CIENA-CES-ACCESS-LIST-MIB Table View

A table of ACL profiles configured on the device. Each
entry contains the ACL profile configuration data.

cienaCesAclProfileConfigTableEntry row .1.3.6.1.4.1.1271.2.1.35.1.1.2.1

An entry containing the ACL profile configuration data.

Indexes

No indexes recorded

Column	Syntax	OID
cienaCesAclProfileId The unique identifier of this ACL profile.	Integer32	.1.3.6.1.4.1.1271.2.1.35.1.1.2.1.1
cienaCesAclProfileName The unique name of this ACL profile.	OctetString	.1.3.6.1.4.1.1271.2.1.35.1.1.2.1.2
cienaCesAclProfileAdminState The configured administrative State of the ACL profile.	CIENA-TCCienaGlobalState Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1271.2.1.35.1.1.2.1.3
cienaCesAclProfileOperState The Operational State of the ACL profile. A profile is operationally enabled if it is administratively enabled and attached to at least one interface. It is otherwise disabled. Note that the ACL feature must also be glo…	CIENA-TCCienaGlobalState Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.1271.2.1.35.1.1.2.1.4
cienaCesAclProfileDefaultFilterAction The configured default filter action for this ACL profile.	AclFilterAction Type Values: 1 allow 2 deny	.1.3.6.1.4.1.1271.2.1.35.1.1.2.1.5
cienaCesAclProfileNumRules The number of ACL rules configured in this profile. There will always be at least one rule defined in each profile - the default rule.	Integer32	.1.3.6.1.4.1.1271.2.1.35.1.1.2.1.6
cienaCesAclProfileAttachedInterfaces The number of interfaces to which this profile is attached.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1271.2.1.35.1.1.2.1.7

A table of ACL rules configured on the device. Each
entry contains the ACL rule configuration data.

cienaCesAclRuleConfigTableEntry row .1.3.6.1.4.1.1271.2.1.35.1.1.3.1

An entry containing the ACL rule configuration data.

Indexes

No indexes recorded

Column	Syntax	OID
cienaCesAclRulePrecedence The unique precedence value (within the profile) of this ACL rule.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.1
cienaCesAclRuleName The unique name (within the profile) of this ACL rule.	OctetString	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.2
cienaCesAclRuleFilterAction The configured filter action for this ACL rule.	AclFilterAction Type Values: 1 allow 2 deny	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.3
cienaCesAclRuleMatchAny True if the ACL rule matches any traffic, False otherwise. Matching on any traffic automatically disregards all the remaining fields.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.4
cienaCesAclRuleMatchSrcMacAddr True if the ACL rule matches on the source MAC address, False otherwise. When True, the cienaCesAclRuleSrcMacAddr and cienaCesAclRuleSrcMacAddrMask fields will contain the source MAC address and mask that are to be matc…	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.5
cienaCesAclRuleSrcMacAddr Contains the source MAC address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.6
cienaCesAclRuleSrcMacAddrMask Contains the source MAC address mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.7
cienaCesAclRuleMatchDstMacAddr True if the ACL rule matches on the destination MAC address, False otherwise. When True, the cienaCesAclRuleDstMacAddr and cienaCesAclRuleDstMacAddrMask fields will contain the destination MAC address and mask that are …	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.8
cienaCesAclRuleDstMacAddr Contains the destination MAC address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.9
cienaCesAclRuleDstMacAddrMask Contains the destination MAC address mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.10
cienaCesAclRuleMatchOuterVid True if the ACL rule matches on the outer VID, False otherwise. When True, the cienaCesAclRuleOuterVid and cienaCesAclRuleOuterVidMask fields will contain the outer VID value and mask that are to be matched by this rule.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.11
cienaCesAclRuleOuterVid Contains the outer VID that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.12
cienaCesAclRuleOuterVidMask Contains the outer VID mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.13
cienaCesAclRuleMatchOuterPcp True if the ACL rule matches on the outer PCP, False otherwise. When True, the cienaCesAclRuleOuterPcp and cienaCesAclRuleOuterPcpMask fields will contain the outer PCP value and mask that are to be matched by this rule.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.14
cienaCesAclRuleOuterPcp Contains the outer PCP that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.15
cienaCesAclRuleOuterPcpMask Contains the outer PCP mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.16
cienaCesAclRuleMatchOuterDei True if the ACL rule matches on the outer DEI bit, False otherwise. When True, the cienaCesAclRuleOuterDei field will contain the outer DEI value that is to be matched by this rule.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.17
cienaCesAclRuleOuterDei Contains the outer DEI bit that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchOuterDei field is set to False.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.18
cienaCesAclRuleMatchBaseEtype True if the ACL rule matches on the base ethertype, False otherwise. When True, the cienaCesAclRuleBaseEtype field will contain the base ethertype value that is to be matched by this rule.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.19
cienaCesAclRuleBaseEtype Contains the base ethertype that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchBaseEtype field is set to False.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.20
cienaCesAclRuleMatchSrcIpAddr True if the ACL rule matches on the source IP address, False otherwise. When True, the cienaCesAclRuleSrcIpAddrType field will contain the IP address type (IPv4 or IPv6) and the cienaCesAclRuleSrcIpAddr and cienaCesAc…	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.21
cienaCesAclRuleSrcIpAddrType Identifies the address family of the source IP address (IPv4/IPv6). This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.22
cienaCesAclRuleSrcIpAddr Contains the source IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.23
cienaCesAclRuleSrcIpAddrPrefixLength Contains the prefix length of the source IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.	INET-ADDRESS-MIBInetAddressPrefixLength Type Constraints: range: 0..2040	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.24
cienaCesAclRuleMatchDstIpAddr True if the ACL rule matches on the destination IP address, False otherwise. When True, the cienaCesAclRuleDstIpAddrType field will contain the IP address type (IPv4 or IPv6) and the cienaCesAclRuleDstIpAddr and ciena…	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.25
cienaCesAclRuleDstIpAddrType Identifies the address family of the destination IP address (IPv4/IPv6). This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.26
cienaCesAclRuleDstIpAddr Contains the destination IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.27
cienaCesAclRuleDstIpAddrPrefixLength Contains the prefix length of the destination IP address that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.	INET-ADDRESS-MIBInetAddressPrefixLength Type Constraints: range: 0..2040	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.28
cienaCesAclRuleMatchIpProtocol True if the ACL rule matches on the IP protocol, False otherwise. When True, the cienaCesAclRuleIpProtocol field will contain the IP protocol value that is to be matched by this rule.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.29
cienaCesAclRuleIpProtocol Contains the IP protocol value that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchIpProtocol field is set to False.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.30
cienaCesAclRuleMatchDscp True if the ACL rule matches on the DSCP value, False otherwise. When True, the cienaCesAclRuleDscp and cienaCesAclRuleDscpMask fields will contain the DSCP value and mask that are to be matched by this rule.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.31
cienaCesAclRuleDscp Contains the DSCP value that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.32
cienaCesAclRuleDscpMask Contains the outer DSCP mask that is to be matched by this rule. This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.	Unsigned32	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.33
cienaCesAclRuleMatchL4SrcPort Indicates the type of L4 source port matching that the ACL rule is performing. A value of 'any' indicates that the rule matches any L4 source port. A value of 'single' indicates that the rules matches on a single L4 sou…	AclL4PortMatchType Type Values: 1 any 2 single 3 range	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.34
cienaCesAclRuleL4SrcPort Contains the lower bound or single L4 source port value that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4SrcPort. This field is not applicable when the cienaCesAclRuleMatchL4SrcPort …	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.35
cienaCesAclRuleL4SrcPortUpper Contains the upper bound of the L4 source port range that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4SrcPort. This field is not applicable when the cienaCesAclRuleMatchL4SrcPort fie…	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.36
cienaCesAclRuleMatchL4DstPort Indicates the type of L4 destination port matching that the ACL rule is performing. A value of 'any' indicates that the rule matches any L4 destination port. A value of 'single' indicates that the rules matches on a sin…	AclL4PortMatchType Type Values: 1 any 2 single 3 range	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.37
cienaCesAclRuleL4DstPort Contains the lower bound or single L4 destination port value that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4DstPort. This field is not applicable when the cienaCesAclRuleMatchL4Dst…	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.38
cienaCesAclRuleL4DstPortUpper Contains the upper bound of the L4 destination port range that is to be matched by this rule depending on the value of cienaCesAclRuleMatchL4DstPort. This field is not applicable when the cienaCesAclRuleMatchL4DstPor…	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.39
cienaCesAclRuleMatchL4DstProtocol Indicates the L4 destination protocol name that is to be matched by this rule. A value of 'any' indicates that the rule will match any protocol. Note that this field is mutually exclusive with cienaCesAclRuleMatchL4Dst…	AclL4DstProtocol Type Values: 1 any 2 bgp 3 bootpclient 4 bootpserver 5 dhcpclient 6 dhcpserver 7 dhcpv6client 8 dhcpv6server 9 dns 10 ftp 11 http 12 ldp 13 ntp 14 olsr 15 rip 16 rpc 17 snmp 18 snmptrap 19 ssh 20 syslog 21 tacacs 22 telnet 23 tftp 24 twampctrl	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.40
cienaCesAclRuleMatchIpFragment Indicates the type of IP fragment matching that is to be matched by this rule. A value of 'any' indicates that the rule will match both fragmented and non-fragmented packets. A value of 'fragment' indicates that the rul…	AclIpFragmentMatchType Type Values: 1 any 2 isfragment 3 notfragment	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.41
cienaCesAclRuleMatchTcpFlags True if the ACL rule matches on specific TCP Flags, False otherwise. When True, the cienaCesAclRuleTcpFlags field will contain the TCP Flags that are to be matched by this rule.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42
cienaCesAclRuleTcpFlags Contains a comma-separated uppercase string list of TCP Flags that are to be matched by this rule, i.e. 'SYN,ACK,RST,...'. This field is not applicable when the cienaCesAclRuleMatchTcpFlags field is set to False.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.1271.2.1.35.1.1.3.1.43

A table showing the interface attachments for each
profile on the device. Each entry contains the name of
the interface and the traffic direction on which the profile is applied.

cienaCesAclProfileAttachmentTableEntry row .1.3.6.1.4.1.1271.2.1.35.1.1.4.1

An entry containing the ACL profile attachment data.

Indexes

No indexes recorded

Column	Syntax	OID
cienaCesAclInterfaceType The type of the interface to which this ACL profile is attached.	AclInterfaceType Type Values: 1 port 2 vlan 3 virtualswitch 4 ipinterface 5 remoteinterface 6 localinterface	.1.3.6.1.4.1.1271.2.1.35.1.1.4.1.1
cienaCesAclInterfaceId The ID of the interface to which this ACL profile is attached.	Integer32	.1.3.6.1.4.1.1271.2.1.35.1.1.4.1.2
cienaCesAclInterfaceName The name of the interface to which this ACL profile is attached.	OctetString	.1.3.6.1.4.1.1271.2.1.35.1.1.4.1.3
cienaCesAclDirection The interface's traffic direction (ingress/egress) on which the ACL profile is applied.	AclTrafficDirection Type Values: 1 ingress 2 egress	.1.3.6.1.4.1.1271.2.1.35.1.1.4.1.4

A table of global ACL profile rule statistics. Global ACL profile rule statistics
are the aggregate counts of the hit statistics for all instances of the ACL profile's rules.

cienaCesAclProfileGlobalRuleStatsTableEntry row .1.3.6.1.4.1.1271.2.1.35.1.2.1.1

An entry containing the ACL profile global rule hit statistics.

Indexes

No indexes recorded

Column	Syntax	OID
cienaCesAclGlobalRuleStatsPacketCount The number of packets that matched this ACL rule.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1271.2.1.35.1.2.1.1.1
cienaCesAclGlobalRuleStatsByteCount The number of bytes that matched this ACL rule.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1271.2.1.35.1.2.1.1.2

A table of ACL profile rule instance statistics. These ACL rule hit statistics are
specific to the rules applied on the particular interface.

cienaCesAclProfileRuleInstanceStatsTableEntry row .1.3.6.1.4.1.1271.2.1.35.1.2.2.1

An entry containing the ACL profile rule instance hit statistics.

Indexes

No indexes recorded

Column	Syntax	OID
cienaCesAclRuleInstanceStatsPacketCount The number of packets that matched this ACL rule instance.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1271.2.1.35.1.2.2.1.1
cienaCesAclRuleInstanceStatsByteCount The number of bytes that matched this ACL rule instance.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.1271.2.1.35.1.2.2.1.2