POLICY-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
16
Rows
16
Columns
195
.1.3.6.1.4.1.81.36.1 · 1 row entry · 19 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyListTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyListTable'
This table is used to add/delete/monitor policy lists.
This table maintains a list of policy lists in the system. 
Each POLICY list is made up of a group of policy rules, a table
of Diff-Serv Code-Point (DSCP) mappings, and a compositeOP table.
          
The policy rules are stored in the ipPolicyRuleTable.
The DSCP mappings are stored in ipDSCPmapTable.
The Composite Ops are stored in ipPolicyCompositeOps.
          
Number of lists in a device (both in run-time and in NVRAM) is not 
part of the syntax of this mib.
This is a device issue that should be agreed between the device and
the managment applications and should be specified in the 
device and/or managment Spec.
RNR for example needs 3 lists : 1 for validation + 2 for activation
ipPolicyListEntry row .1.3.6.1.4.1.81.36.1.1
The information concerning one of the IP policy lists
Column Syntax OID
The EntID-id (AKA module-id / box number) to which this list relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.1.1.1
The ID of the list.
List 0 is the default list. It contains read-only rule (permit all),
and a default DSCP mapping table and composite Op. When a new list
is created, the default DSCP table and composite ops are co…
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.1.1.2
Name of this list.
ACL default name: ACL List #list-number
QoS default name: QoS List #list-number
PBR default name: PBR List #list-number
OctetStringr/w
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.1.1.3
Validity status of this list. Summarizes validity of rules,
dscp table and composite Opertaions associated with this list.
The validity context is that of the first entry for this SlotID in
ipPolicyValidListTable.
Enumeration
Enumerated Values:
1valid
2partiallyValid
3invalid
4validationInProgress
.1.3.6.1.4.1.81.36.1.1.4
Checksum of all the configurable (read/write) mib items that are
part of this list or part of any rule/dscp mapping/compositeOp
that belongs to this list.
Addition/deletion/modification of a rule in this list shall resu…
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.1.1.5
Used for creation/deletion of a list and for monitoring list status.
Use CreateAndWait (5) to create a list.
Destroy (6) to destroy a list. The active list can NOT
be destroyed. Destroying a list automatically removes …
RowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.81.36.1.1.6
The operation that should be applied to a packet in case the packet does not match any of the user specified rules. Values pertains to ACL or QoS depending on List type.
This field points to the appropriate ipPolicyComp…
Integer32r/w
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.1.1.7
A cookie to be associated with this list. This mib item can be used
by the management application as a unique ID of the list.

Note: The Agent is not aware of the contents of this cookie.
Its only purpo…
SNMPv2-SMIInteger32r/w
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.1.1.8
Counts the number of changes made to the configuration of the list
including changes to the rules that are part of the list.
This counters is set to 0 when the list is being created. Adding default
rule to the list inc…
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.1.1.9
The entity that configured this list
OctetStringr/w
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.1.1.10
Free text describing the reason why the list is not valid.
When the list is valid returns NULL string.
The values returned for this MIB are not affected by the list
status (active/inactive).
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.1.1.11
Specify which fields in the incoming packet might be trusted when the policy decision should be based in the incoming packet itself.

Policy decision depend on the active policy list.
In cases that the res…
Enumerationr/w
Enumerated Values:
1cos
2dscp
3cos-dscp
4untrust
256not-supported
.1.3.6.1.4.1.81.36.1.1.12
Controls the scope of the policy rules.
forward(1) - policy rules apply to packets forwarded by the Entity.
local subnet will not apply to theIf
forwardAndControl(2) - policy rules apply to control packets sent
to …
Enumerationr/w
Enumerated Values:
1forward
2forwardAndControl
.1.3.6.1.4.1.81.36.1.1.13
The operation that should be applied to packets carrying IP Options.
Applied only for ingress access-control List. Egress is not-supported.
This field points to the appropriate ipPolicyCompositeOpID in IpPolicyComposite…
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
4deny-and-reset-connection
5deny-and-notify-and-reset-connection
255not-supported
.1.3.6.1.4.1.81.36.1.1.14
The operation that should be applied to IP fragmentation packets.
Applied only for ingress access-control List. Egress is not-supported.
This field points to the appropriate ipPolicyCompositeOpID in IpPolicyCompositeOpT…
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
4deny-and-reset-connection
5deny-and-notify-and-reset-connection
255not-supported
.1.3.6.1.4.1.81.36.1.1.15
IP policy list type.
Derived from list range. See ipPolicyListID MIB.
Enumeration
Enumerated Values:
1acl-and-qos
2acl
3qos
4source-nat
5capture
6anti-spoofing
7policy-based-routing
8crypto
.1.3.6.1.4.1.81.36.1.1.16
The operation that should be applied to a packet in case the packet
does not match any of the user specified ether type rules.
This field points to the appropriate ipPolicyCompositeOpID in IpPolicyCompositeOpTable.
Per…
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
.1.3.6.1.4.1.81.36.1.1.17
Local address for VPN tunnel (crypto list).
Field format: either IP address (x.x.x.x) or IP interface name. Management application shall parse and display local address value based as either IP address or IP interface n…
OctetStringr/w
Constraints:
range: 1-255
.1.3.6.1.4.1.81.36.1.1.18
Add ipPolicyListNATPoolListIndex as an index to NAT pool list to
IpPolicyListEntry.
Values:
1 - Invalid.
2 - Null, No NAT list association.
3 - 10 - NAT list index 1-8.
The field is relevant to crypto list on…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.1.1.19
.1.3.6.1.4.1.81.36.2 · 1 row entry · 35 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyRuleTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyRuleTable'
This table is used to add/delete/modify/monitor individual policy rules in a policy list.
ipPolicyRuleEntry row .1.3.6.1.4.1.81.36.2.1
Controls all the conditional fields and its parameters for
a policy rule.
Column Syntax OID
The EntID-id (AKA module-id / box number) to which this rule relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.2.1.1
The ID of the list this rule is part of.
Derived from list range. See ipPolicyListID MIB.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.2.1.2
Number of rule within its list. Each list may contain many rule.
Lists work in a First Match manner.
A rule with a lower ID would be preferred over a rule with a higher ID.
Integer32
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.2.1.3
The IP address of the source station. A value of 255.255.255.255
in ipPolicyRuleSrcAddrWild indicates this is a DON'T CARE field.
RFC1155-SMIIpAddressr/w
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.2.1.4
This field specifies the wildcard of the source IP address.
Note that a the mask for a single host is 0.0.0.0 and the mask for all
hosts is 255.255.255.255. This field can has any combination of bits
set allowing all k…
RFC1155-SMIIpAddressr/w
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.2.1.5
The IP address of the destination station.
A value of 255.255.255.255 in ipPolicyRuleDstAddrWild indicates this
is a DON'T CARE field.
RFC1155-SMIIpAddressr/w
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.2.1.6
This field specifies the wildcard of the destination IP address.
Note that a the mask for a single host is 0.0.0.0 and the mask for
all hosts is 255.255.255.255. This field can has any combination of
bits set allowing…
RFC1155-SMIIpAddressr/w
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.2.1.7
The IP protocol to which this rule relates.
Use 256 to specify any IP (i.e. don't care)
Integer32r/w
Constraints:
range: 0-256
.1.3.6.1.4.1.81.36.2.1.8
The minimal source port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6)
UDP(17). In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.2.1.9
The maximal source port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6) or
UDP(17). In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.2.1.10
The minimal destination port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6)
or UDP(17). In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.2.1.11
The maximal destination port number.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6)
or UDP(17). In all other cases its value is not used.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.2.1.12
This field indicates the value of the established bit in the TCP header.
If protocol is not TCP this values should not be used.
Enumerationr/w
Enumerated Values:
1yes
2dontCare
.1.3.6.1.4.1.81.36.2.1.13
The operation that should be applied to a packet in case the packet does not match any of the user specified rules. Values pertains to ACL or QoS depending on List type.
This field points to the appropriate ipPolicyComp…
Integer32r/w
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.2.1.14
This field indicates how important is it to enforce this rule.
The higher the number the more important it is to enforce this rule.
The value 9999 has a special meaning of Mandatory which means this
rule MUST be enforc…
Integer32r/w
Constraints:
range: 0-9999
.1.3.6.1.4.1.81.36.2.1.15
Used to monitor if a rule is currently applicable (for the active
list)or would be applicable (if the list becomes active).
The applicability context is that of the first entry for this SlotID
in ipPolicyValidRuleTable…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
.1.3.6.1.4.1.81.36.2.1.16
Used to monitor the ApplicabilityStatus of the rule in the context of
this list. The values returned for this MIB are not affected by the
list status (active/inactive)

static - The applicabilityStatus o…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
.1.3.6.1.4.1.81.36.2.1.17
Free text describing the reason why the rule is not Applicable.
When rule is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.2.1.18
Used to configure and monitor one rule.
Use CreateAndWait (4) to create a rule.
Destroy (6) to destroy a rule
active (1) is returned when a rule is complete and is configured
into device HW
NotReady (3) is return…
RowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.81.36.2.1.19
The New DSCP value that should be applied to packets that meatch this rule.
A value of 64 means no change.
Integer32r/w
Constraints:
range: 0-64
.1.3.6.1.4.1.81.36.2.1.20
A DSCP value to match against.
This filter can be used instead or with the DSCP implicit
mapping table.
This filter is used in combination with
ipPolicyRuleDSCPFilterWild to match DSCP values.

Example…
Integer32r/w
Constraints:
range: 0-64
.1.3.6.1.4.1.81.36.2.1.21
A bitmask wildcard to match bits in the Diff-Serv
byte. '1' bits are part of the comparison.
'0' bits are 'don't care'.
A value of 63 means match all bits.
A value of 0 means don't care.
Note: this field is not in use.
Integer32r/w
Constraints:
range: 0-63
.1.3.6.1.4.1.81.36.2.1.22
The ICMP type and code to which this rule relates.
If protocol is not ICMP this values should not be used.

Field format:
- 19 bits filed.
- MSB (bit 18) stand for not-supported.
- Bit 17 stands for any IC…
Enumerationr/w
Enumerated Values:
0echo-reply
768netwrok-unreachable
769host-unreachable
770protocol-unreachable
771port-unreachable
772fragmentation-needed-but-df-bit-set
773source-route-failed
774destination-network-unknown
775destination-host-unknown
777destination-network-admin-prohibited
779network-unreachable-for-tos
780host-unreachable-for-tos
781communication-admin-prohibited-filtering
782host-precedence-violation
783precedence-cutoff-in-effect
1024source-quench
1280redirect-for-network
1283redirect-for-type-of-service-and-host
2048echo-request
2304router-advertisement
2817time-to-live-equals-0-during-reassembly
3072bad-ip-header
3073required-option-missing
3328timestamp-requested
3584timestamp-reply
4352address-mask-request
4608address-mask-reply
7680traceroute-outbound-packet-successfully-fw
7681traceroute-no-route-for-outbound-packet
9472domain-name-request
9728domain-name-reply
9984skip-algorithm-discovery-protocol
66304unreachable
66816redirect
68352time-exceeded
68608parameters-problem
73216traceroute
73472conversion-errors
73728mobile-host-redirect
73984ipv6-where-are-you
74240ipv6-I-am-here
74496mobile-registration-request
74752mobile-registration-reply
75776security-failure
196608any
262144not-supported
.1.3.6.1.4.1.81.36.2.1.23
Logical NOT of the source-IP or source policy user name field.
Packets with source IPs or source policy user name which do NOT match the IP address & wildcard or source policy user name
specified will match the source-I…
Enumerationr/w
Enumerated Values:
1disable
2not-source-ip-address
.1.3.6.1.4.1.81.36.2.1.24
Logical NOT of the destination-IP field or destination policy user name.
Packets with destination IPs or destination policy user name which do NOT match the IP address & wildcard or destination policy user name
specifie…
Enumerationr/w
Enumerated Values:
1disable
2not-destination-ip-address
.1.3.6.1.4.1.81.36.2.1.25
Logical NOT of the IP protocol field.
Enumerationr/w
Enumerated Values:
1disable
2not-ip-protocol
.1.3.6.1.4.1.81.36.2.1.26
Logical NOT of the tcp source port settings.
Enumerationr/w
Enumerated Values:
1disable
2not-source-port
.1.3.6.1.4.1.81.36.2.1.27
Logical NOT of the tcp destination port settings.
Enumerationr/w
Enumerated Values:
1disable
2not-destination-port
.1.3.6.1.4.1.81.36.2.1.28
Logical NOT of the protocol field + ICMP type and code.
Enumerationr/w
Enumerated Values:
1disable
2not-icmp-type-code
.1.3.6.1.4.1.81.36.2.1.29
Source user group's policy name.
Identical to ugPolicyName MIB.
ipPolicyRuleSrcAddr and ipPolicyRuleSrcAddrWild MIBs should be cleared when this value sets and vise versa.
OctetStringr/w
Constraints:
range: 0-32
.1.3.6.1.4.1.81.36.2.1.30
Destination user group's policy name.
Identical to ugPolicyName MIB.
ipPolicyRuleDstAddr and ipPolicyRuleDstAddrWild MIBs should be cleared when this value sets and vise versa.
OctetStringr/w
Constraints:
range: 0-32
.1.3.6.1.4.1.81.36.2.1.31
Logical NOT of DSCP filter settings.
Enumerationr/w
Enumerated Values:
1disable
2not-dscp
.1.3.6.1.4.1.81.36.2.1.32
IP rule description field. Allowing the user to specify the description for each rule.
In Crypto list a rule equals a tunnel and therefore the description is of the tunnel.
There is no description for default rules to s…
OctetStringr/w
Constraints:
range: 0-127
.1.3.6.1.4.1.81.36.2.1.33
This field indicates whether the rule will apply to non-initial fragments only.
When this key is set the L4 information is removed.
Enumerationr/w
Enumerated Values:
1yes
2dontCare
.1.3.6.1.4.1.81.36.2.1.34
Enumerated description of DoS attack this
correspondingly defends from.

Presently the DoS description is used for classification of DoS attacks in the MSS notification.

For all non-Dos rela…
Enumerationr/w
Enumerated Values:
8ipPolicySmurf-AttackRule
9ipPolicyFraggleAttackRule
11ipPolicypSpoofingRule
100ipPolicyUsedDefinedDoS100
101ipPolicyUsedDefinedDoS101
102ipPolicyUsedDefinedDoS102
103ipPolicyUsedDefinedDoS103
104ipPolicyUsedDefinedDoS104
105ipPolicyUsedDefinedDoS105
255ipPolicyNonApplicable
.1.3.6.1.4.1.81.36.2.1.35
.1.3.6.1.4.1.81.36.3 · 1 row entry · 13 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyControlTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyControlTable'
This table activates & monitors the policy application
ipPolicyControlEntry row .1.3.6.1.4.1.81.36.3.1
Each entry relates to one EntID (AKA module / box) in the stack
Column Syntax OID
The EntID-id (AKA module-id / box number) to which this control entry
relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.3.1.1
The ipPolicyListID of the Active general policy List on this EntID.
A value of Zero means there is no active list.
If the new list can not be activated the old list continues to be
active.

The Policy Enf…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.3.1.2
Specify if who is allowed to configure policy on the device.
local - a local policy manager is allowed to configure
(using CLI or SNMP)
remote - A remote policy manger is allowed to configure
(using CLI or SNMP)
Enumerationr/w
Enumerated Values:
1local
2remote
.1.3.6.1.4.1.81.36.3.1.3
Checksum of the entire CURRENT Policy Database including (but not
limited to) the following :
o ipPolicyControlActiveGeneralList
o ipPolicyControlAllowedPolicyManagers
o ipPolicyListCookie &
ipPolicyListTrackChanges o…
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.3.1.4
The minimal policy management version that this device inter operates
with as verified by actual testing.

For example: The P330R/340/130 shall return 1.1 (if testing succeeds).

The specia…
OctetString
Constraints:
range: 25-25
.1.3.6.1.4.1.81.36.3.1.5
The maximal policy management version that this device inter operates
with as verified by actual testing.

For example: The P330R/340/130 shall return 1.1 (if testing succeeds).
P360 for example may retur…
OctetString
Constraints:
range: 25-25
.1.3.6.1.4.1.81.36.3.1.6
The version of the Policy MIB supported by the module.
The format:
0.X.Y.Z
Example:
2.1.2 will be coded as:
0x00020102
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.3.1.7
Reports the Policy capabilities of the device.
Each bit in the string represents a capability/behavior. Value of '1' means that the behavior is supported. Value of '0' means that it's not supported.
Capability number in…
OctetString .1.3.6.1.4.1.81.36.3.1.8
Specify the source list index for copy operation.
SNMPv2-SMIInteger32r/w
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.3.1.9
Specify the destination list index for copy operation.
SNMPv2-SMIInteger32r/w
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.3.1.10
Copy operation and status of the copy operation.
idle(1)- R/O - Last Copy operation finished OK.
copy(2)- R/W - Activate the copy operation with the relevant source/destination
list indexes.
Enumerationr/w
Enumerated Values:
1idle
2copy
.1.3.6.1.4.1.81.36.3.1.11
Copy operation status.
Enumeration
Enumerated Values:
1noError
2error
.1.3.6.1.4.1.81.36.3.1.12
Display string for each one of the errors.
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.3.1.13

ipPolicyDiffServTable

table obsolete
.1.3.6.1.4.1.81.36.4 · 1 row entry · 9 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyDiffServTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyDiffServTable'
This table is used to configure the policy that is associated with
differntiated services. For each DSCP value the table contain the
operation that should applied to packets that match this DSCP value.
Note that in this version of this mib, allowed policies are restricted
to prioirty levels and access control.
          
Note: The ietf notion of PHB (per-hop forwarding behaviors) is not 
yet supported
ipPolicyDiffServEntry row .1.3.6.1.4.1.81.36.4.1
The information concerning one of the IP policy lists
Column Syntax OID
The EntID-id (AKA module-id / box number) to which diff-serv
table relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.4.1.1
The DSCP value to which this entry relates.
Integer32
Constraints:
range: 0-63
.1.3.6.1.4.1.81.36.4.1.2
This field points to the appropriate ipPolicyCompositeOpID in
ipPolicyCompositeOpTable.
The following read-only rows are always defined in
ipPolicyCompositeOpTable,for backward comaptability with Policy
MIB prior to …
Integer32r/w
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.4.1.3
Name of this DSCP entry. This fields is used only for documentation
purposes. Default name is:
DSCP #N
OctetStringr/w
Constraints:
range: 0-40
.1.3.6.1.4.1.81.36.4.1.4
Index of the aggregated group this DSCP entry belongs too.
Management station may use this mib item to classify the DSCP entries
to groups with the same behaviour.
The defval for this mib item is device specific.
Integer32r/w
Constraints:
range: 0-63
.1.3.6.1.4.1.81.36.4.1.5
This field indicates how important is it to enforce this entry.
The higher the number the more important it is to enforce this entry.
The value 9999 has a special meaning of Mandatory which means this
entry MUST be enf…
Integer32r/w
Constraints:
range: 0-9999
.1.3.6.1.4.1.81.36.4.1.6
Used to monitor if a DSCP entry is currently applicable
or would be applicable (if the table becomes active).
The values returned for this MIB are not affected by the table status
active/inactive)

applic…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
.1.3.6.1.4.1.81.36.4.1.7
Used to monitor the ApplicabilityStatus of the entry in the context of
this table. The values returned for this MIB are not affected by the
table status (active/inactive).

static - The applicabilityStat…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
.1.3.6.1.4.1.81.36.4.1.8
Free text describing the reason why the entry is not Applicable.
When entry is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.4.1.9
.1.3.6.1.4.1.81.36.5 · 1 row entry · 22 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyQueryTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyQueryTable'
This table is used to query the policy application for different 
types of information. The first use is to query about the operation 
that would be applied to a given packet.
          
This table can be used by a managment application to supply the user
an interactive dialog for looking ahead at the outcomes of the policy
defined
ipPolicyQueryEntry row .1.3.6.1.4.1.81.36.5.1
Each entry relates to one EntID (AKA module / box) in the stack
Column Syntax OID
The EntID-id (AKA module-id / box number) to which this rule relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.5.1.1
The ID of the list used to check the simulated packet.
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.5.1.2
The IP address of the source station in the packet
RFC1155-SMIIpAddressr/w
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.5.1.3
The IP address of the destination station in the packet
RFC1155-SMIIpAddressr/w
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.5.1.4
The IP protocol in the packet. Use 256 to specify IP
(i.e. don't care)
Integer32r/w
Constraints:
range: 0-256
.1.3.6.1.4.1.81.36.5.1.5
The source port of the packet.
This fields is applicable only when ipPolicyQueryProtocol
is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65536
.1.3.6.1.4.1.81.36.5.1.6
The destination port of the packet.
This fields is applicable only when ipPolicyRuleProtocol is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.5.1.7
The value of the TCP Establish bit in simulated packet.
This fields is applicable only when ipPolicyQueryProtocol is TCP(6)
Enumerationr/w
Enumerated Values:
1yes
2no
.1.3.6.1.4.1.81.36.5.1.8
The DSCP value in the simulated packet.
The value 64 is used to specify DONT CARE. In this case the result
maybe forwardNoChange
If a specifc value is specified the result would be the exact prioirty
associated with …
Integer32r/w
Constraints:
range: 0-64
.1.3.6.1.4.1.81.36.5.1.9
The operation that would be applied to the simulated packet.
This field points to the appropriate ipPolicyCompositeOpID in
ipPolicyCompositeOpTable.
The following read-only rows are always defined in
ipPolicyComposit…
Integer32
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.5.1.10
ID of the rule of the list that resulted in the ipPolicyQueryOperation for the query.
A value of 0 means that ipPolicyQueryOperation is a result of the ipPolicyListDefaultOperation
10000 should be returned in case of an…
Integer32
Constraints:
range: 0-10000
.1.3.6.1.4.1.81.36.5.1.11
The New DSCP value that of the simulated packet
A value of 64 means the DSCP field will not be changed.
A value of 65 means this query can't be processed.
Integer32
Constraints:
range: 0-65
.1.3.6.1.4.1.81.36.5.1.12
The 802.1p priority in the simulated packet.
When the priority is dontCare, the result maybe forwardNoChange.
Enumerationr/w
Enumerated Values:
1forwardPriority0
2forwardPriority1
3forwardPriority2
4forwardPriority3
5forwardPriority4
6forwardPriority5
7forwardPriority6
8forwardPriority7
99dontCare
.1.3.6.1.4.1.81.36.5.1.13
This variable should be made equal to the ifIndex of the interface for which this query should be resolved.
The value of 0 means the context of the first entry in the ipPolicyActivationTable for this SlotID
SNMPv2-SMIInteger32r/w
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.5.1.14
The direction for which this query should be resolved:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypesr/w .1.3.6.1.4.1.81.36.5.1.15
Simulated packet ICMP type and code.
If protocol is not ICMP this values should not be used.

Field format:
- 19 bits filed.
- MSB (bit 18) stand for not-supported.
- Bit 17 stands for any ICMP type.
- Bit…
Enumerationr/w
Enumerated Values:
0echo-reply
768netwrok-unreachable
769host-unreachable
770protocol-unreachable
771port-unreachable
772fragmentation-needed-but-df-bit-set
773source-route-failed
774destination-network-unknown
775destination-host-unknown
777destination-network-admin-prohibited
779network-unreachable-for-tos
780host-unreachable-for-tos
781communication-admin-prohibited-filtering
782host-precedence-violation
783precedence-cutoff-in-effect
1024source-quench
1280redirect-for-network
1283redirect-for-type-of-service-and-host
2048echo-request
2304router-advertisement
2817time-to-live-equals-0-during-reassembly
3072bad-ip-header
3073required-option-missing
3328timestamp-requested
3584timestamp-reply
4352address-mask-request
4608address-mask-reply
7680traceroute-outbound-packet-successfully-fw
7681traceroute-no-route-for-outbound-packet
9472domain-name-request
9728domain-name-reply
9984skip-algorithm-discovery-protocol
66304unreachable
66816redirect
68352time-exceeded
68608parameters-problem
73216traceroute
73472conversion-errors
73728mobile-host-redirect
73984ipv6-where-are-you
74240ipv6-I-am-here
74496mobile-registration-request
74752mobile-registration-reply
75776security-failure
196608any
262144not-supported
.1.3.6.1.4.1.81.36.5.1.16
Simulate fragment packet.
Enumerationr/w
Enumerated Values:
1not-fragment
2fragment-first-packet
3fragment-non-first-packet
.1.3.6.1.4.1.81.36.5.1.17
Simulate IP option packet.
TruthValuer/w
Type Values:
1true
2false
.1.3.6.1.4.1.81.36.5.1.18
This object reports the Access operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1permit
2deny
.1.3.6.1.4.1.81.36.5.1.19
This object reports the Notify operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1ignore
2notify
.1.3.6.1.4.1.81.36.5.1.20
This object reports the Error Reply operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1disable
2tcp-reset
3icmp-unreachable
.1.3.6.1.4.1.81.36.5.1.21
This object reports the CoS (Ethernet=802.1p) operation result.
This object obsoletes the ipPolicyQueryOperation object.
Enumeration
Enumerated Values:
0not-supported
1cos0
2cos1
3cos2
4cos3
5cos4
6cos5
7cos6
8cos7
9no-change
.1.3.6.1.4.1.81.36.5.1.22
.1.3.6.1.4.1.81.36.6 · 1 row entry · 5 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyDiffServControlTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyDiffServControlTable'
This table activates & monitors the Diff Serv application
ipPolicyDiffServControlEntry row .1.3.6.1.4.1.81.36.6.1
Each entry relates to one EntID (AKA module / box) in the stack
Column Syntax OID
The EntID-id (AKA module-id / box number) to which this control entry
relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.6.1.1
Checksum of all the configurable (read/write) DiffServ mib items
including the Diff Serv table.
This field can be used by the management application to discover that
Diff Serv configuration has changed (instead of pol…
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.6.1.2
Specify which fields in the incoming packet might be trausted when the
policy decision should be based in the incoming packet itself.

Policy decision depend on the active policy list.
In cases that ther…
Enumerationr/w
Enumerated Values:
1cos
2dscp
3cos-dscp
4untrust
.1.3.6.1.4.1.81.36.6.1.3
Validity status of the DSCP table:

valid - All the entries in the DSCP table can be executed

invalid - One or more of the entries in the DSCP table
can NOT be EXECUTED.
Enumeration
Enumerated Values:
1valid
2invalid
.1.3.6.1.4.1.81.36.6.1.4
Free text describing the reason why the table is not valid.
When the table is valid returns NULL string.
The values returned for this MIB are not affected by the table
status (active/inactive).
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.6.1.5
.1.3.6.1.4.1.81.36.7 · 1 row entry · 12 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyAccessControlViolationTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyAccessControlViolationTable'
This table contains infomations raerding the last packet (per module)
for which ipPolicyAccessControlViolationTrap was sent.
ipPolicyAccessControlViolationEntry row .1.3.6.1.4.1.81.36.7.1
An entry conatins the information regarding the last packet for which
ipPolicyAccessControlViolationTrap was sent by the specific module.
Column Syntax OID
The EntID-id (AKA module-id / box number) for which the trap was vsent
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.7.1.1
The IP address of the source station in the packet
RFC1155-SMIIpAddress
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.7.1.2
The IP address of the destination station in the packet
RFC1155-SMIIpAddress
Type Constraints:
range: 4
.1.3.6.1.4.1.81.36.7.1.3
The IP protocol in the packet. Use 256 to specify IP (i.e. don't care)
Integer32
Constraints:
range: 0-256
.1.3.6.1.4.1.81.36.7.1.4
The source port of the packet.
This fields is applicable only when
ipPolicyAccessControlViolationProtocol is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32
Constraints:
range: 0-65536
.1.3.6.1.4.1.81.36.7.1.5
The destination port of the packet.
This fields is applicable only when
ipPolicyAccessControlViolationProtocol is TCP(6) or UDP(17).
In all other cases its values is not used.
Integer32
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.7.1.6
This field indicates the value of the established bit in the TCP header
of the packet. This fields is applicable only when \
ipPolicyAccessControlViolationProtocol is TCP(6) or UDP(17).
In all other cases its values is …
Enumeration
Enumerated Values:
1yes
2dontCare
3no
.1.3.6.1.4.1.81.36.7.1.7
The DSCP value in the violating packet.
The value 64 is used to specify DONT know.
Integer32
Constraints:
range: 0-64
.1.3.6.1.4.1.81.36.7.1.8
The interface on which the violation occured.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.7.1.9
The sub-context on which this violation occured.
Enumeration
Enumerated Values:
1ingress
2egress
.1.3.6.1.4.1.81.36.7.1.10
The value of sysUpTime at the time the violation was recorded
RFC1155-SMITimeTicks
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.81.36.7.1.11
The type of rule that generated this notification.
ruleEntry - notification generated by a rule in IpPolicyRuleEntry
ipOptionOperation - notification generated by the list-level
ipPolicyListIpOptionOperation…
Enumeration
Enumerated Values:
1ruleEntry
2ipOptionOperation
3ipFragmentationOperation
.1.3.6.1.4.1.81.36.7.1.12
.1.3.6.1.4.1.81.36.8 · 1 row entry · 12 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyCompositeOpTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyCompositeOpTable'
This table is used to add/delete/modify/monitor individual composite operations in a policy list.
ipPolicyCompositeOpEntry row .1.3.6.1.4.1.81.36.8.1
An operation composed of different actions that can be applied to a
flow. A compostie op is refernced from ipPolicyRuleOperation
Column Syntax OID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-1000
.1.3.6.1.4.1.81.36.8.1.1
The list object this set of operations belong to.
List 0 is the default list. When a new list is created, the
CompositeOp table of list 0 is copied to the composite op table of
that list. Hence changing the composite …
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.8.1.2
The ID of the operation. This ID is pointed by the corresponding
ipPolycyRuleOperation.
Integer32
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.8.1.3
User-created name for the composite action.

The operation that should be applied to a packet in case the packet does not match any of the user specified rules. Values pertains to ACL or QoS depending on …
OctetStringr/w
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.8.1.4
Class of Service to use.
In the Ethernet world it means 802.1p tagging.
Enumerationr/w
Enumerated Values:
1cos0
2cos1
3cos2
4cos3
5cos4
6cos5
7cos6
8cos7
9no-change
255not-supported
.1.3.6.1.4.1.81.36.8.1.5
Access control method - block or forward.
Enumerationr/w
Enumerated Values:
1permit
2deny
255not-supported
.1.3.6.1.4.1.81.36.8.1.6
The New DSCP value that should be applied to packets that match
this rule. Applicable only to devices that can change the DSCP
field of a packet.
64 - no change.
255 - notSupported.
Integer32r/w
Constraints:
range: 0-64
range: 255-255
.1.3.6.1.4.1.81.36.8.1.7
Requested Web Switching Service quality.
This field is meaningfull onnly in the context of Web-Switching
applications (Server Load balancing, Application redirection,
Firewall load balancing, etc.).

If a…
Integer32r/w
Constraints:
range: 0-255
.1.3.6.1.4.1.81.36.8.1.8
Notify (send trap and/or log) to management if specific flow was detected.
Enumerationr/w
Enumerated Values:
1ignore
2notify
255not-supported
.1.3.6.1.4.1.81.36.8.1.9
Used for creation/deletion of an operation
RowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.81.36.8.1.10
Reset connection.
Sends TCP reset as response to TCP syn or TCP syn+ack packets or send ICMP destination unreachable, communication administratively prohibited by filtering (code 13) for non-TCP packets. Boxster specifi…
Enumerationr/w
Enumerated Values:
1disable
2auto
255not-supported
.1.3.6.1.4.1.81.36.8.1.11
Trust DSCP table.
trust dscp-only or trust dscp-and-cos means 'consult DSCP table' (which actually points back to composite operation table).
Packet's DSCP field would be remarked based on DSCP table.
Packet's CoS field…
Enumeration
Enumerated Values:
1no
2dscp-only
3dscp-and-cos
.1.3.6.1.4.1.81.36.8.1.12
.1.3.6.1.4.1.81.36.9 · 1 row entry · 9 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyDSCPmapTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyDSCPmapTable'
This table is used to configure the policy that is associated with differntiated services. For each DSCP value the table contain the operation that should applied to packets that match this DSCP value.
Note that in this version of this mib, allowed policies are restricted to priority levels and access control.
          
There is one set of DSCP mappings per List. Set no. 0 is the default set.
When a new list is created, DSCP mappings of set 0 are copied to the DSCP mapping set of the new list.
Note: The ietf notion of PHB (per-hop forwarding behaviors) is not yet supported
ipPolicyDSCPmapEntry row .1.3.6.1.4.1.81.36.9.1
The information concerning one of the IP policy lists
Column Syntax OID
The EntID-id (AKA module-id / box number) to which diff-serv
table relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.9.1.1
The list object this set of DSCP mappings belong to.
List 0 is the default list. When a new list is created, the
DSCP mapping of list 0 is opied to the DSCP mappingp table of
that list. Hence changing the DSCP mapping …
Integer32
Constraints:
range: 0-1000
.1.3.6.1.4.1.81.36.9.1.2
The DSCP value to which this entry relates.
Integer32
Constraints:
range: 0-63
.1.3.6.1.4.1.81.36.9.1.3
This field points to the appropriate ipPolicyCompositeOpID in ipPolicyCompositeOpTable.

The operation that should be applied to a packet in case the packet does not match any of the user specified rules. …
Integer32r/w
Constraints:
range: 0-1000
.1.3.6.1.4.1.81.36.9.1.4
Name of this DSCP entry. This field is used only for documentation purposes.
Default name is:
CS0 - 0
CS1 - 8
CS2 - 16
CS3 - 24
CS4 - 32
CS5 - 40
CS6 - 48
CS7 - 56
AF11 - 10
AF12 - 12
AF13 - 14
AF21 - 18
AF22 - 20
AF23…
OctetStringr/w
Constraints:
range: 0-32
.1.3.6.1.4.1.81.36.9.1.5
This field indicates how important is it to enforce this entry.
The higher the number the more important it is to enforce this entry.
The value 9999 has a special meaning of Mandatory which means this
entry MUST be enf…
Integer32r/w
Constraints:
range: 0-9999
.1.3.6.1.4.1.81.36.9.1.6
Used to monitor if a DSCP entry is currently applicable
or would be applicable (if the table becomes active).

The applicability context is that of the first entry for this SlotID
in ipPolicyValidDSCPTabl…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
.1.3.6.1.4.1.81.36.9.1.7
Used to monitor the ApplicabilityStatus of the entry in the context of
this table. The values returned for this MIB are not affected by the
table status (active/inactive).

static - The applicabilityStat…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
.1.3.6.1.4.1.81.36.9.1.8
Free text describing the reason why the entry is not Applicable.
When entry is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.9.1.9
.1.3.6.1.4.1.81.36.10 · 1 row entry · 12 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyActivationTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyActivationTable'
The ipPolicyActivationTable is used to map between 
interface/direction pairs
to policy lists.
This table accomodates devices that have one or more active 
Policy list, each list for a different qualifying 
interface/direction context.
          
Each entry has a number which represents the list that is active 
for the matching interface/direction.
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyActivationEntry row .1.3.6.1.4.1.81.36.10.1
The information concerning an interface/direction pair
Column Syntax OID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.1
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.2
The direction for which this list is relevant:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.10.1.3
The description of the sub context of this interface, in a human
readable string, to be displayed by the NMS.
OctetString .1.3.6.1.4.1.81.36.10.1.4
The number representing the list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports combined lists scheme.
When no list is assigned to th…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.5
The number (300 - 399) representing the ACL list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.6
The number (400 - 499) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.7
The number (500 - 599) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.8
The number (600 - 699) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.9
The number (700 - 799) representing the QoS list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.10
The number (800 - 899) representing the PBR list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is a…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.11
The number (900 - 999) representing Crypto list from the ipPolicyList table that is active for this interface/direction pair.
This object should be used only if the device supports split lists scheme.
When no list is as…
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.10.1.12
.1.3.6.1.4.1.81.36.11.1 · 1 row entry · 8 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyValidListTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyValidListTable'
This table is a Read-Only table that describes
the validity status of a list object in the context
of interface/direction pair.
          
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidListEntry row .1.3.6.1.4.1.81.36.11.1.1
The information concerning an interface/direction pair
Column Syntax OID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.1.1.1
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.1.1.2
The direction for which this list should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.1.1.3
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.1.1.4
Validity status of this list in the context of a particular
interface and direction,
on a particular policy entity.
Summarizes validity of rules,
dscp table and composite Opertaions associated with this list.
Enumeration
Enumerated Values:
1valid
2partiallyValid
3invalid
4validationInProgress
.1.3.6.1.4.1.81.36.11.1.1.5
Free text describing the reason why the list is not valid.
When the list is valid returns NULL string.
The values returned for this MIB are not affected by the list
status (active/inactive).
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.11.1.1.6
The list is not valid since filtering based on IP option (ipPolicyListIpOptionOperation) cannot be executed.
TruthValue
Type Values:
1true
2false
.1.3.6.1.4.1.81.36.11.1.1.7
The list is not valid since filtering based on IP fragmentation (ipPolicyListIpFragmentationOperation) cannot be executed.
TruthValue
Type Values:
1true
2false
.1.3.6.1.4.1.81.36.11.1.1.8
.1.3.6.1.4.1.81.36.11.2 · 1 row entry · 8 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyValidRuleTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyValidRuleTable'
This table is a Read-Only table that describes
the applicability/validity  status of a rule in a List in the context
of interface/direction pair.
          
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidRuleEntry row .1.3.6.1.4.1.81.36.11.2.1
The information concerning an interface/direction pair
Column Syntax OID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.2.1.1
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.2.1.2
The direction for which this list/rule should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.2.1.3
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.2.1.4
The rule ID from ipPolicyRuleTable, in theis list,
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.2.1.5
Used to monitor if a rule is is currently applicable
or would be applicable (if the table becomes active).
In the context of a particular interface and direction,
on a particular policy entity.
The values returned for …
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
.1.3.6.1.4.1.81.36.11.2.1.6
Used to monitor the ApplicabilityStatus of the rule in the context of
this list. The values returned for this MIB are not affected by the
list status (active/inactive)

static - The applicabilityStatus o…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
.1.3.6.1.4.1.81.36.11.2.1.7
Free text describing the reason why the rule is not Applicable.
When rule is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.11.2.1.8
.1.3.6.1.4.1.81.36.11.3 · 1 row entry · 8 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyValidDSCPTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyValidDSCPTable'
This table is a Read-Only table that describes
the applicability/validity  status of a DSCP mapping
in a List in the context of interface/direction pair.
In essencse, this is ipPolicyDSCPmapTable
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidDSCPEntry row .1.3.6.1.4.1.81.36.11.3.1
The information concerning an interface/direction pair
Column Syntax OID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.3.1.1
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.3.1.2
The direction for which this list/rule should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.3.1.3
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.3.1.4
The DSCP value (from ipPolicyDSCPmapTable) in this list,
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.3.1.5
Used to monitor if a DSCP entry is currently applicable
or would be applicable (if the table becomes active).
In the context of a particular interface and direction,
on a particular policy entity.
The values returned f…
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
.1.3.6.1.4.1.81.36.11.3.1.6
Used to monitor the ApplicabilityStatus of the entry in the context of
this table. The values returned for this MIB are not affected by the
table status (active/inactive).

static - The applicabilityStat…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
.1.3.6.1.4.1.81.36.11.3.1.7
Free text describing the reason why the entry is not Applicable.
When entry is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.11.3.1.8
.1.3.6.1.4.1.81.36.11.4 · 1 row entry · 8 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk ipPolicyValidEtherTypeRuleTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::ipPolicyValidEtherTypeRuleTable'
This table is a Read-Only table that describes
the applicability/validity  status of a rule in a List in the context
of interface/direction pair.
          
Devices which have no distinction between interfaces, will 
use ifIndex 0.
ipPolicyValidEtherTypeRuleEntry row .1.3.6.1.4.1.81.36.11.4.1
The information concerning an interface/direction pair
Column Syntax OID
The Id of the entity for which a set of rows applies. This index is
provided as a mean of distributing non-related information on
different entities such as physical modules. The module ID
(EntID number).
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.4.1.1
This variable should be made equal to the ifIndex of the interface
for which this entry is relevant
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.4.1.2
The direction for which this list/rule should be validated:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypes .1.3.6.1.4.1.81.36.11.4.1.3
The number representing the list from the ipPolicyList table that is
to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.4.1.4
The rule ID from etherTypeRuleTable, in theis list, to be validated for this interface/direction pair.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.11.4.1.5
Used to monitor if a rule is is currently applicable
or would be applicable (if the table becomes active).
In the context of a particular interface and direction,
on a particular policy entity.
The values returned for …
Enumeration
Enumerated Values:
1applicable
2partiallyApplicable
3notApplicable
4unknown
.1.3.6.1.4.1.81.36.11.4.1.6
Used to monitor the ApplicabilityStatus of the rule in the context of
this list. The values returned for this MIB are not affected by the
list status (active/inactive)

static - The applicabilityStatus o…
Enumeration
Enumerated Values:
1static
2quasiStatic
3dynamic
4unknown
.1.3.6.1.4.1.81.36.11.4.1.7
Free text describing the reason why the rule is not Applicable.
When rule is Applicable returns NULL string.
The values returned for this MIB are not affected by the list status
(active/inactive)
OctetString
Constraints:
range: 0-80
.1.3.6.1.4.1.81.36.11.4.1.8
.1.3.6.1.4.1.81.36.12 · 1 row entry · 7 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk etherTypeRuleTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::etherTypeRuleTable'
This table is used to add/delete/modify/monitor individual
ether type policy rules in a policy list.
etherTypeRuleEntry row .1.3.6.1.4.1.81.36.12.1
Controls all the conditional fields and its parameters for
a policy rule.
Column Syntax OID
The EntID-id (AKA module-id / box number) to which this ether type rule relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.12.1.1
The ID of the list this ether type rule is part of.
Derived from list range. See ipPolicyListID MIB.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.12.1.2
Number of ether type rule within its list. Each list may contain many rule.
Lists work in a First Match manner.
A rule with a lower ID would be preferred over a rule with a higher ID.
Integer32
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.12.1.3
Packet's ether type.
IP protocol (2048 - 0x800) is not allowed.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.12.1.4
Match packets based on either broadcast, multicast, both or all packets.
Enumerationr/w
Enumerated Values:
1all
2broadcasts
3multicasts
4broadcasts-and-multicasts
5unicast
.1.3.6.1.4.1.81.36.12.1.5
The operation that should be applied to a packet in case the packet matches the rule.
This field points to the appropriate ipPolicyCompositeOpID in ipPolicyCompositeOpTable.
Enumerationr/w
Enumerated Values:
1permit
2deny
3deny-and-notify
.1.3.6.1.4.1.81.36.12.1.6
Used for creation/deletion of a list and for monitoring list status.
Use CreateAndWait (5) to create a list.
Destroy (6) to destroy a list. The active list can NOT
be destroyed. Destroying a list automatically removes …
RowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
.1.3.6.1.4.1.81.36.12.1.7
.1.3.6.1.4.1.81.36.13 · 1 row entry · 8 columns
Uses the avaya variant from /opt/observium/mibs/avaya.
Command help
Walk etherTypePolicyQueryTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'POLICY-MIB' -M '/opt/observium/mibs/avaya:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'POLICY-MIB::etherTypePolicyQueryTable'
This table is used to query the policy application for different 
types of ehter type information. The first use is to query about the operation 
that would be applied to a given packet.
          
This table can be used by a managment application to supply the user
an interactive dialog for looking ahead at the outcomes of the policy
defined
etherTypePolicyQueryEntry row .1.3.6.1.4.1.81.36.13.1
Each entry relates to one EntID (AKA module / box) in the stack
Column Syntax OID
The EntID-id (AKA module-id / box number) to which this rule relates
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.13.1.1
The ID of the list used to check the simulated packet.
Integer32r/w
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.81.36.13.1.2
This variable should be made equal to the ifIndex of the interface
for which this query should be resolved.
The value of 0 means the context of the first entry in the
ipPolicyActivationTable for this SlotID.
SNMPv2-SMIInteger32r/w
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.81.36.13.1.3
The direction for which this query should be resolved:
ingress(1)- going into the interface, from the network
egress(2) - going out of the interface, towards the network
SubContextTypesr/w .1.3.6.1.4.1.81.36.13.1.4
Simulated packet ether type.
IP protocol (2048 = 0x800) is not allowed.
Integer32r/w
Constraints:
range: 0-65535
.1.3.6.1.4.1.81.36.13.1.5
Simulated packet ether type traffic type.
Enumerationr/w
Enumerated Values:
1unicast
2broadcasts
3multicasts
.1.3.6.1.4.1.81.36.13.1.6
The operation that would be applied to the simulated packet.
This field points to the appropriate ipPolicyCompositeOpID in ipPolicyCompositeOpTable.
The following read-only rows are always defined in ipPolicyCompositeOp…
Integer32
Constraints:
range: 1-1000
.1.3.6.1.4.1.81.36.13.1.7
ID of the rule of the list that resulted in the query.
A value of 0 means that result of the ipEtherTypePolicyListDefaultOperation 10000 should be returned in case of an error, where this query can't be processed.
Integer32
Constraints:
range: 0-10000
.1.3.6.1.4.1.81.36.13.1.8