This MIB module defines objects that describe Cisco Access
Control Lists (ACL).

This MIB describes different objects that enable the
network administrator to remotely configure ACLs, apply them
to interfaces and monitor their usage statistics.

A typical application of this MIB module will facilitate
monitoring of ACL match (sometimes referred as hit) counts.
However, by no means does the definition of this MIB module
prevent other applications from using it.

An ACL is an ordered list of statements that deny or permit
packets based on matching fields contained within the packet
header (layer 3 source and destination addresses, layer 4
protocol, layer 4 source and destination port numbers, etc.) In
addition there is an implicit *Deny All* at the end of the ACL.
ACLs are used to perform packet filtering to control
which packets are allowed through the network. Such control
can help limit network traffic, and restrict the access of
applications and devices on the network. Each one of these
statements is referred to as an Access List Control Entry
(ACE).
Here is an example of an ACL configuration.
    ipv4 access-list V4Example
     10 permit tcp any any
    !
    ipv6 access-list V6Example
     10 permit tcp any any
    !

The mechanism for monitoring ACL usage is by configuring, in
the desired ACEs a counter label. A counter label is a name
that is given to a counter and is defined in any ACE. ACEs
that share the same Counter label name will have their counters
aggregated into the same label.
Here is an example of how to use counter labels.
    ipv4 access-list V4CounterExample
     10 permit tcp any any counter CountPermits
     20 permit udp any any counter CountPermits

The same applies to IPv6 ACLs.

This MIB consists of following tables:
    * caAclCfgTable
        Defines the ACLs configured in the device.
    * caAclIPV4ACECfgTable
        Defines the ACEs that make up an IPV4 ACL.
    * caAclIPV6ACECfgTable
        Defines the ACEs that make up an IPV6 ACL.
    * caAclAccessGroupCfgTable
        Defines the Access Control Groups (ACG) applied to
        interfaces on the device.
    * caAclLabelIntfStatsTable
        Defines the statistics for a specific  ACE with counter
        labels attached to interfaces on the device.