PRVT-SWITCH-ACCESS-LIST-MIB

All MIBs › PRVT-SWITCH-ACCESS-LIST-MIB

Organization: BATM Advanced Communication

Last Updated: 2010-06-25

Category: Security

Description: Manages BATM Advanced Communication switch ACL configuration including IP/MAC rules, permit/deny actions, and ACL binding.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is PRVT-SWITCH-ACCESS-LIST-MIB?

PRVT-SWITCH-ACCESS-LIST-MIB is a BATM Advanced Communication proprietary MIB managing switch access-control-list (ACL) parameters on BATM/Telco Systems carrier Ethernet switches. Its objects cover a monitoring-profile table (with row status) tracking ACL profiles, a per-profile statistics-type table, and a standard-ACL table defining the actual match rules. As a configuration/security MIB it lets an administrator audit which ACL profiles are defined and review their associated statistics. It is deployed on BATM/Telco Systems carrier Ethernet switches. Engineers can download the PRVT-SWITCH-ACCESS-LIST-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in PRVT-SWITCH-ACCESS-LIST-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

BATM/Telco Systems carrier Ethernet switches

Monitoring Examples

An administrator reviews prvtSwAclStdTable to confirm a specific access-control rule is correctly defined before troubleshooting unexpected traffic filtering on a BATM switch port.

What Can Be Monitored

configured ACL profiles and match rules

Imported Objects

From IF-MIB

InterfaceIndex

From PRVT-SERV-MIB

sapEncapValue	OBJECT-TYPE
sapPortId	OBJECT-TYPE
serviceId

From PRVT-SWITCH-MIB

ipSwitch

OBJECT-IDENTITY

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using prvtSwAclIfAcgMonPrfMatchF OID:

Select a BATM/Telco Systems carrier Ethernet switch (ACL profiles) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type prvtSwAclIfAcgMonPrfMatchF into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of frames of traffic matching this traffic flow. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
prvtSwitchAccessListMIB	1.3.6.1.4.1.738.1.6.1			The private MIB module that controls switch access-list parameters
prvtSwAclNotifications	1.3.6.1.4.1.738.1.6.1.0
NTF prvtSwAclIfAcgApplyFailed	1.3.6.1.4.1.738.1.6.1.0.1			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclIfAcgRLimitApplyFailed	1.3.6.1.4.1.738.1.6.1.0.2			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclIfAcgRedirectApplyFailed	1.3.6.1.4.1.738.1.6.1.0.3			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclIfAcgFcApplyFailed	1.3.6.1.4.1.738.1.6.1.0.4			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclIfAcgMonPrfApplyFailed	1.3.6.1.4.1.738.1.6.1.0.5			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclSapAcgApplyFailed	1.3.6.1.4.1.738.1.6.1.0.6			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclSapAcgRLimitApplyFailed	1.3.6.1.4.1.738.1.6.1.0.7			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclSapAcgRedirectApplyFailed	1.3.6.1.4.1.738.1.6.1.0.8			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclSapAcgFcApplyFailed	1.3.6.1.4.1.738.1.6.1.0.9			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
NTF prvtSwAclSapAcgMonPrfApplyFailed	1.3.6.1.4.1.738.1.6.1.0.10			Access group is not properly applied in hardware. This means that traffic will not be filtered as expected. User should either remove this access group or rearrange other access groups.
prvtSwAclObjects	1.3.6.1.4.1.738.1.6.1.1
prvtSwAclMonProfiles	1.3.6.1.4.1.738.1.6.1.1.1
prvtSwAclMonPrfTable	1.3.6.1.4.1.738.1.6.1.1.1.1		not-accessible	A list of access group monitoring profiles. Up to 50 monitoring profiles are supported. Note that each profile defined in prvtSwAclMonPrfTable must at all times have in prvtSwAclMonPrfStatsTable at least one type of statistic configured (created) for monitoring. This requires that, when creating a new monitoring profile, the SNMP set operation must contain two createAndGo operations, one for creating the entry in prvtSwAclMonPrfTable, and one for simultaneously creating the entry in prvtSwAclMonPrfStatsTable. Deleting a monitoring profile in prvtSwAclMonPrfTable, also deletes all entries belonging to this monitoring profile in prvtSwAclMonPrfStatsTable.
prvtSwAclMonPrfEntry	1.3.6.1.4.1.738.1.6.1.1.1.1.1		not-accessible	An entry in prvtSwAclMonPrfTable.
PRV prvtSwAclMonPrfId	1.3.6.1.4.1.738.1.6.1.1.1.1.1.1	PrvtSwAclProfileIdType	not-accessible	Uniquely identifies a monitoring profile.
ROW prvtSwAclMonPrfIdRowStatus	1.3.6.1.4.1.738.1.6.1.1.1.1.1.2	RowStatus	read-create	The RowStatus for the monitoring profile.
prvtSwAclMonPrfStatsTable	1.3.6.1.4.1.738.1.6.1.1.1.2		not-accessible	A list of which statistics a monitoring profile should monitor. Up to a maximum of twenty statistics may be monitored per profile. Note that each profile defined in prvtSwAclMonPrfTable must at all times have in prvtSwAclMonPrfStatsTable at least one type of statistic configured (created) for monitoring. Thus, when deleting, from prvtSwAclMonPrfStatsTable, the last remaining row for a particular monitoring profile, the monitoring profile's entry in prvtSwAclMonPrfTable must also be deleted within the same SNMP set operation. Alternatively, to delete the last remaining statistic for a particular monitoring profile, just delete the monitoring profile in prvtSwAclMonPrfTable.
prvtSwAclMonPrfStatsEntry	1.3.6.1.4.1.738.1.6.1.1.1.2.1		not-accessible	An entry in prvtSwAclMonPrfStatsTable.
PRV prvtSwAclMonPrfStatsType	1.3.6.1.4.1.738.1.6.1.1.1.2.1.1	PrvtSwAclStatsType	not-accessible	A type of statistic to monitor.
ROW prvtSwAclMonPrfStatsRowStatus	1.3.6.1.4.1.738.1.6.1.1.1.2.1.2	RowStatus	read-create	The RowStatus for prvtSwAclMonPrfStatsTable.
prvtSwAclGroups	1.3.6.1.4.1.738.1.6.1.1.2
prvtSwAclStdTable	1.3.6.1.4.1.738.1.6.1.1.2.1		not-accessible	A list of standard IP Access Control Lists. Up to 250 entries are supported.
prvtSwAclStdEntry	1.3.6.1.4.1.738.1.6.1.1.2.1.1		not-accessible	An entry in prvtSwAclStdTable.
PRV prvtSwAclStdName	1.3.6.1.4.1.738.1.6.1.1.2.1.1.1	PrvtSwAclNameType	not-accessible	A string uniquely identifying a standard IP Access Control List.
ROW prvtSwAclStdRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.1.1.2	RowStatus	read-create	The RowStatus for this standard Access Control List.
PRV prvtSwAclStdDescr	1.3.6.1.4.1.738.1.6.1.1.2.1.1.3	PrvtSwAclDescrType	read-create	An arbitrary description to assign to this standard Access Control List.
prvtSwAclStdRuleTable	1.3.6.1.4.1.738.1.6.1.1.2.2		not-accessible	A list of rules for standard IP access-lists. Up to 250 entries are supported per prvtSwAclStdName.
prvtSwAclStdRuleEntry	1.3.6.1.4.1.738.1.6.1.1.2.2.1		not-accessible	An entry in prvtSwAclStdRuleTable.
PRV prvtSwAclStdRuleId	1.3.6.1.4.1.738.1.6.1.1.2.2.1.1	PrvtSwAclRuleIdType	not-accessible	Index of the particular rule within the standard IP access control list.
ROW prvtSwAclStdRuleRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.2.1.2	RowStatus	read-create	The RowStatus for this standard access-list rule.
PRV prvtSwAclStdRuleAction	1.3.6.1.4.1.738.1.6.1.1.2.2.1.3	PrvtSwAclAction	read-create	The action to perform when the condition of this access-list rule is true.
PRV prvtSwAclStdRuleIpSrcPrefix	1.3.6.1.4.1.738.1.6.1.1.2.2.1.4	PrvtSwAclIpv4PrefixType	read-create	The IP source address prefix defining a subnet associated with this access-list rule.
PRV prvtSwAclStdRuleVlanId	1.3.6.1.4.1.738.1.6.1.1.2.2.1.5	PrvtSwAclVlanIdTypeOrNone	read-create	The VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclStdRuleUntaggedMode equals 'true').
PRV prvtSwAclStdRuleVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.2.1.6	PrvtSwAclVlanMaskType	read-create	The VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclStdRuleUntaggedMode equals 'true').
PRV prvtSwAclStdRuleInnerVlanId	1.3.6.1.4.1.738.1.6.1.1.2.2.1.7	PrvtSwAclVlanIdTypeOrNone	read-create	The inner VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclStdRuleUntaggedMode equals 'true').
PRV prvtSwAclStdRuleInnerVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.2.1.8	PrvtSwAclVlanMaskType	read-create	The inner VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclStdRuleUntaggedMode equals 'true').
PRV prvtSwAclStdRuleVpt	1.3.6.1.4.1.738.1.6.1.1.2.2.1.9	PrvtSwAclVptTypeOrNone	read-create	The VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclStdRuleUntaggedMode equals 'true').
PRV prvtSwAclStdRuleInnerVpt	1.3.6.1.4.1.738.1.6.1.1.2.2.1.10	PrvtSwAclVptTypeOrNone	read-create	The inner VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclStdRuleUntaggedMode equals 'true').
PRV prvtSwAclStdRuleDscp	1.3.6.1.4.1.738.1.6.1.1.2.2.1.11	PrvtSwAclDscpTypeOrNone	read-create	The DiffServ Code Point associated with this access-list rule. A value of '64' indicates that the DSCP field is ignored.
T/F prvtSwAclStdRuleUntaggedMode	1.3.6.1.4.1.738.1.6.1.1.2.2.1.12	TruthValue	read-create	Enables untagged mode. In untagged mode, only untagged frames are included in the match comparison, otherwise all tagged and untagged frames are included.
prvtSwAclExtTable	1.3.6.1.4.1.738.1.6.1.1.2.3		not-accessible	A list of extended IP Access Control Lists. Up to 250 entries are supported.
prvtSwAclExtEntry	1.3.6.1.4.1.738.1.6.1.1.2.3.1		not-accessible	An entry in prvtSwAclExtTable.
PRV prvtSwAclExtName	1.3.6.1.4.1.738.1.6.1.1.2.3.1.1	PrvtSwAclNameType	not-accessible	A string uniquely identifying an extended IP Access Control List.
ROW prvtSwAclExtRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.3.1.2	RowStatus	read-create	The RowStatus for this extended Access Control List.
PRV prvtSwAclExtDescr	1.3.6.1.4.1.738.1.6.1.1.2.3.1.3	PrvtSwAclDescrType	read-create	An arbitrary description to assign to this extended Access Control List.
prvtSwAclExtRuleTable	1.3.6.1.4.1.738.1.6.1.1.2.4		not-accessible	A list of rules for extended IP access-lists. Up to 250 entries are supported per prvtSwAclExtName.
prvtSwAclExtRuleEntry	1.3.6.1.4.1.738.1.6.1.1.2.4.1		not-accessible	An entry in prvtSwAclExtRuleTable.
PRV prvtSwAclExtRuleId	1.3.6.1.4.1.738.1.6.1.1.2.4.1.1	PrvtSwAclRuleIdType	not-accessible	Index of the particular rule within the extended IP access control list.
ROW prvtSwAclExtRuleRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.4.1.2	RowStatus	read-create	The RowStatus for this extended access-list rule.
PRV prvtSwAclExtRuleAction	1.3.6.1.4.1.738.1.6.1.1.2.4.1.3	PrvtSwAclAction	read-create	The action to perform when the condition of this access-list rule is true.
PRV prvtSwAclExtRuleIpProtocol	1.3.6.1.4.1.738.1.6.1.1.2.4.1.4	PrvtSwAclIpProtocol	read-create	The IP protocol number associated with this access-list rule.
PRV prvtSwAclExtRuleIpSrcPrefix	1.3.6.1.4.1.738.1.6.1.1.2.4.1.5	PrvtSwAclIpv4PrefixType	read-create	The IP source address prefix defining the subnet associated with this flow.
PRV prvtSwAclExtRuleIpDstPrefix	1.3.6.1.4.1.738.1.6.1.1.2.4.1.6	PrvtSwAclIpv4PrefixType	read-create	The IP destination address prefix defining the subnet associated with this flow.
I32 prvtSwAclExtRuleIcmpType	1.3.6.1.4.1.738.1.6.1.1.2.4.1.7	Integer32	read-create	The ICMP message type associated with this access-list rule. Only used when prvtSwAclExtRuleIpProtocol equals icmp(1). The value '-1' indicates ignore ICMP message type field.
I32 prvtSwAclExtRuleIcmpCode	1.3.6.1.4.1.738.1.6.1.1.2.4.1.8	Integer32	read-create	The ICMP message code associated with this access-list rule. Only used when prvtSwAclExtRuleIpProtocol equals icmp(1). The value '-1' indicates ignore ICMP message code field.
T/F prvtSwAclExtRuleEstablished	1.3.6.1.4.1.738.1.6.1.1.2.4.1.9	TruthValue	read-create	When TCP protocol type is chosen, setting this object to 'true' indicates that established connections will be matched. Only used when prvtSwAclExtRuleIpProtocol equals tcp(6).
PRV prvtSwAclExtRuleTcpSrcPort	1.3.6.1.4.1.738.1.6.1.1.2.4.1.10	PrvtSwAclPortIdTypeOrNone	read-create	The TCP source port associated with this access-list rule. Only used when prvtSwAclExtRuleIpProtocol equals tcp(6). The value '-1' indicates ignore the TCP source port field.
PRV prvtSwAclExtRuleTcpDstPort	1.3.6.1.4.1.738.1.6.1.1.2.4.1.11	PrvtSwAclPortIdTypeOrNone	read-create	The TCP destination port associated with this access-list rule. Only used when prvtSwAclExtRuleIpProtocol equals tcp(6). The value '-1' indicates ignore the TCP destination port field.
PRV prvtSwAclExtRuleUdpSrcPort	1.3.6.1.4.1.738.1.6.1.1.2.4.1.12	PrvtSwAclPortIdTypeOrNone	read-create	The UDP source port associated with this access-list rule. Only used when prvtSwAclExtRuleIpProtocol equals udp(17). The value '-1' indicates ignore the UDP source port field.
PRV prvtSwAclExtRuleUdpDstPort	1.3.6.1.4.1.738.1.6.1.1.2.4.1.13	PrvtSwAclPortIdTypeOrNone	read-create	The UDP destination port associated with this access-list rule. Only used when prvtSwAclExtRuleIpProtocol equals udp(17). The value '-1' indicates ignore the UDP destination port field.
PRV prvtSwAclExtRuleTos	1.3.6.1.4.1.738.1.6.1.1.2.4.1.14	PrvtSwAclTosTypeOrNone	read-create	The Type of Service value associated with this access-list rule. The value '16' indicates that the TOS field is ignored.
PRV prvtSwAclExtRulePrecedence	1.3.6.1.4.1.738.1.6.1.1.2.4.1.15	PrvtSwAclPrecedenceTypeOrNone	read-create	The Precedence value associated with this access-list rule. The value '8' indicates that the Precedence field is ignored.
PRV prvtSwAclExtRuleVlanId	1.3.6.1.4.1.738.1.6.1.1.2.4.1.16	PrvtSwAclVlanIdTypeOrNone	read-create	The VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclExtRuleUntaggedMode equals 'true').
PRV prvtSwAclExtRuleVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.4.1.17	PrvtSwAclVlanMaskType	read-create	The VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclExtRuleUntaggedMode equals 'true').
PRV prvtSwAclExtRuleInnerVlanId	1.3.6.1.4.1.738.1.6.1.1.2.4.1.18	PrvtSwAclVlanIdTypeOrNone	read-create	The inner VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclExtRuleUntaggedMode equals 'true').
PRV prvtSwAclExtRuleInnerVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.4.1.19	PrvtSwAclVlanMaskType	read-create	The inner VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclExtRuleUntaggedMode equals 'true').
PRV prvtSwAclExtRuleVpt	1.3.6.1.4.1.738.1.6.1.1.2.4.1.20	PrvtSwAclVptTypeOrNone	read-create	The VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclExtRuleUntaggedMode equals 'true').
PRV prvtSwAclExtRuleInnerVpt	1.3.6.1.4.1.738.1.6.1.1.2.4.1.21	PrvtSwAclVptTypeOrNone	read-create	The inner VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclExtRuleUntaggedMode equals 'true').
PRV prvtSwAclExtRuleDscp	1.3.6.1.4.1.738.1.6.1.1.2.4.1.22	PrvtSwAclDscpTypeOrNone	read-create	The DiffServ Code Point associated with this access-list rule. A value of '64' indicates that the DSCP field is ignored.
T/F prvtSwAclExtRuleUntaggedMode	1.3.6.1.4.1.738.1.6.1.1.2.4.1.23	TruthValue	read-create	Enables untagged mode. In untagged mode, only untagged frames are included in the match comparison, otherwise all tagged and untagged frames are included.
prvtSwAclMacTable	1.3.6.1.4.1.738.1.6.1.1.2.5		not-accessible	A list of MAC Access Control Lists. Up to 250 entries are supported.
prvtSwAclMacEntry	1.3.6.1.4.1.738.1.6.1.1.2.5.1		not-accessible	An entry in prvtSwAclMacTable.
PRV prvtSwAclMacName	1.3.6.1.4.1.738.1.6.1.1.2.5.1.1	PrvtSwAclNameType	not-accessible	A string uniquely identifying a MAC Access Control List.
ROW prvtSwAclMacRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.5.1.2	RowStatus	read-create	The RowStatus for this MAC Access Control List.
PRV prvtSwAclMacDescr	1.3.6.1.4.1.738.1.6.1.1.2.5.1.3	PrvtSwAclDescrType	read-create	An arbitrary description to assign to this MAC Access Control List.
prvtSwAclMacRuleTable	1.3.6.1.4.1.738.1.6.1.1.2.6		not-accessible	A list of rules for MAC access-lists. Up to 250 entries are supported per prvtSwAclMacName.
prvtSwAclMacRuleEntry	1.3.6.1.4.1.738.1.6.1.1.2.6.1		not-accessible	An entry in prvtSwAclMacRuleTable.
PRV prvtSwAclMacRuleId	1.3.6.1.4.1.738.1.6.1.1.2.6.1.1	PrvtSwAclRuleIdType	not-accessible	Index of the particular rule within the MAC access control list.
ROW prvtSwAclMacRuleRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.6.1.2	RowStatus	read-create	The RowStatus for this MAC access-list rule.
PRV prvtSwAclMacRuleAction	1.3.6.1.4.1.738.1.6.1.1.2.6.1.3	PrvtSwAclAction	read-create	The action to perform when the condition of this access-list rule is true.
MAC prvtSwAclMacRuleMacSrc	1.3.6.1.4.1.738.1.6.1.1.2.6.1.4	MacAddress	read-create	The MAC source address associated with this access-list rule.
MAC prvtSwAclMacRuleMacSrcMask	1.3.6.1.4.1.738.1.6.1.1.2.6.1.5	MacAddress	read-create	The mask to use with the MAC source address associated with this access-list rule. A '1' in a bit position will result in the corresponding bit in the source MAC address becoming 'don't care' (i.e. always match). Thus, a value of all ones will result in any MAC source address matching.
MAC prvtSwAclMacRuleMacDst	1.3.6.1.4.1.738.1.6.1.1.2.6.1.6	MacAddress	read-create	The MAC destination address associated with this access-list rule.
MAC prvtSwAclMacRuleMacDstMask	1.3.6.1.4.1.738.1.6.1.1.2.6.1.7	MacAddress	read-create	The mask to use with the MAC destination address associated with this access-list rule. A '1' in a bit position will result in the corresponding bit in the destination MAC address becoming 'don't care' (i.e. always match). Thus, a value of all ones will result in any MAC destination address matching.
PRV prvtSwAclMacRuleTos	1.3.6.1.4.1.738.1.6.1.1.2.6.1.8	PrvtSwAclTosTypeOrNone	read-create	The Type of Service value associated with this access-list rule. The value '16' indicates that the TOS field is ignored.
PRV prvtSwAclMacRulePrecedence	1.3.6.1.4.1.738.1.6.1.1.2.6.1.9	PrvtSwAclPrecedenceTypeOrNone	read-create	The Precedence value associated with this access-list rule. The value '8' indicates that the Precedence field is ignored.
PRV prvtSwAclMacRuleVlanId	1.3.6.1.4.1.738.1.6.1.1.2.6.1.10	PrvtSwAclVlanIdTypeOrNone	read-create	The VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclMacRuleUntaggedMode equals 'true').
PRV prvtSwAclMacRuleVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.6.1.11	PrvtSwAclVlanMaskType	read-create	The VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclMacRuleUntaggedMode equals 'true').
PRV prvtSwAclMacRuleInnerVlanId	1.3.6.1.4.1.738.1.6.1.1.2.6.1.12	PrvtSwAclVlanIdTypeOrNone	read-create	The inner VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclMacRuleUntaggedMode equals 'true').
PRV prvtSwAclMacRuleInnerVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.6.1.13	PrvtSwAclVlanMaskType	read-create	The inner VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclMAcRuleUntaggedMode equals 'true').
PRV prvtSwAclMacRuleVpt	1.3.6.1.4.1.738.1.6.1.1.2.6.1.14	PrvtSwAclVptTypeOrNone	read-create	The VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclMacRuleUntaggedMode equals 'true').
PRV prvtSwAclMacRuleInnerVpt	1.3.6.1.4.1.738.1.6.1.1.2.6.1.15	PrvtSwAclVptTypeOrNone	read-create	The inner VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclMacRuleUntaggedMode equals 'true').
PRV prvtSwAclMacRuleDscp	1.3.6.1.4.1.738.1.6.1.1.2.6.1.16	PrvtSwAclDscpTypeOrNone	read-create	The DiffServ Code Point associated with this access-list rule. A value of '64' indicates that the DSCP field is ignored.
T/F prvtSwAclMacRuleUntaggedMode	1.3.6.1.4.1.738.1.6.1.1.2.6.1.17	TruthValue	read-create	Enables untagged mode. In untagged mode, only untagged frames are included in the match comparison, otherwise all tagged and untagged frames are included.
PRV prvtSwAclMacRuleDstAddrType	1.3.6.1.4.1.738.1.6.1.1.2.6.1.18	PrvtSwAclMatchTrafficType	read-create	What type of traffic (based on destination address) to match.
prvtSwAclEthTable	1.3.6.1.4.1.738.1.6.1.1.2.7		not-accessible	A list of EtherType Access Control Lists. Up to 250 entries are supported.
prvtSwAclEthEntry	1.3.6.1.4.1.738.1.6.1.1.2.7.1		not-accessible	An entry in prvtSwAclEthTable.
PRV prvtSwAclEthName	1.3.6.1.4.1.738.1.6.1.1.2.7.1.1	PrvtSwAclNameType	not-accessible	A string uniquely identifying an EtherType Access Control List.
ROW prvtSwAclEthRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.7.1.2	RowStatus	read-create	The RowStatus for this EtherType Access Control List.
PRV prvtSwAclEthDescr	1.3.6.1.4.1.738.1.6.1.1.2.7.1.3	PrvtSwAclDescrType	read-create	An arbitrary description to assign to this EtherType Access Control List.
prvtSwAclEthRuleTable	1.3.6.1.4.1.738.1.6.1.1.2.8		not-accessible	A list of rules for EtherType access-lists. Up to 250 entries are supported per prvtSwAclEthName.
prvtSwAclEthRuleEntry	1.3.6.1.4.1.738.1.6.1.1.2.8.1		not-accessible	An entry in prvtSwAclEthRuleTable.
PRV prvtSwAclEthRuleId	1.3.6.1.4.1.738.1.6.1.1.2.8.1.1	PrvtSwAclRuleIdType	not-accessible	Index of the particular rule within the EtherType IP access control list.
ROW prvtSwAclEthRuleRowStatus	1.3.6.1.4.1.738.1.6.1.1.2.8.1.2	RowStatus	read-create	The RowStatus for EtherType access-list rule.
PRV prvtSwAclEthRuleAction	1.3.6.1.4.1.738.1.6.1.1.2.8.1.3	PrvtSwAclAction	read-create	The action to perform when the condition of this access-list rule is true.
PRV prvtSwAclEthRuleEthType	1.3.6.1.4.1.738.1.6.1.1.2.8.1.4	PrvtSwAclEtherType	read-create	The EtherType protocol number associated with this access-list rule.
PRV prvtSwAclEthRuleEthTypeMask	1.3.6.1.4.1.738.1.6.1.1.2.8.1.5	PrvtSwAclEtherTypeMask	read-create	The EtherType protocol mask to use with this access-list rule. A value of all ones (0xffff) will result in any EtherType protocol number matching.
PRV prvtSwAclEthRuleTos	1.3.6.1.4.1.738.1.6.1.1.2.8.1.6	PrvtSwAclTosTypeOrNone	read-create	The Type of Service value associated with this access-list rule. The value '16' indicates that the TOS field is ignored.
PRV prvtSwAclEthRulePrecedence	1.3.6.1.4.1.738.1.6.1.1.2.8.1.7	PrvtSwAclPrecedenceTypeOrNone	read-create	The Precedence value associated with this access-list rule. The value '8' indicates that the Precedence field is ignored.
PRV prvtSwAclEthRuleVlanId	1.3.6.1.4.1.738.1.6.1.1.2.8.1.8	PrvtSwAclVlanIdTypeOrNone	read-create	The VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclEthRuleUntaggedMode equals 'true').
PRV prvtSwAclEthRuleVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.8.1.9	PrvtSwAclVlanMaskType	read-create	The VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclEthRuleUntaggedMode equals 'true').
PRV prvtSwAclEthRuleInnerVlanId	1.3.6.1.4.1.738.1.6.1.1.2.8.1.10	PrvtSwAclVlanIdTypeOrNone	read-create	The inner VLAN ID associated with this access-list rule. This must be set to the value '0' (no VLAN ID) when in untagged mode (i.e. when prvtSwAclEthRuleUntaggedMode equals 'true').
PRV prvtSwAclEthRuleInnerVlanMask	1.3.6.1.4.1.738.1.6.1.1.2.8.1.11	PrvtSwAclVlanMaskType	read-create	The inner VLAN mask to use with this access-list rule. This must be set to all ones (0xffff) (always match) when in untagged mode (i.e. when prvtSwAclEthRuleUntaggedMode equals 'true').
PRV prvtSwAclEthRuleVpt	1.3.6.1.4.1.738.1.6.1.1.2.8.1.12	PrvtSwAclVptTypeOrNone	read-create	The VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclEthRuleUntaggedMode equals 'true').
PRV prvtSwAclEthRuleInnerVpt	1.3.6.1.4.1.738.1.6.1.1.2.8.1.13	PrvtSwAclVptTypeOrNone	read-create	The inner VLAN priority tag associated with this access-list rule. A value of '8' indicates that the VPT field is ignored. This must be set to the value '8' (ignore VPT field) when in untagged mode (i.e. when prvtSwAclEthRuleUntaggedMode equals 'true').
PRV prvtSwAclEthRuleDscp	1.3.6.1.4.1.738.1.6.1.1.2.8.1.14	PrvtSwAclDscpTypeOrNone	read-create	The DiffServ Code Point associated with this access-list rule. A value of '64' indicates that the DSCP field is ignored.
T/F prvtSwAclEthRuleUntaggedMode	1.3.6.1.4.1.738.1.6.1.1.2.8.1.15	TruthValue	read-create	Enables untagged mode. In untagged mode, only untagged frames are included in the match comparison, otherwise all tagged and untagged frames are included.
prvtSwAclInterfaces	1.3.6.1.4.1.738.1.6.1.1.3
prvtSwAclIfAcg	1.3.6.1.4.1.738.1.6.1.1.3.2
prvtSwAclIfAcgTable	1.3.6.1.4.1.738.1.6.1.1.3.2.1		not-accessible	This table creates and controls the properties of traffic flows belonging to physical and LAG interfaces. Up to 250 entries are supported per interface (prvtSwAclIfAcgIndex). The key combination (prvtSwAclIfAcgIndex, prvtSwAclIfAcgSeqId) must be unique (i.e. no more than one entry must exist with the same interface and sequence-id combination).
prvtSwAclIfAcgEntry	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1		not-accessible	An entry in prvtSwAclIfAcgTable.
NUM prvtSwAclIfAcgIndex	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.1	InterfaceIndex	not-accessible	The index of the physical or LAG interface to which this row applies.
U32 prvtSwAclIfAcgSeqId	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.2	Unsigned32	not-accessible	Specifies the sequence (order/priority) in which this access group will be applied.
PRV prvtSwAclIfAcgType	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.3	PrvtSwAclAcgType	not-accessible	The type (e.g. ipStd, ipExt, mac, etherType) of access group that this row applies to.
PRV prvtSwAclIfAcgAclName	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.4	PrvtSwAclNameType	not-accessible	The name of the access list that this row applies to. This must match the name of an ACL created having the type specified by prvtSwAclIfAcgType. (i.e. it must match one of prvtSwAclStdName, prvtSwAclExtName, prvtSwAclMacName, prvtSwAclEthName corresponding to the type specified in prvtSwAclIfAcgType.)
PRV prvtSwAclIfAcgAclType	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.5	PrvtSwAclGroupType	not-accessible	The type (e.g. in, out, vlan) of access list that this row applies to.
ROW prvtSwAclIfAcgRowStatus	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.6	RowStatus	read-create	The RowStatus for this access-control group.
PRV prvtSwAclIfAcgVlan	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.8	PrvtSwAclVlanIdTypeOrNone	read-create	The ID of the VLAN to which traffic belonging to this access-group will be redirected to. The value of '0' indicates that redirection is disabled. Only applicable for VLAN ACL types (when prvtSwAclIfAcgAclType equals 'vlan'). This object and prvtSwAclIfAcgVlanAdd are not permitted to be simultaneously non-zero.
PRV prvtSwAclIfAcgVlanAdd	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.9	PrvtSwAclVlanIdTypeOrNone	read-create	The ID of the VLAN to which traffic belonging to this access-group will have added to. The value of '0' indicates that redirection is disabled. Only applicable for VLAN ACL types (when prvtSwAclIfAcgAclType equals 'vlan'). This object and prvtSwAclIfAcgVlan are not permitted to be simultaneously non-zero.
PRV prvtSwAclIfAcgVpt	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.10	PrvtSwAclVptTypeOrNone	read-create	The VLAN priority tag to assign to traffic belonging to this access-group. A value of '8' indicates that the VPT field is unaffected. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
PRV prvtSwAclIfAcgInnerVpt	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.11	PrvtSwAclVptTypeOrNone	read-create	The inner VLAN priority tag to assign to traffic belonging to this access-group. A value of '8' indicates that the inner VPT field is unaffected. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
PRV prvtSwAclIfAcgDscp	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.12	PrvtSwAclDscpTypeOrNone	read-create	The DSCP value to assign to traffic belonging to this access-group. A value of '64' indicates that the DSCP field is not affected. Only used when prvtSwAclIfAcgGroupType equals 'out'.
PRV prvtSwAclIfAcgColorGreenFc	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.13	PrvtSwAclFcTypeOrNone	read-create	Map traffic marked as green from the ACG rate-limit to a Forwarding Class (FC). The value 'none' indicates that the FC is not to be affected. Only used when prvtSwAclIfAcgGroupType equals 'in'.
PRV prvtSwAclIfAcgColorYellowFc	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.14	PrvtSwAclFcTypeOrNone	read-create	Map traffic marked as yellow from ACG rate-limit to a Forwarding Class (FC). The value 'none' indicates that the FC is not to be affected. Only used when prvtSwAclIfAcgGroupType equals 'in'.
PRV prvtSwAclIfAcgColorRedFc	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.15	PrvtSwAclFcTypeOrNone	read-create	Map traffic marked as red from ACG rate-limit to a Forwarding Class (FC). The value 'none' indicates that the FC is not to be affected. Only used when prvtSwAclIfAcgGroupType equals 'in'.
PRV prvtSwAclIfAcgColorGreenVpt	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.16	PrvtSwAclVptTypeOrNone	read-create	Remark, with the specifed value, the VLAN priority field of frames for traffic marked as green. The value '8' indicates that the field should not be re-marked. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
PRV prvtSwAclIfAcgColorYellowVpt	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.17	PrvtSwAclVptTypeOrNone	read-create	Remark, with the specifed value, the VLAN priority field of frames for traffic marked as yellow. The value '8' indicates that the field should not be re-marked. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
PRV prvtSwAclIfAcgColorRedVpt	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.18	PrvtSwAclVptTypeOrNone	read-create	Remark, with the specifed value, the VLAN priority field of frames for traffic marked as green. The value '8' indicates that the field should not be re-marked. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
PRV prvtSwAclIfAcgColorGreenDscp	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.19	PrvtSwAclDscpTypeOrNone	read-create	Remark, with the specifed value, the DSCP field of frames for traffic marked as green. A value of '64' indicates that the DSCP value should not be re-marked. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
PRV prvtSwAclIfAcgColorYellowDscp	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.20	PrvtSwAclDscpTypeOrNone	read-create	Remark, with the specifed value, the DSCP field of frames for traffic marked as yellow. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
PRV prvtSwAclIfAcgColorRedDscp	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.21	PrvtSwAclDscpTypeOrNone	read-create	Remark, with the specifed value, the DSCP field of frames for traffic marked as red. Only used for egress ACL types (when prvtSwAclIfAcgGroupType equals 'out').
T/F prvtSwAclIfAcgResetStats	1.3.6.1.4.1.738.1.6.1.1.3.2.1.1.22	TruthValue	read-create	Set to 'true' to reset statistics for this SAP access group. Reads always return the value 'false'.
prvtSwAclIfAcgRLimitTable	1.3.6.1.4.1.738.1.6.1.1.3.2.2		not-accessible	Used to specify for this traffic flow which type of rate-limiting to use and the parameters of the rate-limiting method. Only one entry may exist (i.e. one rate-limiting method may be used) for a particular traffic flow. Not available for VLAN ACL types (when prvtSwAclIfAcgAclType equals 'vlan'). For a particular traffic flow, this table and prvtSwAclIfAcgFcTable are mutually exclusive (i.e. a traffic flow is prohibited from having an entry in this table and in prvtSwAclIfAcgFcTable concurrently).
prvtSwAclIfAcgRLimitEntry	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1		not-accessible	An entry in prvtSwAclIfAcgRLimitTable.
PRV prvtSwAclIfAcgRLimitType	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.1	PrvtSwAclRateLimitType	not-accessible	Specifies the type (single vs. dual) of rate-limiting to use.
ROW prvtSwAclIfAcgRLimitRowStatus	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.2	RowStatus	read-create	The RowStatus for this rate limit function.
PRV prvtSwAclIfAcgRLimitCir	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.3	PrvtSwAclRateType	read-create	The Committed Information Rate.
PRV prvtSwAclIfAcgRLimitCbs	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.4	PrvtSwAclBurstSizeType	read-create	The Committed Burst Size.
PRV prvtSwAclIfAcgRLimitEbs	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.5	PrvtSwAclBurstSizeType	read-create	The Excess Burst Size. Only applicable when using single rate limiting (prvtSwAclIfAcgRLimitType equals 'single').
PRV prvtSwAclIfAcgRLimitPir	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.6	PrvtSwAclRateType	read-create	The Peak Information Rate. Only applicable when using dual rate limiting (prvtSwAclIfAcgRLimitType equals 'dual'). When using dual rate limiting, prvtSwAclIfAcgRLimitPir must be greater than or equal to prvtSwAclIfAcgRLimitCir.
PRV prvtSwAclIfAcgRLimitPbs	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.7	PrvtSwAclBurstSizeType	read-create	The Peak Burst Size. Only applicable when using dual rate limiting (when prvtSwAclIfAcgRLimitType equals 'dual').
T/F prvtSwAclIfAcgRLimitColorAware	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.8	TruthValue	read-create	Set to 'true' to enable color aware traffic metering.
PRV prvtSwAclIfAcgRLimitExceedAct	1.3.6.1.4.1.738.1.6.1.1.3.2.2.1.9	PrvtSwAclExceedAction	read-create	The action to perform when the condition is true. 'markRed' is not supported for all devices. 'markYellow' is not supported for dual rate-limit.
prvtSwAclIfAcgRedirectTable	1.3.6.1.4.1.738.1.6.1.1.3.2.3		not-accessible	Used to specify if this traffic flow should be redirected to another interface. Only one entry is allowed (i.e. only one redirect is permitted). Only applicable to ingress ACL types (when prvtSwAclIfAcgAclType equals 'in').
prvtSwAclIfAcgRedirectEntry	1.3.6.1.4.1.738.1.6.1.1.3.2.3.1		not-accessible	An entry in prvtSwAclIfAcgRedirectTable.
NUM prvtSwAclIfAcgRedirectIfIndex	1.3.6.1.4.1.738.1.6.1.1.3.2.3.1.1	InterfaceIndex	not-accessible	The ifIndex of a physical interface defined in the ifTable to which traffic should be redirected to.
ROW prvtSwAclIfAcgRedirectRowStatus	1.3.6.1.4.1.738.1.6.1.1.3.2.3.1.2	RowStatus	read-create	The RowStatus for prvtSwAclIfAcgRedirectTable.
prvtSwAclIfAcgFcTable	1.3.6.1.4.1.738.1.6.1.1.3.2.4		not-accessible	Used to assign parameters to a particular forwarding class within a traffic flow. Only one entry is allowed. Only applicable to ingress ACL types (when prvtSwAclIfAcgAclType equals 'in'). For a particular traffic flow, this table and prvtSwAclIfAcgRLimitTable are mutually exclusive (i.e. a traffic flow is prohibited from having an entry in this table and in prvtSwAclIfAcgFcTable at the same time).
prvtSwAclIfAcgFcEntry	1.3.6.1.4.1.738.1.6.1.1.3.2.4.1		not-accessible	An entry in prvtSwAclIfAcgFcTable.
PRV prvtSwAclIfAcgFcId	1.3.6.1.4.1.738.1.6.1.1.3.2.4.1.1	PrvtSwAclFcType	not-accessible	The forwarding class that this row applies to.
ROW prvtSwAclIfAcgFcRowStatus	1.3.6.1.4.1.738.1.6.1.1.3.2.4.1.2	RowStatus	read-create	The RowStatus for this forwarding class.
PRV prvtSwAclIfAcgFcColor	1.3.6.1.4.1.738.1.6.1.1.3.2.4.1.3	PrvtSwAclColorType	read-create	The color to assign to traffic belonging to this forwarding class. Color red is not supported for all devices
prvtSwAclIfAcgMonPrfTable	1.3.6.1.4.1.738.1.6.1.1.3.2.5		not-accessible	Used to assign a monitoring profile to a traffic flow. Only one profile may be assigned per traffic flow. Only applicable to ingress ACL types (when prvtSwAclIfAcgAclType equals 'in').
prvtSwAclIfAcgMonPrfEntry	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1		not-accessible	An entry in prvtSwAclIfAcgMonPrfTable.
ROW prvtSwAclIfAcgMonPrfRowStatus	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.1	RowStatus	read-create	The RowStatus for this monitoring profile.
C64 prvtSwAclIfAcgMonPrfMatchFEx	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.2	Counter64	read-only	The number of frames of traffic matching this traffic flow.
C64 prvtSwAclIfAcgMonPrfMatchB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.3	Counter64	read-only	The number of bytes of traffic matching this traffic flow.
C64 prvtSwAclIfAcgMonPrfGreenF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.4	Counter64	read-only	The number of frames of green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfGreenB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.5	Counter64	read-only	The number of bytes of green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfNotGreenF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.6	Counter64	read-only	The number of frames of non-green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfNotGreenB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.7	Counter64	read-only	The number of bytes of non-green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfYellowF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.8	Counter64	read-only	The number of frames of yellow traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfYellowB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.9	Counter64	read-only	The number of bytes of yellow traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRedF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.10	Counter64	read-only	The number of frames of red traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRedB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.11	Counter64	read-only	The number of bytes of red traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfNotRedF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.12	Counter64	read-only	The number of frames of non-red traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfNotRedB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.13	Counter64	read-only	The number of bytes of non-red traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateMatchF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.14	Counter64	read-only	The rate, in frames per second, of traffic matching this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateMatchB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.15	Counter64	read-only	The rate, in bytes per second, of traffic matching this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateGreenF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.16	Counter64	read-only	The rate, in frames per second, of green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateGreenB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.17	Counter64	read-only	The rate, in bytes per second, of green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateNotGreenF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.18	Counter64	read-only	The rate, in frames per second, of non-green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateNotGreenB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.19	Counter64	read-only	The rate, in bytes per second, of non-green traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateYellowF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.20	Counter64	read-only	The rate, in frames per second, of yellow traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateYellowB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.21	Counter64	read-only	The rate, in bytes per second, of yellow traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateRedF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.22	Counter64	read-only	The rate, in frames per second, of red traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateRedB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.23	Counter64	read-only	The rate, in bytes per second, of red traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateNotRedF	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.24	Counter64	read-only	The rate, in frames per second, of non-red traffic belonging to this traffic flow.
C64 prvtSwAclIfAcgMonPrfRateNotRedB	1.3.6.1.4.1.738.1.6.1.1.3.2.5.1.25	Counter64	read-only	The rate, in bytes per second, of non-red traffic belonging to this traffic flow.
prvtSwAclIfAcgRestrictEgForwardingTable	1.3.6.1.4.1.738.1.6.1.1.3.2.6		not-accessible	Used to specify if this traffic flow should be forwarded to another interface.All the other interfaces will be blocked. Only applicable to ingress ACL types (when prvtSwAclIfAcgAclType equals 'in').
prvtSwAclIfAcgRestrictEgForwardingEntry	1.3.6.1.4.1.738.1.6.1.1.3.2.6.1		not-accessible	An entry in prvtSwAclIfAcgRestrictEgForwardingTable.
NUM prvtSwAclIfAcgRestrictEgForwIfIndex	1.3.6.1.4.1.738.1.6.1.1.3.2.6.1.1	InterfaceIndex	not-accessible	The ifIndex of a physical interface defined in the ifTable to which traffic should be forwared to.
ROW prvtSwAclIfAcgRestrictEgForwRowStatus	1.3.6.1.4.1.738.1.6.1.1.3.2.6.1.2	RowStatus	read-create	The RowStatus for prvtSwAclIfAcgRestrictEgForwardingTable.
prvtSwAclSaps	1.3.6.1.4.1.738.1.6.1.1.4
prvtSwAclSapAcgTable	1.3.6.1.4.1.738.1.6.1.1.4.1		not-accessible	This table creates and controls the properties of traffic flows belonging to SAP interfaces. Up to 250 entries are supported per SAP (i.e. per prvtSwAclSapServiceId, prvtSwAclSapIfIndex, prvtSwAclSapEncapValue combination). The key combination (serviceId, sapPortId, sapEncapValue, prvtSwAclSapAcgSeqId) must be unique (i.e. no more than one entry can exist with the same SAP and sequence-id combination). Notes: 1. access-groups are not supported on VPWS SAPs. 2. Only ingress ACL types (prvtSwAclSapAcgAclType equals 'in') are supported on SAPs.
prvtSwAclSapAcgEntry	1.3.6.1.4.1.738.1.6.1.1.4.1.1		not-accessible	An entry in prvtSwAclSapAcgTable.
U32 prvtSwAclSapAcgSeqId	1.3.6.1.4.1.738.1.6.1.1.4.1.1.4	Unsigned32	not-accessible	Specifies the sequence (order/priority) in which this access group will be applied.
PRV prvtSwAclSapAcgType	1.3.6.1.4.1.738.1.6.1.1.4.1.1.5	PrvtSwAclAcgType	not-accessible	The type (e.g. ipStd, ipExt, mac, etherType) of access group that this row applies to.
PRV prvtSwAclSapAcgAclName	1.3.6.1.4.1.738.1.6.1.1.4.1.1.6	PrvtSwAclNameType	not-accessible	The name of the access list that this row applies to. This must match the name of an ACL created with the type specified by prvtSwAclSapAcgType. (i.e. it must match one of prvtSwAclStdName, prvtSwAclExtName, prvtSwAclMacName, prvtSwAclEthName corresponding to the type specified in prvtSwAclSapAcgType.)
PRV prvtSwAclSapAcgAclType	1.3.6.1.4.1.738.1.6.1.1.4.1.1.7	PrvtSwAclGroupType	not-accessible	The type (e.g. in, out, vlan) of access list that this row applies to.
ROW prvtSwAclSapAcgRowStatus	1.3.6.1.4.1.738.1.6.1.1.4.1.1.8	RowStatus	read-create	The RowStatus for this SAP's access-control group.
PRV prvtSwAclSapAcgColorGreenFc	1.3.6.1.4.1.738.1.6.1.1.4.1.1.13	PrvtSwAclFcTypeOrNone	read-create	Map traffic marked as green from the ACG rate-limit to a Forwarding Class (FC). The value 'none' indicates that the FC is not to be affected. Only used when prvtSwAclSapAcgGroupType equals 'in'.
PRV prvtSwAclSapAcgColorYellowFc	1.3.6.1.4.1.738.1.6.1.1.4.1.1.14	PrvtSwAclFcTypeOrNone	read-create	Map traffic marked as yellow from ACG rate-limit to a Forwarding Class (FC). The value 'none' indicates that the FC is not to be affected. Only used when prvtSwAclSapAcgGroupType equals 'in'.
PRV prvtSwAclSapAcgColorRedFc	1.3.6.1.4.1.738.1.6.1.1.4.1.1.15	PrvtSwAclFcTypeOrNone	read-create	Map traffic marked as red from ACG rate-limit to a Forwarding Class (FC). The value 'none' indicates that the FC is not to be affected. Only used when prvtSwAclSapAcgGroupType equals 'in'.
T/F prvtSwAclSapAcgResetStats	1.3.6.1.4.1.738.1.6.1.1.4.1.1.16	TruthValue	read-create	Set to 'true' to reset the statistics for this SAP access group. Reads always return the value 'false'.
prvtSwAclSapAcg	1.3.6.1.4.1.738.1.6.1.1.4.2
prvtSwAclSapAcgRLimitTable	1.3.6.1.4.1.738.1.6.1.1.4.2.2		not-accessible	Used to specify for this traffic flow which type of rate-limiting to use and the parameters of the rate-limiting method. Only one entry may exist (i.e. one rate-limiting method may be used) for a particular traffic flow. Not available for VLAN ACL types (when prvtSwAclSapAcgAclType equals 'vlan'). For a particular traffic flow, this table and prvtSwAclSapAcgFcTable are mutually exclusive (i.e. a traffic flow is prohibited from having an entry in this table and in prvtSwAclSapAcgFcTable concurrently).
prvtSwAclSapAcgRLimitEntry	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1		not-accessible	An entry in prvtSwAclSapAcgRLimitTable.
PRV prvtSwAclSapAcgRLimitType	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.1	PrvtSwAclRateLimitType	not-accessible	Specifies the type (single vs. dual) of rate-limiting to use.
ROW prvtSwAclSapAcgRLimitRowStatus	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.2	RowStatus	read-create	The RowStatus for this rate limit function.
PRV prvtSwAclSapAcgRLimitCir	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.3	PrvtSwAclRateType	read-create	The Committed Information Rate.
PRV prvtSwAclSapAcgRLimitCbs	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.4	PrvtSwAclBurstSizeType	read-create	The Committed Burst Size.
PRV prvtSwAclSapAcgRLimitEbs	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.5	PrvtSwAclBurstSizeType	read-create	The Excess Burst Size. Only applicable when using single rate limiting (prvtSwAclSapAcgRLimitType equals 'single').
PRV prvtSwAclSapAcgRLimitPir	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.6	PrvtSwAclRateType	read-create	The Peak Information Rate. Only applicable when using dual rate limiting (prvtSwAclSapAcgRLimitType equals 'dual'). When using dual rate limiting, prvtSwAclSapAcgRLimitPir must be greater than or equal to prvtSwAclSapAcgRLimitCir.
PRV prvtSwAclSapAcgRLimitPbs	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.7	PrvtSwAclBurstSizeType	read-create	The Peak Burst Size. Only applicable when using dual rate limiting (when prvtSwAclSapAcgRLimitType equals 'dual').
T/F prvtSwAclSapAcgRLimitColorAware	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.8	TruthValue	read-create	Set to 'true' to enable color aware traffic metering.
PRV prvtSwAclSapAcgRLimitExceedAct	1.3.6.1.4.1.738.1.6.1.1.4.2.2.1.9	PrvtSwAclExceedAction	read-create	The action to perform when the condition is true.
prvtSwAclSapAcgRedirectTable	1.3.6.1.4.1.738.1.6.1.1.4.2.3		not-accessible	Used to specify if this traffic flow should be redirected to another interface. Only one entry is allowed (i.e. only one redirect is permitted). Only applicable to ingress ACL types (when prvtSwAclSapAcgAclType equals 'in').
prvtSwAclSapAcgRedirectEntry	1.3.6.1.4.1.738.1.6.1.1.4.2.3.1		not-accessible	An entry in prvtSwAclSapAcgRedirectTable.
NUM prvtSwAclSapAcgRedirectIfIndex	1.3.6.1.4.1.738.1.6.1.1.4.2.3.1.1	InterfaceIndex	not-accessible	The ifIndex of a physical interface defined in the ifTable to which traffic should be redirected to.
ROW prvtSwAclSapAcgRedirectRowStatus	1.3.6.1.4.1.738.1.6.1.1.4.2.3.1.2	RowStatus	read-create	The RowStatus for prvtSwAclSapAcgRedirectTable.
prvtSwAclSapAcgFcTable	1.3.6.1.4.1.738.1.6.1.1.4.2.4		not-accessible	Used to assign parameters to a particular forwarding class within a traffic flow. Only one entry is allowed. Only applicable to ingress ACL types (when prvtSwAclSapAcgAclType equals 'in'). For a particular traffic flow, this table and prvtSwAclSapAcgRLimitTable are mutually exclusive (i.e. a traffic flow is prohibited from having an entry in this table and in prvtSwAclSapAcgFcTable at the same time).
prvtSwAclSapAcgFcEntry	1.3.6.1.4.1.738.1.6.1.1.4.2.4.1		not-accessible	An entry in prvtSwAclSapAcgFcTable.
PRV prvtSwAclSapAcgFcId	1.3.6.1.4.1.738.1.6.1.1.4.2.4.1.1	PrvtSwAclFcType	not-accessible	The forwarding class that this row applies to.
ROW prvtSwAclSapAcgFcRowStatus	1.3.6.1.4.1.738.1.6.1.1.4.2.4.1.2	RowStatus	read-create	The RowStatus for this forwarding class.
PRV prvtSwAclSapAcgFcColor	1.3.6.1.4.1.738.1.6.1.1.4.2.4.1.3	PrvtSwAclColorType	read-create	The color to assign to traffic belonging to this forwarding class. Color red is not supported for all devices
prvtSwAclSapAcgMonPrfTable	1.3.6.1.4.1.738.1.6.1.1.4.2.5		not-accessible	Used to assign a monitoring profile to a traffic flow. Only one profile may be assigned per traffic flow. Only applicable to ingress ACL types (when prvtSwAclSapAcgAclType equals 'in').
prvtSwAclSapAcgMonPrfEntry	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1		not-accessible	An entry in prvtSwAclSapAcgMonPrfTable.
ROW prvtSwAclSapAcgMonPrfRowStatus	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.1	RowStatus	read-create	The RowStatus for this monitoring profile.
C64 prvtSwAclSapAcgMonPrfMatchF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.2	Counter64	read-only	The number of frames of traffic matching this traffic flow.
C64 prvtSwAclSapAcgMonPrfMatchB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.3	Counter64	read-only	The number of bytes of traffic matching this traffic flow.
C64 prvtSwAclSapAcgMonPrfGreenF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.4	Counter64	read-only	The number of frames of green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfGreenB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.5	Counter64	read-only	The number of bytes of green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfNotGreenF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.6	Counter64	read-only	The number of frames of non-green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfNotGreenB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.7	Counter64	read-only	The number of bytes of non-green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfYellowF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.8	Counter64	read-only	The number of frames of yellow traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfYellowB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.9	Counter64	read-only	The number of bytes of yellow traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRedF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.10	Counter64	read-only	The number of frames of red traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRedB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.11	Counter64	read-only	The number of bytes of red traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfNotRedF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.12	Counter64	read-only	The number of frames of non-red traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfNotRedB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.13	Counter64	read-only	The number of bytes of non-red traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateMatchF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.14	Counter64	read-only	The rate, in frames per second, of traffic matching this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateMatchB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.15	Counter64	read-only	The rate, in bytes per second, of traffic matching this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateGreenF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.16	Counter64	read-only	The rate, in frames per second, of green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateGreenB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.17	Counter64	read-only	The rate, in bytes per second, of green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateNotGreenF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.18	Counter64	read-only	The rate, in frames per second, of non-green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateNotGreenB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.19	Counter64	read-only	The rate, in bytes per second, of non-green traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateYellowF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.20	Counter64	read-only	The rate, in frames per second, of yellow traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateYellowB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.21	Counter64	read-only	The rate, in bytes per second, of yellow traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateRedF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.22	Counter64	read-only	The rate, in frames per second, of red traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateRedB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.23	Counter64	read-only	The rate, in bytes per second, of red traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateNotRedF	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.24	Counter64	read-only	The rate, in frames per second, of non-red traffic belonging to this traffic flow.
C64 prvtSwAclSapAcgMonPrfRateNotRedB	1.3.6.1.4.1.738.1.6.1.1.4.2.5.1.25	Counter64	read-only	The rate, in bytes per second, of non-red traffic belonging to this traffic flow.
prvtSwAclSapAcgRestrictEgForwardingTable	1.3.6.1.4.1.738.1.6.1.1.4.2.6		not-accessible	Used to specify if this traffic flow should be forwarded to another interface.All the other interfaces will be blocked. Only applicable to ingress ACL types (when prvtSwAclSapAcgAclType equals 'in').
prvtSwAclSapAcgRestrictEgForwardingEntry	1.3.6.1.4.1.738.1.6.1.1.4.2.6.1		not-accessible	An entry in prvtSwAclSapAcgRestrictEgForwardingTable.
NUM prvtSwAclSapAcgRestrictEgForwIfIndex	1.3.6.1.4.1.738.1.6.1.1.4.2.6.1.1	InterfaceIndex	not-accessible	The ifIndex of a physical interface defined in the ifTable to which traffic should be forwared to.
ROW prvtSwAclSapAcgRestrictEgForwRowStatus	1.3.6.1.4.1.738.1.6.1.1.4.2.6.1.2	RowStatus	read-create	The RowStatus for prvtSwAclSapAcgRestrictEgForwardingTable.

RFC description

Controls access-list parameters on BATM T-Metro switches for IP and MAC filtering across network services.

Start monitoring BATM/Telco Systems carrier Ethernet switches (ACL profiles) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download PRVT-SWITCH-ACCESS-LIST-MIB