ARISTA-ACL-MIB

All MIBs › ARISTA-ACL-MIB

Organization: Arista Networks, Inc.

Last Updated: 2014-08-15

Category: Vendor: Arista

Description: Arista EOS access control list configuration and hardware match counter statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ARISTA-ACL-MIB?

ARISTA-ACL-MIB is an Arista Networks proprietary MIB managing IP Access Control Lists on Arista switches. Its objects cover data-plane ACL support-capability flags, an IP-ACL table (name, read-only flag, statistics-enable flag, incomplete-counters flag), and a rule table (sequence ID, protocol, source/destination address and mask, source/destination Layer 4 port operator/ports, TTL operator/value, tracked flag, fragment handling, TCP flags, and established-connection matching). As a configuration MIB it lets an administrator confirm a specific ACL rule's match criteria — including TCP-flag and established-connection matching — before troubleshooting unexpected traffic filtering. It is deployed on Arista Networks switches. Engineers can download the ARISTA-ACL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ARISTA-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Arista Networks switches

Monitoring Examples

An administrator checks aristaIpAclRuleTcpFlags and aristaIpAclRuleEstablished to confirm a stateful-style ACL rule is correctly matching only established TCP connections on an Arista switch.

What Can Be Monitored

IP ACL rule configuration and match criteria

Imported Objects

From ARISTA-SMI-MIB

aristaMibs

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddressIPv6

From RMON2-MIB

TimeFilter

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter64
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using aristaIpAclRuleStatsPktCount OID:

Select an Arista Networks EOS switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type aristaIpAclRuleStatsPktCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This attribute is the number of packets that this ACL rule matched. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
aristaAcl	1.3.6.1.4.1.30065.3.5.1
aristaAclCompliance	1.3.6.1.4.1.30065.3.5.2.1.1			The compliance statement for Arista switches that support Access Control Lists (ACLs).
aristaAclCompliances	1.3.6.1.4.1.30065.3.5.2.1
aristaAclConformance	1.3.6.1.4.1.30065.3.5.2
BIT aristaAclDpSupportFlags	1.3.6.1.4.1.30065.3.5.1.4	Bits	read-only	This attribute describes the data-plane ACL support matrix. If data-plane ACLs are supported, the acl bit is 1; otherwise, other bits are 0. If data-plane ACLs are supported, the logging, counter and routerAcl bits indicate whether the data plane supports those features for ACLs.
aristaAclGroup	1.3.6.1.4.1.30065.3.5.2.2.1			The group of required ACL objects.
aristaAclGroups	1.3.6.1.4.1.30065.3.5.2.2
aristaAclMIB	1.3.6.1.4.1.30065.3.5			The MIB module for managing Access Control Lists (ACLs) on Arista devices.
aristaIpAcl	1.3.6.1.4.1.30065.3.5.1.1
T/F aristaIpAclCountersIncomplete	1.3.6.1.4.1.30065.3.5.1.1.1.1.4	TruthValue	read-only	This attribute has value 'true(1)' if the IP ACL has incomplete counter; otherwise, the value is 'false(2)'.
aristaIpAclEntry	1.3.6.1.4.1.30065.3.5.1.1.1.1		not-accessible	Information about a specific IP ACL that is configured on the switch.
STR aristaIpAclName	1.3.6.1.4.1.30065.3.5.1.1.1.1.1	DisplayString	not-accessible	The name of the IP ACL.
T/F aristaIpAclReadOnly	1.3.6.1.4.1.30065.3.5.1.1.1.1.2	TruthValue	read-only	This attribute has value 'true(1)' if the IP ACL is configured as read-only; otherwise, the value is 'false(2)'.
ARI aristaIpAclRuleAction	1.3.6.1.4.1.30065.3.5.1.1.2.1.19	AristaAclRuleAction	read-only	This attribute is the action applied to this ACL rule.
IP aristaIpAclRuleDest	1.3.6.1.4.1.30065.3.5.1.1.2.1.5	IpAddress	read-only	This attribute is the IP destination address to be matched by this ACL rule, subject to the aristaIpAclRuleDestMask value.
IP aristaIpAclRuleDestMask	1.3.6.1.4.1.30065.3.5.1.1.2.1.6	IpAddress	read-only	This attribute is the IP destination-address mask in this ACL rule. For the destination address of the packet to match the rule, the bitwise logical-AND of the address and this mask must be equal to the value of aristaIpAclRuleDest.
aristaIpAclRuleEntry	1.3.6.1.4.1.30065.3.5.1.1.2.1		not-accessible	Configuration information about a specific IP ACL rule.
T/F aristaIpAclRuleEstablished	1.3.6.1.4.1.30065.3.5.1.1.2.1.16	TruthValue	read-only	This attribute has value 'true(1)' if this ACL rule matches existing TCP connections; otherwise, the value is 'false(2)'.
T/F aristaIpAclRuleFragments	1.3.6.1.4.1.30065.3.5.1.1.2.1.14	TruthValue	read-only	This attribute has value 'true(1)' if this ACL rule is configured to match IP fragments; otherwise, the value is 'false(2)'.
U32 aristaIpAclRuleIcmpCode	1.3.6.1.4.1.30065.3.5.1.1.2.1.18	Unsigned32	read-only	This attribute is the ICMP code that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
U32 aristaIpAclRuleIcmpType	1.3.6.1.4.1.30065.3.5.1.1.2.1.17	Unsigned32	read-only	This attribute is the ICMP type that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
ARI aristaIpAclRuleL4PortDestOper	1.3.6.1.4.1.30065.3.5.1.1.2.1.9	AristaAclRangeOperator	read-only	This attribute determines TCP/UDP destination-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpAclRuleL4PortsDest is ignored.
OCT aristaIpAclRuleL4PortsDest	1.3.6.1.4.1.30065.3.5.1.1.2.1.10	OCTET STRING	read-only	This attribute is a list of TCP/UDP destination ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum of 10 ports is allowed. Attribute aristaIpAclRuleL4PortDestOper determines how the destination ports are matched in this ACL rule.
ARI aristaIpAclRuleL4PortSrcOper	1.3.6.1.4.1.30065.3.5.1.1.2.1.7	AristaAclRangeOperator	read-only	This attribute determines TCP/UDP source-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpAclRuleL4PortsSrc is ignored.
OCT aristaIpAclRuleL4PortsSrc	1.3.6.1.4.1.30065.3.5.1.1.2.1.8	OCTET STRING	read-only	This attribute is a list of TCP/UDP source ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum of 10 ports is allowed. Attribute aristaIpAclRuleL4PortSrcOper determines how the source ports are matched in this ACL rule.
T/F aristaIpAclRuleLog	1.3.6.1.4.1.30065.3.5.1.1.2.1.20	TruthValue	read-only	This attribute has value 'true(1)' if logging is required in this ACL rule; otherwise, the value is 'false(2)'.
U32 aristaIpAclRuleProto	1.3.6.1.4.1.30065.3.5.1.1.2.1.2	Unsigned32	read-only	This attribute is the IP protocol to be matched by this ACL rule. The value 0 indicates the rule matches any IP protocol.
STR aristaIpAclRuleRemark	1.3.6.1.4.1.30065.3.5.1.1.2.1.21	DisplayString	read-only	This attribute is the remark string applied to this ACL rule.
U32 aristaIpAclRuleSeqId	1.3.6.1.4.1.30065.3.5.1.1.2.1.1	Unsigned32	not-accessible	This attribute is the sequence ID for this ACL rule.
IP aristaIpAclRuleSrc	1.3.6.1.4.1.30065.3.5.1.1.2.1.3	IpAddress	read-only	This attribute is the IP source address to be matched by this ACL rule, subject to the aristaIpAclRuleSrcMask value.
IP aristaIpAclRuleSrcMask	1.3.6.1.4.1.30065.3.5.1.1.2.1.4	IpAddress	read-only	This attribute is the IP source-address mask in this ACL rule. For the source address of the packet to match the rule, the bitwise logical-AND of the address and this mask must be equal to the value of aristaIpAclRuleSrc.
aristaIpAclRuleStatsEntry	1.3.6.1.4.1.30065.3.5.1.1.3.1		not-accessible	Statistics for a specific IP ACL rules.
TIM aristaIpAclRuleStatsLastUpdateTime	1.3.6.1.4.1.30065.3.5.1.1.3.1.3	TimeStamp	read-only	The value of sysUpTime at the time the aristaIpAclRuleStatsPktCount was last updated for this ACL rule.
C64 aristaIpAclRuleStatsPktCountEx	1.3.6.1.4.1.30065.3.5.1.1.3.1.2	Counter64	read-only	This attribute is the number of packets that this ACL rule matched.
aristaIpAclRuleStatsTable	1.3.6.1.4.1.30065.3.5.1.1.3		not-accessible	A table that contains statistics for IP ACL rules.
aristaIpAclRuleTable	1.3.6.1.4.1.30065.3.5.1.1.2		not-accessible	A table that contains IP ACL rules that are configured on the switch.
BIT aristaIpAclRuleTcpFlags	1.3.6.1.4.1.30065.3.5.1.1.2.1.15	Bits	read-only	This attribute describes TCP flags that are matched by this ACL rule.
TIM aristaIpAclRuleTimeMark	1.3.6.1.4.1.30065.3.5.1.1.3.1.1	TimeFilter	not-accessible	A TimeFilter for this entry. See the TimeFilter textual convention to see how this works.
T/F aristaIpAclRuleTracked	1.3.6.1.4.1.30065.3.5.1.1.2.1.13	TruthValue	read-only	This attribute has the value 'true(1)' if this ACL rule is tracked; otherwise, the value is 'false(2)'. A tracked rule matches packets in existing ICMP/UDP/TCP connections.
U32 aristaIpAclRuleTtl	1.3.6.1.4.1.30065.3.5.1.1.2.1.12	Unsigned32	read-only	This attribute is the IP TTL value in this ACL rule. Attribute aristaIpAclRuleTtlOper determines how the TTL values is matched in this ACL rule.
ARI aristaIpAclRuleTtlOper	1.3.6.1.4.1.30065.3.5.1.1.2.1.11	AristaAclRangeOperator	read-only	This attribute is the IP TTL (Time To Live) operation code used in this ACL rule. Combined with attribute aristaIpAclRuleTtl, it specifies the IP TTL matching behavior in this ACL rule.
T/F aristaIpAclStatsEnabled	1.3.6.1.4.1.30065.3.5.1.1.1.1.3	TruthValue	read-only	This attribute has value 'true(1)' if the IP ACL is configured to have per-rule statistics enabled; otherwise, the value is 'false(2)'.
aristaIpAclTable	1.3.6.1.4.1.30065.3.5.1.1.1		not-accessible	A table that contains IP ACLs that are configured on the switch.
aristaIpv6Acl	1.3.6.1.4.1.30065.3.5.1.3
T/F aristaIpv6AclCountersIncomplete	1.3.6.1.4.1.30065.3.5.1.3.1.1.4	TruthValue	read-only	This attribute has value 'true(1)' if the IPv6 ACL has incomplete counter statistics; otherwise, the value is 'false(2)'.
aristaIpv6AclEntry	1.3.6.1.4.1.30065.3.5.1.3.1.1		not-accessible	Information about a specific IPv6 ACL that is configured on the switch.
STR aristaIpv6AclName	1.3.6.1.4.1.30065.3.5.1.3.1.1.1	DisplayString	not-accessible	The name of the IPv6 ACL.
T/F aristaIpv6AclReadOnly	1.3.6.1.4.1.30065.3.5.1.3.1.1.2	TruthValue	read-only	This attribute has value 'true(1)' if the IPv6 ACL is configured as read-only; otherwise, the value is 'false(2)'.
ARI aristaIpv6AclRuleAction	1.3.6.1.4.1.30065.3.5.1.3.2.1.17	AristaAclRuleAction	read-only	This attribute is the action applied to this ACL rule.
ADR aristaIpv6AclRuleDest	1.3.6.1.4.1.30065.3.5.1.3.2.1.5	InetAddressIPv6	read-only	This attribute is the IPv6 destination address to be matched by this ACL rule, subject to the aristaIpv6AclRuleDestMask value.
ADR aristaIpv6AclRuleDestMask	1.3.6.1.4.1.30065.3.5.1.3.2.1.6	InetAddressIPv6	read-only	This attribute is the IPv6 destination-address mask in this ACL rule. For the destination address of the packet to match the rule, the bitwise logical-AND of the address and this mask must be equal to the value of aristaIpv6AclRuleDest.
aristaIpv6AclRuleEntry	1.3.6.1.4.1.30065.3.5.1.3.2.1		not-accessible	Configuration information about a specific IPv6 ACL rule.
T/F aristaIpv6AclRuleEstablished	1.3.6.1.4.1.30065.3.5.1.3.2.1.14	TruthValue	read-only	This attribute has value 'true(1)' if this ACL rule matches existing TCP connections; otherwise, the value is 'false(2)'.
U32 aristaIpv6AclRuleHopLimit	1.3.6.1.4.1.30065.3.5.1.3.2.1.12	Unsigned32	read-only	This attribute is the IPv6 Hop Limit value in this ACL rule. Attribute aristaIpv6AclRuleHopLimitOper determines how the Hop Limit values is matched in this ACL rule.
ARI aristaIpv6AclRuleHopLimitOper	1.3.6.1.4.1.30065.3.5.1.3.2.1.11	AristaAclRangeOperator	read-only	This attribute is the IPv6 Hop Limit operation code used in this ACL rule. Combined with attribute aristaIpv6AclRuleHopLimit, it specifies the IPv6 Hop Limit matching behavior in this ACL rule.
U32 aristaIpv6AclRuleIcmpCode	1.3.6.1.4.1.30065.3.5.1.3.2.1.16	Unsigned32	read-only	This attribute is the ICMP code that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
U32 aristaIpv6AclRuleIcmpType	1.3.6.1.4.1.30065.3.5.1.3.2.1.15	Unsigned32	read-only	This attribute is the ICMP type that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
ARI aristaIpv6AclRuleL4PortDestOper	1.3.6.1.4.1.30065.3.5.1.3.2.1.9	AristaAclRangeOperator	read-only	This attribute determines TCP/UDP destination-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpv6AclRuleL4PortsDest is ignored.
OCT aristaIpv6AclRuleL4PortsDest	1.3.6.1.4.1.30065.3.5.1.3.2.1.10	OCTET STRING	read-only	This attribute is a list of TCP/UDP destination ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum of 10 ports is allowed. Attribute aristaIpv6AclRuleL4PortDestOper determines how the destination ports are matched in this ACL rule.
ARI aristaIpv6AclRuleL4PortSrcOper	1.3.6.1.4.1.30065.3.5.1.3.2.1.7	AristaAclRangeOperator	read-only	This attribute determines TCP/UDP source-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpv6AclRuleL4PortsSrc is ignored.
OCT aristaIpv6AclRuleL4PortsSrc	1.3.6.1.4.1.30065.3.5.1.3.2.1.8	OCTET STRING	read-only	This attribute is a list of TCP/UDP source ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum of 10 ports is allowed. Attribute aristaIpv6AclRuleL4PortSrcOper determines how the source ports are matched in this ACL rule.
T/F aristaIpv6AclRuleLog	1.3.6.1.4.1.30065.3.5.1.3.2.1.18	TruthValue	read-only	This attribute has value 'true(1)' if logging is required in this ACL rule; otherwise, the value is 'false(2)'.
U32 aristaIpv6AclRuleProto	1.3.6.1.4.1.30065.3.5.1.3.2.1.2	Unsigned32	read-only	This attribute is the IPv6 upper layer protocol to be matched by this ACL rule. The value 0 indicates the rule matches any IPv6 protocol.
STR aristaIpv6AclRuleRemark	1.3.6.1.4.1.30065.3.5.1.3.2.1.19	DisplayString	read-only	This attribute is the remark string applied to this ACL rule.
U32 aristaIpv6AclRuleSeqId	1.3.6.1.4.1.30065.3.5.1.3.2.1.1	Unsigned32	not-accessible	This attribute is the sequence ID for this ACL rule.
ADR aristaIpv6AclRuleSrc	1.3.6.1.4.1.30065.3.5.1.3.2.1.3	InetAddressIPv6	read-only	This attribute is the IPv6 source address to be matched by this ACL rule, subject to the aristaIpv6AclRuleSrcMask value.
ADR aristaIpv6AclRuleSrcMask	1.3.6.1.4.1.30065.3.5.1.3.2.1.4	InetAddressIPv6	read-only	This attribute is the IPv6 source-address mask in this ACL rule. For the source address of the packet to match the rule, the bitwise logical-AND of the address and this mask must be equal to the value of aristaIpv6AclRuleSrc.
aristaIpv6AclRuleStatsEntry	1.3.6.1.4.1.30065.3.5.1.3.3.1		not-accessible	Statistics for IPv6 ACL rules.
TIM aristaIpv6AclRuleStatsLastUpdateTime	1.3.6.1.4.1.30065.3.5.1.3.3.1.3	TimeStamp	read-only	The value of sysUpTime at the time the aristaIpv6AclRuleStatsPktCount was last updated for this ACL rule.
C64 aristaIpv6AclRuleStatsPktCount	1.3.6.1.4.1.30065.3.5.1.3.3.1.2	Counter64	read-only	This attribute is the number of packets that this ACL rule matched.
aristaIpv6AclRuleStatsTable	1.3.6.1.4.1.30065.3.5.1.3.3		not-accessible	A table that contains statistics information for IPv6 ACL rules.
aristaIpv6AclRuleTable	1.3.6.1.4.1.30065.3.5.1.3.2		not-accessible	A table that contains IPv6 ACL rules that are configured on the switch.
BIT aristaIpv6AclRuleTcpFlags	1.3.6.1.4.1.30065.3.5.1.3.2.1.13	Bits	read-only	This attribute describes TCP flags that are matched by this ACL rule.
TIM aristaIpv6AclRuleTimeMark	1.3.6.1.4.1.30065.3.5.1.3.3.1.1	TimeFilter	not-accessible	A TimeFilter for this entry. See the TimeFilter textual convention to see how this works.
T/F aristaIpv6AclStatsEnabled	1.3.6.1.4.1.30065.3.5.1.3.1.1.3	TruthValue	read-only	This attribute has value 'true(1)' if the IPv6 ACL is configured to have per-entry statistics enabled; otherwise, the value is 'false(2)'.
aristaIpv6AclTable	1.3.6.1.4.1.30065.3.5.1.3.1		not-accessible	A table that contains IPv6 ACLs that are configured on the switch.
aristaMacAcl	1.3.6.1.4.1.30065.3.5.1.2
T/F aristaMacAclCountersIncomplete	1.3.6.1.4.1.30065.3.5.1.2.1.1.4	TruthValue	read-only	This attribute has value 'true(1)' if the MAC ACL has incomplete counter statistics; otherwise, the value is 'false(2)'.
aristaMacAclEntry	1.3.6.1.4.1.30065.3.5.1.2.1.1		not-accessible	Information about a specific MAC ACL that is configured on the switch.
STR aristaMacAclName	1.3.6.1.4.1.30065.3.5.1.2.1.1.1	DisplayString	not-accessible	The name of the MAC ACL.
T/F aristaMacAclReadOnly	1.3.6.1.4.1.30065.3.5.1.2.1.1.2	TruthValue	read-only	This attribute has value 'true(1)' if the MAC ACL is configured as read-only; otherwise, the value is 'false(2)'.
ARI aristaMacAclRuleAction	1.3.6.1.4.1.30065.3.5.1.2.2.1.7	AristaAclRuleAction	read-only	This attribute is the action applied to this ACL rule.
MAC aristaMacAclRuleDest	1.3.6.1.4.1.30065.3.5.1.2.2.1.4	MacAddress	read-only	This attribute is the MAC destination address to be matched by this ACL rule, subject to the aristaMacAclRuleSrcMask value.
MAC aristaMacAclRuleDestMask	1.3.6.1.4.1.30065.3.5.1.2.2.1.5	MacAddress	read-only	This attribute is the MAC destination-address mask in this ACL rule. For the destination address of the packet to match the rule, the bitwise logical-AND of the address and this mask must be equal to the value of aristaMacAclRuleDest.
aristaMacAclRuleEntry	1.3.6.1.4.1.30065.3.5.1.2.2.1		not-accessible	Configuration information about a specific MAC ACL rule.
T/F aristaMacAclRuleLog	1.3.6.1.4.1.30065.3.5.1.2.2.1.8	TruthValue	read-only	This attribute has value 'true(1)' if logging is required in this ACL rule; otherwise, the value is 'false(2)'.
U32 aristaMacAclRuleProto	1.3.6.1.4.1.30065.3.5.1.2.2.1.6	Unsigned32	read-only	This attribute is the MAC protocol number to be matched by this ACL rule. The protocol value 4294967295 (0xFFFFFFFF) is a value that indicates the rule matches any protocol.
STR aristaMacAclRuleRemark	1.3.6.1.4.1.30065.3.5.1.2.2.1.9	DisplayString	read-only	This attribute is the remark string applied to this ACL rule.
U32 aristaMacAclRuleSeqId	1.3.6.1.4.1.30065.3.5.1.2.2.1.1	Unsigned32	not-accessible	This attribute is the sequence ID for this ACL rule.
MAC aristaMacAclRuleSrc	1.3.6.1.4.1.30065.3.5.1.2.2.1.2	MacAddress	read-only	This attribute is the MAC source address to be matched by this ACL rule, subject to the aristaMacAclRuleSrcMask value.
MAC aristaMacAclRuleSrcMask	1.3.6.1.4.1.30065.3.5.1.2.2.1.3	MacAddress	read-only	This attribute is the MAC source-address mask in this ACL rule. For the source address of the packet to match the rule, the bitwise logical-AND of the address and this mask must be equal to the value of aristaMacAclRuleSrc.
aristaMacAclRuleStatsEntry	1.3.6.1.4.1.30065.3.5.1.2.3.1		not-accessible	Statistics for MAC ACL rules.
TIM aristaMacAclRuleStatsLastUpdateTime	1.3.6.1.4.1.30065.3.5.1.2.3.1.3	TimeStamp	read-only	The value of sysUpTime at the time the aristaMacAclRuleStatsPktCount was last updated for this ACL rule.
C64 aristaMacAclRuleStatsPktCount	1.3.6.1.4.1.30065.3.5.1.2.3.1.2	Counter64	read-only	This attribute is the number of packets that this ACL rule matched.
aristaMacAclRuleStatsTable	1.3.6.1.4.1.30065.3.5.1.2.3		not-accessible	A table that contains statistics information for MAC ACL rules.
aristaMacAclRuleTable	1.3.6.1.4.1.30065.3.5.1.2.2		not-accessible	A table that contains MAC ACL rules that are configured on the switch.
TIM aristaMacAclRuleTimeMark	1.3.6.1.4.1.30065.3.5.1.2.3.1.1	TimeFilter	not-accessible	A TimeFilter for this entry. See the TimeFilter textual convention to see how this works.
T/F aristaMacAclStatsEnabled	1.3.6.1.4.1.30065.3.5.1.2.1.1.3	TruthValue	read-only	This attribute has value 'true(1)' if the MAC ACL is configured to have per-entry statistics enabled; otherwise, the value is 'false(2)'.
aristaMacAclTable	1.3.6.1.4.1.30065.3.5.1.2.1		not-accessible	A table that contains MAC ACLs that are configured on the switch.

RFC description

Arista Networks access control lists (ACLs) management for network security policy enforcement.

Start monitoring Arista Networks EOS switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ARISTA-ACL-MIB