BROCADE-ACL-MIB Table View

This table maps the string name of an ACL to its numeric ACL ID for both L2 and L3 ACLs.

bcsiAclNameToAclIdMappingEntry row .1.3.6.1.4.1.1588.3.1.16.1.1.1

An entry in the bcsiAclNameToIdMappingTable which lists the ACl-ID for ACL-Names.

Indexes

bcsiAclNametoAclIdMappingAclName

Column	Syntax	OID
bcsiAclNametoAclIdMappingAclName Name of the ACL.	BcsiAclNameString Type Constraints: range: 0..255	.1.3.6.1.4.1.1588.3.1.16.1.1.1.1
bcsiAclNametoAclIdMappingAclId Numeric ID of the ACL.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1588.3.1.16.1.1.1.2
bcsiAclNametoAclIdMappingAclType ACL can be of two types, namely standard and extended ACL.	BcsiAclType Type Values: 1 standard 2 extended	.1.3.6.1.4.1.1588.3.1.16.1.1.1.3
bcsiAclNametoAclIdMappingAclLevel Protocol Layer at which ACLs are applied. L2 and L3 are the supported levels.	BcsiAclLevel Type Values: 1 l2 2 ipv4 3 ipv6	.1.3.6.1.4.1.1588.3.1.16.1.1.1.4

Table to display the L2 Named Access Control List Information listed below among others:
- Source MAC address
- Source MAC mask
- Destination MAC address
- Destination MAC mask
- VLAN ID
- Ethernet type

bcsiL2NamedAclRuleEntry row .1.3.6.1.4.1.1588.3.1.16.1.2.1

An entry in the L2 Access Control List table.

Indexes

bcsiL2NamedAclId bcsiL2NamedAclSequenceNumber

Column	Syntax	OID
bcsiL2NamedAclId Unique Numeric ID of ACL. It is the same as bcsiAclNametoAclIdMappingAclId in bcsiAclNameToIdMappingTable	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1588.3.1.16.1.2.1.1
bcsiL2NamedAclSequenceNumber Sequence number is the number associated with rules of ACL	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1588.3.1.16.1.2.1.2
bcsiL2NamedAclName Represents the name of each configured L2 named ACL. It is the same as bcsiAclNametoAclIdMappingAclName in bcsiAclNameToIdMappingTable	BcsiAclNameString Type Constraints: range: 0..255	.1.3.6.1.4.1.1588.3.1.16.1.2.1.3
bcsiL2NamedAclAction Action to take if the ingress L2 packet matches this ACL.	BcsiAclAction Type Values: 1 deny 2 permit 3 hardDrop	.1.3.6.1.4.1.1588.3.1.16.1.2.1.4
bcsiL2NamedAclSourceType Source can be represented in three ways: 1. Mac address in HHHH.HHHH.HHHH format. 2. Any source mac address 3. Host specific mac address Interpretation of bcsiL2NamedAclSourceMacMask depends on the v…	BcsiAclMacType Type Values: 1 standard 2 any 3 host	.1.3.6.1.4.1.1588.3.1.16.1.2.1.5
bcsiL2NamedAclSourceMac Optional Source MAC address. It depends on the value of bcsiL2NamedAclSourceType. For standard(1) value of bcsiL2NamedAclSourceType, bcsiL2NamedAclSourceMac is user specified value. For any(2) value of bcsiL2NamedAclSou…	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.6
bcsiL2NamedAclSourceMacMask Optional Source MAC address mask. By default, it matches with any source MAC within a packet. To match on the first two bytes of the address aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case, the clause match…	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.7
bcsiL2NamedAclDestinationType Destination can be represented in three ways. 1. Mac address in HHHH.HHHH.HHHH format. 2. Any destination mac address 3. Host specific mac address Interpretation of bcsiL2NamedAclDestinationMacMask depends on the …	BcsiAclMacTyper/w Type Values: 1 standard 2 any 3 host	.1.3.6.1.4.1.1588.3.1.16.1.2.1.8
bcsiL2NamedAclDestinationMac Optional destination MAC address. By default, it matches with any destination MAC within a packet. It depends on the value of bcsiL2NamedAclDestinationType. For standard(1) value of bcsiL2NamedAclDestinationType, bcsiL2…	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.9
bcsiL2NamedAclDestinationMacMask Optional destination MAC address mask. By default, it matches with any destination MAC within a packet. To match on the first two bytes of the address aabb.ccdd.eeff, use the mask ffff.0000.0000. In this case, the claus…	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.10
bcsiL2NamedAclCount Indicates if the user has enabled/disabled count for number of packets against which the configured action is taken, for a given rule	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.11
bcsiL2NamedAclCopySflow Indicates whether to sample the packet for sflow collection or not	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.12
bcsiL2NamedAclDropPrecedenceForce Force ingress drop precedence	BcsiDropPrecedenceForcer/w Type Values: 0 zero 1 one 2 two	.1.3.6.1.4.1.1588.3.1.16.1.2.1.13
bcsiL2NamedAclVlanTagFormat Vlan tag format can be of 3 types, namely single-tagged, double-tagged and untagged. When neither of these 3 types of tag are used, the feild is represented by 0. When the value of this field is single-tagged(1),bcsiL2N…	BcsiVlanTagFormatr/w Type Values: 1 singleTagged 2 doubleTagged 3 untagged	.1.3.6.1.4.1.1588.3.1.16.1.2.1.14
bcsiL2NamedAclInnerVlanId vlan ID of the tagged inner vlan. If bcsiL2NamedAclVlanTagFormat is double-tagged(2), then 0 value of this field indicates any.	BcsiVlanIdOrNoneTCr/w Type Constraints: range: 0..4090	.1.3.6.1.4.1.1588.3.1.16.1.2.1.15
bcsiL2NamedAclOuterVlanId Vlan ID of the tagged outer vlan. If bcsiL2NamedAclVlanTagFormat is double-tagged(2), then 0 value of bcsiL2NamedAclInnerVlanId indicates any.	BcsiVlanIdOrNoneTCr/w Type Constraints: range: 0..4090	.1.3.6.1.4.1.1588.3.1.16.1.2.1.16
bcsiL2NamedAclVlanId Optional VLAN ID to match against that of the incoming packet. By default, the VLAN ID field is ignored during the match. In this case, value 0 is returned. This field is interpreted as Vlan ID when bcsiL2NamedAclVlanTa…	BcsiVlanIdOrNoneTCr/w Type Constraints: range: 0..4090	.1.3.6.1.4.1.1588.3.1.16.1.2.1.17
bcsiL2NamedAclEthernetType Ethernet Type to match against the 'Ethertype' field in the L2 header of the incoming packet. By default, etype field is ignored during the match. Applicable for Extended ACLs only.	SNMPv2-SMIUnsigned32r/w Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1588.3.1.16.1.2.1.18
bcsiL2NamedAclArpGuard Represents enabling/disabling of arp-gurad for a given ACL	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.19
bcsiL2NamedAclDot1Priority The priority option assigns traffic that matches the ACL to a hardware forwarding queue. In addition to changing the internal forwarding priority, if the outgoing interface is an 802.1q interface, this option maps the s…	BcsiPortQosTCr/w Type Values: 1 level1 2 level2 3 level3 4 level4 5 level5 6 level6 7 level7 8 level0 127 invalid	.1.3.6.1.4.1.1588.3.1.16.1.2.1.20
bcsiL2NamedAclDot1PriorityForce The priority-force option assigns packets of outgoing traffic that match the ACL to a specific hardware forwarding queue, even though the incoming packet may be assigned to another queue. This option is applicable for i…	BcsiPortQosTCr/w Type Values: 1 level1 2 level2 3 level3 4 level4 5 level5 6 level6 7 level7 8 level0 127 invalid	.1.3.6.1.4.1.1588.3.1.16.1.2.1.21
bcsiL2NamedAclMirrorPackets Mirror packets matching ACL permit clause. Applicable for Extended ACLs only	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.22
bcsiL2NamedAclLogEnable Optional parameter to enable logging only when deny clause is specified. Note that traffic denied by implicit deny mechanism is not subject to logging. The implicit deny kicks in when the traffic does not match any of t…	r/w	.1.3.6.1.4.1.1588.3.1.16.1.2.1.23

Table for binding L2 and L3 ACLs to interfaces.
- One cannot bind Layer 2 ACLs and Layer 3 ACLs to the same port.
However, configuration can be made on one port to use Layer 2 ACLs, and
another port on the same device to use Layer 3 ACLs.
- In general, Layer 2 ACLs cannot be bound to virtual interfaces, unlike L3 ACLs.
- One can not modify an existing Layer 2 ACL clause. For that, one must
unbind the ACL, delete it and make a new clause.

bcsiAclIfBindEntry row .1.3.6.1.4.1.1588.3.1.16.1.3.1

An entry in the L2 and L3 ACL binding table which lists the ACL bindings to an interface.

Indexes

IF-MIBifIndex bcsiAclIfBindDirection

Column	Syntax	OID
bcsiAclIfBindDirection Direction in which this ACL should be applied on this port.	BcsiTrafficDirection Type Values: 1 inbound 2 outbound	.1.3.6.1.4.1.1588.3.1.16.1.3.1.1
bcsiAclIfBindAclName Represents the Name of each configured L2 or L3 named ACL. It is the same as bcsiAclNametoAclIdMappingAclName in bcsiAclNameToIdMappingTable	BcsiAclNameStringr/w Type Constraints: range: 0..255	.1.3.6.1.4.1.1588.3.1.16.1.3.1.2