HP-SN-IP-ACL-MIB

All MIBs › HP-SN-IP-ACL-MIB

Category: IP and Core Protocols, Vendor: HP/HPE

Description: HP ServerNet (Foundry-heritage) SNMP MIB for IP Access Control List configuration and statistics on HP SN routing devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-SN-IP-ACL-MIB?

HP-SN-IP-ACL-MIB is a Foundry-heritage ('sn'-prefixed) SNMP MIB inherited through HP's acquisition of Foundry/Brocade-derived switching technology, used to configure and monitor IP Access Control Lists on HP ServerNet-class routing and switching devices. It exposes ACL configuration data through snAgAclTable, including rule name, sequence index, action (permit/deny), protocol, and source IP/mask/operator match criteria used to filter traffic. Its monitoring role centers on configuration and security-policy state: administrators can verify which ACL rules are currently applied, in what order, and confirm the control-plane software is enforcing the intended filtering policy, useful for auditing whether an ACL change took effect as expected. There is no strong dependency on external standard MIBs beyond general IP addressing conventions, though it is closely tied to the sibling HP-SN-IP-MIB for underlying IP/routing context. It is deployed on HP SN-series (Foundry-heritage) routing switches in enterprise and campus network environments requiring traffic filtering. Engineers can download the HP-SN-IP-ACL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-SN-IP-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP SN-series (Foundry-heritage) routing switch

Monitoring Examples

An admin can walk snAgAclTable and inspect snAgAclAction, snAgAclProtocol, and snAgAclSourceIp/snAgAclSourceMask for entries under a given snAgAclName to confirm a deny rule for a suspicious source subnet is present and correctly ordered; if snAgAclGblCurRowIndex shows fewer rows than expected after a config push, it flags that some ACL entries failed to apply.

What Can Be Monitored

ACL rule name and index
ACL action (permit/deny)
protocol and source IP/mask match criteria
number of configured ACL rows

Imported Objects

From HP-SN-ROOT-MIB

snIp	OBJECT-IDENTITY

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

IpAddress

From SNMPv2-SMI

Counter64

OIDs

OID symbolic	OID numeric	Type	Access	Description
snAgAcl	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15
snAgAclGlobal	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.1
INT snAgAclGblCurRowIndex	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.1.1	INTEGER	read-only	The current row index of the ACL table entry.
snAgAclTable	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2		not-accessible	Table of Access Control List
snAgAclEntry	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1		not-accessible	An entry in the IP access control list table.
INT snAgAclIndex	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.1	INTEGER	read-only	The access control list item number for an entry. This is a unique number that identifies different Access list entries combined with the access list name and access list number. This one has to be unique even though the name and number are not unique for a give access list with same or different source address, subnet mask, destination address and destination mask, protocol type, action (permit/deny) type and the operator (neq, eq, gt and , lt) which makes the index a unique tuple (name, number, itemnumber).
ACL snAgAclNumber	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.2	AclNumber	read-write	The access control list number for an entry. The standard access list is in the range . The extended access list is in the range .
STR snAgAclName	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.3	DisplayString	read-write	ACL name for an entry.
ACT snAgAclAction	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.4	Action	read-write	Action to take if the ip packet matches with this access control list.
IPP snAgAclProtocol	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.5	IpProtocol	read-write	Transport protocol. 0 means any protocol.
IP snAgAclSourceIp	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.6	IpAddress	read-write	Source IP address.
IP snAgAclSourceMask	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.7	IpAddress	read-write	Source IP subnet mask.
OPE snAgAclSourceOperator	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.8	Operator	read-write	Type of comparison to perform. for now, this only applys to tcp or udp to compare the port number
INT snAgAclSourceOperand1	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.9	INTEGER	read-write	For now this only refers to transport protocol port number. 0 means NA
INT snAgAclSourceOperand2	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.10	INTEGER	read-write	For now this only refers to transport protocol port number. 0 means NA
IP snAgAclDestinationIp	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.11	IpAddress	read-write	Destination IP address.
IP snAgAclDestinationMask	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.12	IpAddress	read-write	Destination IP subnet mask.
OPE snAgAclDestinationOperator	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.13	Operator	read-write	Type of comparison to perform. for now, this only applys to tcp or udp to compare the port number
INT snAgAclDestinationOperand1	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.14	INTEGER	read-write	For now this only refers to transport protocol port number. 0 means NA
INT snAgAclDestinationOperand2	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.15	INTEGER	read-write	For now this only refers to transport protocol port number. 0 means NA
PRE snAgAclPrecedence	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.16	PrecedenceValue	read-write	This refers to IP precedence value in the range critical(5), flash(3), flash-override(4), immediate(2), internet(6), network(7), priority(1), routine(0)
TOS snAgAclTos	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.17	TosValue	read-write	This refers to the IP type of service value in range which is the sum of numeric vlaues of the following options - match packets with maximum reliability TOS (2) match packets with maximum throughput TOS (4) match packets with minimum delay (8) match packets with minimum monetary cost TOS (1) match packets with normal TOS (0)
RTR snAgAclEstablished	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.18	RtrStatus	read-write	Enable/Disable the filtering of established TCP packets of which the ACK or RESET flag is on. This additional filter only applies to TCP transport protocol.
TRU snAgAclLogOption	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.19	TruthVal	read-write	Log flag
TRU snAgAclStandardFlag	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.20	TruthVal	read-write	Return whether the ACL is standard or extended, 1 for standard ACL
SNR snAgAclRowStatus	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.21	SnRowStatus	read-write	To create or delete a access list entry.
C64 snAgAclFlowCounter	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.22	Counter64	read-only	Approximate count of flows matching individual ACL entry.
C64 snAgAclPacketCounter	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.23	Counter64	read-only	Accurate count of packets matching individual ACL entry.
STR snAgAclComments	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.24	DisplayString	read-write	Remark description of individual ACL entry.
INT snAgAclIpPriority	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.25	INTEGER	read-write	QoS priority option for IP ACL entry.
INT snAgAclPriorityForce	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.26	INTEGER	read-write	Force packet outgoing priority. Not defined(4)
INT snAgAclPriorityMapping	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.27	INTEGER	read-write	Map incoming packet priority. Not defined(8)
INT snAgAclDscpMarking	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.28	INTEGER	read-write	Mark packets with given DSCP value. Not defined(64)
INT snAgAclDscpMapping	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.2.1.29	INTEGER	read-write	Map incoming DSCP value. Not defined(64)
snAgAclBindToPortTable	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3		not-accessible	Table of ACL binding to port for router
snAgAclBindToPortEntry	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3.1		not-accessible	An entry in the ACL-binding-to-port table.
INT snAgAclPortNum	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3.1.1	INTEGER	read-only	Binding-to port num, either physical port or virtual interface.
DIR snAgAclPortBindDirection	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3.1.2	Direction	read-only	ACL port direction, inbound or outbound
INT snAgAclNum	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3.1.3	INTEGER	read-write	Defined ACL number
STR snAgAclNameString	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3.1.4	DisplayString	read-write	Defined ACL name
OCT snAgBindPortListInVirtualInterface	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3.1.5	OCTET STRING	read-write	Port list for binding virtual interface
SNR snAgAclPortRowStatus	1.3.6.1.4.1.11.2.3.7.11.12.2.2.15.3.1.6	SnRowStatus	read-write	To create or delete a ACL port entry.

RFC description

Manages IP Access Control Lists for HP SN switches including rules, actions, and policy configuration.

Start monitoring HP SN-series routing switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-SN-IP-ACL-MIB

What Is HP-SN-IP-ACL-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description