G6-ACL-MIB

All MIBs › G6-ACL-MIB

Organization: MICROSENS GmbH & Co. KG

Last Updated: 2018-02-12

Category: Vendor: MICROSENS

Description: MICROSENS G6 switch MIB for Access Control List configuration and traffic filtering rule management.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is G6-ACL-MIB?

G6-ACL-MIB is a MICROSENS private enterprise MIB for Generation 6 (G6) Ethernet switches, providing configuration management for Access Control Lists (ACLs) used to filter and control traffic on switch ports. It exposes a global ACL filtering enable flag, a per-port ACL configuration table associating each port with a named ACL filter list, and a list-definition table describing each ACL's name, description, and rule set. This MIB is primarily a software/configuration-status tool rather than a hardware-health one: it lets an administrator confirm whether ACL filtering is enabled globally and on specific ports, and which named rule list is actively applied to each port, which is critical for verifying security policy compliance. It likely depends on standard Interfaces MIB port indexing to map ACL settings to physical switch ports. It is typically deployed on MICROSENS G6 managed industrial/campus Ethernet switches where port-level traffic filtering is used for network segmentation and access security. Network engineers evaluating or troubleshooting this functionality can download the G6-ACL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in G6-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

MICROSENS G6 managed Ethernet switch

Monitoring Examples

An administrator polls aclEnableAclFiltering to confirm ACL filtering is globally active, then checks activeFilterPortConfigTable (activeFilterPortConfigPortIndex, activeFilterPortConfigEnableAclFiltering, activeFilterPortConfigAclListName) to verify which named ACL is bound to a given port. Cross-referencing listTable (listEntry: listIndex, listName, listDescription, listRules) reveals the actual rule content of that list, so if a port unexpectedly allows traffic that should be blocked, the admin can confirm whether the wrong list name is bound to the port or the list's rule content was changed.

What Can Be Monitored

global ACL filtering enable state
per-port ACL binding and enable status
named ACL list definitions and rule content
port-to-ACL-list assignment

Imported Objects

From MICROSENS-G6-MIB

g6	OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32
enterprises

From SNMPv2-TC

DisplayString
MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
management	1.3.6.1.4.1.3181.10.6.3			Microsens private MIB for Generation 6 Ethernet Switches
acl	1.3.6.1.4.1.3181.10.6.3.51
INT aclEnableAclFiltering	1.3.6.1.4.1.3181.10.6.3.51.1	INTEGER	read-write	General enable of access control list operation. Note that this function need only be enabled when port filtering is used. For wifi, dhcp or arp inspection function this enable parameter is meaningless..
activeFilterPortConfigTable	1.3.6.1.4.1.3181.10.6.3.51.2		not-accessible	This table defines the parameter for access control of incoming data.
activeFilterPortConfigEntry	1.3.6.1.4.1.3181.10.6.3.51.2.1		not-accessible
INT activeFilterPortConfigPortIndex	1.3.6.1.4.1.3181.10.6.3.51.2.1.1	INTEGER	not-accessible	Automatically generated
INT activeFilterPortConfigEnableAclFiltering	1.3.6.1.4.1.3181.10.6.3.51.2.1.2	INTEGER	read-write	Generally enables access control checking for this particular port. The details need to be configured in the list and rules tables.
STR activeFilterPortConfigAclListName	1.3.6.1.4.1.3181.10.6.3.51.2.1.3	DisplayString	read-write	Name of the ACL (access control list) which apply to this port. Several ACL lists may be specified with a comma separated list. Example acl1, otherlist
listTable	1.3.6.1.4.1.3181.10.6.3.51.3		not-accessible	This table is used to combine and group individual rules for easier reference.
listEntry	1.3.6.1.4.1.3181.10.6.3.51.3.1		not-accessible
INT listIndex	1.3.6.1.4.1.3181.10.6.3.51.3.1.1	INTEGER	not-accessible	Automatically generated
STR listName	1.3.6.1.4.1.3181.10.6.3.51.3.1.2	DisplayString	read-write	Unique name to reference this entry and to remember whose MAC address is entered.
STR listDescription	1.3.6.1.4.1.3181.10.6.3.51.3.1.3	DisplayString	read-write	Enter any information required to remember what this rule is intended to do.
STR listRules	1.3.6.1.4.1.3181.10.6.3.51.3.1.4	DisplayString	read-write	Contains the names of rules that apply to this list separated by commas. Please beware of typing errors. Example: rule1,rule2,other_rule
rulesTable	1.3.6.1.4.1.3181.10.6.3.51.4		not-accessible	For filtering of incoming data this table defines the filter rules. The same table also applies to arp inspection. In this use this table statically defines valid MAC/IP/VLAN relationships.
rulesEntry	1.3.6.1.4.1.3181.10.6.3.51.4.1		not-accessible
INT rulesIndex	1.3.6.1.4.1.3181.10.6.3.51.4.1.1	INTEGER	not-accessible	Automatically generated
STR rulesName	1.3.6.1.4.1.3181.10.6.3.51.4.1.2	DisplayString	read-write	Unique name to reference this entry and to remember whose MAC address is entered.
STR rulesDescription	1.3.6.1.4.1.3181.10.6.3.51.4.1.3	DisplayString	read-write	Enter any information required to remember what this rule is intended to do.
INT rulesMode	1.3.6.1.4.1.3181.10.6.3.51.4.1.4	INTEGER	read-write	Use UNUSED to temporarily suspend an entry. Use ACCEPT when the matched entry should be treated as valid. Use DENY when a matched entry should be treated as invalid match.
I32 rulesEtherType	1.3.6.1.4.1.3181.10.6.3.51.4.1.5	Integer32	read-write	Use 2048 to match IPv4 (0x800), 34525 to match IPv6 (0x86DD). A value of 0 ignores this field. The field is also ignored for ARP inspection rules.
I32 rulesProtocol	1.3.6.1.4.1.3181.10.6.3.51.4.1.6	Integer32	read-write	Use 6 to specifiy tcp, 17 for udp, etc. Use to ignore the protocol field. This field is also ignored for arp inspection rules.
I32 rulesVlanId	1.3.6.1.4.1.3181.10.6.3.51.4.1.7	Integer32	read-write	VLAN ID for which this entry is valid. A value of 0 ignores this field.
MAC rulesSourceMac	1.3.6.1.4.1.3181.10.6.3.51.4.1.8	MacAddress	read-write	MAC address entry.
OCT rulesSourceIp	1.3.6.1.4.1.3181.10.6.3.51.4.1.9	OCTET STRING	read-write	IP address associated with the given MAC.
OCT rulesSourceMask	1.3.6.1.4.1.3181.10.6.3.51.4.1.10	OCTET STRING	read-write	The mask my be used to create a valid address range.
I32 rulesSourcePort	1.3.6.1.4.1.3181.10.6.3.51.4.1.11	Integer32	read-write	May be used to specify a specific udp/tcp port. A value of 0 ignores this field. The field is also ignored for ARP inspection rules.
MAC rulesDestinationMac	1.3.6.1.4.1.3181.10.6.3.51.4.1.12	MacAddress	read-write	MAC address entry. This field is ignored for ARP inspection rules.
OCT rulesDestinationIp	1.3.6.1.4.1.3181.10.6.3.51.4.1.13	OCTET STRING	read-write	IP address associated with the given MAC. This field is ignored for ARP inspection rules.
OCT rulesDestinationMask	1.3.6.1.4.1.3181.10.6.3.51.4.1.14	OCTET STRING	read-write	The mask my be used to create a valid address range. This field is ignored for ARP inspection rules.
I32 rulesDestinationPort	1.3.6.1.4.1.3181.10.6.3.51.4.1.15	Integer32	read-write	May be used to specify a specific udp/tcp port. A value of 0 ignores this field. The field is also ignored for ARP inspection rules.

RFC description

Microsens private MIB for Generation 6 Ethernet Switches access control list management.

Start monitoring MICROSENS Generation 6 (G6) managed Ethernet switch (Access Control Lists) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download G6-ACL-MIB

What Is G6-ACL-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description