mibs/MIBS/telco-systems/binos/PRVT-SWITCH-ACCESS-LIST-MIB
2023-12-05 12:25:34 +01:00

2530 lines
78 KiB
Plaintext
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

-- *********************************************************************
-- *********************************************************************
-- ** Filename: PRVT-SWITCH-ACCESS-LIST-MIB
-- ** Project: T - Ethernet and Fast Ethernet IP Switches.
-- ** Purpose: Private MIB
-- *********************************************************************
-- (c) Copyright, 2001, BATM Advanced Communications. All rights reserved.
-- WARNING:
--
-- BY UTILIZING THIS FILE, YOU AGREE TO THE FOLLOWING:
--
-- This file is the property of BATM Advanced Communications.
-- BATM Advanced Communications retains all title and
-- ownership in the Specification, including any revisions.
-- BATM Advanced Communications grants all interested parties a non-exclusive
-- license to use and distribute an unmodified copy of this
-- Specification in connection with management of BATM Advanced Communications
-- and Telco Systems products, and without fee, provided that the following
-- conditions are met:
-- 1. Redistributions of this specification must retain the above copyright
-- notice, this list of conditions and the following disclaimer.
-- 2. Redistributions in binary form must reproduce the above copyright
-- notice, this list of conditions and the following disclaimer in the
-- documentation and/or other materials provided with the distribution.
-- 3. The name of the BATM Advanced Communications MAY NOT be used to endorse
-- or promote products derived from this specification without specific prior written
-- permission.
--
-- EXCEPT AS RESTRICTED BY LAW, OR AS PROVIDED IN BATM'S LIMITED
-- WARRANTY, THE SPECIFICATIONS CONTAINED IN THIS FILE ARE
-- PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
-- OR IMPLIED, INCLUDING BUT NOT LIMITED TO, ANY IMPLIED WARRANTIES
-- OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
-- IN NO EVENT SHALL BATM BE LIABLE FOR ANY DAMAGES WHATSOEVER
-- INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS
-- PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION OR
-- OTHER CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE, OR INABILITY
-- TO USE, THE SPECIFICATION CONTAINED IN THIS FILE.
PRVT-SWITCH-ACCESS-LIST-MIB DEFINITIONS ::= BEGIN
IMPORTS
MODULE-IDENTITY, OBJECT-TYPE,IpAddress
FROM SNMPv2-SMI
RowStatus, DisplayString, TEXTUAL-CONVENTION, MacAddress, TruthValue
FROM SNMPv2-TC
ifIndex
FROM IF-MIB
dot1qVlanIndex, dot1qVlanStatus
FROM Q-BRIDGE-MIB
NOTIFICATION-TYPE
FROM SNMPv2-SMI
MODULE-COMPLIANCE, NOTIFICATION-GROUP,
OBJECT-GROUP
FROM SNMPv2-CONF
svcId,
sapPortId,
sapEncapValue,
sdpId
FROM PRVT-SERV-MIB
ipSwitch
FROM PRVT-SWITCH-MIB;
prvtSwitchAccessListMib MODULE-IDENTITY
LAST-UPDATED "201011160000Z"
ORGANIZATION "BATM Advanced Communication"
CONTACT-INFO
" BATM/Telco Systems Support team
Email:
For North America: techsupport@telco.com
For North Europe: support@batm.de, info@batm.de
For the rest of the world: techsupport@telco.com"
DESCRIPTION
"The access-list MIB module that controls L3 switches access-list parameters"
-- revision history
REVISION "201102070000Z"
DESCRIPTION
"Addeed accessListInterfaceRateStatistics object"
REVISION "201011160000Z"
DESCRIPTION
"Added accessListSapTable and accessListSapStatisticsTable"
REVISION "201011030000Z"
DESCRIPTION
"Added new OIDs standardAccessListDropLevel, extendedAccessListDropLevel, macAccessListDropLevel,
standardAccessListDscp, extendedAccessListDscp"
REVISION "200904170000Z"
DESCRIPTION
"Created AccessListRemarkString TC."
REVISION "200811200000Z"
DESCRIPTION
"Added objects for Egress Access Lists"
REVISION "200802140000Z"
DESCRIPTION
"Added Access List Interface Statistics"
REVISION "200801010000Z"
DESCRIPTION
"Removed redefined OIDs in private vendor extension definitions."
REVISION "200712050000Z"
DESCRIPTION
" "
REVISION "200603220000Z"
DESCRIPTION
"Added the tag filter object in the interface and VLAN access group tables and changed some
description with TMetro specific information."
REVISION "200510030000Z"
DESCRIPTION
"Switched the values of greater-than and less-than in PortDef textual convention."
REVISION "200509300000Z"
DESCRIPTION
"Changed the Rate textual convention to include the value of 0 (zero)."
REVISION "200502280000Z"
DESCRIPTION
"Added the span track objects in the interface tables."
REVISION "200502240000Z"
DESCRIPTION
"Added the source and destination range objects in the extended access list table."
REVISION "200502160000Z"
DESCRIPTION
"Fixed spelling errors and changed the contact info."
REVISION "200412150000Z"
DESCRIPTION
"1. accessListControlTable is now indexed only by accessListControlListGroup and the row
status creates whole groups.
2. Added standardAccessListIndex and extendedAccessListIndex as indices of standardAccessListTable
and extendedAccessListTable to replace accessGroupControlListIndex.
3. Added standardAccessListRowStatus and extendedAccessListRowStatus to enable creation of rules.
Rules, however, cannot be deleted using these objects.
4. Added support for enabling the loggin of ACLs (standardAccessListLog, extendedAccessListLog).
5. Added support for redirection traffic to a vlan and ip next hop
(accessListInterfaceRedirectVlanID,accessListVLANRedirectVlanID,accessListInterfaceRedirectNexthop,accessListVLANRedirectNexthop).
6. Added objects for configuring the Peak rate and peak burst when dual rate limit is used.
(accessListInterfacePeakRate, accessListInterfacePeakBurst, accessListVLANPeakRate,accessListVLANPeakBurst)
7. Added objects for toggling the traffic metering color awareness and remarking policy.
(accessListInterfaceColorAware, accessListVlanColorAware,accessListInterfacePolicy, accessListVlanPolicy)
"
REVISION "200310150000Z"
DESCRIPTION
"Global changes:
1. Added support for VLAN IP access-group.
2. Added support for redirecting traffic to an interface
(accessListInterfaceRedirectIfIndex,accessListVLANRedirectIfIndex).
3. Renamed accessListControlListGroupIndex to accessListInterfaceGroupIndex
4. Changes in AccessListAction, removed shaper.
5. Removed Burst TEXTUAL-CONVENTION.
Changes for E-Series
1. Introduced changes in PortDef,ExceedAction,AccessListDiscard TEXTUAL-CONVENTION for E-Series.
2. The objects extendedAccessListIgmpType and accessListInterfaceShaper are
not supported for E-Series.
3. Added accessListInterfaceBurst,accessListVLANBurst for E-Series.
4. The range of accessListInterfaceDscp is now 0..63 for E-Series."
REVISION "200305080000Z"
DESCRIPTION
"Moved to SMI-V2.
Removed extendedAccessListEstablished and
extendedAccessListMSS."
REVISION "200211120000Z"
DESCRIPTION
"Changed mapping of AccessListAction enum."
REVISION "200111050000Z"
DESCRIPTION
"Added shaper to access group."
REVISION "200109300000Z"
DESCRIPTION
"Added ICMP type,ICMP code and IGMP to extended access list."
REVISION "200108270000Z"
DESCRIPTION
"Added access group with rate limit."
REVISION "200107310000Z"
DESCRIPTION
"Added routed ISP."
REVISION "200105140000Z"
DESCRIPTION
"1. Added remark, MSS and Established to access list.
2. Added Priority and Discard to access group."
REVISION "200102200000Z"
DESCRIPTION
"Added the ability to modify TOS in extended access list."
REVISION "200102150000Z"
DESCRIPTION
"Added shaper mode for access list action."
REVISION "200101280000Z"
DESCRIPTION
"Added support for access group in ISP."
REVISION "200011130959Z"
DESCRIPTION
"Initial version."
::= { ipSwitch 1 }
AccessListAction ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The AccessListAction type represents action taken when this
access-list condition are asserted.
"
SYNTAX INTEGER
{
permit(0),
deny(1),
shaper(2),
remark(3),
undefined(100)
}
IpProtocol ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The IpProtocol type represents the protocol number in the IP datagram header"
SYNTAX INTEGER (0..255)
PortDef ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The PortDef type operates together with the port number filed inside
the access-list & control how the port number is being processed.
The values greater-than(3) and less-than(4) are supported only on
E-Series family boards"
SYNTAX INTEGER
{
equal(1),
range(2),
greater-than(3),
less-than(4),
undefined(0)
}
Rate ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The Rate type represents in Kbps the maximum rate limit for the flow"
SYNTAX INTEGER (0|13..1000000)
ExceedAction ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"the ExceedAction type represents the action that the switch should take
when one of the limits exceeded: drop -> drop the packets, markDiscardable
this packet is discardable if a conjection ocure
Only the E-Series family boards support the values green, yellow and red. Other
values are not supported by the E-Series"
SYNTAX INTEGER
{
drop(0),
markDiscardable(1),
undefined(2),
green(3),
yellow(4),
red(5)
}
VlanTag ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The VlanTag type represents if the VLAN is tagged or untagged."
SYNTAX INTEGER
{
untagged (0),
tagged (1),
undefined (2)
}
ISPType ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The ISPType type represents the ISP type - either connective or normal."
SYNTAX INTEGER
{
connectivity (0),
normal (1),
routed (2)
}
Shaper ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The Shaper type represents the status of the shaper"
SYNTAX INTEGER
{
disable (0),
enable (1)
}
ConformAction ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The action to perform if the condition is matched."
SYNTAX INTEGER
{
transmit (0)
}
AssigenValue ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Enables/disables assignment of an ISP user to this interface."
SYNTAX INTEGER
{
enable (1),
disable (2)
}
AccessListModifyTos ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"The AccessListModifyTos must be enabled if the user wants the ToS to be modified."
SYNTAX INTEGER
{
enable (1),
disable (0)
}
AccessListEstablished ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Match established connection (ACK or RST flages)"
SYNTAX INTEGER
{
enable (1),
disable (0)
}
AccessListDiscard ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Mark discardable or normal for priority on access group
Only the E-Series family and the G-Series family boards support the values green, yellow and red. Other
values are not supported by the E-Series and G-series."
SYNTAX INTEGER
{
normal(0),
discardable(1),
green(2),
yellow(3),
red(4),
undefined(5)
}
AccessListRemarkString ::= TEXTUAL-CONVENTION
DISPLAY-HINT "40a"
STATUS current
DESCRIPTION
"Access list entry comment string"
SYNTAX OCTET STRING (SIZE (0..40))
TxqDropLevel ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"TXQ drop level values"
SYNTAX INTEGER { undefined(0), green(1), yellow(2) }
MatchTraffic ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Match traffic values"
SYNTAX INTEGER {
undefined(0),
untagged(1),
unknown-unicast(2),
multicast(3),
broadcast(4),
known-unicast(5) }
AccessListStatistics ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Access list statistics values"
SYNTAX INTEGER
{
enable (1),
disable (0)
}
AccessListDirection ::= TEXTUAL-CONVENTION
STATUS current
DESCRIPTION
"Access list applied direction values"
SYNTAX INTEGER
{
ingress (0),
egress (1)
}
prvtSwitchAccessListNotifications OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 0 }
accessLists OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 1 }
isp OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 2 }
prvtSwitchAccessListConformance OBJECT IDENTIFIER ::= { prvtSwitchAccessListMib 3 }
accessListTemplate OBJECT-TYPE
SYNTAX INTEGER {
standard (1),
vlan-priority (2)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The access-list template in use. For non E-series devices, the device must be restarted
for this setting to take effect."
::= { accessLists 1 }
accessGroupsDefinitions OBJECT IDENTIFIER ::= { accessLists 2 }
accessListsInterfaces OBJECT IDENTIFIER ::= { accessLists 3 }
accessListsVLAN OBJECT IDENTIFIER ::= { accessLists 4 }
accessListsServices OBJECT IDENTIFIER ::= { accessLists 5 }
accessListsInterfaceStatistics OBJECT IDENTIFIER ::= { accessLists 6 }
accessListsServicesStatistics OBJECT IDENTIFIER ::= {accessLists 7}
accessListControlTable OBJECT-TYPE
SYNTAX SEQUENCE OF AccessListControlEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table controls the creation or removal of a access-list
group from all access-list tables. The real programming of values is
done in the coresponding access-list table."
::= { accessGroupsDefinitions 1 }
accessListControlEntry OBJECT-TYPE
SYNTAX AccessListControlEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the accessListControlTable table."
INDEX { accessListControlListGroup }
::= { accessListControlTable 1 }
AccessListControlEntry ::= SEQUENCE {
accessListControlListGroup INTEGER,
accessListControlRowStatus RowStatus
}
accessListControlListGroup OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"This object identifies the index of the group of access-list rules
Each range of group indexes is related to a different access-list type
1..99 for standard access-list
100..199 for extended access-list."
::= { accessListControlEntry 1 }
accessListControlRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This indicates the row status & enables creation & deletion of lines in
this table. See SNMPv2-TC for more information."
::= { accessListControlEntry 2 }
----------------------------------------------
standardAccessListTable OBJECT-TYPE
SYNTAX SEQUENCE OF StandardAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains standard access-list parameters."
::= { accessGroupsDefinitions 2 }
standardAccessListEntry OBJECT-TYPE
SYNTAX StandardAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the standardAccessListTable table."
INDEX { accessListControlListGroup, standardAccessListIndex }
::= { standardAccessListTable 1 }
StandardAccessListEntry ::= SEQUENCE {
standardAccessListIndex INTEGER,
standardAccessListAction AccessListAction,
standardAccessListIpSrc IpAddress,
standardAccessListIpMASKsrc IpAddress,
standardAccessListRemark AccessListRemarkString,
standardAccessListLog INTEGER,
standardAccessListVpt INTEGER,
standardAccessListRowStatus RowStatus,
standardAccessListVlanId INTEGER,
standardAccessListVlanMask DisplayString,
standardAccessListProviderVlanId INTEGER,
standardAccessListProviderVlanMask DisplayString,
standardAccessListProviderVpt INTEGER,
standardAccessListUntaggedMode TruthValue,
standardAccessListDropLevel INTEGER,
standardAccessListDscp INTEGER
}
standardAccessListIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Index of the particular rule of the group."
::= { standardAccessListEntry 1 }
standardAccessListAction OBJECT-TYPE
SYNTAX AccessListAction
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The action to preform if the condition of this access-list rule condition is true."
::= { standardAccessListEntry 2 }
standardAccessListIpSrc OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP source address associated with this flow."
::= { standardAccessListEntry 3 }
standardAccessListIpMASKsrc OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP mask that, together with standardAccessListIpSrc, defines the subnet."
::= { standardAccessListEntry 4 }
standardAccessListRemark OBJECT-TYPE
SYNTAX AccessListRemarkString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Access list entry comment"
::= { standardAccessListEntry 5 }
standardAccessListLog OBJECT-TYPE
SYNTAX INTEGER
{
undefined (0),
log (1),
log-input (2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Enable normal or extended logging of this access-list rule."
::= { standardAccessListEntry 6 }
standardAccessListVpt OBJECT-TYPE
SYNTAX INTEGER
{
vpt-value0(0),
vpt-value1(1),
vpt-value2(2),
vpt-value3(3),
vpt-value4(4),
vpt-value5(5),
vpt-value6(6),
vpt-value7(7),
undefined(8),
fc-be(241),
fc-l2(242),
fc-af(243),
fc-l1(244),
fc-h2(245),
fc-ef(246),
fc-h1(247),
fc-nc(248)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object is meaningful :
1.when vlan-priority template is used and will reprezent vlan priority tag.
2.Forwarding class reprezented in the second part of enumeration: fc-##.
A value of 8 means that neither of above is defined."
::= { standardAccessListEntry 7 }
standardAccessListRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status & enables creation of rows in
this table. In order to be consistent with ACL policy, this object
does not allow deletion of rules. The entire group must be deleted and all
rules removed at once."
::= { standardAccessListEntry 8 }
standardAccessListVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN. The object is meaningful only
if standardAccessListVlanMask is set."
::= { standardAccessListEntry 9 }
standardAccessListVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN mask. It is meaningful only
if standardAccessListVlanId is set.
The value is in hexadecimal type DisplayString (0xXXX)."
::= { standardAccessListEntry 10 }
standardAccessListProviderVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN. The object is meaningful only
if standardAccessListProviderVlanMask is set."
::= { standardAccessListEntry 11 }
standardAccessListProviderVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN mask. It is meaningful only
if standardAccessListProviderVlanId is set.
The value is in hexadecimal type DisplayString (0xXXX)"
::= { standardAccessListEntry 12}
standardAccessListProviderVpt OBJECT-TYPE
SYNTAX INTEGER (0..8)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN priority tag.
A value of 8 means undefined."
::= { standardAccessListEntry 13 }
standardAccessListUntaggedMode OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables the untagged mode"
::= { standardAccessListEntry 14 }
standardAccessListDropLevel OBJECT-TYPE
SYNTAX INTEGER
{
green(0),
yellow(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object define drop-level."
::= { standardAccessListEntry 15}
standardAccessListDscp OBJECT-TYPE
SYNTAX INTEGER (0..63)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object shows the DiffServ Point (DSCP) value from IP header."
::= {standardAccessListEntry 16}
extendedAccessListTable OBJECT-TYPE
SYNTAX SEQUENCE OF ExtendedAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains extended access-list parameters."
::= { accessGroupsDefinitions 3 }
extendedAccessListEntry OBJECT-TYPE
SYNTAX ExtendedAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the extendedAccessListTable table."
INDEX { accessListControlListGroup, extendedAccessListIndex }
::= { extendedAccessListTable 1 }
ExtendedAccessListEntry ::= SEQUENCE {
extendedAccessListIndex INTEGER,
extendedAccessListAction AccessListAction,
extendedAccessListIpProtocol IpProtocol,
extendedAccessListIpSrc IpAddress,
extendedAccessListIpMASKsrc IpAddress,
extendedAccessListPortDefSrc PortDef,
extendedAccessListPortNumSrc INTEGER,
extendedAccessListPortRangeSrc INTEGER,
extendedAccessListIpDest IpAddress,
extendedAccessListIpMASKdst IpAddress,
extendedAccessListPortDefDst PortDef,
extendedAccessListPortNumDst INTEGER,
extendedAccessListPortRangeDst INTEGER,
extendedAccessListTos INTEGER,
extendedAccessListPrec INTEGER,
extendedAccessListModifyTos AccessListModifyTos,
extendedAccessListRemark AccessListRemarkString,
extendedAccessListIcmpType INTEGER,
extendedAccessListIcmpCode INTEGER,
extendedAccessListIgmpType INTEGER,
extendedAccessListEstablished AccessListEstablished,
extendedAccessListLog INTEGER,
extendedAccessListVpt INTEGER,
extendedAccessListRowStatus RowStatus,
extendedAccessListVlanId INTEGER,
extendedAccessListVlanMask DisplayString,
extendedAccessListProviderVlanId INTEGER,
extendedAccessListProviderVlanMask DisplayString,
extendedAccessListProviderVpt INTEGER,
extendedAccessListUntaggedMode TruthValue,
extendedAccessListDropLevel INTEGER,
extendedAccessListDscp INTEGER
}
extendedAccessListIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Index of the particular rule of the group."
::= { extendedAccessListEntry 1 }
extendedAccessListAction OBJECT-TYPE
SYNTAX AccessListAction
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The action to preform if this access-list rule condition is true."
::= { extendedAccessListEntry 2 }
extendedAccessListIpProtocol OBJECT-TYPE
SYNTAX IpProtocol
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP protocol number (see IpProtocol)."
::= { extendedAccessListEntry 3 }
extendedAccessListIpSrc OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP source address associated with this flow."
::= { extendedAccessListEntry 4 }
extendedAccessListIpMASKsrc OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP mask, together with extendendAccessListIpSrc, defines the subnet."
::= { extendedAccessListEntry 5 }
extendedAccessListPortDefSrc OBJECT-TYPE
SYNTAX PortDef
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The extendedAccessListPortDefSrc object operates together with the port number filed inside
the access-list & controls how the port number is being processed.
The values less-than(3) and greater-than(4) are supported only on E-Series family boards."
::= { extendedAccessListEntry 6 }
extendedAccessListPortNumSrc OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"UDP/TCP port number. A value of 0 represents undefined port number."
::= { extendedAccessListEntry 7 }
extendedAccessListPortRangeSrc OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"UDP/TCP ned range port number. A value of 0 represents undefined port number. Valid
only with extendedAccessListPortDefSrc value of range(2)."
::= { extendedAccessListEntry 8 }
extendedAccessListIpDest OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP destination address associated with this flow."
::= { extendedAccessListEntry 9 }
extendedAccessListIpMASKdst OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP mask, together with extendedAccessListIpMASKdst, defines the subnet."
::= { extendedAccessListEntry 10 }
extendedAccessListPortDefDst OBJECT-TYPE
SYNTAX PortDef
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The extendedAccessListPortDefDst object operates together with the port number filed inside
the access-list & controls how the port number is being processed.
The values less-than(3) and greater-than(4) are supported only on E-Series family boards."
::= { extendedAccessListEntry 11 }
extendedAccessListPortNumDst OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"UDP/TCP port number. A value of 0 represents undefined port number."
::= { extendedAccessListEntry 12 }
extendedAccessListPortRangeDst OBJECT-TYPE
SYNTAX INTEGER (0..65535)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"UDP/TCP ned range port number. A value of 0 represents undefined port number. Valid for
value range (2) of extendedAccessListPortDefDst."
::= { extendedAccessListEntry 13 }
extendedAccessListTos OBJECT-TYPE
SYNTAX INTEGER (0..15)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the type of service value."
::= { extendedAccessListEntry 14 }
extendedAccessListPrec OBJECT-TYPE
SYNTAX INTEGER (0..7)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Precedence value."
::= { extendedAccessListEntry 15 }
extendedAccessListModifyTos OBJECT-TYPE
SYNTAX AccessListModifyTos
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"extendedAccessListModifyTos must be enabled if the user wants the ToS to be modified."
::= { extendedAccessListEntry 16 }
extendedAccessListRemark OBJECT-TYPE
SYNTAX AccessListRemarkString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Access list entry comment."
::= { extendedAccessListEntry 17 }
extendedAccessListIcmpType OBJECT-TYPE
SYNTAX INTEGER (0..255)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"ICMP message type."
::= { extendedAccessListEntry 18 }
extendedAccessListIcmpCode OBJECT-TYPE
SYNTAX INTEGER (0..255)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"ICMP message code."
::= { extendedAccessListEntry 19 }
extendedAccessListIgmpType OBJECT-TYPE
SYNTAX INTEGER (0..15)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"IGMP message type. This object is not supported in E-Series"
::= { extendedAccessListEntry 20 }
extendedAccessListEstablished OBJECT-TYPE
SYNTAX AccessListEstablished
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"When TCP protocol type is chosen, setting this object indicates that established connections will be matched."
::= { extendedAccessListEntry 21 }
extendedAccessListLog OBJECT-TYPE
SYNTAX INTEGER
{
undefined (0),
log (1),
log-input (2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Enable normal or extended logging of this access-list rule."
::= { extendedAccessListEntry 22 }
extendedAccessListVpt OBJECT-TYPE
SYNTAX INTEGER
{
vpt-value0(0),
vpt-value1(1),
vpt-value2(2),
vpt-value3(3),
vpt-value4(4),
vpt-value5(5),
vpt-value6(6),
vpt-value7(7),
undefined(8),
fc-be(241),
fc-l2(242),
fc-af(243),
fc-l1(244),
fc-h2(245),
fc-ef(246),
fc-h1(247),
fc-nc(248)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object is meaningful :
1.when vlan-priority template is used and will reprezent vlan priority tag.
2.Forwarding class reprezented in the second part of enumeration: fc-##.
A value of 8 means that neither of above is defined."
::= { extendedAccessListEntry 23 }
extendedAccessListRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status & enables creation of lines in
this table. In order to be consistent with ACL policy, this object
does not allow deletion of rules. The entire group must be deleted and all
rules removed at once."
::= { extendedAccessListEntry 24 }
extendedAccessListVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN. The object is meaningful
only if extendedAccessListVlanMask is set."
::= { extendedAccessListEntry 25 }
extendedAccessListVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN mask. It is meaningful only
if extendedAccessListVlanId is set.
The value is in hexadecimal type string(0x..)."
::= { extendedAccessListEntry 26 }
extendedAccessListProviderVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN. The object is meaningful only
if extendedAccessListProviderVlanMask is set."
::= { extendedAccessListEntry 27 }
extendedAccessListProviderVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN mask. It is meaningful only
if extendedAccessListProviderVlanId is set.
The value is in hexadecimal type string(0x..)."
::= { extendedAccessListEntry 28 }
extendedAccessListProviderVpt OBJECT-TYPE
SYNTAX INTEGER (0..8)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN priority tag.
A value of 8 means undefined.
This object is meaningful only if vlan-priority template is used."
::= { extendedAccessListEntry 29 }
extendedAccessListUntaggedMode OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables the untagged mode."
::= { extendedAccessListEntry 30 }
extendedAccessListDropLevel OBJECT-TYPE
SYNTAX INTEGER
{
green(0),
yellow(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object define drop-level."
::= { extendedAccessListEntry 31}
extendedAccessListDscp OBJECT-TYPE
SYNTAX INTEGER (0..63)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object shows the DiffServ Point (DSCP) value from IP header."
::= {extendedAccessListEntry 32}
--MAC ACL----------------------------------------------------------------
macAccessListTable OBJECT-TYPE
SYNTAX SEQUENCE OF MACAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains MAC access-list parameters."
::= { accessGroupsDefinitions 4 }
macAccessListEntry OBJECT-TYPE
SYNTAX MACAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the macAccessListTable table."
INDEX { accessListControlListGroup, macAccessListIndex }
::= { macAccessListTable 1 }
MACAccessListEntry ::= SEQUENCE {
macAccessListIndex INTEGER,
macAccessListAction AccessListAction,
macAccessListMacSrc MacAddress,
macAccessListMacSrcMask MacAddress,
macAccessListMacDst MacAddress,
macAccessListMacDstMask MacAddress,
macAccessListRemark AccessListRemarkString,
macAccessListLog INTEGER,
macAccessListRowStatus RowStatus,
macAccessListTos INTEGER,
macAccessListPrecedence INTEGER,
macAccessListVpt INTEGER,
macAccessListVlanId INTEGER,
macAccessListVlanMask DisplayString,
macAccessListInnerVlanId INTEGER,
macAccessListInnerVlanMask DisplayString,
macAccessListInnerVpt INTEGER,
macAccessListEtherType DisplayString,
macAccessListDscp INTEGER,
macAccessListMatchTraffic MatchTraffic,
macAccessListMatchTrafficPort DisplayString,
macAccessListUntaggedMode TruthValue,
macAccessListDropLevel INTEGER
}
macAccessListIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Index of the particular rule of the group."
::= { macAccessListEntry 1 }
macAccessListAction OBJECT-TYPE
SYNTAX AccessListAction
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The action to preform if this access-list rule condition is true."
::= { macAccessListEntry 2 }
macAccessListMacSrc OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object contains the MAC address of source.
If this object is not set, the result is 'any' source mac address.
If object macAccessListMacSrcMask is not set, this object means the host address."
::= { macAccessListEntry 3 }
macAccessListMacSrcMask OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object contains the mask for MAC source address.
The object affects macAccessListMacSrc, defines host or range."
::= { macAccessListEntry 4 }
macAccessListMacDst OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object contains the MAC address of destination.
If this object is not set, the result is 'any' destination mac address.
If object macAccessListMacDstMask is not set, this object means the host address."
::= { macAccessListEntry 5 }
macAccessListMacDstMask OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object contains the mask for MAC destination address.
The object affects macAccessListMacDst, defines host or range."
::= { macAccessListEntry 6 }
macAccessListRemark OBJECT-TYPE
SYNTAX AccessListRemarkString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Access list entry comment"
::= { macAccessListEntry 7 }
macAccessListLog OBJECT-TYPE
SYNTAX INTEGER
{
undefined (0),
log (1),
log-input (2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Enable normal or extended logging of this access-list rule."
::= { macAccessListEntry 8 }
macAccessListRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status & enables creation of rows in
this table. In order to be consistent with ACL policy, this object
does not allow deletion of rules. The entire group must be deleted and all
rules removed at once."
::= { macAccessListEntry 9 }
macAccessListTos OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the type of service value."
::= { macAccessListEntry 10}
macAccessListPrecedence OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the precedence value.
The parameter is matched for IP traffic only.
The value is in the range between <0-8>.
When precendence is disable the object will take 8 value."
::= { macAccessListEntry 11 }
macAccessListVpt OBJECT-TYPE
SYNTAX INTEGER
{
vpt-value0(0),
vpt-value1(1),
vpt-value2(2),
vpt-value3(3),
vpt-value4(4),
vpt-value5(5),
vpt-value6(6),
vpt-value7(7),
undefined(8),
fc-be(241),
fc-l2(242),
fc-af(243),
fc-l1(244),
fc-h2(245),
fc-ef(246),
fc-h1(247),
fc-nc(248)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object is meaningful :
1.when vlan-priority template is used and will reprezent vlan priority tag.
2.Forwarding class reprezented in the second part of enumeration: fc-##.
A value of 8 means that neither of above is defined."
::= { macAccessListEntry 12 }
macAccessListVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN. The object is meaningful only
if macAccessListVlanMask is set."
::= { macAccessListEntry 13 }
macAccessListVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN mask. It is meaningful only
if macAccessListVlanId is set.
The value is in hexadecimal type string(0x..)."
::= { macAccessListEntry 14 }
macAccessListInnerVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN. The object is meaningful only
if macAccessListProviderVlanMask is set."
::= { macAccessListEntry 15 }
macAccessListInnerVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN mask. It is meaningful only
if macAccessListProviderVlanId is set.
The value is in hexadecimal type string(0x..). "
::= { macAccessListEntry 16 }
macAccessListInnerVpt OBJECT-TYPE
SYNTAX INTEGER (0..8)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN priority tag.
A value of 8 means undefined"
::= { macAccessListEntry 17 }
macAccessListEtherType OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object shows the EtherType field in the Ethernet header.
The field is matched only for non-IP and non-ARP traffic only."
::= { macAccessListEntry 18 }
macAccessListDscp OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The object shows the DiffServ Point (DSCP) value from IP header."
::= { macAccessListEntry 19 }
macAccessListMatchTraffic OBJECT-TYPE
SYNTAX MatchTraffic
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the type of traffic to match."
::= { macAccessListEntry 20 }
macAccessListMatchTrafficPort OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object is meaningful only if macAccessListMatchTraffic
is set to 'known-unicast' value - else returns error.
The values are of types PORTLIST (for example 1/1/1-1/1/4,1/1/6)"
::= { macAccessListEntry 21 }
macAccessListUntaggedMode OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables the untagged mode."
::= { macAccessListEntry 22 }
macAccessListDropLevel OBJECT-TYPE
SYNTAX INTEGER
{
green(0),
yellow(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object define drop-level."
::= { macAccessListEntry 23}
--Ethertype ACL---------------------------------
etherTypeAccessListTable OBJECT-TYPE
SYNTAX SEQUENCE OF EtherTypeAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table contains extended MAC access-list parameters."
::= { accessGroupsDefinitions 5 }
etherTypeAccessListEntry OBJECT-TYPE
SYNTAX EtherTypeAccessListEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the etherTypeAccessListTable table."
INDEX { accessListControlListGroup, etherTypeAccessListIndex }
::= { etherTypeAccessListTable 1 }
EtherTypeAccessListEntry ::= SEQUENCE {
etherTypeAccessListIndex INTEGER,
etherTypeAccessListAction AccessListAction,
etherTypeAccessListEtherType DisplayString,
etherTypeAccessListEtherTypeCodeMask DisplayString,
etherTypeAccessListRemark AccessListRemarkString,
etherTypeAccessListLog INTEGER,
etherTypeAccessListRowStatus RowStatus,
etherTypeAccessListVlanId INTEGER,
etherTypeAccessListVlanMask DisplayString,
etherTypeAccessListProviderVlanId INTEGER,
etherTypeAccessListProviderVlanMask DisplayString,
etherTypeAccessListProviderVpt INTEGER
}
etherTypeAccessListIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"Index of the particular rule of the group."
::= { etherTypeAccessListEntry 1 }
etherTypeAccessListAction OBJECT-TYPE
SYNTAX AccessListAction
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The action to preform if this access-list rule condition is true."
::= { etherTypeAccessListEntry 2 }
etherTypeAccessListEtherType OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP protocol number (see IpProtocol)."
::= { etherTypeAccessListEntry 3 }
etherTypeAccessListEtherTypeCodeMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The IP source address associated with this flow."
::= { etherTypeAccessListEntry 4 }
etherTypeAccessListRemark OBJECT-TYPE
SYNTAX AccessListRemarkString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Access list entry comment"
::= { etherTypeAccessListEntry 5 }
etherTypeAccessListLog OBJECT-TYPE
SYNTAX INTEGER
{
undefined (0),
log (1),
log-input (2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Enable normal or extended logging of this access-list rule."
::= { etherTypeAccessListEntry 6 }
etherTypeAccessListRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status & enables creation of rows in
this table. In order to be consistent with ACL policy, this object
does not allow deletion of rules. The entire group must be deleted and all
rules removed at once."
::= { etherTypeAccessListEntry 7 }
etherTypeAccessListVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN.The object is meaningful only
if etherTypeAccessListVlanMask is set."
::= { etherTypeAccessListEntry 8 }
etherTypeAccessListVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the customer VLAN mask. It is meaningful only
if etherTypeAccessListVlanId is set."
::= { etherTypeAccessListEntry 9 }
etherTypeAccessListProviderVlanId OBJECT-TYPE
SYNTAX INTEGER (0..4092)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN. The object is meaningful only
if etherTypeAccessListProviderVlanMask is set."
::= { etherTypeAccessListEntry 10 }
etherTypeAccessListProviderVlanMask OBJECT-TYPE
SYNTAX DisplayString
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the provider VLAN mask. It is meaningful only
if etherTypeAccessListProviderVlanId is set.
The value is in hexadecimal type string (0x..). "
::= { etherTypeAccessListEntry 11 }
etherTypeAccessListProviderVpt OBJECT-TYPE
SYNTAX INTEGER (0..8)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The vlan priority tag. A value of 8 means undefined. This object is meaningful
only if vlan-priority template is used."
::= { etherTypeAccessListEntry 12 }
-----------------------------------------------
accessListInterfaceTable OBJECT-TYPE
SYNTAX SEQUENCE OF AccessListInterfaceEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table controls the assigment of access groups to an interface."
::= { accessListsInterfaces 1 }
accessListInterfaceEntry OBJECT-TYPE
SYNTAX AccessListInterfaceEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the AccessListInterfaceEntry table."
INDEX { ifIndex, accessListInterfaceTableIndex, accessListInterfaceGroupIndex }
::= { accessListInterfaceTable 1 }
AccessListInterfaceEntry ::= SEQUENCE {
accessListInterfaceTableIndex INTEGER,
accessListInterfaceGroupIndex INTEGER,
accessListInterfaceDscp INTEGER,
accessListInterfaceRowStatus RowStatus,
accessListInterfacePriority INTEGER,
accessListInterfaceDiscard AccessListDiscard,
accessListInterfaceRateLimit Rate,
accessListInterfaceExceedAction ExceedAction,
accessListInterfaceShaper Shaper,
accessListInterfaceBurst Rate,
accessListInterfaceRedirectIfIndex INTEGER,
accessListInterfaceRedirectVlanID INTEGER,
accessListInterfaceRedirectNexthop IpAddress,
accessListInterfacePeakRate Rate,
accessListInterfacePeakBurst Rate,
accessListInterfaceColorAware INTEGER,
accessListInterfacePolicy INTEGER,
accessListInterfaceTrafficClass INTEGER,
accessListInterfaceSpanRootTrack INTEGER,
accessListInterfaceUntagFilter INTEGER,
accessListInterfaceTxq INTEGER,
accessListInterfaceTxqDropLevel TxqDropLevel,
accessListInterfaceApplyMirror TruthValue,
accessListInterfaceStatistics AccessListStatistics,
accessListInterfaceDirection AccessListDirection,
accessListInterfaceRateStatistics AccessListStatistics
}
accessListInterfaceTableIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object identifies the row number for this (ifIndex) interface."
::= { accessListInterfaceEntry 1 }
accessListInterfaceGroupIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This indicates the index of the access group for this interface. This value is
the same as the value of accessListControlListGroup for the assigned ACL."
::= { accessListInterfaceEntry 2 }
accessListInterfaceDscp OBJECT-TYPE
SYNTAX INTEGER
{
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Enable Diffserv codepoint."
::= { accessListInterfaceEntry 3}
accessListInterfaceRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status & enables creation & deletion of lines in
this (and related) tables. See SNMPv2-TC for more information."
::= { accessListInterfaceEntry 4 }
accessListInterfacePriority OBJECT-TYPE
SYNTAX INTEGER (0..8)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Priority level value. Valid values are 0 to 7, 8 means undefined."
::= { accessListInterfaceEntry 5 }
accessListInterfaceDiscard OBJECT-TYPE
SYNTAX AccessListDiscard
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Mark discardable or normal for priority on access group
Only the E-Series family and the G-Series family boards
support the values green, yellow and red. Other
values are not supported by the E-Series and G-series."
::= { accessListInterfaceEntry 6 }
accessListInterfaceRateLimit OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum rate in kBps(kilobytes per second)"
::= { accessListInterfaceEntry 7 }
accessListInterfaceExceedAction OBJECT-TYPE
SYNTAX ExceedAction
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The action to perform when the condition is true."
::= { accessListInterfaceEntry 8 }
accessListInterfaceShaper OBJECT-TYPE
SYNTAX Shaper
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Enable/disable shaper.
This object is supported only in B-series."
::= { accessListInterfaceEntry 9 }
accessListInterfaceBurst OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum Burst rate in kBps(kilobytes per second).
This object is supported only by E-Series and G-series."
::= { accessListInterfaceEntry 10 }
accessListInterfaceRedirectIfIndex OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object controls redirection of traffic matching this ACG. If the
value is a valid ifIndex, the traffic will be redirected to it. If the value is 0
redirection is disabled. Setting this object requires that accessListInterfaceRedirectVlanID is also set."
::= { accessListInterfaceEntry 11 }
accessListInterfaceRedirectVlanID OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object controls redirection of traffic matching this ACG. If the
value is a valid VLAN ID, the traffic will be redirected to it. If the value is 0
redirection is disabled. If the device is TMetro, this object sets the tag substitution
policy for this access group"
::= { accessListInterfaceEntry 12 }
accessListInterfaceRedirectNexthop OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object controls redirection of traffic matching this ACG. If the
value is a valid IP address then the traffic will be redirected to it. If the value is 0
redirection is disabled."
::= { accessListInterfaceEntry 13 }
accessListInterfacePeakRate OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Peak Information Rate in kBps(kilobytes per second)."
::= { accessListInterfaceEntry 14 }
accessListInterfacePeakBurst OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Peak Burst Size in kBps(kilobytes per second)."
::= { accessListInterfaceEntry 15 }
accessListInterfaceColorAware OBJECT-TYPE
SYNTAX INTEGER {
disable (0),
enable (1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Toggle Color aware traffic metering. Disabled by default."
::= { accessListInterfaceEntry 16 }
accessListInterfacePolicy OBJECT-TYPE
SYNTAX INTEGER {
undefined (0),
dcsp (1),
priority (2),
priority-dp (3)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Set remarking policy."
::= { accessListInterfaceEntry 17 }
accessListInterfaceTrafficClass OBJECT-TYPE
SYNTAX INTEGER (0..256)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Diff Serv CP - Type of Service
In E-Series and G-series the range is 0..63. A value of 256 means Traffic Class is not set."
::= { accessListInterfaceEntry 18 }
accessListInterfaceSpanRootTrack OBJECT-TYPE
SYNTAX INTEGER
{
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The span root track option for VLAN redirects."
::= { accessListInterfaceEntry 19 }
accessListInterfaceUntagFilter OBJECT-TYPE
SYNTAX INTEGER
{
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The filter for tagged or untagged backets to be applied."
::= { accessListInterfaceEntry 20 }
accessListInterfaceTxq OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object performs QoS and remarking of traffic matching an ACG"
::= { accessListInterfaceEntry 21 }
accessListInterfaceTxqDropLevel OBJECT-TYPE
SYNTAX TxqDropLevel
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the drop-level (green/yellow)
and is related to accessListInterfaceTxq."
::= { accessListInterfaceEntry 22 }
accessListInterfaceApplyMirror OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows that the traffic on the interface will be mirrored"
::= { accessListInterfaceEntry 23 }
accessListInterfaceStatistics OBJECT-TYPE
SYNTAX AccessListStatistics
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables statistics on the interface."
::= { accessListInterfaceEntry 24 }
accessListInterfaceDirection OBJECT-TYPE
SYNTAX AccessListDirection
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object determines the ingress-egress type of applied ACL."
::= { accessListInterfaceEntry 25 }
accessListInterfaceRateStatistics OBJECT-TYPE
SYNTAX AccessListStatistics
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables rate statistics on the interface."
::= { accessListInterfaceEntry 26 }
-----------------------------------------------
accessListVLANTable OBJECT-TYPE
SYNTAX SEQUENCE OF AccessListVLANEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table controls the assignment of access groups to a VLAN."
::= { accessListsVLAN 1 }
accessListVLANEntry OBJECT-TYPE
SYNTAX AccessListVLANEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the AccessListVLANEntry table."
INDEX { dot1qVlanIndex, accessListVLANTableIndex, accessListVLANGroupIndex}
::= { accessListVLANTable 1 }
AccessListVLANEntry ::= SEQUENCE {
accessListVLANTableIndex INTEGER,
accessListVLANGroupIndex INTEGER,
accessListVLANDscp INTEGER,
accessListVLANRowStatus RowStatus,
accessListVLANPriority INTEGER,
accessListVLANDiscard AccessListDiscard,
accessListVLANRateLimit Rate,
accessListVLANExceedAction ExceedAction,
accessListVLANBurst Rate,
accessListVLANRedirectIfIndex INTEGER,
accessListVLANRedirectVlanID INTEGER,
accessListVLANRedirectNexthop IpAddress,
accessListVLANPeakRate Rate,
accessListVLANPeakBurst Rate,
accessListVLANColorAware INTEGER,
accessListVLANPolicy INTEGER,
accessListVLANTrafficClass INTEGER,
accessListVLANSpanRootTrack INTEGER,
accessListVLANUntagFilter INTEGER,
accessListVLANApplyMirror TruthValue,
accessListVLANStatistics AccessListStatistics,
accessListVLANDirection AccessListDirection
}
accessListVLANTableIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object identifies the order in which the access group was applied on this VLAN."
::= { accessListVLANEntry 1 }
accessListVLANGroupIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This indicates the index of the access group for this VLAN. This value is
the same as the value of accessListControlListGroup for the assigned ACL."
::= { accessListVLANEntry 2 }
accessListVLANDscp OBJECT-TYPE
SYNTAX INTEGER
{
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Enable Diffserv codepoint."
::= { accessListVLANEntry 3}
accessListVLANRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status & enables creation & delettion of rows in
this and related tables. See SNMPv2-TC for more information."
::= { accessListVLANEntry 4 }
accessListVLANPriority OBJECT-TYPE
SYNTAX INTEGER (0..8)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Priority level value. Valid values are 0 to 7, 8 means undefined."
::= { accessListVLANEntry 5 }
accessListVLANDiscard OBJECT-TYPE
SYNTAX AccessListDiscard
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Mark discardable or normal for priority on access group
Only the E-Series family and the G-Series family boards
support the values green, yellow and red. Other
values are not supported by the E-Series and G-series."
::= { accessListVLANEntry 6 }
accessListVLANRateLimit OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum rate in kBps(kilobytes per second)."
::= { accessListVLANEntry 7 }
accessListVLANExceedAction OBJECT-TYPE
SYNTAX ExceedAction
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The action to perform when the condition is true."
::= { accessListVLANEntry 8 }
accessListVLANBurst OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum Burst rate in kBps(kilobytes per second).
This object is supported only by E-Series and G-series."
::= { accessListVLANEntry 9 }
accessListVLANRedirectIfIndex OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object controls redirection of traffic matching this ACG. If the
value is a valid ifIndex, the traffic will be redirected to it. If the value is 0
redirection is disabled. Setting this object requires that accessListInterfaceRedirectVlanID is also set."
::= { accessListVLANEntry 10 }
accessListVLANRedirectVlanID OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"his object controls redirection of traffic matching this ACG. If the
value is a valid VLAN ID, the traffic will be redirected to it. If the value is 0
redirection is disabled. If the device is TMetro, this object sets the tag substitution
policy for this access group"
::= { accessListVLANEntry 11 }
accessListVLANRedirectNexthop OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object controls redirection of traffic matching this ACG. If the
value is a valid IP address then the traffic will be redirected to it. If the value is 0
redirection is disabled."
::= { accessListVLANEntry 12 }
accessListVLANPeakRate OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Peak Information Rate in kBps(kilobytes per second)."
::= { accessListVLANEntry 13 }
accessListVLANPeakBurst OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Peak Burst Size in kBps(kilobytes per second)."
::= { accessListVLANEntry 14 }
accessListVLANColorAware OBJECT-TYPE
SYNTAX INTEGER {
disable (0),
enable (1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Toggle Color aware traffic metering.Disabled by default."
::= { accessListVLANEntry 15 }
accessListVLANPolicy OBJECT-TYPE
SYNTAX INTEGER {
undefined (0),
dcsp (1),
priority (2),
priority-dp (3)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Set remarking policy."
::= { accessListVLANEntry 16 }
accessListVLANTrafficClass OBJECT-TYPE
SYNTAX INTEGER (0..256)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Diff Serv CP - Type of Service
In E-Series and G-series the range is 0..63. A value of 256 means that Traffic Class is not set."
::= { accessListVLANEntry 17 }
accessListVLANSpanRootTrack OBJECT-TYPE
SYNTAX INTEGER
{
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The span root track option for VLAN redirects."
::= { accessListVLANEntry 18 }
accessListVLANUntagFilter OBJECT-TYPE
SYNTAX INTEGER
{
disable(0),
enable(1)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The filter for tagged or untagged backets to be applied"
::= { accessListVLANEntry 19 }
accessListVLANApplyMirror OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows that the traffic on the interface will be mirrored."
::= { accessListVLANEntry 20 }
accessListVLANStatistics OBJECT-TYPE
SYNTAX AccessListStatistics
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables statistics on the interface."
::= { accessListVLANEntry 21 }
accessListVLANDirection OBJECT-TYPE
SYNTAX AccessListDirection
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object determines the ingress-egress type of applied ACL."
::= { accessListVLANEntry 22 }
----------------------------------------------------------------------------------
accessListSapTable OBJECT-TYPE
SYNTAX SEQUENCE OF AccessListSapEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table controls the assigment of access groups to a SAP."
::= { accessListsServices 1 }
accessListSapEntry OBJECT-TYPE
SYNTAX AccessListSapEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the AccessListSapEntry table."
INDEX { svcId, sapPortId, sapEncapValue , accessListSapTableIndex, accessListSapGroupIndex }
::= { accessListSapTable 1 }
AccessListSapEntry ::= SEQUENCE {
accessListSapTableIndex INTEGER,
accessListSapGroupIndex INTEGER,
accessListSapRowStatus RowStatus,
accessListSapRateLimit Rate,
accessListSapExceedAction ExceedAction,
accessListSapBurst Rate,
accessListSapPeakRate Rate,
accessListSapPeakBurst Rate,
accessListSapColorAware INTEGER,
accessListSapTxq INTEGER,
accessListSapTxqDropLevel TxqDropLevel,
accessListSapStatistics AccessListStatistics,
accessListSapRateStatistics AccessListStatistics,
accessListSapDirection AccessListDirection
}
accessListSapTableIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This object identifies the row number for this (ifIndex) interface."
::= { accessListSapEntry 1 }
accessListSapGroupIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This indicates the index of the access group for this interface. This value is
the same as the value of accessListControlListGroup for the assigned ACL."
::= { accessListSapEntry 2 }
accessListSapRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status & enables creation & deletion of lines in
this (and related) tables. See SNMPv2-TC for more information."
::= { accessListSapEntry 3 }
accessListSapRateLimit OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum rate in kBps(kilobytes per second)"
::= { accessListSapEntry 4 }
accessListSapExceedAction OBJECT-TYPE
SYNTAX ExceedAction
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The action to perform when the condition is true."
::= { accessListSapEntry 5 }
accessListSapBurst OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum Burst rate in kBps(kilobytes per second).
This object is supported only by E-Series and G-series."
::= { accessListSapEntry 6 }
accessListSapPeakRate OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Peak Information Rate in kBps(kilobytes per second)."
::= { accessListSapEntry 7 }
accessListSapPeakBurst OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Peak Burst Size in kBps(kilobytes per second)."
::= { accessListSapEntry 8 }
accessListSapColorAware OBJECT-TYPE
SYNTAX INTEGER {
disable (0),
enable (1)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Toggle Color aware traffic metering. Disabled by default."
::= { accessListSapEntry 9 }
accessListSapTxq OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object performs QoS and remarking of traffic matching an ACG"
::= { accessListSapEntry 10 }
accessListSapTxqDropLevel OBJECT-TYPE
SYNTAX TxqDropLevel
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object shows the drop-level (green/yellow)
and is related to accessListInterfaceTxq."
::= { accessListSapEntry 11 }
accessListSapStatistics OBJECT-TYPE
SYNTAX AccessListStatistics
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables statistics on the SAP."
::= { accessListSapEntry 12 }
accessListSapRateStatistics OBJECT-TYPE
SYNTAX AccessListStatistics
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object enables rate statistics on the SAP."
::= { accessListSapEntry 13 }
accessListSapDirection OBJECT-TYPE
SYNTAX AccessListDirection
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"This object determines the ingress-egress type of applied ACL."
::= { accessListSapEntry 14 }
--------------------------------------------------------------
accessListInterfaceStatisticsTable OBJECT-TYPE
SYNTAX SEQUENCE OF AccessListInterfaceStatisticsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table serves the interface statistics."
::= { accessListsInterfaceStatistics 1 }
accessListInterfaceStatisticsEntry OBJECT-TYPE
SYNTAX AccessListInterfaceStatisticsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the accessListInterfaceStatisticsTable table."
INDEX { ifIndex, accessListInterfaceStatisticsGroupIndex }
::= { accessListInterfaceStatisticsTable 1 }
AccessListInterfaceStatisticsEntry ::= SEQUENCE {
accessListInterfaceStatisticsGroupIndex INTEGER,
accessListInterfaceGreenBytes INTEGER,
accessListInterfaceYellowBytes INTEGER,
accessListInterfaceRedBytes INTEGER,
accessListInterfaceClassifiedPackets INTEGER
}
accessListInterfaceStatisticsGroupIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This indicates the index of the access group for this interface. This value is
the same as the value of accessListControlListGroup for the assigned ACL."
::= { accessListInterfaceStatisticsEntry 1 }
accessListInterfaceGreenBytes OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows green traffic in bytes for access group with enabled rate-limit statistics."
::= { accessListInterfaceStatisticsEntry 2 }
accessListInterfaceYellowBytes OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows yellow traffic in bytes for access group with enabled rate-limit statistics."
::= { accessListInterfaceStatisticsEntry 3 }
accessListInterfaceRedBytes OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows red traffic in bytes for access group with enabled rate-limit statistics."
::= { accessListInterfaceStatisticsEntry 4 }
accessListInterfaceClassifiedPackets OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows match classified packets in bytes for access group with enabled statistics."
::= { accessListInterfaceStatisticsEntry 5 }
-----------------------------------------------------------------------------------------------------------
accessListSapStatisticsTable OBJECT-TYPE
SYNTAX SEQUENCE OF AccessListSapStatisticsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table serves the Sap statistics."
::= { accessListsServicesStatistics 1 }
accessListSapStatisticsEntry OBJECT-TYPE
SYNTAX AccessListSapStatisticsEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the accessListSapStatisticsTable table."
INDEX { svcId, sapPortId, sapEncapValue , accessListSapStatisticsGroupIndex }
::= { accessListSapStatisticsTable 1 }
AccessListSapStatisticsEntry ::= SEQUENCE {
accessListSapStatisticsGroupIndex INTEGER,
accessListSapGreenBytes INTEGER,
accessListSapYellowBytes INTEGER,
accessListSapRedBytes INTEGER,
accessListSapClassifiedPackets INTEGER
}
accessListSapStatisticsGroupIndex OBJECT-TYPE
SYNTAX INTEGER (1..65535)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This indicates the index of the access group for this Sap. This value is
the same as the value of accessListControlListGroup for the assigned ACL."
::= { accessListSapStatisticsEntry 1 }
accessListSapGreenBytes OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows green traffic in bytes for access group with enabled rate-limit statistics."
::= { accessListSapStatisticsEntry 2 }
accessListSapYellowBytes OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows yellow traffic in bytes for access group with enabled rate-limit statistics."
::= { accessListSapStatisticsEntry 3 }
accessListSapRedBytes OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows red traffic in bytes for access group with enabled rate-limit statistics."
::= { accessListSapStatisticsEntry 4 }
accessListSapClassifiedPackets OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows classified packets in bytes for access group with enabled match statistics."
::= { accessListSapStatisticsEntry 5 }
-----------------------------------------------
ispUpLinkTable OBJECT-TYPE
SYNTAX SEQUENCE OF IspUpLinkEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table controls the ISP up-links. This table is supported only by B-Series."
::= { isp 1 }
ispUpLinkEntry OBJECT-TYPE
SYNTAX IspUpLinkEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the ispUpLinkTable table."
INDEX { ispUpLinkIndex }
::= { ispUpLinkTable 1 }
IspUpLinkEntry ::= SEQUENCE {
ispUpLinkIndex INTEGER,
ispUpLinkIfIndex INTEGER,
ispUpLinkType ISPType,
ispUpLinkAccessGroup INTEGER,
ispUpLinkVLANid INTEGER,
ispUpLinkVLANtag VlanTag,
ispUpLinkRowStatus RowStatus
}
ispUpLinkIndex OBJECT-TYPE
SYNTAX INTEGER (1..32)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The ISP index."
::= { ispUpLinkEntry 1 }
ispUpLinkIfIndex OBJECT-TYPE
SYNTAX INTEGER
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The ifIndex (from RFC1213) that this ISP belongs to."
::= { ispUpLinkEntry 2 }
ispUpLinkType OBJECT-TYPE
SYNTAX ISPType
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The ispUpLinkType object shows if the ISP is connective or normal."
::= { ispUpLinkEntry 3 }
ispUpLinkAccessGroup OBJECT-TYPE
SYNTAX INTEGER (1..199)
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"A valid index (accessListControlListGroup) from accessListControlTable.
For the ISP up-link the index groups are 100..199."
::= { ispUpLinkEntry 4 }
ispUpLinkVLANid OBJECT-TYPE
SYNTAX INTEGER (0..4000)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The VID for this link. 0 means no VID."
::= { ispUpLinkEntry 5 }
ispUpLinkVLANtag OBJECT-TYPE
SYNTAX VlanTag
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Type of the VLAN - tagged or untagged."
::= { ispUpLinkEntry 6 }
ispUpLinkRowStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This indicates the row status and enables creation & deletion of rows in
this and related tables. See SNMPv2-TC for more information."
::= { ispUpLinkEntry 7 }
-----------------------------------------------
ispUserInterfaceTable OBJECT-TYPE
SYNTAX SEQUENCE OF IspUserInterfaceEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"This table controls the assignment of ISP users to an interface.
This table is supported only by B-Series."
::= { isp 2 }
ispUserInterfaceEntry OBJECT-TYPE
SYNTAX IspUserInterfaceEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An entry in the ispUserInterfaceTable table."
INDEX { ifIndex}
::= { ispUserInterfaceTable 1 }
IspUserInterfaceEntry ::= SEQUENCE {
ispUserInterfaceAssigen AssigenValue,
ispUserInterfaceIspUplinkIndex INTEGER,
ispUserInterfaceRateLimit Rate,
ispUserInterfaceConformAction ConformAction,
ispUserInterfaceExceedAction ExceedAction,
ispUserInterfaceShaper Shaper
}
ispUserInterfaceAssigen OBJECT-TYPE
SYNTAX AssigenValue
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"Indicates if an ISP user is assigned to this interface."
::= { ispUserInterfaceEntry 1 }
ispUserInterfaceIspUplinkIndex OBJECT-TYPE
SYNTAX INTEGER (1..32)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"A valid index from ispUpLinkTable."
::= { ispUserInterfaceEntry 2 }
ispUserInterfaceRateLimit OBJECT-TYPE
SYNTAX Rate
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The maximum rate."
::= { ispUserInterfaceEntry 3 }
ispUserInterfaceConformAction OBJECT-TYPE
SYNTAX ConformAction
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The action to perform when the condition is true."
::= { ispUserInterfaceEntry 4 }
ispUserInterfaceExceedAction OBJECT-TYPE
SYNTAX ExceedAction
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"The action to perform when the condition is true."
::= { ispUserInterfaceEntry 5 }
ispUserInterfaceShaper OBJECT-TYPE
SYNTAX Shaper
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object controls the status of the shaper."
::= { ispUserInterfaceEntry 6 }
standardAccessListRuleMatched NOTIFICATION-TYPE
OBJECTS { ifIndex, dot1qVlanStatus, standardAccessListAction}
STATUS current
DESCRIPTION
"This trap indicates that a packet matching a standard ACL rule has been received."
::= { prvtSwitchAccessListNotifications 1}
extendedAccessListRuleMatched NOTIFICATION-TYPE
OBJECTS { ifIndex, dot1qVlanStatus, extendedAccessListAction}
STATUS current
DESCRIPTION
"This trap indicates that a packet matching an extended ACL rule has been received."
::= { prvtSwitchAccessListNotifications 2}
macAccessListRuleMatched NOTIFICATION-TYPE
OBJECTS { ifIndex, dot1qVlanStatus, macAccessListAction}
STATUS current
DESCRIPTION
"This trap indicates that a packet matching a mac ACL rule has been received."
::= { prvtSwitchAccessListNotifications 3}
etherTypeAccessListRuleMatched NOTIFICATION-TYPE
OBJECTS { ifIndex, dot1qVlanStatus, etherTypeAccessListAction}
STATUS current
DESCRIPTION
"This trap indicates that a packet matching a ether-type ACL rule has been received."
::= { prvtSwitchAccessListNotifications 4}
-- *******************************************************************
-- Conformance Information
-- *******************************************************************
prvtSwitchAccessListMibGroups OBJECT IDENTIFIER ::= { prvtSwitchAccessListConformance 1 }
prvtSwitchAccessListNotificationGroup NOTIFICATION-GROUP
NOTIFICATIONS {
standardAccessListRuleMatched,
extendedAccessListRuleMatched,
macAccessListRuleMatched,
etherTypeAccessListRuleMatched
}
STATUS current
DESCRIPTION
"Private Notification Group."
::= { prvtSwitchAccessListMibGroups 1 }
END