CTRON-SSR-POLICY-MIB

All MIBs › CTRON-SSR-POLICY-MIB

Organization: Enterasys Networks, Inc

Last Updated: 2003-12-19

Category: Quality of Service, Vendor: Cabletron/Enterasys

Description: Configures Cabletron SSR policy-based routing and QoS rules for traffic classification and forwarding.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CTRON-SSR-POLICY-MIB?

CTRON-SSR-POLICY-MIB is a Cabletron Systems enterprise MIB, per its module description, for controlling Layer 3 and Layer 2 filters (Access Control Lists) and policy-based routing/QoS traffic classification on Cabletron SSR devices, and may also configure static IP routes using extended IP header fields. It exposes grouped policy objects covering Layer 2 (including VLAN/802.1Q bridging filters), Layer 3, and Layer 4 filtering groups, along with Layer 4 statistics and a conformance/compliance section. For monitoring it is used to confirm which ACL/filter policies are active and to review Layer 4 statistics counters that reveal how much traffic is being matched, permitted, or denied by a given filter rule, which is a software/control-plane configuration and traffic-policy health check rather than hardware sensor data. It is built on and extends standard ACL/filtering concepts akin to IETF policy MIBs, layering Cabletron SSR-specific groups on top. It is deployed on Cabletron SSR (Secure Smart Routing/Switch Router) devices used for filtered, policy-driven Layer 2/3 forwarding, and administrators can download the CTRON-SSR-POLICY-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CTRON-SSR-POLICY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cabletron SSR (Secure Smart Routing/Switch Router) device

Monitoring Examples

An administrator would examine polL2Group, polL3Group, and polL4Group objects to confirm which filter policies are configured at each layer, including polL2Dot1qVlanStaticL4Bridging for VLAN-aware bridging filters combined with Layer 4 matching. The polL4GroupStats objects would be polled to see match/permit/deny counts for a given Layer 4 filter rule, revealing whether an ACL intended to block certain traffic is actually being hit. The polConformance/polCompliances objects describe implementation compliance rather than runtime data, so they would be consulted only to confirm feature support, not polled for live status.

What Can Be Monitored

active Layer 2/3/4 filter policies
VLAN-based bridging filter rules
Layer 4 filter match/permit/deny statistics
static IP route policy configuration

Imported Objects

From CTRON-SSR-SMI-MIB

ssrMibs

OBJECT-IDENTITY

From Q-BRIDGE-MIB

dot1qVlanStaticEntry

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using polL4lowLostRouters OID:

Select a Cabletron/Enterasys Smart Switch Router (SSR) (ACL/policy filtering) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type polL4lowLostRouters into the Find box to locate it in the OID tree, then select it and click OK. The count of times routers were disabled from NextHopTable due to lost contact. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
T/F polAclAuditTrail	1.3.6.1.4.1.52.2501.1.12.4.1.16	TruthValue	read-write	Flows matching this ACL are logged for Accounting when true.
INT polAclCheckpoint	1.3.6.1.4.1.52.2501.1.12.4.1.17	INTEGER	read-write	How long to keep flow at which point a checkpoint should be done. A checkpoint may trigger earlier than this time should the maximum batch size be reached.
INT polAclDstHighRange	1.3.6.1.4.1.52.2501.1.12.4.1.15	INTEGER	read-write	The high range destination L3 IP port. Used only when SrcOperator == range. polAclDstPort is used as the lower bounds of the range.
IP polAclDstIp	1.3.6.1.4.1.52.2501.1.12.4.1.7	IpAddress	read-write	The source L3 IP Address this ACL applies to.
IP polAclDstMask	1.3.6.1.4.1.52.2501.1.12.4.1.8	IpAddress	read-write	The source L3 IP Mask this ACL Applies to.
SSR polAclDstOperator	1.3.6.1.4.1.52.2501.1.12.4.1.13	SSRPortComparator	read-write	polAclDstPort is compared using this operator.
SSR polAclDstPort	1.3.6.1.4.1.52.2501.1.12.4.1.11	SSRsocketId	read-write	The source L3 IP destination port/socket ACL applies to.
polAclEntry	1.3.6.1.4.1.52.2501.1.12.4.1		not-accessible	A record containing a Access Control List.
INT polAclInterfaceDirection	1.3.6.1.4.1.52.2501.1.12.12.1.2	INTEGER	read-only	The direction the ACL is applied to the particular port.
polAclInterfaceEntry	1.3.6.1.4.1.52.2501.1.12.12.1		not-accessible	A record containing a Access Control Lists applied to Interfaces.
NUM polAclInterfaceIfIndex	1.3.6.1.4.1.52.2501.1.12.12.1.1	InterfaceIndex	read-only	The ifIndex of the IP Interface the ACL is applied to.
TIK polAclInterfaceLastChanged	1.3.6.1.4.1.52.2501.1.12.11	TimeTicks	read-only	The time the Interfaces in service were last changed with regard to policy.
INT polAclInterfaceNumber	1.3.6.1.4.1.52.2501.1.12.10	INTEGER	read-only	The number of Layer 3 Interfaces in service in the SSR.
polAclInterfaceTable	1.3.6.1.4.1.52.2501.1.12.12		not-accessible	A list of IP Interfaces in service and their policy status. Each IP Interface can be defined to use local static policy or remote dynamic policy in the config.
INT polAclItem	1.3.6.1.4.1.52.2501.1.12.4.1.2	INTEGER	read-only	This row's unique identifier within a given ACL set. Member of the ACL set are numbered from 1 to 256. If Item is set to 0, and rowStatus is destroy, all rows for this set are destroyed.
TIK polAclLastChanged	1.3.6.1.4.1.52.2501.1.12.3	TimeTicks	read-only	The time the Access Control List were last changed.
STR polAclName	1.3.6.1.4.1.52.2501.1.12.4.1.1	DisplayString	read-only	The administratively assigned name to this static route entry.
STR polAclName2	1.3.6.1.4.1.52.2501.1.12.7.1.2	DisplayString	read-only	The name of the ACL applied to the particular port.
INT polAclNumber	1.3.6.1.4.1.52.2501.1.12.2	INTEGER	read-only	The number of Layer 3 Access Control Lists defined in the SSR.
INT polAclPolicyStatus	1.3.6.1.4.1.52.2501.1.12.12.1.3	INTEGER	read-only	Rules for what type of management can apply ACLs to a particular interface. If set to remote, then a Policy Manager via SNMP may change dynamically the ACLs applied to an interface. Note, ACLs applied dynamically are not maintained across system reboot. Use local ACLs to setup the basic rules then apply dynamic rules as necessary.
SSR polAclProtocol	1.3.6.1.4.1.52.2501.1.12.4.1.4	SSRProtocol	read-write	The IETF protocol this ACL applies to.
T/F polAclRemoteAllowed	1.3.6.1.4.1.52.2501.1.12.9	TruthValue	read-only	Remote Policy Configuration is allowed when true only local (to SSR) policy may be applied.
INT polAclRestriction	1.3.6.1.4.1.52.2501.1.12.4.1.3	INTEGER	read-write	The permissions/restrictions given to this static route entry.
ROW polAclRowStatus	1.3.6.1.4.1.52.2501.1.12.4.1.18	RowStatus	read-write	SNMP V2 RowStatus control for this table.
T/F polAclServer	1.3.6.1.4.1.52.2501.1.12.1	TruthValue	read-write	This is true when Access Control Lists (ACLs) are defined by a Policy Server else false. At boot, this value is false. After the first valid set of any policy object, the value changes to true.
INT polAclServiceDirection	1.3.6.1.4.1.52.2501.1.12.7.1.3	INTEGER	read-write	The direction the ACL is applied to the particular port.
polAclServiceEntry	1.3.6.1.4.1.52.2501.1.12.7.1		not-accessible	A record containing a Access Control Lists applied to Interfaces.
NUM polAclServiceIfIndex	1.3.6.1.4.1.52.2501.1.12.7.1.1	InterfaceIndex	read-only	The ifIndex of the IP Interface the ACL is applied to. An SSR IP Interface has ifType 142
TIK polAclServiceLastChanged	1.3.6.1.4.1.52.2501.1.12.6	TimeTicks	read-only	The time the ACLs in service were last changed.
INT polAclServiceNumber	1.3.6.1.4.1.52.2501.1.12.5	INTEGER	read-only	The number of Layer 3 Access Control Lists in service in the SSR.
ROW polAclServiceRowStatus	1.3.6.1.4.1.52.2501.1.12.7.1.6	RowStatus	read-write	SNMP V2 RowStatus control for this table.
polAclServiceTable	1.3.6.1.4.1.52.2501.1.12.7		not-accessible	A list of ACL's currently in service.
INT polAclSrcHighRange	1.3.6.1.4.1.52.2501.1.12.4.1.14	INTEGER	read-write	The high range source L3 IP port. Used only when SrcOperator == range. polAclSrcPort is used as the lower bounds of the range.
IP polAclSrcIp	1.3.6.1.4.1.52.2501.1.12.4.1.5	IpAddress	read-write	The source L3 IP Address this ACL applies to.
IP polAclSrcMask	1.3.6.1.4.1.52.2501.1.12.4.1.6	IpAddress	read-write	The source L3 IP Mask this ACL Applies to.
SSR polAclSrcOperator	1.3.6.1.4.1.52.2501.1.12.4.1.12	SSRPortComparator	read-write	polAclSrcPort is compared using this operator.
SSR polAclSrcPort	1.3.6.1.4.1.52.2501.1.12.4.1.10	SSRsocketId	read-write	The source L3 IP source port/socket ACL applies to.
polAclTable	1.3.6.1.4.1.52.2501.1.12.4		not-accessible	A list of Access Control List entries.
INT polAclTOS	1.3.6.1.4.1.52.2501.1.12.4.1.9	INTEGER	read-write	The source L3 IP Type of Service field.
polCompliances	1.3.6.1.4.1.52.2501.1.210.2.1
polComplianceV10	1.3.6.1.4.1.52.2501.1.210.2.1.1			The compliance statement for the policyMIB.
polComplianceV11	1.3.6.1.4.1.52.2501.1.210.2.1.2			The compliance statement for the policyMIB for version 1.1.
polComplianceV12	1.3.6.1.4.1.52.2501.1.210.2.1.3			The compliance statement for the policyMIB for version 1.2.
polComplianceV13	1.3.6.1.4.1.52.2501.1.210.2.1.4			The compliance statement for the policyMIB for version 1.3.
polConformance	1.3.6.1.4.1.52.2501.1.210.2
polGroups	1.3.6.1.4.1.52.2501.1.210.2.2
polGroupV10	1.3.6.1.4.1.52.2501.1.210.2.2.1			A set of managed objects that make up version 1.0 of the SSR Flow Policy MIB.
polGroupV11	1.3.6.1.4.1.52.2501.1.210.2.2.2			A set of managed objects that make up version 1.1 of the SSR Flow Policy MIB.
polGroupV12	1.3.6.1.4.1.52.2501.1.210.2.2.3			A set of managed objects that make up version 1.2 of the SSR Flow Policy MIB.
polGroupV13	1.3.6.1.4.1.52.2501.1.210.2.2.4			A set of managed objects that make up version 1.3 of the SSR Flow Policy MIB.
policyMIB	1.3.6.1.4.1.52.2501.1.210			This module defines a schema to control filters on a device capable of Layer 3 filters also called Access Control Lists (ACLs) and at layer 2. It may also be used to configure static IP routes that use other IP header fields in addition to destination IP address.
polL2Dot1qVlanStaticEntry	1.3.6.1.4.1.52.2501.1.16.4.1		not-accessible	An entry containing additional hardware specific objects for a dot1qVlanStaticEntry.
T/F polL2Dot1qVlanStaticL4Bridging	1.3.6.1.4.1.52.2501.1.16.4.1.2	TruthValue	read-create	If this object has a value of false(2), the L4 Bridging feature is not enabled on this VLAN. If this object has a value of true(1), the L4 Bridging feature is enabled for this VLAN. This corresponds to the CLI command vlan enable l4-bridging.
BIT polL2Dot1qVlanStaticProtocols	1.3.6.1.4.1.52.2501.1.16.4.1.1	Bits	read-create	Specifies the types of traffic that will be forwarded on this VLAN. Protocols not set in this definition will be filtered. The types of protocols supported on this VLAN corresponds to the type option in the CLI command vlan create . If no protocols are specified, all protocols are forwarded. This corresponds to the port-based CLI option. reserved(0) - this bit is reserved and has no defined behavior. bridged-protocols(1) - this VLAN supports all bridged protocols excluding IP and IPX. Includes appletalk(4), dec(5), sna(6), and ipv6(7) if none of these protocols are set. If any are set, only those that are set are included. ip(2) - this VLAN supports IP protocol. ipx(3) - this VLAN supports IPX protocol. appletalk(4) - this VLAN supports Appletalk protocol. dec(5) - this VLAN supports DEC protocol. sna(6) - this VLAN supports SNA protocol. ipv6(7) - this VLAN supports IPv6 protocol.
polL2Dot1qVlanStaticTable	1.3.6.1.4.1.52.2501.1.16.4		not-accessible	A table containing hardware specific VLAN behavior configuration information for VLANs created with the dot1qVlanStaticTable. Configuration information for each VLAN configured into the device by (local or network) management.
TIK polL2FilterCreationTime	1.3.6.1.4.1.52.2501.1.16.3.1.10	TimeTicks	read-only	The value of sysUpTime when this filter was made active(1).
STR polL2FilterDesc	1.3.6.1.4.1.52.2501.1.16.3.1.2	DisplayString	read-create	A string used to describe the filter. It should contain the creator IP address, and other descriptive information about the filter. It is recommended that names be unique within a given filter type. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
MAC polL2FilterDstMacAddr	1.3.6.1.4.1.52.2501.1.16.3.1.6	MacAddress	read-create	The destination MAC address which has been learned. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
polL2FilterEntry	1.3.6.1.4.1.52.2501.1.16.3.1		not-accessible	An entry containing a layer 2 filter.
INT polL2FilterIndex	1.3.6.1.4.1.52.2501.1.16.3.1.1	INTEGER	not-accessible	A unique index into the table representing a single filter entry. This value will remain unique and the relationship between the index and the underlying filter is valid until the next reboot.
SSR polL2FilterInPorts	1.3.6.1.4.1.52.2501.1.16.3.1.8	SSRPortList	read-create	The set of Ports to which this filter applies on input. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
TIK polL2FilterLastChanged	1.3.6.1.4.1.52.2501.1.16.2	TimeTicks	read-only	The time the Access Control List were last changed.
INT polL2FilterNumber	1.3.6.1.4.1.52.2501.1.16.1	INTEGER	read-only	The number of Layer 3 Access Control Lists defined in the SSR.
SSR polL2FilterOutPorts	1.3.6.1.4.1.52.2501.1.16.3.1.9	SSRPortList	read-create	The set of ports to which this filter applies on output. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
INT polL2FilterRestrictions	1.3.6.1.4.1.52.2501.1.16.3.1.4	INTEGER	read-create	The first 3 restrictions, allow, disallow, force apply when the filterType is static-entry. When polL2FilterType is addressFilter or portAddressLock, this object does not apply. For securePort, the blockIngress, blockEgress values apply. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
MAC polL2FilterSrcMacAddr	1.3.6.1.4.1.52.2501.1.16.3.1.5	MacAddress	read-create	The source MAC address, which is present in case of a Flow, that has been learned by the switch.
ROW polL2FilterStatus	1.3.6.1.4.1.52.2501.1.16.3.1.11	RowStatus	read-create	SMIv2 RowStatus control for this table. Use createAndWait or createAndGo to create a filter, use destroy to remove an entry or notInService to disengage a filter without destroying it. A row in the notReady state has not had all the mandatory objects set.
polL2FilterTable	1.3.6.1.4.1.52.2501.1.16.3		not-accessible	A list of Layer 2 filters.
INT polL2FilterType	1.3.6.1.4.1.52.2501.1.16.3.1.3	INTEGER	read-create	The types of filters, as explained below. static-entry Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-static-entry - All frames with a source address equal to srcMAC, coming through any of the inPorts will be allowed/disallowed to go to any port that is a member of the outPorts list. destination-static-entry - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be allowed/ disallowed/forced to go to any port that is a member of the outPorts list. flow-static-entry - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be allowed/disallowed to go to any port that is a member of the outPorts list. Ports must be in flow-bridging mode in order to use filters with both src and dst mac specified. address-filter Based on the restrictions and the presence of source, destination MAC address they can be of three types : source-address-filter - All frames with a source address equal to srcMAC, coming through any of the inPorts will be filtered out. destination-address-filter - All frames with a destination address equal to dstMAC, coming through any of the inPorts will be filtered out. flow-filter - All frames with a source address equal to srcMAC and a destination address equal to dstMAC, coming through any of the inPorts list will be filtered out. Ports must be in flow mode in order to set a filter using both source and destination address. port-address-lock This locks a source address to a port. It allows learning of srcMAC addresses only on any of the ports in inPorts. The following objects are mandatory and must be set by mgmt station to activate a row: polL2FilterDesc, polL2FilterSrcMacAddr, polL2FilterInPorts secure-port This blocks all traffic in a given direction to a port. Used with static entries, it is effective in allowing only certain well defined source/destination mac addresses. The following objects must be set by mgmt station to activate an entry: polL2FilterDesc, r, polL2FilterInPorts This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
SSR polL2FilterVlanId	1.3.6.1.4.1.52.2501.1.16.3.1.7	SSRVlanIndex	read-create	The VLAN the destination MAC address belongs to. The default VLAN is id 1 on SSR. This object may not be modified if the associated. polL2FilterStatus object is equal to active(1).
polL2Group	1.3.6.1.4.1.52.2501.1.16
polL3Group	1.3.6.1.4.1.52.2501.1.12
polL4Group	1.3.6.1.4.1.52.2501.1.15
polL4GroupStats	1.3.6.1.4.1.52.2501.1.15.35
G32 polL4lowActiveGates	1.3.6.1.4.1.52.2501.1.15.30.1.11	Gauge32	read-only	The number of currently active nexthop gateways.
C32 polL4lowAppliedTimes	1.3.6.1.4.1.52.2501.1.15.30.1.12	Counter32	read-only	The number of times this policy was used.
C32 polL4lowArpMappingChanges	1.3.6.1.4.1.52.2501.1.15.35.4	Counter32	read-only	The count of mac to next hop IP address mapping changes affecting policy based route tables.
polL4lowControlEntry	1.3.6.1.4.1.52.2501.1.15.30.1		not-accessible	This table is an ordered collection of route policies. For SSR, this maps to the command: ip-policy Name [permit\|deny] acl acl-list
ROW polL4lowControlStatus	1.3.6.1.4.1.52.2501.1.15.30.1.13	RowStatus	read-create	Entries in active state cause a flow to remain programmed with the next hop router specified. If the next hop router goes down, the rowStatus will become inactive. New flows that match this specification will assume this next hop router over any other route directive. This assumes polL4PolicyBasedRouteState value is true.
polL4lowControlTable	1.3.6.1.4.1.52.2501.1.15.30		not-accessible	Contains Control rows that indicate which flows have been redirected. As flows are aged out and recreated, these rules will enforce flow redirection policy.
C32 polL4lowControlTableActivateFails	1.3.6.1.4.1.52.2501.1.15.35.3	Counter32	read-only	The count of unsuccessful flow control policies made.
C32 polL4lowControlTableActivates	1.3.6.1.4.1.52.2501.1.15.35.2	Counter32	read-only	The count of successful activations of flow control policies made.
TIK polL4lowControlTableLastChange	1.3.6.1.4.1.52.2501.1.15.25	TimeTicks	read-only	The value of sysUpTime when a row was last added or deleted from polL4lowControlTable.
TIK polL4lowCreationTime	1.3.6.1.4.1.52.2501.1.15.30.1.10	TimeTicks	read-only	The value of sysUpTime when policy went was created then activated.
C32 polL4lowIcmpRedirects	1.3.6.1.4.1.52.2501.1.15.35.16	Counter32	read-only	The count of next hop route redirects received that match a policy in the polL4lowControlTable. This can help to determine if bad route policies are in effect.
C32 polL4lowLostRoutersEx	1.3.6.1.4.1.52.2501.1.15.35.1	Counter32	read-only	The count of times routers were disabled from NextHopTable due to lost contact.
C32 polL4lowMatchAttempts	1.3.6.1.4.1.52.2501.1.15.35.17	Counter32	read-only	The count of total number of policy based flow lookups made against policy based route table.
polL4NextHopEntry	1.3.6.1.4.1.52.2501.1.15.20.1		not-accessible	An entry contains the status of a next hop router.
TIK polL4NextHopLastChange	1.3.6.1.4.1.52.2501.1.15.20.1.5	TimeTicks	read-only	The value of sysUpTime when this polL4NextHopState changed.
MAC polL4NextHopMacAddress	1.3.6.1.4.1.52.2501.1.15.20.1.4	MacAddress	read-only	MAC Address of next hop router learned from ARP.
NUM polL4NextHopPortOfExit	1.3.6.1.4.1.52.2501.1.15.20.1.3	InterfaceIndexOrZero	read-only	IfIndex of port we learned this router on or else zero if not known.
IP polL4NextHopRouter	1.3.6.1.4.1.52.2501.1.15.20.1.1	IpAddress	read-only	The IP Address of the next hop router flow will be sent to.
INT polL4NextHopState	1.3.6.1.4.1.52.2501.1.15.20.1.2	INTEGER	read-only	The current status of the polL4NextHopRouter. If no entry found when a policy route is activated, then arp for the request the state will be waitingForArp(2). If a reply is found the state will go to macAcquired(3) else noArpReply(4). If NextHop is not local, mac is actual nexthop router.
polL4NextHopTable	1.3.6.1.4.1.52.2501.1.15.20		not-accessible	A list of next hop IP routers.
TIK polL4NextHopTableLastChange	1.3.6.1.4.1.52.2501.1.15.10	TimeTicks	read-only	The value of sysUpTime when a row was last added or deleted from polL4NextHopTable.
INT polL4NumPolicies	1.3.6.1.4.1.52.2501.1.15.26	INTEGER	read-only	The number of policies currently available.
INT polL4NumRouters	1.3.6.1.4.1.52.2501.1.15.5	INTEGER	read-only	The number of next hop routers currently available.
SSR polL4PolicyAction	1.3.6.1.4.1.52.2501.1.15.30.1.5	SSRFlowPolicyAction	read-create	Define when this policy should be used during normal packet forwarding process.
T/F polL4PolicyBasedRoutingEnabled	1.3.6.1.4.1.52.2501.1.15.1	TruthValue	read-only	The state of Policy Based Routing on this network element.
I32 polL4PolicyInstance	1.3.6.1.4.1.52.2501.1.15.30.1.3	Integer32	not-accessible	The sequence of this policy based route. Lower numbers have higher precedence than higher numbers.
SSR polL4PolicyLoading	1.3.6.1.4.1.52.2501.1.15.30.1.8	SSRFlowLoadPolicy	read-create	When more than one next hop is defined and available, set loading policy here.
SSR polL4PolicyMatch	1.3.6.1.4.1.52.2501.1.15.30.1.6	SSRFlowPolicyAclList	read-create	Up to twenty (20) separate ACLs may be defined to match for this policy. This object is mandatory. Use active row from polAclTable.
STR polL4PolicyName	1.3.6.1.4.1.52.2501.1.15.30.1.1	DisplayString	not-accessible	A unique name for this flow policy.
SSR polL4PolicyNextHops	1.3.6.1.4.1.52.2501.1.15.30.1.7	SSRFlowNextHopList	read-create	Up to for IpAddresses may be specified to route data to next. Load balancing If more than one next hop ip address is specified, the default load balancing scheme is round robin. This object is mandatory. Use objects from polL4NextHopTable.
I32 polL4PolicySequence	1.3.6.1.4.1.52.2501.1.15.30.1.2	Integer32	not-accessible	The evaluation order of this object. When two objects have the same value, the value of the instance value decides which is evaluated first. than higher numbers.
SSR polL4PolicyType	1.3.6.1.4.1.52.2501.1.15.30.1.4	SSRFlowPolicyType	read-create	Controls if packets are forwarded or not for this policy.
T/F polL4PolicyWatch	1.3.6.1.4.1.52.2501.1.15.30.1.9	TruthValue	read-create	When True, use icmp echo to actively maintain status of next hop. This is useful to prevent data sinks with static routes.

RFC description

Cabletron Systems-private MIB for SSR (Source Specific Routing) policy management.

Start monitoring Cabletron/Enterasys Smart Switch Router (SSR) (ACL/policy filtering) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CTRON-SSR-POLICY-MIB