CIENA-CES-ACL-MIB

File: CIENA-CES-ACL-MIB.mib (22444 bytes)

Imported modules

SNMPv2-SMI	INET-ADDRESS-MIB	CIENA-TC
CIENA-SMI

Imported symbols

Counter32	OBJECT-TYPE	MODULE-IDENTITY
InetAddressType	InetAddress	InetAddressPrefixLength
CienaGlobalState	cienaCesConfig

Defined Types

CienaCesAclEntry
SEQUENCE
	cienaCesAclEntryInetAddrType	InetAddressType
	cienaCesAclEntryInetAddr	InetAddress
	cienaCesAclEntryInetPrefixLength	InetAddressPrefixLength
	cienaCesAclEntryHits	Counter32
	cienaCesAclEntryBadPort	Counter32
	cienaCesAclEntryDscpMask	OCTET STRING
	cienaCesAclEntryBadDscp	Counter32
	cienaCesAclEntryPortBitMask	OCTET STRING
	cienaCesAclEntryNotifInetAddrType	InetAddressType
	cienaCesAclEntryNotifInetAddr	InetAddress
	cienaCesAclEntryNotifInetPrefixLength	InetAddressPrefixLength

CienaCesExtAclEntry
SEQUENCE
	cienaCesExtAclEntrySrcInetAddrType	InetAddressType
	cienaCesExtAclEntrySrcInetAddr	InetAddress
	cienaCesExtAclEntrySrcInetPrefixLen	InetAddressPrefixLength
	cienaCesExtAclEntryDstInetAddrType	InetAddressType
	cienaCesExtAclEntryDstInetAddr	InetAddress
	cienaCesExtAclEntryDstInetPrefixLen	InetAddressPrefixLength
	cienaCesExtAclEntryNotifSrcInetAddrType	InetAddressType
	cienaCesExtAclEntryNotifSrcInetAddr	InetAddress
	cienaCesExtAclEntryNotifSrcInetPrefixLen	InetAddressPrefixLength
	cienaCesExtAclEntryNotifDstInetAddrType	InetAddressType
	cienaCesExtAclEntryNotifDstInetAddr	InetAddress
	cienaCesExtAclEntryNotifDstInetPrefixLen	InetAddressPrefixLength
	cienaCesExtAclEntryHits	Counter32
	cienaCesExtAclEntryBadPort	Counter32
	cienaCesExtAclEntryDscpMask	OCTET STRING
	cienaCesExtAclEntryBadDscp	Counter32
	cienaCesExtAclEntryPortBitMask	OCTET STRING
	cienaCesExtAclEntryProtocol	BITS
	cienaCesExtAclEntryBadProtocol	Counter32

Defined Values

cienaCesAclMIB		1.3.6.1.4.1.1271.2.1.25
This module defines the ACL details and the associated notifications.
MODULE-IDENTITY

cienaCesAclMIBObjects		1.3.6.1.4.1.1271.2.1.25.1
OBJECT IDENTIFIER

cienaCesAclGlobal		1.3.6.1.4.1.1271.2.1.25.1.1
OBJECT IDENTIFIER

cienaCesAclRules		1.3.6.1.4.1.1271.2.1.25.1.2
OBJECT IDENTIFIER

cienaCesAclMIBConformance		1.3.6.1.4.1.1271.2.1.25.3
OBJECT IDENTIFIER

cienaCesAclMIBCompliances		1.3.6.1.4.1.1271.2.1.25.3.1
OBJECT IDENTIFIER

cienaCesAclMIBGroups		1.3.6.1.4.1.1271.2.1.25.3.2
OBJECT IDENTIFIER

cienaCesAclAdminState		1.3.6.1.4.1.1271.2.1.25.1.1.1
This object indicates the global IP ACL state.
Status: current	Access: read-only
OBJECT-TYPE
	CienaGlobalState

cienaCesAclCacheHit		1.3.6.1.4.1.1271.2.1.25.1.1.2
This object indicates the number of lookups satisfied by a cache hit.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclNoHit		1.3.6.1.4.1.1271.2.1.25.1.1.3
This object indicates the number of lookups that failed because the source ip address did not match a table entry.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclBadPort		1.3.6.1.4.1.1271.2.1.25.1.1.4
This object indicates the number of lookups that failed because the ingress port was disallowed by a table entry.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclBadDscp		1.3.6.1.4.1.1271.2.1.25.1.1.5
This object indicates the number of lookups that failed because the ingress DSCP value was disallowed by a table entry.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclOperState		1.3.6.1.4.1.1271.2.1.25.1.1.6
This object indicates the current operational state of the IP ACL system.
Status: current	Access: read-only
OBJECT-TYPE
	CienaGlobalState

cienaCesAclInUseEntries		1.3.6.1.4.1.1271.2.1.25.1.1.7
This object indicates the number of IP ACL rules that are currently configured.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclMaxEntries		1.3.6.1.4.1.1271.2.1.25.1.1.8
This object indicates the maximum number of IP ACL rules that can be configured.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclBadProtocol		1.3.6.1.4.1.1271.2.1.25.1.1.9
This object indicates the number of lookups that failed because protocol didn't match protocol allowed for matching src/dst subnet
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclTable		1.3.6.1.4.1.1271.2.1.25.1.2.1
The (conceptual) table listing the parameters for the IP ACL table.
Status: deprecated	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		CienaCesAclEntry

cienaCesAclEntry		1.3.6.1.4.1.1271.2.1.25.1.2.1.1
An entry (conceptual row) in the cienaCesAclTable.
Status: deprecated	Access: not-accessible
OBJECT-TYPE
	CienaCesAclEntry

cienaCesAclEntryInetAddrType		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.1
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesAclEntryInetAddr and cienaCesAclEntryInetPrefixLength. When representing: ipv4 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv6 from RFC 4001
Status: deprecated	Access: not-accessible
OBJECT-TYPE
	InetAddressType

cienaCesAclEntryInetAddr		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.2
This object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesAclEntryInetAddrType and should be compliant with RFC 4001 InetAddressType.
Status: deprecated	Access: read-only
OBJECT-TYPE
	InetAddress

cienaCesAclEntryInetPrefixLength		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.3
This object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesAclEntryInetAddrType.
Status: deprecated	Access: not-accessible
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesAclEntryHits		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.4
This object indicates the number of lookups that matched the table entry.
Status: deprecated	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclEntryBadPort		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.5
This object indicates the number of lookups that failed because the ingress port was disallowed by the table entry.
Status: deprecated	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclEntryDscpMask		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.6
This object indicates the DSCP values for which IP packets are allowed to ingress. The mask is big endian and each bit, numbered from 0 to 63, represents a DSCP value numbered from 0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.
Status: deprecated	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(8)

cienaCesAclEntryBadDscp		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.7
This object indicates the number of lookups that failed because the ingress DSCP value was disallowed by the table entry.
Status: deprecated	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesAclEntryPortBitMask		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.8
This object indicates the physical ports on which frames will be allowed to ingress from. The mask is big endian and each bit, numbered from 0 to 63, represents a physical port numbered from 1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all ports.
Status: deprecated	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(8)

cienaCesAclEntryNotifInetAddrType		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.9
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesAclEntryNotifInetAddr and cienaCesAclEntryNotifInetPrefixLength. When representing: ipv4 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesAclEntryInetAddr should be compliant with InetAddressIPv6 from RFC 4001
Status: deprecated	Access: read-only
OBJECT-TYPE
	InetAddressType

cienaCesAclEntryNotifInetAddr		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.10
This object indicates the IP network address that will be authorized. This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType and should be compliant with RFC 4001 InetAddressType.
Status: deprecated	Access: read-only
OBJECT-TYPE
	InetAddress

cienaCesAclEntryNotifInetPrefixLength		1.3.6.1.4.1.1271.2.1.25.1.2.1.1.11
This object indicates the prefix length for the IP network that will be authorized. This OID should be used in conjunction with cienaCesAclEntryNotifInetAddrType.
Status: deprecated	Access: read-only
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesExtAclTable		1.3.6.1.4.1.1271.2.1.25.1.2.2
The (conceptual) table listing the parameters for the extended IP ACL table.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		CienaCesExtAclEntry

cienaCesExtAclEntry		1.3.6.1.4.1.1271.2.1.25.1.2.2.1
An entry (conceptual row) in the cienaCesExtAclTable.
Status: current	Access: not-accessible
OBJECT-TYPE
	CienaCesExtAclEntry

cienaCesExtAclEntrySrcInetAddrType		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.1
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntrySrcInetAddr and cienaCesExtAclEntrySrcInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv6 from RFC 4001
Status: current	Access: not-accessible
OBJECT-TYPE
	InetAddressType

cienaCesExtAclEntrySrcInetAddr		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.2
This object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntrySrcInetAddrType and should be compliant with RFC 4001 InetAddressType.
Status: current	Access: not-accessible
OBJECT-TYPE
	InetAddress	Size(16)

cienaCesExtAclEntrySrcInetPrefixLen		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.3
This object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntrySrcInetAddrType.
Status: current	Access: not-accessible
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesExtAclEntryDstInetAddrType		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.4
This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntryDstInetAddr and cienaCesExtAclEntryDstInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntryDstInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntryDstInetAddr should be compliant with InetAddressIPv6 from RFC 4001
Status: current	Access: not-accessible
OBJECT-TYPE
	InetAddressType

cienaCesExtAclEntryDstInetAddr		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.5
This object indicates the destination IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryDstInetAddrType and should be compliant with RFC 4001 InetAddressType.
Status: current	Access: not-accessible
OBJECT-TYPE
	InetAddress	Size(16)

cienaCesExtAclEntryDstInetPrefixLen		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.6
This object indicates the prefix length for the destination IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryDstInetAddrType.
Status: current	Access: not-accessible
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesExtAclEntryNotifSrcInetAddrType		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.7
Duplicate of cienaCesExtAclEntrySrcInetAddrType for display purposes. This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntrySrcInetAddr and cienaCesExtAclEntrySrcInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntrySrcInetAddr should be compliant with InetAddressIPv6 from RFC 4001
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressType

cienaCesExtAclEntryNotifSrcInetAddr		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.8
Duplicate of cienaCesExtAclEntrySrcInetAddr for display purposes. This object indicates the source IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifSrcInetAddrType and should be compliant with RFC 4001 InetAddressType.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddress

cienaCesExtAclEntryNotifSrcInetPrefixLen		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.9
Duplicate of cienaCesExtAclEntrySrcInetPrefixLen for display purposes. This object indicates the prefix length for the source IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifSrcInetAddrType.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesExtAclEntryNotifDstInetAddrType		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.10
Duplicate of cienaCesExtAclEntryDstInetAddrType for display purposes. This object indicates the IP network type which will be authorized. This OID specifies the Inet address type of the OIDs cienaCesExtAclEntryNotifDstInetAddr and cienaCesExtAclEntryNotifDstInetPrefixLen. When representing: ipv4 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with InetAddressIPv4 from RFC 4001 ipv6 : cienaCesExtAclEntryNotifDstInetAddr should be compliant with InetAddressIPv6 from RFC 4001
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressType

cienaCesExtAclEntryNotifDstInetAddr		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.11
Duplicate of cienaCesExtAclEntryDstInetAddr for display purposes. This object indicates the destination IP network address that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifDstInetAddrType and should be compliant with RFC 4001 InetAddressType.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddress

cienaCesExtAclEntryNotifDstInetPrefixLen		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.12
Duplicate of cienaCesExtAclEntryDstInetPrefixLen for display purposes. This object indicates the prefix length for the destination IP network that will be authorized. This OID should be used in conjunction with cienaCesExtAclEntryNotifDstInetAddrType.
Status: current	Access: read-only
OBJECT-TYPE
	InetAddressPrefixLength

cienaCesExtAclEntryHits		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.13
This object indicates the number of lookups that matched the table entry.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesExtAclEntryBadPort		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.14
This object indicates the number of lookups that failed because the ingress port was disallowed by the table entry.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesExtAclEntryDscpMask		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.15
This object indicates the DSCP values for which IP packets are allowed to ingress. The mask is big endian and each bit, numbered from 0 to 63, represents a DSCP value numbered from 0 to 63. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(8)

cienaCesExtAclEntryBadDscp		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.16
This object indicates the number of lookups that failed because the ingress DSCP value was disallowed by the table entry.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

cienaCesExtAclEntryPortBitMask		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.17
This object indicates the physical ports on which frames will be allowed to ingress from. The mask is big endian and each bit, numbered from 0 to 63, represents a physical port numbered from 1 to 64. A value of 0xFFFFFFFFFFFFFFFF may be used to specify all ports.
Status: current	Access: read-only
OBJECT-TYPE
	OCTET STRING	Size(8)

cienaCesExtAclEntryProtocol		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18
List of protocols allowed for the ACL entry.
Status: current	Access: read-only
OBJECT-TYPE
	BITS	icmp(0), tcp(1), udp(2), all(15)

cienaCesExtAclEntryBadProtocol		1.3.6.1.4.1.1271.2.1.25.1.2.2.1.19
This object indicates the number of lookups that failed because the protocol value did't match what was in the ACL entry with IP address(es) matching
Status: current	Access: read-only
OBJECT-TYPE
	Counter32