ENTERASYS-POLICY-PROFILE-MIB

All MIBs › ENTERASYS-POLICY-PROFILE-MIB

Organization: Enterasys Networks, Inc

Last Updated: 2010-08-09

Category: Technology: QoS, Vendor: Enterasys/Cabletron

Description: Enterasys Networks MIB for configuring per-user policy profiles that define access rules and QoS on network edge devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ENTERASYS-POLICY-PROFILE-MIB?

ENTERASYS-POLICY-PROFILE-MIB is an Enterasys Networks proprietary MIB for configuring per-user/per-port policy profiles that define access control and QoS treatment on Enterasys network edge and access devices. It exposes a policy profile table (name, VLAN/VID assignment, priority settings, row status) along with counters for the number/maximum of profiles and last-change tracking, plus associated notifications. This is primarily a configuration-state MIB: monitoring it lets an administrator verify how many policy profiles are defined versus the device maximum, confirm a specific profile's VLAN and priority settings are correctly applied, and detect recent policy changes via the last-change object and notifications -- a software/configuration health indicator rather than physical hardware status. It is a proprietary Enterasys enterprise MIB that works alongside other Enterasys policy and classification MIBs (etsysPolicyClassification is referenced in the same subtree) to build a complete edge-policy framework. It is typically deployed on Enterasys switches and wireless access/edge products where administrators enforce differentiated network access and QoS policy per user or port, using ENTERASYS-POLICY-PROFILE-MIB SNMP monitoring to verify those policies stay correctly applied.

IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-POLICY-PROFILE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys Networks switch/access edge device

Monitoring Examples

An administrator would poll etsysPolicyProfileNumEntries against etsysPolicyProfileMaxEntries to confirm the device has capacity for new profiles, and inspect etsysPolicyProfileTable entries (etsysPolicyProfileName, etsysPolicyProfilePortVid, etsysPolicyProfilePriorityStatus) to verify a given profile assigns the expected VLAN and priority. A recent etsysPolicyProfileLastChange timestamp combined with an etsysPolicyNotifications trap would alert on an unexpected policy modification.

What Can Be Monitored

number of policy profiles vs. maximum capacity
policy profile VLAN/VID assignment
policy profile priority settings
row status of policy profile entries
last policy profile change timestamp

Imported Objects

From BRIDGE-MIB

dot1dBasePort

OBJECT-TYPE

From ENTERASYS-MIB-NAMES

etsysModules

OBJECT-IDENTITY

From ENTERASYS-UPN-TC-MIB

StationAddress
StationAddressType

From IF-MIB

ifAlias	OBJECT-TYPE
ifName	OBJECT-TYPE

From P-BRIDGE-MIB

EnabledStatus

From Q-BRIDGE-MIB

PortList
VlanIndex

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

RowPointer
RowStatus
StorageType
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using etsysInvalidPolicyCount OID:

Select an Enterasys Networks switch (legacy, later Extreme Networks)/access edge device (per-user policy profiles) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type etsysInvalidPolicyCount into the Find box to locate it in the OID tree, then select it and click OK. Increments to indicate the number of times the device has detected an invalid/unknown policy. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
etsysPolicyProfileMIB	1.3.6.1.4.1.5624.1.2.6			This MIB module defines a portion of the SNMP enterprise MIBs under the Enterasys enterprise OID pertaining to the mapping of per user policy profiles for Enterasys network edge devices or access products.
etsysPolicyNotifications	1.3.6.1.4.1.5624.1.2.6.0
NTF etsysPolicyRulePortHitNotification	1.3.6.1.4.1.5624.1.2.6.0.1			This notification indicates that a policy rule has matched network traffic on a particular port.
etsysPolicyProfile	1.3.6.1.4.1.5624.1.2.6.1
I32 etsysPolicyProfileMaxEntries	1.3.6.1.4.1.5624.1.2.6.1.1	Integer32	read-only	The maximum number of entries allowed in the etsysPolicyProfileTable.
G32 etsysPolicyProfileNumEntries	1.3.6.1.4.1.5624.1.2.6.1.2	Gauge32	read-only	The current number of entries in the etsysPolicyProfileTable.
TIK etsysPolicyProfileLastChange	1.3.6.1.4.1.5624.1.2.6.1.3	TimeTicks	read-only	The sysUpTime at which the etsysPolicyProfileTable was last modified.
I32 etsysPolicyProfileTableNextAvailableIndex	1.3.6.1.4.1.5624.1.2.6.1.4	Integer32	read-only	This object indicates the numerically lowest available index within this entity, which may be used for the value of etsysPolicyProfileIndex in the creation of a new entry in the etsysPolicyProfileTable. An index is considered available if the index value falls within the range of 1 to 65535 and is not being used to index an existing entry in the etsysPolicyProfileTable contained within this entity. This value should only be considered a guideline for management creation of etsysPolicyProfileEntries, there is no requirement on management to create entries based upon this index value.
etsysPolicyProfileTable	1.3.6.1.4.1.5624.1.2.6.1.5		not-accessible	A table containing policy profiles. A policy is a group of classification rules which may be applied on a per user basis, to ports or to stations.
etsysPolicyProfileEntry	1.3.6.1.4.1.5624.1.2.6.1.5.1		not-accessible	Conceptually defines a particular entry within the etsysPolicyProfileTable. Entries within this table MUST be considered non-volatile and MUST be maintained across entity resets.
I32 etsysPolicyProfileIndex	1.3.6.1.4.1.5624.1.2.6.1.5.1.1	Integer32	not-accessible	A unique arbitrary identifier for this Policy. Since a policy will be applied to a user regardless of his or her location in the network fabric policy names SHOULD be unique within the entire network fabric. Policy IDs and policy names MUST be unique within the scope of a single managed entity.
STR etsysPolicyProfileName	1.3.6.1.4.1.5624.1.2.6.1.5.1.2	SnmpAdminString	read-create	Administratively assigned textual description of this Policy. This object MUST NOT be modifiable while this entry's RowStatus is active(1).
ROW etsysPolicyProfileRowStatus	1.3.6.1.4.1.5624.1.2.6.1.5.1.3	RowStatus	read-create	This object allows for the dynamic creation and deletion of entries within the etsysPolicyProfileTable as well as the activation and deactivation of these entries. When this object's value is active(1) the corresponding row's etsysPolicyProfilePortVid, etsysPolicyProfilePriority, and all entries within the etsysPolicyClassificationTable indexed by this row's etsysPolicyProfileIndex are available to be applied to network access ports or stations on the managed entity. All ports corresponding to rows within the etsysPortPolicyProfileTable whose etsysPortPolicyProfileOperID is equal to the etsysPolicyProfileIndex, shall have the corresponding policy applied. Likewise, all stations corresponding to rows within the etsysStationPolicyProfileTable whose etsysStationPolicyProfileOperID is equal to the etsysPolicyProfileIndex, shall have the corresponding policy applied. The value of etsysPortPolicyProfileOperID for each such row in the etsysPortPolicyProfileTable will be equal to the etsysPortPolicyProfileAdminID, unless the authorization information from a source such as a RADIUS server indicates to the contrary. Refer to the specific objects within this MIB as well as well as RFC2674, the CTRON-PRIORITY-CLASSIFY-MIB, the CTRON-VLAN-CLASSIFY-MIB, and the CTRON-RATE-POLICING-MIB for a complete explanation of the application and behavior of these objects. When this object's value is set to notInService(2) this policy will not be applied to any rows within the etsysPortPolicyProfileTable. To allow policy profiles to be applied for security implementations, setting this object's value from active(1) to notInService(2) or destroy(6) SHALL fail if one or more instances of etsysPortPolicyProfileOperID or etsysStationPolicyProfileOperID currently reference this entry's associated policy due to a set by an underlying security protocol such as RADIUS. For network functionality and clarity, setting this object to destroy(6) SHALL fail if one or more instances of etsysPortPolicyProfileOperID or etsysStationPolicyProfileOperID currently references this entry's etsysPolicyProfileIndex. Refer to the RowStatus convention for further details on the behavior of this object.
ENA etsysPolicyProfilePortVidStatus	1.3.6.1.4.1.5624.1.2.6.1.5.1.4	EnabledStatus	read-create	This object defines whether a PVID override should be applied to ports which have this profile active. enabled(1) means that any port with this policy active will have this row's etsysPolicyProfilePortVid applied to untagged frames or priority-tagged frames received on this port. disabled(2) means that etsysPolicyProfilePortVid will not be applied. When this object is set to disabled(2) the value of etsysPolicyProfilePortVid has no meaning.
U32 etsysPolicyProfilePortVid	1.3.6.1.4.1.5624.1.2.6.1.5.1.5	Unsigned32	read-create	This object defines the PVID of this profile. If a port has an active policy and the policy's etsysPolicyProfilePortVidStatus is set to enabled(1), the etsysPolicyProfilePortVid will be applied to all untagged frames arriving on the port that do not match any of the policy classification rules. Note that the 802.1Q PVID will still exist from a management view but will NEVER be applied to traffic arriving on a port that has an active policy and enabled etsysPolicyProfilePortVid defined, since policy is applied to traffic arriving on the port prior to the assignment of a VLAN using the 802.1Q PVID. The behavior of an enabled etsysPolicyProfilePortVid on any associated port SHALL be identical to the behavior of the dot1qPvid upon that port. Note that two special, otherwise illegal, values of the etsysPolicyProfilePortVid are used in defining the default forwarding actions, to be used in conjunction with policy classification rules, and do not result in packet tagging: 0 Indicates that the default forwarding action is to drop all packets that do not match an explicit rule. 4095 Indicates that the default forwarding action is to forward any packets not matching any explicit rules.
ENA etsysPolicyProfilePriorityStatus	1.3.6.1.4.1.5624.1.2.6.1.5.1.6	EnabledStatus	read-create	This object defines whether a Class of Service should be applied to ports which have this profile active. enabled(1) means that any port with this policy active will have etsysPolicyProfilePriority applied to this port. disabled(2) means that etsysPolicyProfilePriority will not be applied. When this object is set to disabled(2) the value of etsysPolicyProfilePriority has no meaning.
I32 etsysPolicyProfilePriority	1.3.6.1.4.1.5624.1.2.6.1.5.1.7	Integer32	read-create	This object defines the default ingress Class of Service of this profile. If a port has an active policy and the policy's etsysPolicyProfilePriorityStatus is set to enabled(1), the etsysPolicyProfilePriority will be applied to all packets arriving on the port that do not match any of the policy classification rules. Note that dot1dPortDefaultUserPriority will still exist from a management view but will NEVER be applied to traffic arriving on a port that has an active policy and enabled etsysPolicyProfilePriority defined, since policy is applied to traffic arriving on the port prior to the assignment of a priority using dot1dPortDefaultUserPriority. The behavior of an enabled etsysPolicyProfilePriority on any associated port SHALL be identical to the behavior of the dot1dPortDefaultUserPriority upon that port.
VLA etsysPolicyProfileEgressVlans	1.3.6.1.4.1.5624.1.2.6.1.5.1.8	VlanList	read-create	The set of VLANs which are assigned by this policy to egress on ports for which this policy is active. Changes to a bit in this object affect the per-port per-VLAN Registrar control for Registration Fixed for the relevant GVRP state machine on each port for which this policy is active. A VLAN may not be added in this set if it is already a member of the set of VLANs in etsysPolicyProfileForbiddenVlans. This object is superseded on a per-port per-VLAN basis by any 'set' bits in dot1qVlanStaticEgressPorts and dot1qVlanForbiddenEgressPorts. The default value of this object is a string of zeros.
VLA etsysPolicyProfileForbiddenVlans	1.3.6.1.4.1.5624.1.2.6.1.5.1.9	VlanList	read-create	The set of VLANs which are prohibited by this policy to egress on ports for which this policy is active. Changes to this object that cause a port to be included or excluded affect the per-port per-VLAN Registrar control for Registration Forbidden for the relevant GVRP state machine on each port for which this policy is active. A VLAN may not be added in this set if it is already a member of the set of VLANs in etsysPolicyProfileEgressVlans. This object is superseded on a per-port per-VLAN basis by any 'set' bits in the dot1qVlanStaticEgressPorts and dot1qVlanForbiddenEgressPorts. The default value of this object is a string of zeros.
VLA etsysPolicyProfileUntaggedVlans	1.3.6.1.4.1.5624.1.2.6.1.5.1.10	VlanList	read-create	The set of VLANs which should transmit egress packets as untagged on ports for which this policy is active. This object is superseded on a per-port per-VLAN basis by any 'set' bits in dot1qVlanStaticUntaggedPorts.
ENA etsysPolicyProfileOverwriteTCI	1.3.6.1.4.1.5624.1.2.6.1.5.1.11	EnabledStatus	read-create	If set, the information contained within the TCI field of inbound, tagged packets will not be used by the device after the ingress classification stage of packet relay. The net effect will be that the TCI information may be used to classify the packet, but will be overwritten (and ignored) by subsequent stages of packet relay.
OCT etsysPolicyProfileRulePrecedence	1.3.6.1.4.1.5624.1.2.6.1.5.1.12	OCTET STRING	read-create	Each octet will contain a single value representing the rule type to be matched against, defined by the PolicyClassificationRuleType textual convention. When read, will return the currently operating rule matching precedence, ordered from first consulted (in the first octet) to last consulted (in the last octet). A set of a single octet of 0x00 will result in a reversion to the default precedence ordering. A set of any other values will result in the specified rule types being matched in the order specified, followed by the remaining rules, in default precedence order.
VLA etsysPolicyProfileVlanRFC3580Mappings	1.3.6.1.4.1.5624.1.2.6.1.5.1.13	VlanList	read-only	The set of VLANs which are currently being mapped onto this policy profile by the etsysPolicyRFC3580MapTable. This only refers to the mapping of vlan-tunnel-attributes returned from RADIUS in an RFC3580 context.
I32 etsysPolicyProfileMirrorIndex	1.3.6.1.4.1.5624.1.2.6.1.5.1.14	Integer32	read-create	A reference to a packet mirror destination (defined elsewhere). A value of (-1) indicates no mirror is specified, but a mirror is not explicitly prohibitted. A value of (0) indicates that mirroring is explicitly prohibitted, unless a high precedent source (a rule) has specified a mirror.
ENA etsysPolicyProfileAuditSyslogEnable	1.3.6.1.4.1.5624.1.2.6.1.5.1.15	EnabledStatus	read-create	Enables the sending of a syslog message if no rule bound to this profile has prohibited it.
ENA etsysPolicyProfileAuditTrapEnable	1.3.6.1.4.1.5624.1.2.6.1.5.1.16	EnabledStatus	read-create	Enables the sending of a SNMP NOTIFICATION if no rule bound to this profile has prohibited it.
ENA etsysPolicyProfileDisablePort	1.3.6.1.4.1.5624.1.2.6.1.5.1.17	EnabledStatus	read-create	Will set the ifOperStatus of the port, on which the frame which used this profile was received, to disable, if if no rule bound to this profile has prohibited it.
POR etsysPolicyProfileUsageList	1.3.6.1.4.1.5624.1.2.6.1.5.1.18	PortList	read-write	When read, a set bit indicates that this profile was used to send a syslog or trap message for corresponding port. When set, the native PortList will be bit-wise AND'ed with the set PortList, allowing the agent to clear the usage indication.
etsysPolicyClassification	1.3.6.1.4.1.5624.1.2.6.2
I32 etsysPolicyClassificationMaxEntries	1.3.6.1.4.1.5624.1.2.6.2.1	Integer32	read-only	The maximum number of entries allowed in the etsysPolicyClassificationTable.
G32 etsysPolicyClassificationNumEntries	1.3.6.1.4.1.5624.1.2.6.2.2	Gauge32	read-only	The current number of entries in the etsysPolicyClassificationTable.
TIK etsysPolicyClassificationLastChange	1.3.6.1.4.1.5624.1.2.6.2.3	TimeTicks	read-only	The sysUpTime at which the etsysPolicyClassificationTable was last modified.
etsysPolicyClassificationTable	1.3.6.1.4.1.5624.1.2.6.2.4		not-accessible	A table containing reference OIDs to entries within the classification tables. These classification tables include but may not be limited to: ctPriClassifyTable ctVlanClassifyTable ctRatePolicyingConfigTable This table is used to map a list of classification rules to an instance of the etsysPolicyProfileTable.
etsysPolicyClassificationEntry	1.3.6.1.4.1.5624.1.2.6.2.4.1		not-accessible	Describes a particular entry within the etsysPolicyClassificationTable. Entries within this table MUST be considered non-volatile and MUST be maintained across entity resets.
I32 etsysPolicyClassificationIndex	1.3.6.1.4.1.5624.1.2.6.2.4.1.1	Integer32	not-accessible	Administratively assigned unique value, greater than zero. Each etsysPolicyClassificationIndex instance MUST be unique within the scope of its associated etsysPolicyProfileIndex.
NUM etsysPolicyClassificationOID	1.3.6.1.4.1.5624.1.2.6.2.4.1.2	RowPointer	read-create	This object follows the RowPointer textual convention and is an OID reference to a classification rule. This object MUST NOT be modifiable while this entry's etsysPolicyClassificationStatus object has a value of active(1).
ROW etsysPolicyClassificationRowStatus	1.3.6.1.4.1.5624.1.2.6.2.4.1.3	RowStatus	read-create	The status of this row. When set to active(1) this entry's classification rule, as referenced by etsysPolicyClassificationOID, becomes one of its associated policy's set of rules. When this entry's associated policy, as defined by etsysPolicyProfileIndex, is active and assigned to a port through the etsysPortPolicyProfileTable or to a station through the etsysStationPolicyProfileTabbe, this classification rule will be applied to the port or station. The exact behavior of this application depends upon the classification rule. When this object is set to notInService(2) or notReady(3) this entry is not considered one of its associated policy's set of rules and this classification rule will not be applied. An entry MAY NOT be set to active(1) unless this row's etsysPolicyClassificationOID is set to a valid classification rule.
POR etsysPolicyClassificationIngressList	1.3.6.1.4.1.5624.1.2.6.2.4.1.4	PortList	read-only	The ports on which an active policy profile has defined this classification rule applies.
etsysPortPolicyProfile	1.3.6.1.4.1.5624.1.2.6.3
TIK etsysPortPolicyProfileLastChange	1.3.6.1.4.1.5624.1.2.6.3.1	TimeTicks	read-only	sysUpTime at which the etsysPortPolicyProfileTable was last modified.
etsysPortPolicyProfileTable	1.3.6.1.4.1.5624.1.2.6.3.2		not-accessible	This table allows for a one to one mapping between a dot1dBasePort or an ifIndex and a Policy Profile.
etsysPortPolicyProfileEntry	1.3.6.1.4.1.5624.1.2.6.3.2.1		not-accessible	Describes a particular entry within the etsysPortPolicyProfileTable. Entries within this table MUST be considered non-volatile and MUST be maintained across entity resets.
POR etsysPortPolicyProfileIndexType	1.3.6.1.4.1.5624.1.2.6.3.2.1.1	PortPolicyProfileIndexTypeTC	not-accessible	This object defines the specific type of port this entry represents.
I32 etsysPortPolicyProfileIndex	1.3.6.1.4.1.5624.1.2.6.3.2.1.2	Integer32	not-accessible	An index value which represents a unique port of the type defined by this entry's etsysPortPolicyProfileIndexType.
POL etsysPortPolicyProfileAdminID	1.3.6.1.4.1.5624.1.2.6.3.2.1.3	PolicyProfileIDTC	read-write	This object represents the desired Policy Profile for this dot1dBasePort or this ifIndex. Setting this object to any value besides zero (0) should, if possible, immediately place this entry's dot1dBasePort or ifIndex into the given Policy Profile. This object and etsysPortPolicyProfileOperID may not be the same if this object is set to a Policy (i.e. an instance of the etsysPolicyProfileTable) which is not in an active state or if the etsysPortPolicyProfileOperID has been set by an underlying security protocol such as RADIUS.
POL etsysPortPolicyProfileOperID	1.3.6.1.4.1.5624.1.2.6.3.2.1.4	PolicyProfileIDTC	read-only	This object is the current policy which is being applied to this entry's dot1dBasePort. A value of zero(0) indicates there is no policy being applied to this dot1dBasePort or this ifIndex. If the value of this object has been set by an underlying security protocol such as RADIUS, sets to this entry's etsysPortPolicyProfileAdminID MUST NOT change the value of this object until such time as the security protocol releases this object by setting it to a value of zero (0).
etsysPortPolicyProfileSummaryTable	1.3.6.1.4.1.5624.1.2.6.3.3		not-accessible	This table provides aggregate port information on a per policy, per port type basis.
etsysPortPolicyProfileSummaryEntry	1.3.6.1.4.1.5624.1.2.6.3.3.1		not-accessible	Conceptually defines a particular entry within the etsysPortPolicyProfileSummaryTable.
POR etsysPortPolicyProfileSummaryIndexType	1.3.6.1.4.1.5624.1.2.6.3.3.1.1	PortPolicyProfileIndexTypeTC	not-accessible	This object defines the specific type of port this entry represents.
POR etsysPortPolicyProfileSummaryAdminID	1.3.6.1.4.1.5624.1.2.6.3.3.1.2	PortList	read-only	An aggregate list of all Ports currently supporting rules which assign this profileIndex through administrative means. Rules of this type have a valid etsysPolicyRuleResult2 action and a profileIndex of 0.
POR etsysPortPolicyProfileSummaryOperID	1.3.6.1.4.1.5624.1.2.6.3.3.1.3	PortList	read-only	An aggregate list of all Ports currently supporting rules which assign this profileIndex through either an administrative or dynamic means. The profileId which will be assigned operationally, as frames are handled are too be reported here.
POR etsysPortPolicyProfileSummaryDynamicID	1.3.6.1.4.1.5624.1.2.6.3.3.1.4	PortList	read-only	An aggregate list of all Ports currently supporting rules which assign this profileIndex through a dynamic means. For example the profileIndex returned via a successful 802.1X supplicant authentication.
etsysPolicyVlanEgress	1.3.6.1.4.1.5624.1.2.6.4
etsysStationPolicyProfile	1.3.6.1.4.1.5624.1.2.6.5
I32 etsysStationPolicyProfileMaxEntries	1.3.6.1.4.1.5624.1.2.6.5.1	Integer32	read-only	The maximum number of entries allowed in the etsysStationPolicyProfileTable. If this number is exceeded, based on stations connecting to the edge device, the oldest entries will be deleted.
G32 etsysStationPolicyProfileNumEntries	1.3.6.1.4.1.5624.1.2.6.5.2	Gauge32	read-only	The current number of entries in the etsysStationPolicyProfileTable.
TIK etsysStationPolicyProfileLastChange	1.3.6.1.4.1.5624.1.2.6.5.3	TimeTicks	read-only	sysUpTime at which the etsysStationPolicyProfileTable was last modified.
etsysStationPolicyProfileTable	1.3.6.1.4.1.5624.1.2.6.5.4		not-accessible	This table allows for a one to one mapping between a station's identifying address and a Policy Profile.
etsysStationPolicyProfileEntry	1.3.6.1.4.1.5624.1.2.6.5.4.1		not-accessible	Describes a particular entry within the etsysStationPolicyProfileTable. Entries within this table MUST be considered non-volatile and MUST be maintained across entity resets.
I32 etsysStationPolicyProfileIndex	1.3.6.1.4.1.5624.1.2.6.5.4.1.2	Integer32	not-accessible	An index value which represents a unique station entry.
ADR etsysStationIdentifierType	1.3.6.1.4.1.5624.1.2.6.5.4.1.3	StationAddressType	read-only	Indicates the type of station identifying address contained in etsysStationIdentifier.
ADR etsysStationIdentifier	1.3.6.1.4.1.5624.1.2.6.5.4.1.4	StationAddress	read-only	A value which represents a unique MAC Address, IP Address, or other identifying address for a station, or other logical and authenticatable sub-entity within a station, connected to a port.
POL etsysStationPolicyProfileOperID	1.3.6.1.4.1.5624.1.2.6.5.4.1.5	PolicyProfileIDTC	read-only	This object is the current policy which is being applied to this entry's MAC Address. A value of zero(0) indicates there is no policy being applied to this MAC Address. The value of this object reflects either the setting from an underlying AAA service such as RADIUS, or the default setting based on the etsysPortPolicyProfileAdminID for the port on which the station is connected. This object and the corresponding etsysPortPolicyProfileAdminID will not be the same if this object has been set by an underlying security protocol such as RADIUS.
POR etsysStationPolicyProfilePortType	1.3.6.1.4.1.5624.1.2.6.5.4.1.6	PortPolicyProfileIndexTypeTC	read-only	A textual convention that defines the specific type of port designator the corresponding entry represents.
I32 etsysStationPolicyProfilePortID	1.3.6.1.4.1.5624.1.2.6.5.4.1.7	Integer32	read-only	A value which represents the physical port, of the type defined by this entry's etsysStationPolicyProfilePortType, on which the associated station entity is connected. This object is for convenience in cross referencing stations to ports.
etsysInvalidPolicyPolicy	1.3.6.1.4.1.5624.1.2.6.6
INT etsysInvalidPolicyAction	1.3.6.1.4.1.5624.1.2.6.6.1	INTEGER	read-write	Specifies the action that the edge device should take if asked to apply an invalid or unknown policy. applyDefaultPolicy(1) - Ignore the result and search for the next policy assignment rule. dropPackets(2) - Block traffic. forwardPackets(3) - Forward traffic, as if no policy had been assigned (via 802.1D/Q rules). Although dropPackets(2) is the most secure option, it may not always be desirable.
C32 etsysInvalidPolicyCountEx	1.3.6.1.4.1.5624.1.2.6.6.2	Counter32	read-only	Increments to indicate the number of times the device has detected an invalid/unknown policy.
etsysPolicyProfileConformance	1.3.6.1.4.1.5624.1.2.6.7
etsysPolicyProfileGroups	1.3.6.1.4.1.5624.1.2.6.7.1
etsysPolicyProfileGroup	1.3.6.1.4.1.5624.1.2.6.7.1.1			A collection of objects providing Policy Profile Creation.
etsysPolicyClassificationGroup	1.3.6.1.4.1.5624.1.2.6.7.1.2			A collection of objects providing a mapping between a set of Classification Rules and a Policy Profile.
etsysPortPolicyProfileGroup	1.3.6.1.4.1.5624.1.2.6.7.1.3			A collection of objects providing a mapping from a specific port to a Policy Profile instance. Only the read-only portions of this group are now current. They are listed under etsysPortPolicyProfileGroup2.
etsysStationPolicyProfileGroup	1.3.6.1.4.1.5624.1.2.6.7.1.5			A collection of objects providing a mapping from a specific station to a Policy Profile instance.
etsysInvalidPolicyPolicyGroup	1.3.6.1.4.1.5624.1.2.6.7.1.6			A collection of objects that help to define a mapping from logical authorization services outcomes to access control and policy actions.
etsysDevicePolicyProfileGroup	1.3.6.1.4.1.5624.1.2.6.7.1.7			An object that provides a device level supplemental policy for entities that are not able to apply portions of the profile definition uniquely on individual ports.
etsysPolicyCapabilitiesGroup	1.3.6.1.4.1.5624.1.2.6.7.1.8			An object that indicates the capabilities of the managed entity with respect to Policy Profiles.
etsysPolicyMapGroup	1.3.6.1.4.1.5624.1.2.6.7.1.9			This object group has been obsoleted.
etsysPolicyRulesGroup	1.3.6.1.4.1.5624.1.2.6.7.1.10			An object that indicates the capabilities of the managed entity with respect to Policy Profiles.
etsysPortPolicyProfileGroup2	1.3.6.1.4.1.5624.1.2.6.7.1.11			A collection of objects providing a mapping from a specific port to a Policy Profile instance.
etsysPolicyRFC3580MapGroup	1.3.6.1.4.1.5624.1.2.6.7.1.12			An object group that provides support for mapping between RFC 3580 style VLAN-policy and Enterasys UPN-policy based on named roles.
etsysPolicyCapabilitiesGroup2	1.3.6.1.4.1.5624.1.2.6.7.1.13			An object that indicates the capabilities of the managed entity with respect to Policy Profiles and defines the characteristics of policy rule data by rule type.
etsysPolicyRulesGroup2	1.3.6.1.4.1.5624.1.2.6.7.1.14			******* THIS GROUP IS DEPRECATED ******** An object that indicates the capabilities of the managed entity with respect to Policy Profiles.
etsysPolicyRulePortHitNotificationGroup	1.3.6.1.4.1.5624.1.2.6.7.1.15			An object group that provides support for traps sent from the etsysPolicyRulePortHit event.
etsysPolicyRulesGroup3	1.3.6.1.4.1.5624.1.2.6.7.1.16			An object that indicates the capabilities of the managed entity with respect to Policy Profiles.
etsysPolicyRulesGroup4	1.3.6.1.4.1.5624.1.2.6.7.1.17			An object that indicates the capabilities of the managed entity with respect to Policy Profiles.
etsysPolicyCapabilitiesGroup3	1.3.6.1.4.1.5624.1.2.6.7.1.18			An object that indicates the capabilities of the managed entity with respect to Policy Profiles and defines the characteristics of policy rule data by rule type.
etsysPolicyProfileGroup2	1.3.6.1.4.1.5624.1.2.6.7.1.19			A collection of objects providing Policy Profile Creation.
etsysPolicyRulesGroup5	1.3.6.1.4.1.5624.1.2.6.7.1.20			An object that indicates the capabilities of the managed entity with respect to Policy Profiles.
etsysPolicyCapabilitiesGroup4	1.3.6.1.4.1.5624.1.2.6.7.1.21			An object that indicates the capabilities of the managed entity with respect to Policy Profiles and defines the characteristics of policy rule data by rule type.
etsysPolicyProfileGroup3	1.3.6.1.4.1.5624.1.2.6.7.1.22			A collection of objects providing Policy Profile Creation.
etsysPolicyProfileCompliances	1.3.6.1.4.1.5624.1.2.6.7.2
etsysPolicyProfileCompliance	1.3.6.1.4.1.5624.1.2.6.7.2.1			The compliance statement for devices that support Policy Profiles. This compliance statement was deprecated to add mandatory support for the etsysPolicyCapabilitiesGroup and conditionally mandatory support for the etsysDevicePolicyProfileGroup.
etsysPolicyProfileCompliance2	1.3.6.1.4.1.5624.1.2.6.7.2.2			The compliance statement for devices that support Policy Profiles. This compliance state was deprecated to remove the conditional support of the etsysPolicyClassificationGroup, and add support for the etsysPolicyRFC3580MapGroup and the etsysPolicyRulesGroup.
etsysPolicyProfileCompliance3	1.3.6.1.4.1.5624.1.2.6.7.2.3			The compliance statement for devices that support Policy Profiles.
etsysPolicyProfileCompliance4	1.3.6.1.4.1.5624.1.2.6.7.2.4			The compliance statement for devices that support Policy Profiles.
etsysPolicyProfileCompliance5	1.3.6.1.4.1.5624.1.2.6.7.2.5			The compliance statement for devices that support Policy Profiles.
etsysPolicyProfileCompliance6	1.3.6.1.4.1.5624.1.2.6.7.2.6			The compliance statement for devices that support Policy Profiles.
etsysPolicyProfileCompliance7	1.3.6.1.4.1.5624.1.2.6.7.2.7			The compliance statement for devices that support Policy Profiles.
etsysDevicePolicyProfile	1.3.6.1.4.1.5624.1.2.6.8
I32 etsysDevicePolicyProfileDefault	1.3.6.1.4.1.5624.1.2.6.8.1	Integer32	read-write	If this value is non-zero, the value indicates the etsysPolicyProfileEntry (and its associated etsysPolicyClassificationTable entries) which should be used by the device if the device is incapable of using the profile (or specific parts of the profile) explicitly applied to an inbound frame. A value of zero indicates that no default profile is currently active.
etsysPolicyCapability	1.3.6.1.4.1.5624.1.2.6.9
BIT etsysPolicyCapabilities	1.3.6.1.4.1.5624.1.2.6.9.1	Bits	read-only	A list of capabilities related to policies. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyDynaPIDRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.2	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of dynamically assigning a profile to the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyAdminPIDRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.3	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of administratively assigning a profile to the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyVlanRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.4	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of assigning a VlanId to the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyCosRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.5	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of assigning a CoS to the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyDropRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.6	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of discarding the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyForwardRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.7	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of forwarding the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicySyslogRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.8	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of issuing syslog messages when the rule is used to identify the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyTrapRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.9	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of issuing an SNMP notify (trap) messages when the rule is used to identify the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyDisablePortRuleCapabilities	1.3.6.1.4.1.5624.1.2.6.9.10	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of disabling the ingress port identified when the rule matches the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POR etsysPolicySupportedPortList	1.3.6.1.4.1.5624.1.2.6.9.11	PortList	read-only	The list ports which support policy profile assignment (i.e. the ports which _do_ policy). This object may be useful to management entities which desire to scope action to only those ports which support policy. A port which appears in this list, must support, at minimum, the assignment of a policy profile to all traffic ingressing the port.
etsysPolicyEnabledTable	1.3.6.1.4.1.5624.1.2.6.9.12		not-accessible	This table allows for the configuration of policy profile assignment methods, per port, including the ability to disable policy profile assignment, per port. In addition, a ports capabilities, with respect to policy profile assignment are reported.
etsysPolicyEnabledTableEntry	1.3.6.1.4.1.5624.1.2.6.9.12.1		not-accessible	Describes a particular entry within the etsysPolicyEnabledTable.
POL etsysPolicyEnabledSupportedRuleTypes	1.3.6.1.4.1.5624.1.2.6.9.12.1.1	PolicyRulesSupported	read-only	The list of rule types which the devices supports for the purpose of assigning policy profiles to network traffic ingressing this dot1dBasePort.
POL etsysPolicyEnabledEnabledRuleTypes	1.3.6.1.4.1.5624.1.2.6.9.12.1.2	PolicyRulesSupported	read-write	The list of rule types from which the device will assign policy profiles to network traffic ingressing this dot1dBasePort. Rules which have a type not enumerated here must not be used to assign policy profiles, but must still be used to interrogate the rule-set bound to the determined policy profile. A set of all cleared bits will effectively disable policy in the port.
ENA etsysPolicyEnabledEgressEnabled	1.3.6.1.4.1.5624.1.2.6.9.12.1.3	EnabledStatus	read-write	Controls the enabling and disabling the application of policy as packets egress the switching process on the dot1dBasePort specified in the indexing.
etsysPolicyRuleAttributeTable	1.3.6.1.4.1.5624.1.2.6.9.13		not-accessible	This table details each supported rule type attribute for rule data length in bytes, rule data length in bits, and the maximum number of rules that may use that type.
etsysPolicyRuleAttributeTableEntry	1.3.6.1.4.1.5624.1.2.6.9.13.1		not-accessible	Describes a particular entry within the etsysPolicyRuleAttributeTable.
I32 etsysPolicyRuleAttributeByteLength	1.3.6.1.4.1.5624.1.2.6.9.13.1.1	Integer32	read-only	This rule type's maximum length, in bytes of the etsysPolicyRuleData. Devices supporting this object MUST allow sets for this rule data of any valid length up to and including the length value represented by this object. Management entities must also expect to read back the maximum data length for each type regardless of the length the data was set with.
I32 etsysPolicyRuleAttributeBitLength	1.3.6.1.4.1.5624.1.2.6.9.13.1.2	Integer32	read-only	This rule type's maximum bit length for traffic data. This value also represents the maximum mask that may be used for rule data. The mask MUST NOT exceed the rule data size. Masks that exceed the data size shall be considered invalid and result in an SNMP set failure.
I32 etsysPolicyRuleAttributeMaxCreatable	1.3.6.1.4.1.5624.1.2.6.9.13.1.3	Integer32	read-only	If this value is non-zero, the value indicates the maximum number of rules of this type the agent can support.
POL etsysPolicyRuleTciOverwriteCapabilities	1.3.6.1.4.1.5624.1.2.6.9.14	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of overwriting the TCI in received packets described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
POL etsysPolicyRuleMirrorCapabilities	1.3.6.1.4.1.5624.1.2.6.9.15	PolicyRulesSupported	read-only	A list of rule types which are supported by this device for the purpose of mirroring the network traffic described by the bit. A set bit, with the value 1, indicates support for the described functionality. A clear bit, with the value 0, indicates the described functionality is not supported.
etsysPolicyMap	1.3.6.1.4.1.5624.1.2.6.10
I32 etsysPolicyMapMaxEntries	1.3.6.1.4.1.5624.1.2.6.10.1	Integer32	read-only	This has been obsoleted.
G32 etsysPolicyMapNumEntries	1.3.6.1.4.1.5624.1.2.6.10.2	Gauge32	read-only	This has been obsoleted.
TIK etsysPolicyMapLastChange	1.3.6.1.4.1.5624.1.2.6.10.3	TimeTicks	read-only	This has been obsoleted.
T/F etsysPolicyMapPvidOverRide	1.3.6.1.4.1.5624.1.2.6.10.4	TruthValue	read-write	This has been obsoleted.
INT etsysPolicyMapUnknownPvidPolicy	1.3.6.1.4.1.5624.1.2.6.10.5	INTEGER	read-write	This has been obsoleted.
etsysPolicyMapTable	1.3.6.1.4.1.5624.1.2.6.10.6		not-accessible	This has been obsoleted.
etsysPolicyMapEntry	1.3.6.1.4.1.5624.1.2.6.10.6.1		not-accessible	This has been obsoleted.
I32 etsysPolicyMapIndex	1.3.6.1.4.1.5624.1.2.6.10.6.1.1	Integer32	not-accessible	This has been obsoleted.
ROW etsysPolicyMapRowStatus	1.3.6.1.4.1.5624.1.2.6.10.6.1.2	RowStatus	read-create	This has been obsoleted.
U32 etsysPolicyMapStartVid	1.3.6.1.4.1.5624.1.2.6.10.6.1.3	Unsigned32	read-create	This has been obsoleted.
U32 etsysPolicyMapEndVid	1.3.6.1.4.1.5624.1.2.6.10.6.1.4	Unsigned32	read-create	This has been obsoleted.
I32 etsysPolicyMapPolicyIndex	1.3.6.1.4.1.5624.1.2.6.10.6.1.5	Integer32	read-create	This has been obsoleted.
etsysPolicyRules	1.3.6.1.4.1.5624.1.2.6.11
I32 etsysPolicyRulesMaxEntries	1.3.6.1.4.1.5624.1.2.6.11.1	Integer32	read-only	The maximum number of entries allowed in the etsysPolicyRulesTable.
G32 etsysPolicyRulesNumEntries	1.3.6.1.4.1.5624.1.2.6.11.2	Gauge32	read-only	The current number of entries in the etsysPolicyRulesTable.
TIK etsysPolicyRulesLastChange	1.3.6.1.4.1.5624.1.2.6.11.3	TimeTicks	read-only	The sysUpTime at which the etsysPolicyRulesTable was last modified.
ENA etsysPolicyRulesAccountingEnable	1.3.6.1.4.1.5624.1.2.6.11.4	EnabledStatus	read-write	Controls the collection of rule usage statistics. If disabled, no usage statistics are gathered and no auditing messages will be sent. When enabled, rule will gather usage statistics, and auditing messages will be sent, if enabled for a given rule.
POR etsysPolicyRulesPortDisabledList	1.3.6.1.4.1.5624.1.2.6.11.5	PortList	read-write	A portlist containing bits representing the dot1dBridgePorts which have been disabled via the mechanism described in the etsysPolicyRuleDisablePort leaf. A set bit indicates a disabled port. Ports may be enabled by performing a set with the corresponding bit cleared. Bits which are set will be ignored during the set operation.
etsysPolicyRuleTable	1.3.6.1.4.1.5624.1.2.6.11.6		not-accessible	A table containing rules bound to individual policies. A Rule is comprised of three components, a unique description of the network traffic, an associated list of actions, and an associated list of accounting and auditing controls and information. The unique description of the network traffic, defined by a PolicyClassificationRuleType together with a length, matching data and a relevant bits field, port type, and port number (port number zero is reserved to mean any port), and scoped by a etsysPolicyProfileIndex, is used as the table index.
etsysPolicyRuleEntry	1.3.6.1.4.1.5624.1.2.6.11.6.1		not-accessible	Describes a particular entry within the etsysPolicyRuleTable. Entries within this table MUST be considered non-volatile and MUST be maintained across entity resets.
I32 etsysPolicyRuleProfileIndex	1.3.6.1.4.1.5624.1.2.6.11.6.1.1	Integer32	not-accessible	The etsysPolicyProfileIndex for which the rule is defined. A value of zero(0) has special meaning in that it scopes rules which are used to determine the Policy Profile to which the frame belongs. See the etsysPolicyRuleResult1 and etsysPolicyRuleResult2 descriptions for specifics of how the results of a rule hit differ when the etsysPolicyRuleProfileIndex is zero.
POL etsysPolicyRuleType	1.3.6.1.4.1.5624.1.2.6.11.6.1.2	PolicyClassificationRuleType	not-accessible	The type of network traffic reference by the etsysPolicyRuleData.
OCT etsysPolicyRuleData	1.3.6.1.4.1.5624.1.2.6.11.6.1.3	OCTET STRING	not-accessible	The data pattern to match against, as defined by the etsysPolicyRuleType, encoded in network-byte order.
I32 etsysPolicyRulePrefixBits	1.3.6.1.4.1.5624.1.2.6.11.6.1.4	Integer32	not-accessible	The relevant number of bits defined by the etsysPolicyRuleData, to be used when matching against a frame, relevant bits are specified in longest-prefix-first style (left to right). A value of zero carries the special meaning of all bits are relevant.
POR etsysPolicyRulePortType	1.3.6.1.4.1.5624.1.2.6.11.6.1.5	PortPolicyProfileIndexTypeTC	not-accessible	The port number on which the rule will be applied. Zero(0) is a special case, indicating that the rule should be applied to all ports.
I32 etsysPolicyRulePort	1.3.6.1.4.1.5624.1.2.6.11.6.1.6	Integer32	not-accessible	The port number on which the rule will be applied. Zero(0) is a special case, indicating that the rule should be applied to all ports.
ROW etsysPolicyRuleRowStatus	1.3.6.1.4.1.5624.1.2.6.11.6.1.7	RowStatus	read-create	The status of this row. When set to active(1) this entry's classification rule, as referenced by etsysPolicyRulesOID, becomes one of its associated policy's set of rules. When this entry's associated policy, as defined by etsysPolicyRuleProfileIndex, is active and assigned to a port through the etsysPortPolicyProfileTable or to a station through the etsysStationPolicyProfileTabbe, this classification rule will be applied to the port or station. The exact behavior of this application depends upon the classification rule. When this object is set to notInService(2) or notReady(3) this entry is not considered one of its associated policy's set of rules and this classification rule will not be applied.
STO etsysPolicyRuleStorageType	1.3.6.1.4.1.5624.1.2.6.11.6.1.8	StorageType	read-create	The storage type of this row. When set to volatile(1) this entry's classification rule, as referenced by etsysPolicyRulesOID, will be removed (if present) from non-volatile storage. Rows created dynamically by the device will typically report this as their default storage type. When set to nonVolatile(1) this entry's classification rule, as referenced by etsysPolicyRulesOID, will be added to non- volatile storage. This is the default value for rows created as the result of external management. Values of other(0), permanent(4), and readOnly(5) may not be set, although they may be returned for rows created by the device.
POR etsysPolicyRuleUsageList	1.3.6.1.4.1.5624.1.2.6.11.6.1.9	PortList	read-write	When read, a set bit indicates that this rule was used to classify traffic on the corresponding port. When set, the native PortList will be bit-wise AND'ed with the set PortList, allowing the agent to clear the usage indication.
I32 etsysPolicyRuleResult1	1.3.6.1.4.1.5624.1.2.6.11.6.1.10	Integer32	read-create	If the etsysPolicyRuleProfileIndex is 0 then this field is read-only and defines the profile ID which will assigned to frames matching this rule. This is the dynamically assigned value and may differ from the administratively configured value. If the etsysPolicyRuleProfileIndex is not 0 then this field is read-create and defines the VLAN ID with which to mark a frame matching this PolicyRule. Note that three special, otherwise illegal, values of the etsysPolicyRuleVlan are used in defining the forwarding action. -1 Indicates that no VLAN or forwarding behavior modification is desired. A rule will not be matched against for the purpose of determining a marking VID if this value is set. 0 Indicates that the default forwarding action is to drop the packets matching this rule. 4095 Indicates that the default forwarding action is to forward any packets matching this rule.
I32 etsysPolicyRuleResult2	1.3.6.1.4.1.5624.1.2.6.11.6.1.11	Integer32	read-create	If the etsysPolicyRuleProfileIndex is 0 then this field is read-create and defines the profile ID which the managing entity desires assigned to frames matching this rule. This is the administrative value and may differ from the dynamically assigned active value. If the etsysPolicyRuleProfileIndex is not 0 then this field is The CoS with which to mark a frame matching this PolicyRule. Note that one special, otherwise illegal, values of the etsysPolicyRuleCoS are used in defining the forwarding action. -1 Indicates that no CoS or forwarding behavior modification is desired. A rule will not be matched against for the purpose of determining a CoS if this value is set.
TRI etsysPolicyRuleAuditSyslogEnable	1.3.6.1.4.1.5624.1.2.6.11.6.1.12	TriStateStatus	read-create	Controls the sending of a syslog message when a bit in the etsysPolicyRuleUsageList transitions from 0 to 1.
TRI etsysPolicyRuleAuditTrapEnable	1.3.6.1.4.1.5624.1.2.6.11.6.1.13	TriStateStatus	read-create	Controls the sending of an SNMP NOTIFICATION when a bit in the etsysPolicyRuleUsageList transitions from 0 to 1.
TRI etsysPolicyRuleDisablePort	1.3.6.1.4.1.5624.1.2.6.11.6.1.14	TriStateStatus	read-create	Controls the disabling of a port (ifOperStatus of the corresponding ifIndex will be down) when a bit in the etsysPolicyRuleUsageList transitions from 0 to 1. When set to enabled, the corresponding ifIndex will be disabled upon the transition.
I32 etsysPolicyRuleOperPid	1.3.6.1.4.1.5624.1.2.6.11.6.1.15	Integer32	read-only	If the etsysPolicyRuleProfileIndex is 0 then this field contains the currently applied profile ID for frames matching this rule. This may be either the administratively applied value or the dynamically applied value. If the etsysPolicyRuleProfileIndex is not 0, then this object does not exist and will not be returned. Note that one special, otherwise illegal, values of the etsysPolicyRuleCoS are used in defining the forwarding action. -1 Indicates that no profile ID is being applied by this rule.
TRI etsysPolicyRuleOverwriteTCI	1.3.6.1.4.1.5624.1.2.6.11.6.1.16	TriStateStatus	read-create	If set, the information contained within the TCI field of inbound, tagged packets will not be used by the device after the ingress classification stage of packet relay. The net effect will be that the TCI information may be used to classify the packet, but will be overwritten (and ignored) by subsequent stages of packet relay.
I32 etsysPolicyRuleMirrorIndex	1.3.6.1.4.1.5624.1.2.6.11.6.1.17	Integer32	read-create	A reference to a packet mirror destination (defined elsewhere). A value of (-1) indicates no mirror is specified, but a mirror is not explicitly prohibitted. A value of (0) indicates that mirroring is explicitly prohibitted, unless a high precedent rule has specified a mirror.
etsysPolicyRulePortTable	1.3.6.1.4.1.5624.1.2.6.11.7		not-accessible	The purpose of this table is to provide an agent the ability to easily determine which rules have been used on a given bridge port. A row will only be present when the rule which the instancing describes has been used. The agent may remove a row (and clear the used status) by setting the etsysPolicyRulePortHit leaf to False. PolicyClassificationRuleType together with a length, matching data and a relevant bits field, port type, and port number (port number zero is reserved to mean any port), scoped by a etsysPolicyRuleProfileIndex, and preceded by a dot1dBasePort is used as the table index.
etsysPolicyRulePortEntry	1.3.6.1.4.1.5624.1.2.6.11.7.1		not-accessible	.
T/F etsysPolicyRulePortHit	1.3.6.1.4.1.5624.1.2.6.11.7.1.1	TruthValue	read-write	Every row will report a value of True, indicating that the Rule described by the instancing was used on the given port. An agent may be set this leaf to False to clear remove the row and clear the Rule Use bit for the specified Rule, on the given bridgePort.
T/F etsysPolicyRuleDynamicProfileAssignmentOverride	1.3.6.1.4.1.5624.1.2.6.11.8	TruthValue	read-write	If true, administratively assigned profile assignment rules override dynamically assigned profiles assignments for a given rule. If false, the dynamically assigned value (typically created by a successful authentication attempt) overrides the administratively configured value. The agent may optionally implement this leaf as read-only.
TRI etsysPolicyRuleDefaultDynamicSyslogStatus	1.3.6.1.4.1.5624.1.2.6.11.9	TriStateStatus	read-write	If enabled(1), rules dynamically created will set etsysPolicyRuleAuditSyslogEnable to enabled. If disabled(2) a dynamically created rule will have etsysPolicyRuleAuditSyslogEnable set to disabled. The agent may optionally implement this leaf as read-only.
TRI etsysPolicyRuleDefaultDynamicTrapStatus	1.3.6.1.4.1.5624.1.2.6.11.10	TriStateStatus	read-write	If enabled(1), rules dynamically created will set etsysPolicyRuleAuditTrapEnable to enabled. If disabled(2) a dynamically created rule will have etsysPolicyRuleAuditTrapEnable set to disabled. The agent may optionally implement this leaf as read-only.
ENA etsysPolicyRuleStatsAutoClearOnLink	1.3.6.1.4.1.5624.1.2.6.11.11	EnabledStatus	read-write	If set to enabled(1), when operstatus up is detected on any port the agent will clear the rule usage information associated with that port. This ability is further scoped to the list of ports defined by etsysPolicyRuleStatsAutoClearPorts. This leaf is optional and will have no effect on an agent which has rule use accounting disabled or does not support rule use accounting. By default, the rule use accounting information will not be modified by operstatus transitions.
I32 etsysPolicyRuleStatsAutoClearInterval	1.3.6.1.4.1.5624.1.2.6.11.12	Integer32	read-write	The interval at which the device will automatically clear rule usage statistics, in minutes. This ability is disabled (usage statistics will not be automatically cleared) if set to zero(0). This ability is further scoped to the list of ports defined by etsysPolicyRuleStatsAutoClearPorts. This leaf is optional and will have no effect on an agent which has rule use accounting disabled or does not support rule use accounting.
POR etsysPolicyRuleStatsAutoClearPorts	1.3.6.1.4.1.5624.1.2.6.11.13	PortList	read-write	The list ports on which rule usage statistics will be cleared by one of the AutoClear actions (etsysPolicyRuleStatsAutoClearInterval, etsysPolicyRuleStatsAutoClearOnProfile, or etsysPolicyRuleStatsAutoClearOnLink). By default, no ports will be set in this list. This leaf is optional, unless the agent claims support for one of the other 'autoclear' objects, and will have no effect on an agent which has rule use accounting disabled or does not support rule use accounting.
ENA etsysPolicyRuleStatsAutoClearOnProfile	1.3.6.1.4.1.5624.1.2.6.11.14	EnabledStatus	read-write	If set to enabled(1), when a rule assigning a PolicyProfile (whose etsysPolicyRuleProfileIndex is zero(0)) is activated, all the rule usage bits associated with the rules bound to the PolicyProfile specified by the etsysPolicyRuleOperPid and the port specified by the etsysPolicyRulePort are cleared (if there is no port specified or no valid etsysPolicyRuleProfileIndex specified, then no action follows). This ability is further scoped to the list of ports defined by etsysPolicyRuleStatsAutoClearPorts. This leaf is optional and will have no effect on an agent which has rule use accounting disabled or does not support rule use accounting. By default, the rule use accounting information will not be modified by the creation or activation of PolicyProfile assignment rules.
I32 etsysPolicyRuleStatsDroppedNotifications	1.3.6.1.4.1.5624.1.2.6.11.15	Integer32	read-only	A count of the number of times the agent has dropped notification (syslog or trap) of a etsysPolicyRuleUsageList bit transition. A management entity might use this leaf as an indication to read the etsysPolicyRuleUsageList objects for important rules. This count should be kept to the best of the device's ability, and explicitly does not cover notifications discarded by the network.
ENA etsysPolicyRuleSylogMachineReadableFormat	1.3.6.1.4.1.5624.1.2.6.11.16	EnabledStatus	read-write	If enabled, the device should format rule usage messages so that they might be processed by a machine (scripting backend, etc). If disabled, the messages should be formatted for human consumption.
ENA etsysPolicyRuleSylogExtendedFormat	1.3.6.1.4.1.5624.1.2.6.11.17	EnabledStatus	read-write	If enabled, the device should provide additional information in rule-hit syslog messages. This information MAY include what actions may have been initiated by the rule (if any) or data mined from the packet which matched the rule.
ENA etsysPolicyRuleSylogEveryTime	1.3.6.1.4.1.5624.1.2.6.11.18	EnabledStatus	read-write	If enabled, the device will syslog on every rule hit (or profile hit) which specifies SYSLOG as the action, instead of only when the associated bit in the etsysPolicyProfileUsageList or the etsysPolicyRuleUsageList is clear. It should be noted that this may cause MANY messages to be generated.
etsysPolicyRFC3580Map	1.3.6.1.4.1.5624.1.2.6.12
POL etsysPolicyRFC3580MapResolveReponseConflict	1.3.6.1.4.1.5624.1.2.6.12.1	PolicyRFC3580MapRadiusResponseTC	read-write	Indicates which field to use in the application of the RADIUS response in the event that both the proprietary filter-id indicating a policy profile and the standard (RFC3580) vlan- tunnel-attribute are present. If policyProfile(1) is selected, then the filter-id will be used, if vlanTunnelAttribute(2) is selected, then the vlan-tunnel-attribute will be used (and the policy-map will be applied, if present). A value of vlanTunnelAttributeWithPolicyProfile(3) indicates that both attributes should be applied, in the following manner: the policyProfile should be enforced, with the exception of the etsysPolicyProfilePortVid (if present), the returned vlan-tunnel-attribute will be used in its place. In this case, the policy-map will be ignored (as the policyProfile was explicitly assigned). VLAN classification rules will still be applied, as defined by the assigned policyProfile. Modifications of this value will not effect the current status of any users currently authenticated. The new state will be applied to new, successful authentications. The current status of current authentication may be modified through the individual agents or through the ENTERASYS-MULTI-AUTH-MIB, if supported.
TIK etsysPolicyRFC3580MapLastChange	1.3.6.1.4.1.5624.1.2.6.12.2	TimeTicks	read-only	The value of sysUpTime when the etsysPolicyRFC3580MapTable was last modified.
T/F etsysPolicyRFC3580MapTableDefault	1.3.6.1.4.1.5624.1.2.6.12.3	TruthValue	read-write	If read as True, then the etsysPolicyRFC3580MapTable is in the default state (no mappings have been created), if False, then non-default mappings exist. If set to True, then the etsysPolicyRFC3580MapTable will be put into the default state (no mappings will exist). A set to False is not valid and MUST fail.
etsysPolicyRFC3580MapTable	1.3.6.1.4.1.5624.1.2.6.12.4		not-accessible	A table containing VLAN ID to policy mappings. A policy is a group of classification rules which may be applied on a per user basis, to ports or to stations.
etsysPolicyRFC3580MapEntry	1.3.6.1.4.1.5624.1.2.6.12.4.1		not-accessible	Conceptually defines a particular entry within the etsysPolicyRFC3580MapTable. Entries within this table MUST be considered non-volatile and MUST be maintained across entity resets.
VLA etsysPolicyRFC3580MapVlanId	1.3.6.1.4.1.5624.1.2.6.12.4.1.1	VlanIndex	not-accessible	The VlanIndex which will map to the policy profile specified by the etsysPolicyRFC3580MapPolicyIndex of this row. This will be used to map the VLAN returned by value from the Tunnel- Private-Group-ID RADIUS attribute.
POL etsysPolicyRFC3580MapPolicyIndex	1.3.6.1.4.1.5624.1.2.6.12.4.1.2	PolicyProfileIDTC	read-write	The index of a Policy Profle as defined in the etsysPolicyProfileTable. A value of 0 indicates that the row is functionally non- operational (no mapping exists). Devices which support the ENTERASYS-VLAN-AUTHORIZATION-MIB, and for which the value of etsysVlanAuthorizationEnable is Enabled and the value of etsysVlanAuthorizationStatus is Enabled on the port referenced by the authorization request, should then use the VlanIndex provisioned (e.g. from the Tunnel-Private-Group-ID RADIUS attribute) as defined by RFC3580, otherwise, the device should treat the result as if no matching Policy Profile had been found (e.g. as a simple success). In the case where a Policy Profile is already being applied to the referenced station, but no mapping exists, the device MUST treat the Tunnel-Private-Group-ID as an override to the etsysPolicyProfilePortVid defined by that profile (any matched classification rules which explicit provision a VLAN MUST still override both the etsysPolicyProfilePortVid and the Tunnel-Private-Group-ID.) A non-zero value of this object indicates that the VlanIndex provisioned (e.g. from the Tunnel-Private-Group-ID RADIUS attribute) should be mapped to a Policy Profile as defined in the etsysPolicyProfileTable, and that policy applied as if the Policy name had been provisioned instead (e.g, in the Filter-ID RADIUS attribute). If the mapping references a non-existent row of the etsysPolicyProfileTable, or the referenced row has a etsysPolicyProfileRowStatus value other than Active, the device MUST behave as if the mapping did not exist (apply the vlan-tunnel-attribute). The etsysPolicyRFC3580MapInvalidMapping MUST then be incremented.
C32 etsysPolicyRFC3580MapInvalidMapping	1.3.6.1.4.1.5624.1.2.6.12.5	Counter32	read-only	Increments to indicate the number of times the device has detected an invalid/unknown EtsysPolicyRFC3580MapEntry (i.e. one that references an in-active or non-existent etsysPolicyProfile).

RFC description

Defines per-user policy profiles for Enterasys network edge devices and access products.

Start monitoring Enterasys Networks switch (legacy, later Extreme Networks)/access edge device (per-user policy profiles) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ENTERASYS-POLICY-PROFILE-MIB