All MIBs › CIENA-CES-ACCESS-LIST-MIB › cienaCesAclRuleMatchTcpFlags
cienaCesAclRuleMatchTcpFlags
Module: CIENA-CES-ACCESS-LIST-MIB
OID (symbolic): CIENA-CES-ACCESS-LIST-MIB::cienaCesAclRuleMatchTcpFlags
OID (numeric): 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-only
Description: True if the ACL rule matches on specific TCP Flags, False otherwise. When True, the cienaCesAclRuleTcpFlags field will contain the TCP Flags that are to be matched by this rule.
What is cienaCesAclRuleMatchTcpFlags?
This boolean switches on matching by specific TCP control flags (like SYN, ACK, RST) set in the packet, letting a rule filter based on the state or intent of a TCP segment rather than just its addresses and ports. An admin uses TCP-flag matching for classic techniques like identifying new-connection attempts (SYN set, ACK clear) versus established-connection traffic, or specifically catching anomalous flag combinations sometimes used in scanning or DoS attempts. For example, an admin wanting to rate-limit or log new inbound TCP connection attempts specifically would set this true and configure cienaCesAclRuleTcpFlags to match SYN without ACK.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42 snmpwalk -v2c -c public <target> CIENA-CES-ACCESS-LIST-MIB::cienaCesAclRuleMatchTcpFlags
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42.1 snmpget -v2c -c public <target> CIENA-CES-ACCESS-LIST-MIB::cienaCesAclRuleMatchTcpFlags.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cienaCesAclRuleMatchTcpFlags.1
Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CIENA-CES-ACCESS-LIST-MIB::cienaCesAclRuleMatchTcpFlags OID value, configure state conditions and alerts, and monitor any Ciena CES (Carrier Ethernet Switch) platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1271 | ciena | CIENA-SMI |
| 1.3.6.1.4.1.1271.2 | cienaCes | CIENA-SMI |
| 1.3.6.1.4.1.1271.2.1 | cienaCesConfig | CIENA-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1271.2.1.35 | cienaCesAccessListMIB | CIENA-CES-ACCESS-LIST-MIB |
| 1.3.6.1.4.1.1271.2.1.35.1 | cienaCesAccessListMIBObjects | CIENA-CES-ACCESS-LIST-MIB |
| 1.3.6.1.4.1.1271.2.1.35.1.1 | cienaCesAclConfiguration | CIENA-CES-ACCESS-LIST-MIB |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3 | cienaCesAclRuleConfigTable | CIENA-CES-ACCESS-LIST-MIB |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1 | cienaCesAclRuleConfigTableEntry | CIENA-CES-ACCESS-LIST-MIB |
| 1.3.6.1.4.1.1271.2.1.35.1.1.3.1.42 | cienaCesAclRuleMatchTcpFlags | CIENA-CES-ACCESS-LIST-MIB |