network traffic
ingressing this dot1dBasePort.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.12.1.1 |
etsysPolicyEnabledEnabledRuleTypesThe list of rule types from which the device will assign policy
profiles to network traffic ingressing this dot1dBasePort.
Rules which have a type not enumerated here must not be used to
assign policy profiles, but must still be used to interrogate
the rule-set bound to the determined policy profile.
A set of all cleared bits will effectively disable policy in
the port.rw PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.12.1.2 |
etsysPolicyEnabledEgressEnabledControls the enabling and disabling the application of policy
as packets egress the switching process on the dot1dBasePort
specified in the indexing.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.9.12.1.3 |
etsysPolicyRuleAttributeTableThis table details each supported rule type attribute
for rule data length in bytes, rule data length in bits,
and the maximum number of rules that may use that type. SEQUENCE OF EtsysPolicyRuleAttributeTableEntry .1.3.6.1.4.1.5624.1.2.6.9.13 |
etsysPolicyRuleAttributeTableEntryDescribes a particular entry within the
etsysPolicyRuleAttributeTable. EtsysPolicyRuleAttributeTableEntry .1.3.6.1.4.1.5624.1.2.6.9.13.1 |
etsysPolicyRuleAttributeByteLengthThis rule type's maximum length, in bytes of the
etsysPolicyRuleData. Devices supporting this object MUST
allow sets for this rule data of any valid length up to and
including the length value represented by this object.
Management entities must also expect to read back the maximum
data length for each type regardless of the length the data
was set with.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.9.13.1.1 |
etsysPolicyRuleAttributeBitLengthThis rule type's maximum bit length for traffic data. This
value also represents the maximum mask that may be used for
rule data. The mask MUST NOT exceed the rule data size. Masks
that exceed the data size shall be considered invalid and
result in an SNMP set failure.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.9.13.1.2 |
etsysPolicyRuleAttributeMaxCreatableIf this value is non-zero, the value indicates the maximum
number of rules of this type the agent can support.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.9.13.1.3 |
etsysPolicyRuleTciOverwriteCapabilitiesA list of rule types which are supported by this device
for the purpose of overwriting the TCI in received packets described
by the bit. A set bit, with the value 1, indicates support
for the described functionality. A clear bit, with the
value 0, indicates the described functionality is not
supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.14 |
etsysPolicyRuleMirrorCapabilitiesA list of rule types which are supported by this device
for the purpose of mirroring the network traffic described
by the bit. A set bit, with the value 1, indicates support
for the described functionality. A clear bit, with the
value 0, indicates the described functionality is not
supported.ro PolicyRulesSupported .1.3.6.1.4.1.5624.1.2.6.9.15 |
etsysPolicyMap OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.10 |
etsysPolicyMapMaxEntriesThis has been obsoleted.roobsolete Integer32 .1.3.6.1.4.1.5624.1.2.6.10.1 |
etsysPolicyMapNumEntriesThis has been obsoleted.roobsolete Gauge32 .1.3.6.1.4.1.5624.1.2.6.10.2 |
etsysPolicyMapLastChangeThis has been obsoleted.roobsolete TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.5624.1.2.6.10.3 |
etsysPolicyMapPvidOverRideThis has been obsoleted.rwobsolete TruthValue (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.10.4 |
etsysPolicyMapUnknownPvidPolicyThis has been obsoleted.rwobsolete Enumeration .1.3.6.1.4.1.5624.1.2.6.10.5 |
etsysPolicyMapTableThis has been obsoleted.obsolete SEQUENCE OF EtsysPolicyMapEntry .1.3.6.1.4.1.5624.1.2.6.10.6 |
etsysPolicyMapEntryThis has been obsoleted.obsolete EtsysPolicyMapEntry .1.3.6.1.4.1.5624.1.2.6.10.6.1 |
etsysPolicyMapIndexThis has been obsoleted.obsolete Integer32 .1.3.6.1.4.1.5624.1.2.6.10.6.1.1 |
etsysPolicyMapRowStatusThis has been obsoleted.rwobsolete RowStatus (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.10.6.1.2 |
etsysPolicyMapStartVidThis has been obsoleted.rwobsolete Unsigned32 .1.3.6.1.4.1.5624.1.2.6.10.6.1.3 |
etsysPolicyMapEndVidThis has been obsoleted.rwobsolete Unsigned32 .1.3.6.1.4.1.5624.1.2.6.10.6.1.4 |
etsysPolicyMapPolicyIndexThis has been obsoleted.rwobsolete Integer32 .1.3.6.1.4.1.5624.1.2.6.10.6.1.5 |
etsysPolicyRules OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.11 |
etsysPolicyRulesMaxEntriesThe maximum number of entries allowed in the
etsysPolicyRulesTable.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.11.1 |
etsysPolicyRulesNumEntriesThe current number of entries in the
etsysPolicyRulesTable.ro Gauge32 .1.3.6.1.4.1.5624.1.2.6.11.2 |
etsysPolicyRulesLastChangeThe sysUpTime at which the etsysPolicyRulesTable
was last modified.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.5624.1.2.6.11.3 |
etsysPolicyRulesAccountingEnableControls the collection of rule usage statistics. If
disabled, no usage statistics are gathered and no auditing
messages will be sent. When enabled, rule will gather
usage statistics, and auditing messages will be sent, if
enabled for a given rule.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.4 |
etsysPolicyRulesPortDisabledListA portlist containing bits representing the dot1dBridgePorts
which have been disabled via the mechanism described in the
etsysPolicyRuleDisablePort leaf. A set bit indicates a
disabled port.
Ports may be enabled by performing a set with the
corresponding bit cleared. Bits which are set will
be ignored during the set operation.rw PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.5 |
etsysPolicyRuleTableA table containing rules bound to individual policies. A
Rule is comprised of three components, a unique description
of the network traffic, an associated list of actions, and
an associated list of accounting and auditing controls and
information.
The unique description of the network traffic, defined by a
PolicyClassificationRuleType together with a length,
matching data and a relevant bits field, port type,
and port number (port number zero is reserved to mean any
port), and scoped by a etsysPolicyProfileIndex, is used
as the table index. SEQUENCE OF EtsysPolicyRuleEntry .1.3.6.1.4.1.5624.1.2.6.11.6 |
etsysPolicyRuleEntryDescribes a particular entry within the
etsysPolicyRuleTable. Entries within this table
MUST be considered non-volatile and MUST be maintained
across entity resets. EtsysPolicyRuleEntry .1.3.6.1.4.1.5624.1.2.6.11.6.1 |
etsysPolicyRuleProfileIndexThe etsysPolicyProfileIndex for which the rule is defined.
A value of zero(0) has special meaning in that it scopes
rules which are used to determine the Policy Profile to
which the frame belongs. See the etsysPolicyRuleResult1
and etsysPolicyRuleResult2 descriptions for specifics of
how the results of a rule hit differ when the
etsysPolicyRuleProfileIndex is zero. Integer32 (0|1..65535) .1.3.6.1.4.1.5624.1.2.6.11.6.1.1 |
etsysPolicyRuleTypeThe type of network traffic reference by the
etsysPolicyRuleData. PolicyClassificationRuleType .1.3.6.1.4.1.5624.1.2.6.11.6.1.2 |
etsysPolicyRuleDataThe data pattern to match against, as defined by the
etsysPolicyRuleType, encoded in network-byte order. OCTET STRING .1.3.6.1.4.1.5624.1.2.6.11.6.1.3 |
etsysPolicyRulePrefixBitsThe relevant number of bits defined by the
etsysPolicyRuleData, to be used when matching against a
frame, relevant bits are specified in longest-prefix-first
style (left to right). A value of zero carries the special
meaning of all bits are relevant. Integer32(0|1..2048) .1.3.6.1.4.1.5624.1.2.6.11.6.1.4 |
etsysPolicyRulePortTypeThe port number on which the rule will be applied. Zero(0)
is a special case, indicating that the rule should be applied
to all ports. PortPolicyProfileIndexTypeTC .1.3.6.1.4.1.5624.1.2.6.11.6.1.5 |
etsysPolicyRulePortThe port number on which the rule will be applied. Zero(0)
is a special case, indicating that the rule should be applied
to all ports. Integer32(0|1..2147483647) .1.3.6.1.4.1.5624.1.2.6.11.6.1.6 |
etsysPolicyRuleRowStatusThe status of this row.
When set to active(1) this entry's classification rule, as
referenced by etsysPolicyRulesOID, becomes one of
its associated policy's set of rules.
When this entry's associated policy, as defined by
etsysPolicyRuleProfileIndex, is active and assigned to a port
through the etsysPortPolicyProfileTable or to a station
through the etsysStationPolicyProfileTabbe, this
classification rule will be applied to the port or station.
The exact behavior of this application depends upon the
classification rule.
When this object is set to notInService(2) or notReady(3)
this entry is not considered one of its associated policy's
set of rules and this classification rule will not be
applied.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.11.6.1.7 |
etsysPolicyRuleStorageTypeThe storage type of this row.
When set to volatile(1) this entry's classification rule, as
referenced by etsysPolicyRulesOID, will be removed (if
present) from non-volatile storage. Rows created dynamically
by the device will typically report this as their default
storage type.
When set to nonVolatile(1) this entry's classification rule, as
referenced by etsysPolicyRulesOID, will be added to non-
volatile storage. This is the default value for rows created
as the result of external management.
Values of other(0), permanent(4), and readOnly(5) may not be
set, although they may be returned for rows created by the
device.rw StorageType (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.11.6.1.8 |
etsysPolicyRuleUsageListWhen read, a set bit indicates that this rule was used to
classify traffic on the corresponding port. When set, the
native PortList will be bit-wise AND'ed with the set PortList,
allowing the agent to clear the usage indication.rw PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.6.1.9 |
etsysPolicyRuleResult1If the etsysPolicyRuleProfileIndex is 0 then this field is
read-only and defines the profile ID which will assigned
to frames matching this rule. This is the dynamically assigned
value and may differ from the administratively configured
value.
If the etsysPolicyRuleProfileIndex is not 0 then this field is
read-create and defines the VLAN ID with which to mark a frame
matching this PolicyRule.
Note that three special, otherwise illegal, values of the
etsysPolicyRuleVlan are used in defining the forwarding action.
-1 Indicates that no VLAN or forwarding behavior
modification is desired. A rule will not be matched
against for the purpose of determining a marking
VID if this value is set.
0 Indicates that the default forwarding action
is to drop the packets matching this rule.
4095 Indicates that the default forwarding action
is to forward any packets matching this rule.rw Integer32(-1|0|1..4094|4095) .1.3.6.1.4.1.5624.1.2.6.11.6.1.10 |
etsysPolicyRuleResult2If the etsysPolicyRuleProfileIndex is 0 then this field is
read-create and defines the profile ID which the managing
entity desires assigned to frames matching this rule. This
is the administrative value and may differ from the
dynamically assigned active value.
If the etsysPolicyRuleProfileIndex is not 0 then this field is
The CoS with which to mark a frame matching this
PolicyRule.
Note that one special, otherwise illegal, values of the
etsysPolicyRuleCoS are used in defining the forwarding
action.
-1 Indicates that no CoS or forwarding behavior
modification is desired. A rule will not be
matched against for the purpose of determining
a CoS if this value is set.rw Integer32(-1|0..4095) .1.3.6.1.4.1.5624.1.2.6.11.6.1.11 |
etsysPolicyRuleAuditSyslogEnableControls the sending of a syslog message when a bit in the
etsysPolicyRuleUsageList transitions from 0 to 1.rw TriStateStatus .1.3.6.1.4.1.5624.1.2.6.11.6.1.12 |
etsysPolicyRuleAuditTrapEnableControls the sending of an SNMP NOTIFICATION when a bit in the
etsysPolicyRuleUsageList transitions from 0 to 1.rw TriStateStatus .1.3.6.1.4.1.5624.1.2.6.11.6.1.13 |
etsysPolicyRuleDisablePortControls the disabling of a port (ifOperStatus of the
corresponding ifIndex will be down) when a bit in the
etsysPolicyRuleUsageList transitions from 0 to 1. When set to
enabled, the corresponding ifIndex will be disabled upon the
transition.rw TriStateStatus .1.3.6.1.4.1.5624.1.2.6.11.6.1.14 |
etsysPolicyRuleOperPidIf the etsysPolicyRuleProfileIndex is 0 then this field
contains the currently applied profile ID for frames
matching this rule. This may be either the administratively
applied value or the dynamically applied value.
If the etsysPolicyRuleProfileIndex is not 0, then this
object does not exist and will not be returned.
Note that one special, otherwise illegal, values of the
etsysPolicyRuleCoS are used in defining the forwarding
action.
-1 Indicates that no profile ID is being applied
by this rule.ro Integer32(-1|0..4095) .1.3.6.1.4.1.5624.1.2.6.11.6.1.15 |
etsysPolicyRuleOverwriteTCIIf set, the information contained within the TCI field of
inbound, tagged packets will not be used by the device after
the ingress classification stage of packet relay. The net
effect will be that the TCI information may be used to classify
the packet, but will be overwritten (and ignored) by subsequent
stages of packet relay.rw TriStateStatus .1.3.6.1.4.1.5624.1.2.6.11.6.1.16 |
etsysPolicyRuleMirrorIndexA reference to a packet mirror destination (defined elsewhere).
A value of (-1) indicates no mirror is specified, but a mirror is
not explicitly prohibitted.
A value of (0) indicates that mirroring is explicitly prohibitted,
unless a high precedent rule has specified a mirror.rw Integer32 (-1|0|1..255) .1.3.6.1.4.1.5624.1.2.6.11.6.1.17 |
etsysPolicyRulePortTableThe purpose of this table is to provide an agent the
ability to easily determine which rules have been used
on a given bridge port. A row will only be present when
the rule which the instancing describes has been used.
The agent may remove a row (and clear the used status)
by setting the etsysPolicyRulePortHit leaf to False.
PolicyClassificationRuleType together with a length,
matching data and a relevant bits field, port type,
and port number (port number zero is reserved to mean any
port), scoped by a etsysPolicyRuleProfileIndex, and preceded by
a dot1dBasePort is used as the table index. SEQUENCE OF EtsysPolicyRulePortEntry .1.3.6.1.4.1.5624.1.2.6.11.7 |
etsysPolicyRulePortEntry. EtsysPolicyRulePortEntry .1.3.6.1.4.1.5624.1.2.6.11.7.1 |
etsysPolicyRulePortHitEvery row will report a value of True, indicating that the
Rule described by the instancing was used on the given
port. An agent may be set this leaf to False to clear
remove the row and clear the Rule Use bit for the
specified Rule, on the given bridgePort.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.11.7.1.1 |
etsysPolicyRuleDynamicProfileAssignmentOverrideIf true, administratively assigned profile assignment
rules override dynamically assigned profiles assignments
for a given rule. If false, the dynamically assigned
value (typically created by a successful authentication
attempt) overrides the administratively configured value.
The agent may optionally implement this leaf as read-only.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.11.8 |
etsysPolicyRuleDefaultDynamicSyslogStatusIf enabled(1), rules dynamically created will set
etsysPolicyRuleAuditSyslogEnable to enabled. If
disabled(2) a dynamically created rule will have
etsysPolicyRuleAuditSyslogEnable set to disabled.
The agent may optionally implement this leaf as read-only.rw TriStateStatus .1.3.6.1.4.1.5624.1.2.6.11.9 |
etsysPolicyRuleDefaultDynamicTrapStatusIf enabled(1), rules dynamically created will set
etsysPolicyRuleAuditTrapEnable to enabled. If
disabled(2) a dynamically created rule will have
etsysPolicyRuleAuditTrapEnable set to disabled.
The agent may optionally implement this leaf as read-only.rw TriStateStatus .1.3.6.1.4.1.5624.1.2.6.11.10 |
etsysPolicyRuleStatsAutoClearOnLinkIf set to enabled(1), when operstatus up is detected on any
port the agent will clear the rule usage information
associated with that port.
This ability is further scoped to the list of ports defined by
etsysPolicyRuleStatsAutoClearPorts.
This leaf is optional and will have no effect on an agent
which has rule use accounting disabled or does not support
rule use accounting.
By default, the rule use accounting information will not be
modified by operstatus transitions.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.11 |
etsysPolicyRuleStatsAutoClearIntervalThe interval at which the device will automatically clear rule
usage statistics, in minutes. This ability is disabled (usage
statistics will not be automatically cleared) if set to
zero(0).
This ability is further scoped to the list of ports defined by
etsysPolicyRuleStatsAutoClearPorts.
This leaf is optional and will have no effect on an agent which
has rule use accounting disabled or does not support rule use
accounting.rw Integer32 (0|1..65535) .1.3.6.1.4.1.5624.1.2.6.11.12 |
etsysPolicyRuleStatsAutoClearPortsThe list ports on which rule usage statistics will be
cleared by one of the AutoClear actions
(etsysPolicyRuleStatsAutoClearInterval,
etsysPolicyRuleStatsAutoClearOnProfile, or
etsysPolicyRuleStatsAutoClearOnLink).
By default, no ports will be set in this list.
This leaf is optional, unless the agent claims support for
one of the other 'autoclear' objects, and will have no effect
on an agent which has rule use accounting disabled or does
not support rule use accounting.rw PortList (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.13 |
etsysPolicyRuleStatsAutoClearOnProfileIf set to enabled(1), when a rule assigning a PolicyProfile
(whose etsysPolicyRuleProfileIndex is zero(0)) is activated,
all the rule usage bits associated with the rules bound to the
PolicyProfile specified by the etsysPolicyRuleOperPid
and the port specified by the etsysPolicyRulePort are cleared
(if there is no port specified or no valid
etsysPolicyRuleProfileIndex specified, then no action follows).
This ability is further scoped to the list of ports defined by
etsysPolicyRuleStatsAutoClearPorts.
This leaf is optional and will have no effect on an agent
which has rule use accounting disabled or does not support
rule use accounting. By default, the rule use accounting
information will not be modified by the creation or activation
of PolicyProfile assignment rules.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.14 |
etsysPolicyRuleStatsDroppedNotificationsA count of the number of times the agent has dropped
notification (syslog or trap) of a etsysPolicyRuleUsageList
bit transition. A management entity might use this leaf as
an indication to read the etsysPolicyRuleUsageList objects
for important rules. This count should be kept to the best of
the device's ability, and explicitly does not cover
notifications discarded by the network.ro Integer32 .1.3.6.1.4.1.5624.1.2.6.11.15 |
etsysPolicyRuleSylogMachineReadableFormatIf enabled, the device should format rule usage messages so
that they might be processed by a machine (scripting backend,
etc). If disabled, the messages should be formatted for human
consumption.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.16 |
etsysPolicyRuleSylogExtendedFormatIf enabled, the device should provide additional information
in rule-hit syslog messages. This information MAY include what
actions may have been initiated by the rule (if any) or
data mined from the packet which matched the rule.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.17 |
etsysPolicyRuleSylogEveryTimeIf enabled, the device will syslog on every rule hit (or profile
hit) which specifies SYSLOG as the action, instead of only when
the associated bit in the etsysPolicyProfileUsageList or the
etsysPolicyRuleUsageList is clear. It should be noted that this may
cause MANY messages to be generated.rw EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.11.18 |
etsysPolicyRFC3580Map OBJECT IDENTIFIER .1.3.6.1.4.1.5624.1.2.6.12 |
etsysPolicyRFC3580MapResolveReponseConflictIndicates which field to use in the application of the RADIUS
response in the event that both the proprietary filter-id
indicating a policy profile and the standard (RFC3580) vlan-
tunnel-attribute are present. If policyProfile(1) is selected,
then the filter-id will be used, if vlanTunnelAttribute(2) is
selected, then the vlan-tunnel-attribute will be used (and the
policy-map will be applied, if present). A value of
vlanTunnelAttributeWithPolicyProfile(3) indicates that both
attributes should be applied, in the following manner: the
policyProfile should be enforced, with the exception of the
etsysPolicyProfilePortVid (if present), the returned
vlan-tunnel-attribute will be used in its place. In this case,
the policy-map will be ignored (as the policyProfile was
explicitly assigned). VLAN classification rules will still
be applied, as defined by the assigned policyProfile.
Modifications of this value will not effect the current status
of any users currently authenticated. The new state will be
applied to new, successful authentications. The current status
of current authentication may be modified through the
individual agents or through the ENTERASYS-MULTI-AUTH-MIB, if
supported.rw PolicyRFC3580MapRadiusResponseTC .1.3.6.1.4.1.5624.1.2.6.12.1 |
etsysPolicyRFC3580MapLastChangeThe value of sysUpTime when the etsysPolicyRFC3580MapTable was
last modified.ro TimeTicks (SNMPv2-SMI) .1.3.6.1.4.1.5624.1.2.6.12.2 |
etsysPolicyRFC3580MapTableDefaultIf read as True, then the etsysPolicyRFC3580MapTable is in the
default state (no mappings have been created), if False, then
non-default mappings exist.
If set to True, then the etsysPolicyRFC3580MapTable will be put
into the default state (no mappings will exist). A set to
False is not valid and MUST fail.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.5624.1.2.6.12.3 |
etsysPolicyRFC3580MapTableA table containing VLAN ID to policy mappings. A policy is
a group of classification rules which may be applied on a
per user basis, to ports or to stations. SEQUENCE OF EtsysPolicyRFC3580MapEntry .1.3.6.1.4.1.5624.1.2.6.12.4 |
etsysPolicyRFC3580MapEntryConceptually defines a particular entry within the
etsysPolicyRFC3580MapTable. Entries within this table MUST be
considered non-volatile and MUST be maintained across
entity resets. EtsysPolicyRFC3580MapEntry .1.3.6.1.4.1.5624.1.2.6.12.4.1 |
etsysPolicyRFC3580MapVlanIdThe VlanIndex which will map to the policy profile specified
by the etsysPolicyRFC3580MapPolicyIndex of this row. This will
be used to map the VLAN returned by value from the Tunnel-
Private-Group-ID RADIUS attribute. VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.5624.1.2.6.12.4.1.1 |
etsysPolicyRFC3580MapPolicyIndexThe index of a Policy Profle as defined in the
etsysPolicyProfileTable.
A value of 0 indicates that the row is functionally non-
operational (no mapping exists). Devices which support the
ENTERASYS-VLAN-AUTHORIZATION-MIB, and for which the value of
etsysVlanAuthorizationEnable is Enabled and the value of
etsysVlanAuthorizationStatus is Enabled on the port referenced
by the authorization request, should then use the VlanIndex
provisioned (e.g. from the Tunnel-Private-Group-ID RADIUS
attribute) as defined by RFC3580, otherwise, the device should
treat the result as if no matching Policy Profile had been
found (e.g. as a simple success). In the case where a
Policy Profile is already being applied to the referenced
station, but no mapping exists, the device MUST treat the
Tunnel-Private-Group-ID as an override to the
etsysPolicyProfilePortVid defined by that profile (any matched
classification rules which explicit provision a VLAN MUST still
override both the etsysPolicyProfilePortVid and the
Tunnel-Private-Group-ID.)
A non-zero value of this object indicates that the VlanIndex
provisioned (e.g. from the Tunnel-Private-Group-ID RADIUS
attribute) should be mapped to a Policy Profile as defined in
the etsysPolicyProfileTable, and that policy applied as if
the Policy name had been provisioned instead (e.g, in the
Filter-ID RADIUS attribute). If the mapping references a
non-existent row of the etsysPolicyProfileTable, or the
referenced row has a etsysPolicyProfileRowStatus value other
than Active, the device MUST behave as if the mapping did not
exist (apply the vlan-tunnel-attribute). The
etsysPolicyRFC3580MapInvalidMapping MUST then be incremented.rw PolicyProfileIDTC (0|1..65535) .1.3.6.1.4.1.5624.1.2.6.12.4.1.2 |
etsysPolicyRFC3580MapInvalidMappingIncrements to indicate the number of times the device has
detected an invalid/unknown EtsysPolicyRFC3580MapEntry
(i.e. one that references an in-active or non-existent
etsysPolicyProfile).ro Counter32 .1.3.6.1.4.1.5624.1.2.6.12.5 |