CIENA-CES-ACCESS-LIST-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view
Tables
5
Rows
5
Columns
58

cienaCesAclProfileConfigTable

table
.1.3.6.1.4.1.1271.2.1.35.1.1.2 · 1 row entry · 7 columns
Open in standard view 
A table of ACL profiles configured on the device. Each
entry contains the ACL profile configuration data.
cienaCesAclProfileConfigTableEntry entry .1.3.6.1.4.1.1271.2.1.35.1.1.2.1
An entry containing the ACL profile configuration data.
Indexes
No indexes recorded
Column Syntax OID
cienaCesAclProfileId
The unique identifier of this ACL profile.
Integer32 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.1
cienaCesAclProfileName
The unique name of this ACL profile.
OctetString .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.2
cienaCesAclProfileAdminState
The configured administrative State of the ACL profile.
CIENA-TCCienaGlobalState
Textual Convention: CIENA-TCCienaGlobalState Enumeration
Type Values:
1enabled
2disabled
 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.3
cienaCesAclProfileOperState
The Operational State of the ACL profile.
A profile is operationally enabled if it is administratively enabled
and attached to at least one interface. It is otherwise disabled.
Note that the ACL feature must also be glo…
CIENA-TCCienaGlobalState
Textual Convention: CIENA-TCCienaGlobalState Enumeration
Type Values:
1enabled
2disabled
 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.4
cienaCesAclProfileDefaultFilterAction
The configured default filter action for this ACL profile.
AclFilterAction
Textual Convention: AclFilterAction Enumeration
Type Values:
1allow
2deny
 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.5
cienaCesAclProfileNumRules
The number of ACL rules configured in this profile. There will always
be at least one rule defined in each profile - the default rule.
Integer32 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.6
cienaCesAclProfileAttachedInterfaces
The number of interfaces to which this profile is attached.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.1271.2.1.35.1.1.2.1.7

cienaCesAclRuleConfigTable

table
.1.3.6.1.4.1.1271.2.1.35.1.1.3 · 1 row entry · 43 columns
Open in standard view 
A table of ACL rules configured on the device. Each
entry contains the ACL rule configuration data.
cienaCesAclRuleConfigTableEntry entry .1.3.6.1.4.1.1271.2.1.35.1.1.3.1
An entry containing the ACL rule configuration data.
Indexes
No indexes recorded
Column Syntax OID
cienaCesAclRulePrecedence
The unique precedence value (within the profile) of this ACL rule.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.1
cienaCesAclRuleName
The unique name (within the profile) of this ACL rule.
OctetString .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.2
cienaCesAclRuleFilterAction
The configured filter action for this ACL rule.
AclFilterAction
Textual Convention: AclFilterAction Enumeration
Type Values:
1allow
2deny
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.3
cienaCesAclRuleMatchAny
True if the ACL rule matches any traffic, False otherwise.
Matching on any traffic automatically disregards all the remaining fields.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.4
cienaCesAclRuleMatchSrcMacAddr
True if the ACL rule matches on the source MAC address, False otherwise.
When True, the cienaCesAclRuleSrcMacAddr and cienaCesAclRuleSrcMacAddrMask fields
will contain the source MAC address and mask that are to be matc…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.5
cienaCesAclRuleSrcMacAddr
Contains the source MAC address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.6
cienaCesAclRuleSrcMacAddrMask
Contains the source MAC address mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcMacAddr field is set to False.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.7
cienaCesAclRuleMatchDstMacAddr
True if the ACL rule matches on the destination MAC address, False otherwise.
When True, the cienaCesAclRuleDstMacAddr and cienaCesAclRuleDstMacAddrMask fields
will contain the destination MAC address and mask that are …
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.8
cienaCesAclRuleDstMacAddr
Contains the destination MAC address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.9
cienaCesAclRuleDstMacAddrMask
Contains the destination MAC address mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstMacAddr field is set to False.
SNMPv2-TCMacAddress
Textual Convention: SNMPv2-TCMacAddress OctetString
Type Constraints:
range: 6
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.10
cienaCesAclRuleMatchOuterVid
True if the ACL rule matches on the outer VID, False otherwise.
When True, the cienaCesAclRuleOuterVid and cienaCesAclRuleOuterVidMask fields
will contain the outer VID value and mask that are to be matched by this rule.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.11
cienaCesAclRuleOuterVid
Contains the outer VID that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.12
cienaCesAclRuleOuterVidMask
Contains the outer VID mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterVid field is set to False.
SNMPv2-SMIUnsigned32
Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32
Type Constraints:
range: 0..4294967295
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.13
cienaCesAclRuleMatchOuterPcp
True if the ACL rule matches on the outer PCP, False otherwise.
When True, the cienaCesAclRuleOuterPcp and cienaCesAclRuleOuterPcpMask fields
will contain the outer PCP value and mask that are to be matched by this rule.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.14
cienaCesAclRuleOuterPcp
Contains the outer PCP that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.15
cienaCesAclRuleOuterPcpMask
Contains the outer PCP mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterPcp field is set to False.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.16
cienaCesAclRuleMatchOuterDei
True if the ACL rule matches on the outer DEI bit, False otherwise.
When True, the cienaCesAclRuleOuterDei field
will contain the outer DEI value that is to be matched by this rule.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.17
cienaCesAclRuleOuterDei
Contains the outer DEI bit that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchOuterDei field is set to False.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.18
cienaCesAclRuleMatchBaseEtype
True if the ACL rule matches on the base ethertype, False otherwise.
When True, the cienaCesAclRuleBaseEtype field
will contain the base ethertype value that is to be matched by this rule.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.19
cienaCesAclRuleBaseEtype
Contains the base ethertype that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchBaseEtype field is set to False.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.20
cienaCesAclRuleMatchSrcIpAddr
True if the ACL rule matches on the source IP address, False otherwise.
When True, the cienaCesAclRuleSrcIpAddrType field will contain the
IP address type (IPv4 or IPv6) and the cienaCesAclRuleSrcIpAddr and
cienaCesAc…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.21
cienaCesAclRuleSrcIpAddrType
Identifies the address family of the source IP address (IPv4/IPv6). This field is
not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.22
cienaCesAclRuleSrcIpAddr
Contains the source IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.23
cienaCesAclRuleSrcIpAddrPrefixLength
Contains the prefix length of the source IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchSrcIpAddr field is set to False.
INET-ADDRESS-MIBInetAddressPrefixLength
Textual Convention: INET-ADDRESS-MIBInetAddressPrefixLength Unsigned32
Type Constraints:
range: 0..2040
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.24
cienaCesAclRuleMatchDstIpAddr
True if the ACL rule matches on the destination IP address, False otherwise.
When True, the cienaCesAclRuleDstIpAddrType field will contain the
IP address type (IPv4 or IPv6) and the cienaCesAclRuleDstIpAddr and
ciena…
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.25
cienaCesAclRuleDstIpAddrType
Identifies the address family of the destination IP address (IPv4/IPv6).
This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False
INET-ADDRESS-MIBInetAddressType
Textual Convention: INET-ADDRESS-MIBInetAddressType Enumeration
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.26
cienaCesAclRuleDstIpAddr
Contains the destination IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.
INET-ADDRESS-MIBInetAddress
Textual Convention: INET-ADDRESS-MIBInetAddress OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.27
cienaCesAclRuleDstIpAddrPrefixLength
Contains the prefix length of the destination IP address that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDstIpAddr field is set to False.
INET-ADDRESS-MIBInetAddressPrefixLength
Textual Convention: INET-ADDRESS-MIBInetAddressPrefixLength Unsigned32
Type Constraints:
range: 0..2040
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.28
cienaCesAclRuleMatchIpProtocol
True if the ACL rule matches on the IP protocol, False otherwise.
When True, the cienaCesAclRuleIpProtocol field
will contain the IP protocol value that is to be matched by this rule.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.29
cienaCesAclRuleIpProtocol
Contains the IP protocol value that is to be matched by this rule. This field is
not applicable when the cienaCesAclRuleMatchIpProtocol field is set to False.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.30
cienaCesAclRuleMatchDscp
True if the ACL rule matches on the DSCP value, False otherwise.
When True, the cienaCesAclRuleDscp and cienaCesAclRuleDscpMask fields
will contain the DSCP value and mask that are to be matched by this rule.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.31
cienaCesAclRuleDscp
Contains the DSCP value that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.32
cienaCesAclRuleDscpMask
Contains the outer DSCP mask that is to be matched by this rule.
This field is not applicable when the cienaCesAclRuleMatchDscp field is set to False.
Unsigned32 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.33
cienaCesAclRuleMatchL4SrcPort
Indicates the type of L4 source port matching that the ACL rule is performing.
A value of 'any' indicates that the rule matches any L4 source port.
A value of 'single' indicates that the rules matches on a single L4 sou…
AclL4PortMatchType
Textual Convention: AclL4PortMatchType Enumeration
Type Values:
1any
2single
3range
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.34
cienaCesAclRuleL4SrcPort
Contains the lower bound or single L4 source port value that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4SrcPort.
This field is not applicable when the cienaCesAclRuleMatchL4SrcPort …
INET-ADDRESS-MIBInetPortNumber
Textual Convention: INET-ADDRESS-MIBInetPortNumber Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.35
cienaCesAclRuleL4SrcPortUpper
Contains the upper bound of the L4 source port range that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4SrcPort.
This field is not applicable when the cienaCesAclRuleMatchL4SrcPort fie…
INET-ADDRESS-MIBInetPortNumber
Textual Convention: INET-ADDRESS-MIBInetPortNumber Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.36
cienaCesAclRuleMatchL4DstPort
Indicates the type of L4 destination port matching that the ACL rule is performing.
A value of 'any' indicates that the rule matches any L4 destination port.
A value of 'single' indicates that the rules matches on a sin…
AclL4PortMatchType
Textual Convention: AclL4PortMatchType Enumeration
Type Values:
1any
2single
3range
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.37
cienaCesAclRuleL4DstPort
Contains the lower bound or single L4 destination port value that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4DstPort.
This field is not applicable when the cienaCesAclRuleMatchL4Dst…
INET-ADDRESS-MIBInetPortNumber
Textual Convention: INET-ADDRESS-MIBInetPortNumber Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.38
cienaCesAclRuleL4DstPortUpper
Contains the upper bound of the L4 destination port range that is to be matched by this rule
depending on the value of cienaCesAclRuleMatchL4DstPort.
This field is not applicable when the cienaCesAclRuleMatchL4DstPor…
INET-ADDRESS-MIBInetPortNumber
Textual Convention: INET-ADDRESS-MIBInetPortNumber Unsigned32
Type Constraints:
range: 0..65535
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.39
cienaCesAclRuleMatchL4DstProtocol
Indicates the L4 destination protocol name that is to be matched by this rule.
A value of 'any' indicates that the rule will match any protocol. Note that
this field is mutually exclusive with cienaCesAclRuleMatchL4Dst…
AclL4DstProtocol
Textual Convention: AclL4DstProtocol Enumeration
Type Values:
1any
2bgp
3bootpclient
4bootpserver
5dhcpclient
6dhcpserver
7dhcpv6client
8dhcpv6server
9dns
10ftp
11http
12ldp
13ntp
14olsr
15rip
16rpc
17snmp
18snmptrap
19ssh
20syslog
21tacacs
22telnet
23tftp
24twampctrl
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.40
cienaCesAclRuleMatchIpFragment
Indicates the type of IP fragment matching that is to be matched by this rule.
A value of 'any' indicates that the rule will match both fragmented and non-fragmented
packets. A value of 'fragment' indicates that the rul…
AclIpFragmentMatchType
Textual Convention: AclIpFragmentMatchType Enumeration
Type Values:
1any
2isfragment
3notfragment
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.41
cienaCesAclRuleMatchTcpFlags
True if the ACL rule matches on specific TCP Flags, False otherwise.
When True, the cienaCesAclRuleTcpFlags field will contain the TCP Flags
that are to be matched by this rule.
SNMPv2-TCTruthValue
Textual Convention: SNMPv2-TCTruthValue Enumeration
Type Values:
1true
2false
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42
cienaCesAclRuleTcpFlags
Contains a comma-separated uppercase string list of TCP Flags
that are to be matched by this rule, i.e. 'SYN,ACK,RST,...'.
This field is not applicable when the cienaCesAclRuleMatchTcpFlags
field is set to False.
SNMPv2-TCDisplayString
Textual Convention: SNMPv2-TCDisplayString OctetString
Type Constraints:
range: 0..255
 .1.3.6.1.4.1.1271.2.1.35.1.1.3.1.43

cienaCesAclProfileAttachmentTable

table
.1.3.6.1.4.1.1271.2.1.35.1.1.4 · 1 row entry · 4 columns
Open in standard view 
A table showing the interface attachments for each
profile on the device. Each entry contains the name of
the interface and the traffic direction on which the profile is applied.
cienaCesAclProfileAttachmentTableEntry entry .1.3.6.1.4.1.1271.2.1.35.1.1.4.1
An entry containing the ACL profile attachment data.
Indexes
No indexes recorded
Column Syntax OID
cienaCesAclInterfaceType
The type of the interface to which this ACL profile is attached.
AclInterfaceType
Textual Convention: AclInterfaceType Enumeration
Type Values:
1port
2vlan
3virtualswitch
4ipinterface
5remoteinterface
6localinterface
 .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.1
cienaCesAclInterfaceId
The ID of the interface to which this ACL profile is attached.
Integer32 .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.2
cienaCesAclInterfaceName
The name of the interface to which this ACL profile is attached.
OctetString .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.3
cienaCesAclDirection
The interface's traffic direction (ingress/egress) on which the ACL profile is applied.
AclTrafficDirection
Textual Convention: AclTrafficDirection Enumeration
Type Values:
1ingress
2egress
 .1.3.6.1.4.1.1271.2.1.35.1.1.4.1.4

cienaCesAclProfileGlobalRuleStatsTable

table
.1.3.6.1.4.1.1271.2.1.35.1.2.1 · 1 row entry · 2 columns
Open in standard view 
A table of global ACL profile rule statistics. Global ACL profile rule statistics
are the aggregate counts of the hit statistics for all instances of the ACL profile's rules.
cienaCesAclProfileGlobalRuleStatsTableEntry entry .1.3.6.1.4.1.1271.2.1.35.1.2.1.1
An entry containing the ACL profile global rule hit statistics.
Indexes
No indexes recorded
Column Syntax OID
cienaCesAclGlobalRuleStatsPacketCount
The number of packets that matched this ACL rule.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.1271.2.1.35.1.2.1.1.1
cienaCesAclGlobalRuleStatsByteCount
The number of bytes that matched this ACL rule.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.1271.2.1.35.1.2.1.1.2

cienaCesAclProfileRuleInstanceStatsTable

table
.1.3.6.1.4.1.1271.2.1.35.1.2.2 · 1 row entry · 2 columns
Open in standard view 
A table of ACL profile rule instance statistics. These ACL rule hit statistics are
specific to the rules applied on the particular interface.
cienaCesAclProfileRuleInstanceStatsTableEntry entry .1.3.6.1.4.1.1271.2.1.35.1.2.2.1
An entry containing the ACL profile rule instance hit statistics.
Indexes
No indexes recorded
Column Syntax OID
cienaCesAclRuleInstanceStatsPacketCount
The number of packets that matched this ACL rule instance.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.1271.2.1.35.1.2.2.1.1
cienaCesAclRuleInstanceStatsByteCount
The number of bytes that matched this ACL rule instance.
SNMPv2-SMICounter64
Textual Convention: SNMPv2-SMICounter64 Unsigned64
Type Constraints:
range: 0..18446744073709551615
 .1.3.6.1.4.1.1271.2.1.35.1.2.2.1.2