All MIBs › CIENA-CES-ACL-MIB › cienaCesExtAclEntryProtocol
cienaCesExtAclEntryProtocol
Module: CIENA-CES-ACL-MIB
OID (symbolic): CIENA-CES-ACL-MIB::cienaCesExtAclEntryProtocol
OID (numeric): 1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18
Node type: OBJECT-TYPE
Type: Bits
Access: read-only
Description: List of protocols allowed for the ACL entry.
What is cienaCesExtAclEntryProtocol?
This bitmap lists which Layer 4 protocols -- ICMP, TCP, UDP, or all of them -- this specific ACL entry is configured to match. Because the bits are independent, an admin auditing a security posture can tell from this single value whether an entry meant to catch only ICMP scans is quietly also matching TCP sessions it was never intended to touch. For example, a value with only the tcp(1) bit set means port 22 and 443 TCP sessions match the rule while ICMP pings sail through untouched, which would explain why traceroute and ping tests still succeed despite the ACL apparently being active.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18 snmpwalk -v2c -c public <target> CIENA-CES-ACL-MIB::cienaCesExtAclEntryProtocol
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18.1 snmpget -v2c -c public <target> CIENA-CES-ACL-MIB::cienaCesExtAclEntryProtocol.1
Start monitoring Ciena CES (Carrier Ethernet Switch) platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CIENA-CES-ACL-MIB::cienaCesExtAclEntryProtocol OID value, configure state conditions and alerts, and monitor any Ciena CES (Carrier Ethernet Switch) platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.1271 | ciena | CIENA-SMI |
| 1.3.6.1.4.1.1271.2 | cienaCes | CIENA-SMI |
| 1.3.6.1.4.1.1271.2.1 | cienaCesConfig | CIENA-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.1271.2.1.25 | cienaCesAclMIB | CIENA-CES-ACL-MIB |
| 1.3.6.1.4.1.1271.2.1.25.1 | cienaCesAclMIBObjects | CIENA-CES-ACL-MIB |
| 1.3.6.1.4.1.1271.2.1.25.1.2 | cienaCesAclRules | CIENA-CES-ACL-MIB |
| 1.3.6.1.4.1.1271.2.1.25.1.2.2 | cienaCesExtAclTable | CIENA-CES-ACL-MIB |
| 1.3.6.1.4.1.1271.2.1.25.1.2.2.1 | cienaCesExtAclEntry | CIENA-CES-ACL-MIB |
| 1.3.6.1.4.1.1271.2.1.25.1.2.2.1.18 | cienaCesExtAclEntryProtocol | CIENA-CES-ACL-MIB |