IP-ACCESS-LIST-MIB
AI MIB Summary
The IP-ACCESS-LIST-MIB monitors and manages the configuration of IPv4 and IPv6 access control lists on Cajun Router hardware, exposing specific metrics such as rule sequence numbers, permit/deny actions, and packet/byte counters for each defined filter entry.
The IP Access List Table for the Cajun Router.
Main OID:
cjnIpAListMgmt.1.3.6.1.4.1.1751.2.43.3.5
31
Objects
Active
Status
3
Dependencies
Imported Objects
Objects
31 total| Object Name |
|---|
cjnIpAListMgmtThe IP Access List Table for the Cajun Router. MODULE-IDENTITY .1.3.6.1.4.1.1751.2.43.3.5 |
ipACListCtlTableThis table is used to add/delete access list. This table maintain a list of access lists in the system. Each access list is made up of a group of access rule. The access rules are stored in the ipACRuleTable. SEQUENCE OF IpACListCtlEntry .1.3.6.1.4.1.1751.2.43.3.5.1 |
ipACListCtlEntryThe information concerning one of the IP access list. IpACListCtlEntry .1.3.6.1.4.1.1751.2.43.3.5.1.1 |
ipACListCtlNameEntry Name. Access List Name. If this instance is a string that represent a number, the following rules applies: 1 to 99 - ipACListCtlType must set to standard 101 to 199 - ipACListCtlType must set to extended others - cannot be created If this instance is a string that does not represent a number, the ipACListCtlType must be set before ipACListCtlStatus becomes active.rw OCTET STRING .1.3.6.1.4.1.1751.2.43.3.5.1.1.1 |
ipACListCtlTypeType of Access List: unset (0) standard (1) extended (2) This instance cannot be changed once ipACListCtlStatus becomes active. The value of this instance must compile with the rule listed in the ipACListCtlName instance.rw INTEGER .1.3.6.1.4.1.1751.2.43.3.5.1.1.2 |
ipACListCtlStatusFor creation/deletion of IP access control statement. active (1) -- is set when both ipACListCtlName and ipACListCtlType is set. notInService (2) -- is set when ipACListCtlName or ipACListCtlType is not set. notReady (3) createAndGo (4) -- is set on creating new access list. createAndWait (5) destroy (6) -- is set on destroying an existed access list. The management should inspect the ipACRuleTable and delete all the related entries. An entry in the ipACRuleTable is related to this entry if ipACListCtlName equals ipACRuleName.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.1751.2.43.3.5.1.1.3 |
ipACRuleTableThis table is used to add/delete individual access rule statement in an access list. SEQUENCE OF IpACRuleEntry .1.3.6.1.4.1.1751.2.43.3.5.2 |
ipACRuleEntryThe ipAccessRuleEntry control all the conditional fields and its parameters for an access rule. IpACRuleEntry .1.3.6.1.4.1.1751.2.43.3.5.2.1 |
ipACRuleNameEntry Name. Access List Name. This object identifies which access list this access rule belongs to. This object shall identify the instance of the ipACListCtlEntry object.rw OCTET STRING .1.3.6.1.4.1.1751.2.43.3.5.2.1.1 |
ipACRuleSubIndexEntry sub index. Each access list entry may has multiple rules. This sub index identified each rule.rw INTEGER .1.3.6.1.4.1.1751.2.43.3.5.2.1.2 |
ipACRuleOwnerThe string identifies the media which was used to create/modify this access rule. Local indicates creation via web, cli or snmp. external indicates an external client (ie. CajunRules)rw Enumeration .1.3.6.1.4.1.1751.2.43.3.5.2.1.3 |
ipACRuleSrcAddrThe IP address of the source address. A value of 0 in ipACListSrcMask indicates this is a DON'T CARE field.rw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.4 |
ipACRuleSrcAddrWildThis field specifies the wildcard of the source IP address.rw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.5 |
ipACRuleSrcMaskThe instance is not writable if the corresponding ipACListCtlType is standard. The MASK address of the source address. A value of 0 indicates this field and ipACListSrcAddr are DON'T CARErw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.6 |
ipACRuleSrcMaskWildThe instance is not writable if the corresponding ipACListCtlType is standard. This field specifies the wildcard of the source IP mask.rw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.7 |
ipACRuleDstAddrThe instance is not writable if the corresponding ipACListCtlType is standard. The IP address of the destination address. A value of 0 in ipAccessListDstMask indicates this is a DON'T CARE field.rw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.8 |
ipACRuleDstAddrWildThe instance is not writable if the corresponding ipACListCtlType is standard. This field specifies the wildcard of the destination IP address.rw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.9 |
ipACRuleDstMaskThe instance is not writable if the corresponding ipACListCtlType is standard. The MASK address of the destination address. A value of 0 indicates this field and ipACListDstAddr are DON'T CARErw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.10 |
ipACRuleDstMaskWildThe instance is not writable if the corresponding ipACListCtlType is standard. This field specifies the wildcard of the destination IP mask.rw IpAddress .1.3.6.1.4.1.1751.2.43.3.5.2.1.11 |
ipACRuleOperationHow to operate the IP ACCESS CONTROL statement, on the receiving packet.rw Enumeration .1.3.6.1.4.1.1751.2.43.3.5.2.1.12 |
ipACRuleProtocolThe instance is not writable if the corresponding ipACListCtlType is standard. Over which protocol does the IP ACCESS CONTROL statement activate. A value of 65536 is don't care. A value of 65537 means both TCP and UDP. Note: Cajun P550 does not allow ipACListProtocol equal to TCP or UDP because of hardware limitation. This limitation will be lift in the future.rw INTEGER .1.3.6.1.4.1.1751.2.43.3.5.2.1.13 |
ipACRuleL4SrcPortMinThe instance is not writable if the corresponding ipACListCtlType is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536), this field and ipACListL4SrcPortMax specifies a range of source ports. This field specifies the lower bound of the port range for the access rule. A value of 65536 is don't care. This field has no meaning if ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536), and it should be 65536.rw INTEGER .1.3.6.1.4.1.1751.2.43.3.5.2.1.14 |
ipACRuleL4SrcPortMaxThe instance is not writable if the corresponding ipACListCtlType is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536), this field and ipACListL4SrcPortMin specifies a range of source ports. This field specifies the upper bound of the port range for the access rule. A value of 65536 is don't care. This field has no meaning if ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536), and it should be 65536.rw INTEGER .1.3.6.1.4.1.1751.2.43.3.5.2.1.15 |
ipACRuleL4DestPortMinThe instance is not writable if the corresponding ipACListCtlType is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536), this field and ipACListL4DestPortMax specifies a range of destination ports. This field specifies the lower bound of the port range for the access rule. A value of 65536 is don't care. This field has no meaning if ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536), and it should be 65536.rw INTEGER .1.3.6.1.4.1.1751.2.43.3.5.2.1.16 |
ipACRuleL4DestPortMaxThe instance is not writable if the corresponding ipACListCtlType is standard. If ipACRuleProtocol is TCP(6), UDP(17), or TCP & UDP(65536), this field and ipACListL4DestPortMin specifies a range of destination ports. This field specifies the upper bound of the port range for the access rule. A value of 65536 is don't care. This field has no meaning if ipACRuleProtocol is not TCP(6), UDP(17), or TCP & UDP(65536), and it should be 65536.rw INTEGER .1.3.6.1.4.1.1751.2.43.3.5.2.1.17 |
ipACRuleStatusFor create/delete of a IP access rule statement. active (1) notInService (2) notReady (3) createAndGo (4) createAndWait (5) destroy (6) createAndWait and createAndGo is set on creating new access list. destory is set on destroying access rule. active is set when all the required instance is set in the entry.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.1751.2.43.3.5.2.1.18 |
ipACRuleEstablishedThis field indicates an established TCP connection.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1751.2.43.3.5.2.1.19 |
ipACRuleLogThis field indicates whether the access-list should log information.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1751.2.43.3.5.2.1.20 |
cjnIpForwardCtlMgt OBJECT IDENTIFIER .1.3.6.1.4.1.1751.2.43.3.6 |
ipForwardCtlEnabledThe object control the enable or disable the forwarding control mechanism in the system.rw Enumeration .1.3.6.1.4.1.1751.2.43.3.6.1 |
ipForwardCtlACNameThis object identifies which access list to use for IP forward control. This object shall identify the instance of the ipACListCtlEntry object.rw OCTET STRING .1.3.6.1.4.1.1751.2.43.3.6.2 |