ONEACCESS-ACL-MIB

All MIBs › ONEACCESS-ACL-MIB

Organization: OneAccess

Last Updated: 2011-06-15

Category: CPE/Router

Description: Manages access control list configuration and counters on OneAccess CPE routers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ONEACCESS-ACL-MIB?

ONEACCESS-ACL-MIB is a OneAccess vendor-specific MIB (module oacAclMIBModule, part of the ONEOS platform's ONEACCESS-GLOBAL-REG registration tree) that describes IP access control list management and IP accounting objects for OneAccess CPE routers. Its scalar objects under oacAclStatGlobal report ACL session counts (oacAclMaxSessions, oacAclActiveSessions, oacAclSessionsClosed) and inbound/outbound packet and drop counters, while oacIpAccountingTable and oacIpAccountingStatTable track per-interface and per-flow (source/destination IP, packet/byte counts) accounting data, and a set of NOTIFICATION-TYPEs (oacAclNotificationMaximumSessionReached, oacAclNotificationWarningHalfSessionReachingLimit) alert when session or stateful half-session limits are approached. It depends on ONEACCESS-EVENTS-MIB for event text/severity objects used in its host-scoped notifications. This combination of session counters, per-flow accounting, and threshold traps makes it useful for both ACL capacity planning and detecting hosts or interfaces nearing configured session limits. It is deployed on OneAccess ONEOS-based CPE and edge routers, and the ONEACCESS-ACL-MIB MIB is the module to load for managing ACL statistics on these devices.

IPNetwork Monitor allows you to monitor SNMP objects defined in ONEACCESS-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

OneAccess ONEOS-based CPE routers

Monitoring Examples

An operator polls oacAclActiveSessions against oacAclMaxSessions and watches for oacAclNotificationWarningSessionReachingLimit traps; active sessions climbing toward the configured maximum without a corresponding rise in oacAclSessionsClosed would indicate the router is about to start rejecting new connections due to ACL session exhaustion.

What Can Be Monitored

ACL active/closed session counters
ACL inbound/outbound packet and drop counters
per-interface IP accounting table entries
IP accounting session/byte/packet statistics
ACL session-limit and half-session-limit notifications

Imported Objects

From IF-MIB

InterfaceIndex

From ONEACCESS-EVENTS-MIB

oacEventSeverityLevel	OBJECT-TYPE
oacEventText	OBJECT-TYPE

From ONEACCESS-GLOBAL-REG

oacExpIMIpAcl	OBJECT-IDENTITY
oacMIBModules	OBJECT-IDENTITY

From RFC1213-MIB

DisplayString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION

OIDs

OID symbolic	OID numeric	Type	Access	Description
oacAclMIBModule	1.3.6.1.4.1.13191.1.100.669			Contact updated
oacExpIMIpAclStatistics	1.3.6.1.4.1.13191.10.3.1.2.1
oacAclStatObjects	1.3.6.1.4.1.13191.10.3.1.2.1.1
oacAclStatGlobal	1.3.6.1.4.1.13191.10.3.1.2.1.1.1
U32 oacAclMaxSessions	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.1	Unsigned32	read-only	Maximum number of sessions
U32 oacAclActiveSessions	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.2	Unsigned32	read-only	Number of active sessions
C32 oacAclSessionsClosed	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.3	Counter32	read-only	Total number of sessions closed
C32 oacAclDynamicAllocFailures	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.4	Counter32	read-only	Dynamic allocation failures
C32 oacAclInboundPkts	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.5	Counter32	read-only	Total inbound packets
C32 oacAclOutboundPkts	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.6	Counter32	read-only	Total outbound packets
C32 oacAclInboundPktsDropped	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.7	Counter32	read-only	Total inbound packets
C32 oacAclOutboundPktsDropped	1.3.6.1.4.1.13191.10.3.1.2.1.1.1.8	Counter32	read-only	Total outbound packets
oacAclStatNotifications	1.3.6.1.4.1.13191.10.3.1.2.1.2
oacAclStatConformance	1.3.6.1.4.1.13191.10.3.1.2.1.3
oacAclStatGroups	1.3.6.1.4.1.13191.10.3.1.2.1.3.1
oacAclStatGeneralGroup	1.3.6.1.4.1.13191.10.3.1.2.1.3.1.1			This group is mandatory for all ACL entities.
oacAclStatCompliances	1.3.6.1.4.1.13191.10.3.1.2.1.3.2
oacAclStatCompliance	1.3.6.1.4.1.13191.10.3.1.2.1.3.2.1			The compliance statement for agents that support the ONEACCESS-ACL-MIB.
oacExpIMIpAclNotifications	1.3.6.1.4.1.13191.10.3.1.2.2
NTF oacAclNotificationMaximumSessionReached	1.3.6.1.4.1.13191.10.3.1.2.2.1			An ACL Notification maximum session reached signifies that the number of ACL sessions has reached its configured limit
NTF oacAclNotificationWarningSessionReachingLimit	1.3.6.1.4.1.13191.10.3.1.2.2.2			An ACL Notification warning session reaching limit signifies that the number of ACL sessions is near from its maximum configured limit
NTF oacAclNotificationMaximumHalfSessionReached	1.3.6.1.4.1.13191.10.3.1.2.2.3			An ACL Notification maximum half-session reached signifies that the number of ACL half-sessions has reached its configured limit, as stateful inspection is enabled on the device
NTF oacAclNotificationWarningHalfSessionReachingLimit	1.3.6.1.4.1.13191.10.3.1.2.2.4			An ACL Notification warning half-session reaching limit signifies that the number of ACL half-sessions is near from its configured limit. Note that this notification is received only if stateful inspection is enabled on the device
NTF oacAclNotificationMaximumSessionReachedPerHost	1.3.6.1.4.1.13191.10.3.1.2.2.5			An ACL Notification maximum session per host reached signifies that the number of ACL sessions per host has reached its configured limit for the host whose IP address is added to the notification message. This trap is sent only if inspection per host and stateful inspection is enabled
NTF oacAclNotificationMaximumHalfSessionReachedPerHost	1.3.6.1.4.1.13191.10.3.1.2.2.6			An ACL Notification maximum half-session per host reached signifies that the number of ACL half-sessions per host has reached its configured limit, for the host whose IP address is added to the notification message. This trap is sent only if inspection per host and stateful inspection are enabled
oacExpIMIpAccountingStatistics	1.3.6.1.4.1.13191.10.3.1.2.3
oacIpAccountingTable	1.3.6.1.4.1.13191.10.3.1.2.3.1		not-accessible	Interface Accounting Table
oacIpAccountingEntry	1.3.6.1.4.1.13191.10.3.1.2.3.1.1		not-accessible	Description
G32 oacIpAccountingIndex	1.3.6.1.4.1.13191.10.3.1.2.3.1.1.1	Gauge32	read-only	IP Accounting Index
NUM oacIpAccountingIfIndex	1.3.6.1.4.1.13191.10.3.1.2.3.1.1.2	InterfaceIndex	read-only	IP Accounting Interface Index
NUM oacIpAccountingIfType	1.3.6.1.4.1.13191.10.3.1.2.3.1.1.3	InterfaceType	read-only	IP Accounting Interface Type
oacIpAccountingStatTable	1.3.6.1.4.1.13191.10.3.1.2.3.2		not-accessible	IP Accounting Statistic Table
oacIpAccountingStatEntry	1.3.6.1.4.1.13191.10.3.1.2.3.2.1		not-accessible	Description
IP oacIpAccountingStatIpSource	1.3.6.1.4.1.13191.10.3.1.2.3.2.1.1	IpAddress	read-only	Ip Source
IP oacIpAccountingStatIpDest	1.3.6.1.4.1.13191.10.3.1.2.3.2.1.2	IpAddress	read-only	Ip Destination
C32 oacIpAccountingStatNbPackets	1.3.6.1.4.1.13191.10.3.1.2.3.2.1.3	Counter32	read-only	Nb packets
C32 oacIpAccountingStatNbBytes	1.3.6.1.4.1.13191.10.3.1.2.3.2.1.4	Counter32	read-only	Nb Bytes
oacIpAccoutingGlobal	1.3.6.1.4.1.13191.10.3.1.2.3.3
G32 oacIpAccountingMaxSessions	1.3.6.1.4.1.13191.10.3.1.2.3.3.1	Gauge32	read-only	Maximum number of Ip Accounting sessions
G32 oacIpAccountingCurrentSessions	1.3.6.1.4.1.13191.10.3.1.2.3.3.2	Gauge32	read-only	Number of current Ip Accounting sessions
STR oacIpAccountingAge	1.3.6.1.4.1.13191.10.3.1.2.3.3.3	DisplayString	read-only	IP Accounting data Age
G32 oacIpAccountingNbNotAnalysedBytes	1.3.6.1.4.1.13191.10.3.1.2.3.3.4	Gauge32	read-only	Number of not annalysed bytes
G32 oacIpAccountingNbNotAnalysedPackets	1.3.6.1.4.1.13191.10.3.1.2.3.3.5	Gauge32	read-only	Number of not annalysed packets
INT oacIpAccoutingClear	1.3.6.1.4.1.13191.10.3.1.2.3.10	INTEGER	read-write	Set this to 1 to clear IP accounting statistics

RFC description

OneAccess ACL MIB for IP access control list management and IP accounting statistics.

Start monitoring OneAccess ONEOS-based CPE router (ACL session/IP accounting) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ONEACCESS-ACL-MIB

What Is ONEACCESS-ACL-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description