All MIBs › QOS-ACL-MIB
Organization: Quanta Computer Inc.
Last Updated: 2011-08-31
Category: QoS and Traffic Management, Security
Description: Manages Quanta Computer switch QoS ACL (Access Control List) rules for traffic classification and policy application.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is QOS-ACL-MIB?
QOS-ACL-MIB is a Quanta Computer enterprise MIB for the QoS ACL Flex package on Quanta switches, placing it in the network traffic-classification and policy-enforcement technology area. Its content is sparse in this batch, but per its short description it manages Access Control List (ACL) rules used for classifying traffic and applying quality-of-service policy. Its monitoring value is configuration/policy status rather than physical hardware health -- an operator uses it to verify which ACL rules are active on which interfaces and whether traffic classification/policing is being applied as intended. As a QoS/ACL-focused module it likely complements standard interface and QoS MIB conventions (ifIndex-based indexing) common to switch management, though no explicit dependency is stated. It is deployed on Quanta Computer data-center switches where administrators need to enforce traffic prioritization or access restrictions via ACL-based QoS policy. Engineers can download the QOS-ACL-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in QOS-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Quanta Computer data-center Ethernet switches
Monitoring Examples
An administrator would review the configured ACL rule set to confirm a given classification rule (e.g. matching a VLAN, port, or traffic type) is correctly bound to the intended switch interface and QoS action. Detecting that an expected ACL rule is missing or in a disabled row-status state would explain why traffic that should have been rate-limited or blocked is instead passing through unrestricted. Comparing applied ACL policy across a stack of Quanta switches would help catch a configuration drift between otherwise-identical devices.
What Can Be Monitored
- ACL rule configuration
- traffic classification criteria
- QoS policy application per interface
- ACL rule status
This MIB depends on
Related MIBs
Imported Objects
From IF-MIB
| InterfaceIndexOrZero |
From QOS-MIB
| qos | MODULE-IDENTITY |
From RFC1213-MIB
| DisplayString |
From SNMPv2-SMI
| Counter64 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| qosACL | 1.3.6.1.4.1.7244.2.3.2 | The MIB definitions for Quality of Service - ACL Flex package. | ||
| aclTable | 1.3.6.1.4.1.7244.2.3.2.1 | not-accessible | A table of ACL instances. | |
| aclEntry | 1.3.6.1.4.1.7244.2.3.2.1.1 | not-accessible | ||
| I32 aclIndex | 1.3.6.1.4.1.7244.2.3.2.1.1.1 | Integer32 | not-accessible | The IP ACL table index this instance is associated with. |
| ROW aclStatus | 1.3.6.1.4.1.7244.2.3.2.1.1.2 | RowStatus | read-create | Status of this instance. Entries can not be deleted until all rows in the aclIfTable and aclRuleTable with corresponding values of aclIndex have been deleted. active(1) - this ACL instance is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance |
| STR aclName | 1.3.6.1.4.1.7244.2.3.2.1.1.3 | DisplayString | read-create | The name of this IPv4 ACL entry, which must consist of 1 to 31 alphanumeric characters and uniquely identify this IPv4 ACL. An existing IPv4 ACL can be renamed by setting this object to a new name. This object must be set to complete a new IPv4 ACL row instance. |
| aclIfTable | 1.3.6.1.4.1.7244.2.3.2.2 | not-accessible | A table of ACL interface instances per direction. | |
| aclIfEntry | 1.3.6.1.4.1.7244.2.3.2.2.1 | not-accessible | ||
| I32 aclIfIndex | 1.3.6.1.4.1.7244.2.3.2.2.1.1 | Integer32 | not-accessible | The interface to which this ACL instance applies. |
| INT aclIfDirection | 1.3.6.1.4.1.7244.2.3.2.2.1.2 | INTEGER | not-accessible | The interface direction to which this ACL instance applies. |
| U32 aclIfSequence | 1.3.6.1.4.1.7244.2.3.2.2.1.3 | Unsigned32 | not-accessible | The relative evaluation sequence of this ACL for this interface and direction. When multiple ACLs are allowed for a given interface and direction, the sequence number determines the order in which the list of ACLs are evaluated, with lower sequence numbers given higher precedence. The sequence number value is arbitrary, but must be a unique non-zero value for a given interface and direction. Setting this object to an existing sequence number value for a given interface and direction causes the ACL corresponding to that value to be replaced with this ACL. |
| INT aclIfAclType | 1.3.6.1.4.1.7244.2.3.2.2.1.4 | INTEGER | not-accessible | The type of this ACL, which is used to interpret the aclIfId object value. Each type of ACL uses its own numbering scheme for identification (see aclIfAclId object for details). The aclIfAclId object must be specified along with this object. |
| I32 aclIfAclId | 1.3.6.1.4.1.7244.2.3.2.2.1.5 | Integer32 | not-accessible | The ACL identifier value, which is interpreted based on the aclIfType object. For the IP ACLs, the actual ACL number is its identifier as follows: IP standard ranges from 1-99, while IP extended ranges from 100-199. Here, aclIfAclId represents aclIndex. The MAC ACLs use an internally-generated index value that is assigned when the ACL is created.Here, aclIfAclId represents aclMacIndex. The IPv6 ACLs use an internally-generated index value that is assigned when the ACL is created.Here, aclVlanAclId represents aclIpv6Index. The aclIfType object must be specified along with this object. |
| ROW aclIfStatus | 1.3.6.1.4.1.7244.2.3.2.2.1.6 | RowStatus | read-create | Status of this instance. active(1) - this ACL interface instance is active createAndGo(4) - set to this value to assign an ACL to an interface and direction destroy(6) - set to this value to remove an ACL from an interface and direction |
| aclRuleTable | 1.3.6.1.4.1.7244.2.3.2.3 | not-accessible | A table of IP ACL Rule instances. | |
| aclRuleEntry | 1.3.6.1.4.1.7244.2.3.2.3.1 | not-accessible | A table of IP ACL Classification Rules | |
| I32 aclRuleIndex | 1.3.6.1.4.1.7244.2.3.2.3.1.1 | Integer32 | not-accessible | The index of this rule instance within an IP ACL. |
| INT aclRuleAction | 1.3.6.1.4.1.7244.2.3.2.3.1.2 | INTEGER | read-create | The type of action this rule should perform. |
| I32 aclRuleProtocol | 1.3.6.1.4.1.7244.2.3.2.3.1.3 | Integer32 | read-create | icmp - 1 igmp - 2 ip - 4 tcp - 6 udp - 17 All values from 1 to 255 are valid. |
| IP aclRuleSrcIpAddress | 1.3.6.1.4.1.7244.2.3.2.3.1.4 | IpAddress | read-create | The Source IP Address used in the ACL Classification. |
| IP aclRuleSrcIpMask | 1.3.6.1.4.1.7244.2.3.2.3.1.5 | IpAddress | read-create | The Source IP Mask used in the ACL Classification. This mask is expressed using wild-card notation,which is the 1's compliment of traditional Subnet Masks. Here, the 'Don't care bits' are represented by binary 1's and 'Do care bits' are represented by binary 0's. |
| I32 aclRuleSrcL4Port | 1.3.6.1.4.1.7244.2.3.2.3.1.6 | Integer32 | read-create | The Source Port Number (Layer 4) used in the ACL Classification. |
| I32 aclRuleSrcL4PortRangeStart | 1.3.6.1.4.1.7244.2.3.2.3.1.7 | Integer32 | read-create | The Source Port Number(Layer 4) range start. |
| I32 aclRuleSrcL4PortRangeEnd | 1.3.6.1.4.1.7244.2.3.2.3.1.8 | Integer32 | read-create | The Source Port Number(Layer 4) range end. |
| IP aclRuleDestIpAddress | 1.3.6.1.4.1.7244.2.3.2.3.1.9 | IpAddress | read-create | The Destination IP Address used in the ACL Classification. |
| IP aclRuleDestIpMask | 1.3.6.1.4.1.7244.2.3.2.3.1.10 | IpAddress | read-create | The Destination IP Mask used in the ACL Classification. This mask is expressed using wild-card notation,which is the 1's compliment of traditional Subnet Masks. Here, the 'Don't care bits' are represented by binary 1's and 'Do care bits' are represented by binary 0's. |
| I32 aclRuleDestL4Port | 1.3.6.1.4.1.7244.2.3.2.3.1.11 | Integer32 | read-create | The Destination Port (Layer 4) used in ACl classification. |
| I32 aclRuleDestL4PortRangeStart | 1.3.6.1.4.1.7244.2.3.2.3.1.12 | Integer32 | read-create | The Destination Port (Layer 4) starting range used in ACL classification. |
| I32 aclRuleDestL4PortRangeEnd | 1.3.6.1.4.1.7244.2.3.2.3.1.13 | Integer32 | read-create | The Destination Port (Layer 4) ending range used in ACL classification. |
| I32 aclRuleIPDSCP | 1.3.6.1.4.1.7244.2.3.2.3.1.14 | Integer32 | read-create | The Differentiated Services Code Point value. |
| I32 aclRuleIpPrecedence | 1.3.6.1.4.1.7244.2.3.2.3.1.15 | Integer32 | read-create | The Type of Service (TOS) IP Precedence value. |
| I32 aclRuleIpTosBits | 1.3.6.1.4.1.7244.2.3.2.3.1.16 | Integer32 | read-create | The Type of Service (TOS) Bits value. |
| I32 aclRuleIpTosMask | 1.3.6.1.4.1.7244.2.3.2.3.1.17 | Integer32 | read-create | The Type of Service (TOS) Mask value. |
| ROW aclRuleStatus | 1.3.6.1.4.1.7244.2.3.2.3.1.18 | RowStatus | read-create | Status of this instance. active(1) - this ACL Rule is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance |
| U32 aclRuleAssignQueueId | 1.3.6.1.4.1.7244.2.3.2.3.1.19 | Unsigned32 | read-create | Queue identifier to which all inbound packets matching this ACL rule are directed. This object defaults to the standard queue assignment for user priority 0 traffic per the IEEE 802.1D specification based on the number of assignable queues in the system: 1-3 queues: 0 4-7 queues: 1 8 queues: 2 This default assignment is static and is not influenced by other system configuration changes. |
| NUM aclRuleRedirectIntf | 1.3.6.1.4.1.7244.2.3.2.3.1.20 | InterfaceIndexOrZero | read-create | A non-zero value indicates the external ifIndex to which all inbound packets matching this ACL rule are directed. A value of zero means packet redirection is not in effect, which is the default value of this object. Note that packet redirection and mirroring (aclRuleMirrorIntf object) are mutually-exclusive rule attributes. |
| T/F aclRuleMatchEvery | 1.3.6.1.4.1.7244.2.3.2.3.1.21 | TruthValue | read-create | Flag to indicate that the ACL rule is defined to match on every IP packet, regardless of content. |
| NUM aclRuleMirrorIntf | 1.3.6.1.4.1.7244.2.3.2.3.1.22 | InterfaceIndexOrZero | read-create | A non-zero value indicates the external ifIndex to which all inbound packets matching this ACL rule are copied. A value of zero means packet mirroring is not in effect, which is the default value of this object. Note that packet mirroring and redirection (aclRuleRedirectIntf object) are mutually-exclusive rule attributes. |
| T/F aclRuleLogging | 1.3.6.1.4.1.7244.2.3.2.3.1.23 | TruthValue | read-create | Flag to indicate that the ACL rule is being logged. A hardware count of the number of times this rule is hit is reported via the aclTrapRuleLogEvent notification. This object may be supported for an aclRuleAction setting of permit(1) and/or deny(2), depending on the ACL feature capabilities of the device. |
| STR aclRuleTimeRangeName | 1.3.6.1.4.1.7244.2.3.2.3.1.24 | DisplayString | read-create | Name of the time range, that the ACL rule has referenced.It must start with alphabet and shall consist of 1 to 31 alphanumeric characters. |
| INT aclRuleTimeRangeStatus | 1.3.6.1.4.1.7244.2.3.2.3.1.25 | INTEGER | read-only | Flag that indicates the ACL rule status. If the status is active, it implies that the ACL rule is in effect. If the status is inactive, it implies that the ACL rule is not in effect. |
| I32 aclMacIndexNextFree | 1.3.6.1.4.1.7244.2.3.2.5 | Integer32 | read-only | This object contains an unused value for the aclMacIndex to be used when creating a new MAC ACL. A value of zero indicates the ACL table is full. |
| aclMacTable | 1.3.6.1.4.1.7244.2.3.2.6 | not-accessible | A table of MAC ACL instances. | |
| aclMacEntry | 1.3.6.1.4.1.7244.2.3.2.6.1 | not-accessible | ||
| I32 aclMacIndex | 1.3.6.1.4.1.7244.2.3.2.6.1.1 | Integer32 | not-accessible | The MAC ACL table index this instance is associated with. When creating a new MAC ACL, refer to the aclMacIndexNextFree object to determine the next available aclMacIndex to use. |
| STR aclMacName | 1.3.6.1.4.1.7244.2.3.2.6.1.2 | DisplayString | read-create | The name of this MAC ACL entry, which must consist of 1 to 31 alphanumeric characters and uniquely identify this MAC ACL. An existing MAC ACL can be renamed by setting this object to a new name. This object must be set to complete a new MAC ACL row instance. |
| ROW aclMacStatus | 1.3.6.1.4.1.7244.2.3.2.6.1.3 | RowStatus | read-create | Status of this instance. ACL MAC entries can not be deleted until all rows in the aclIfTable and aclRuleTable with corresponding values of aclMacIndex have been deleted. active(1) - this ACL instance is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance The aclMacName object must be set to complete this row instance. |
| aclMacRuleTable | 1.3.6.1.4.1.7244.2.3.2.7 | not-accessible | A table of layer 2 MAC ACL Rule instances. | |
| aclMacRuleEntry | 1.3.6.1.4.1.7244.2.3.2.7.1 | not-accessible | A table of layer 2 MAC ACL Classification Rules | |
| I32 aclMacRuleIndex | 1.3.6.1.4.1.7244.2.3.2.7.1.1 | Integer32 | not-accessible | The index of this rule instance within an MAC ACL. |
| INT aclMacRuleAction | 1.3.6.1.4.1.7244.2.3.2.7.1.2 | INTEGER | read-create | The type of action this MAC ACL rule should perform. |
| U32 aclMacRuleCos | 1.3.6.1.4.1.7244.2.3.2.7.1.3 | Unsigned32 | read-create | The Class of Service (COS) used in the MAC ACL Classification. This is the three-bit user priority field in the 802.1Q tag header of a tagged Ethernet frame. For frames containing a double VLAN tag, this field is located in the first/outer tag. |
| U32 aclMacRuleCos2 | 1.3.6.1.4.1.7244.2.3.2.7.1.4 | Unsigned32 | read-create | The Secondary Class of Service (COS2) used in the MAC ACL Classification. This is the three-bit user priority field in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame. |
| MAC aclMacRuleDestMacAddr | 1.3.6.1.4.1.7244.2.3.2.7.1.5 | MacAddress | read-create | The Destination MAC address used in the MAC ACL Classification. |
| MAC aclMacRuleDestMacMask | 1.3.6.1.4.1.7244.2.3.2.7.1.6 | MacAddress | read-create | The Destination MAC address mask used in the MAC ACL Classification. This mask value identifies the portion of the aclMacRuleDestMacAddr that is compared against a packet. A non-contiguous mask value is permitted. |
| INT aclMacRuleEtypeKey | 1.3.6.1.4.1.7244.2.3.2.7.1.7 | INTEGER | read-create | The Ethertype keyword used in the MAC ACL Classification. A keyword of custom(1) requires that the aclMacRuleEtypeValue object also be set. |
| ETY aclMacRuleEtypeValue | 1.3.6.1.4.1.7244.2.3.2.7.1.8 | EtypeValue | read-create | The Ethertype custom value used in the MAC ACL Classification. This object is only valid if the aclMacRuleEtypeKey is set to custom(1). The allowed value for this object is 0x0600 to 0xFFFF (1536 to 65535). |
| MAC aclMacRuleSrcMacAddr | 1.3.6.1.4.1.7244.2.3.2.7.1.9 | MacAddress | read-create | The Source MAC address used in the MAC ACL Classification. |
| MAC aclMacRuleSrcMacMask | 1.3.6.1.4.1.7244.2.3.2.7.1.10 | MacAddress | read-create | The Source MAC address mask used in the MAC ACL Classification. This mask value identifies the portion of the aclMacRuleSrcMacAddr that is compared against a packet. A non-contiguous mask value is permitted. |
| U32 aclMacRuleVlanId | 1.3.6.1.4.1.7244.2.3.2.7.1.11 | Unsigned32 | read-create | The VLAN ID value used in the MAC ACL Classification. The VLAN ID field is defined as the 12-bit VLAN identifier in the 802.1Q tag header of a tagged Ethernet frame. This is contained in the first/outer tag of a double VLAN tagged frame. |
| U32 aclMacRuleVlanIdRangeStart | 1.3.6.1.4.1.7244.2.3.2.7.1.12 | Unsigned32 | read-create | The VLAN ID range start value used in the MAC ACL Classification. Setting this value greater than the current aclMacRuleVlanIdRangeEnd changes the VLAN ID range end to the same value as the range start. The VLAN ID field is defined as the 12-bit VLAN identifier in the 802.1Q tag header of a tagged Ethernet frame. This is contained in the first/outer tag of a double VLAN tagged frame. |
| U32 aclMacRuleVlanIdRangeEnd | 1.3.6.1.4.1.7244.2.3.2.7.1.13 | Unsigned32 | read-create | The VLAN ID range end value used in the MAC ACL Classification. Setting this value less than the current aclMacRuleVlanIdRangeStart changes the VLAN ID range start to the same value as the range end. The VLAN ID field is defined as the 12-bit VLAN identifier in the 802.1Q tag header of a tagged Ethernet frame. This is contained in the first/outer tag of a double VLAN tagged frame. |
| U32 aclMacRuleVlanId2 | 1.3.6.1.4.1.7244.2.3.2.7.1.14 | Unsigned32 | read-create | The Secondary VLAN ID value used in the MAC ACL Classification. The Secondary VLAN ID field is defined as the 12-bit VLAN identifier in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame. |
| U32 aclMacRuleVlanId2RangeStart | 1.3.6.1.4.1.7244.2.3.2.7.1.15 | Unsigned32 | read-create | The Secondary VLAN ID range start value used in the MAC ACL Classification. Setting this value greater than the current aclMacRuleVlanId2RangeEnd changes the Secondary VLAN ID range end to the same value as the range start. The Secondary VLAN ID field is defined as the 12-bit VLAN identifier in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame. |
| U32 aclMacRuleVlanId2RangeEnd | 1.3.6.1.4.1.7244.2.3.2.7.1.16 | Unsigned32 | read-create | The Secondary VLAN ID range end value used in the MAC ACL Classification. Setting this value less than the current aclMacRuleVlanId2RangeStart changes the Secondary VLAN ID range start to the same value as the range end. The Secondary VLAN ID field is defined as the 12-bit VLAN identifier in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame. |
| ROW aclMacRuleStatus | 1.3.6.1.4.1.7244.2.3.2.7.1.17 | RowStatus | read-create | Status of this instance. active(1) - this ACL Rule is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance |
| U32 aclMacRuleAssignQueueId | 1.3.6.1.4.1.7244.2.3.2.7.1.18 | Unsigned32 | read-create | Queue identifier to which all inbound packets matching this MAC ACL rule are directed. This object defaults to the standard queue assignment for user priority 0 traffic per the IEEE 802.1D specification based on the number of assignable queues in the system: 1-3 queues: 0 4-7 queues: 1 8 queues: 2 This default assignment is static and is not influenced by other system configuration changes. |
| NUM aclMacRuleRedirectIntf | 1.3.6.1.4.1.7244.2.3.2.7.1.19 | InterfaceIndexOrZero | read-create | A non-zero value indicates the external ifIndex to which all inbound packets matching this MAC ACL rule are directed. A value of zero means packet redirection is not in effect, which is the default value of this object. Note that packet redirection and mirroring (aclMacRuleMirrorIntf object) are mutually-exclusive rule attributes. |
| T/F aclMacRuleMatchEvery | 1.3.6.1.4.1.7244.2.3.2.7.1.20 | TruthValue | read-create | Flag to indicate that the MAC ACL rule is defined to match all packets, regardless of Ethertype. |
| NUM aclMacRuleMirrorIntf | 1.3.6.1.4.1.7244.2.3.2.7.1.21 | InterfaceIndexOrZero | read-create | A non-zero value indicates the external ifIndex to which all inbound packets matching this MAC ACL rule are copied. A value of zero means packet mirroring is not in effect, which is the default value of this object. Note that packet mirroring and redirection (aclMacRuleRedirectIntf object) are mutually-exclusive rule attributes. |
| T/F aclMacRuleLogging | 1.3.6.1.4.1.7244.2.3.2.7.1.22 | TruthValue | read-create | Flag to indicate that the ACL rule is being logged. A hardware count of the number of times this rule is hit is reported via the aclTrapRuleLogEvent notification. This object may be supported for an aclMacRuleAction setting of permit(1) and/or deny(2), depending on the ACL feature capabilities of the device. |
| STR aclMacRuleTimeRangeName | 1.3.6.1.4.1.7244.2.3.2.7.1.23 | DisplayString | read-create | Name of the time range, that the ACL rule has referenced.It must start with alphabet and shall consist of 1 to 31 alphanumeric characters. |
| INT aclMacRuleTimeRangeStatus | 1.3.6.1.4.1.7244.2.3.2.7.1.24 | INTEGER | read-only | Flag that indicates the ACL rule status. If the status is active, it implies that the ACL rule is in effect. If the status is inactive, it implies that the ACL rule is not in effect. |
| aclLoggingGroup | 1.3.6.1.4.1.7244.2.3.2.9 | |||
| I32 aclTrapRuleIndex | 1.3.6.1.4.1.7244.2.3.2.9.2 | Integer32 | accessible-for-notify | The index of an ACL rule instance. Used by aclTrapRuleLogEvent trap. |
| INT aclTrapRuleAction | 1.3.6.1.4.1.7244.2.3.2.9.3 | INTEGER | accessible-for-notify | The type of action this rule should perform, either permit(1) or deny(2). Used by aclTrapRuleLogEvent trap. |
| C64 aclTrapRuleHitCount | 1.3.6.1.4.1.7244.2.3.2.9.4 | Counter64 | accessible-for-notify | Number of times the ACL rule was hit during the most recent logging interval. Used by aclTrapRuleLogEvent trap. |
| INT aclTrapFlag | 1.3.6.1.4.1.7244.2.3.2.9.5 | INTEGER | read-write | ACL Trap Flag - Enables or disables ACL trap generation. When this value is set to enable(1), ACL traps are sent from the switch when they occur. |
| STR aclTrapRuleTimeRangeName | 1.3.6.1.4.1.7244.2.3.2.9.6 | DisplayString | accessible-for-notify | Name of the time range on which there is a notification received. Used by aclTrapRuleTimeRangeEvent. |
| INT aclTrapRuleTimeRangeNotification | 1.3.6.1.4.1.7244.2.3.2.9.7 | INTEGER | accessible-for-notify | Flag to indicate the type of time range notification received. Used by aclTrapRuleTimeRangeEvent. |
| INT aclTrapRuleInstallationStatus | 1.3.6.1.4.1.7244.2.3.2.9.8 | INTEGER | accessible-for-notify | Value specifies the status of the ACL Rule installed in hardware as activated/deactivated. Used by aclTrapRuleTimeRangeEvent. |
| aclNotifications | 1.3.6.1.4.1.7244.2.3.2.10 | |||
| NTF aclTrapRuleLogEvent | 1.3.6.1.4.1.7244.2.3.2.10.1 | This trap is generated on a periodic basis to indicate that an ACL rule configured for logging was actively used by hardware to take action on one or more packets. The aclTrapRuleHitCount denotes the number of times this rule was hit during the most recent logging interval. ACL Trap generation requires that the aclTrapFlag object be set to enable(1). | ||
| NTF aclTrapRuleTimeRangeEvent | 1.3.6.1.4.1.7244.2.3.2.10.2 | This trap is generated when there is a time range notification received on any Time based ACL rule. The aclTrapRuleTimeRangeName denotes the time range name associated with the ACL Rule, aclTrapRuleTimeRangeNotification indicates the type of notification received and aclTrapRuleInstallationStatus indicates the installation status of ACL Rule in hardware. When activate notification is received ACL rule is activated in the hardware. When deactivate notifcation is received ACL rule is deactivated in the hardware. When delete notification is received ACL rule is activated in the hardware, if it is already not activated. ACL Trap generation requires the aclTrapFlag object be set to enable(1). | ||
| I32 aclIpv6IndexNextFree | 1.3.6.1.4.1.7244.2.3.2.11 | Integer32 | read-only | This object contains an unused value for the aclIPv6Index to be used when creating a new IPv6 ACL. A value of zero indicates the ACL table is full. |
| aclIpv6Table | 1.3.6.1.4.1.7244.2.3.2.12 | not-accessible | A table of Ipv6 ACL instances. | |
| aclIpv6Entry | 1.3.6.1.4.1.7244.2.3.2.12.1 | not-accessible | ||
| I32 aclIpv6Index | 1.3.6.1.4.1.7244.2.3.2.12.1.1 | Integer32 | not-accessible | The IPv6 ACL table index this instance is associated with. When creating a new IPv6 ACL, refer to the aclIPv6IndexNextFree object to determine the next available aclIpv6Index to use. |
| STR aclIpv6Name | 1.3.6.1.4.1.7244.2.3.2.12.1.2 | DisplayString | read-create | The name of this IPv6 ACL entry, which must consist of 1 to 31 alphanumeric characters and uniquely identify this IPv6 ACL. An existing IPv6 ACL can be renamed by setting this object to a new name. This object must be set to complete a new IPv6 ACL row instance. |
| ROW aclIpv6Status | 1.3.6.1.4.1.7244.2.3.2.12.1.3 | RowStatus | read-create | Status of this instance. active(1) - this ACL instance is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance The aclMacName object must be set to complete this row instance. |
| aclIpv6RuleTable | 1.3.6.1.4.1.7244.2.3.2.13 | not-accessible | A table of IPv6 ACL Rule instances. | |
| aclIpv6RuleEntry | 1.3.6.1.4.1.7244.2.3.2.13.1 | not-accessible | A table of IPv6 ACL Classification Rules | |
| I32 aclIpv6RuleIndex | 1.3.6.1.4.1.7244.2.3.2.13.1.1 | Integer32 | not-accessible | The index of this rule instance within an IPv6 ACL. |
| INT aclIpv6RuleAction | 1.3.6.1.4.1.7244.2.3.2.13.1.2 | INTEGER | read-create | The type of action this IPv6 ACL rule should perform. |
| T/F aclIpv6RuleLogging | 1.3.6.1.4.1.7244.2.3.2.13.1.3 | TruthValue | read-create | Flag to indicate that the ACL rule is being logged. A hardware count of the number of times this rule is hit is reported via the aclTrapRuleLogEvent notification. This object may be supported for an aclIPv6RuleAction setting of permit(1) and/or deny(2), depending on the ACL feature capabilities of the device. |
| U32 aclIpv6RuleAssignQueueId | 1.3.6.1.4.1.7244.2.3.2.13.1.4 | Unsigned32 | read-create | Queue identifier to which all inbound packets matching this ACL rule are directed. This object defaults to the standard queue assignment for user priority 0 traffic per the IEEE 802.1D specification based on the number of assignable queues in the system: 1-3 queues: 0 4-7 queues: 1 8 queues: 2 This default assignment is static and is not influenced by other system configuration changes. |
| NUM aclIpv6RuleRedirectIntf | 1.3.6.1.4.1.7244.2.3.2.13.1.5 | InterfaceIndexOrZero | read-create | A non-zero value indicates the external ifIndex to which all inbound packets matching this Ipv6 ACL rule are directed. A value of zero means packet redirection is not in effect, which is the default value of this object. Note that packet redirection and mirroring (aclIpv6RuleMirrorIntf object) are mutually-exclusive rule attributes. |
| NUM aclIpv6RuleMirrorIntf | 1.3.6.1.4.1.7244.2.3.2.13.1.6 | InterfaceIndexOrZero | read-create | A non-zero value indicates the external ifIndex to which all inbound packets matching this IPv6 ACL rule are copied. A value of zero means packet mirroring is not in effect, which is the default value of this object. Note that packet mirroring and redirection (aclIpv6RuleRedirectIntf object) are mutually-exclusive rule attributes. |
| T/F aclIpv6RuleMatchEvery | 1.3.6.1.4.1.7244.2.3.2.13.1.7 | TruthValue | read-create | Flag to indicate that the ACL rule is defined to match on every IP packet, regardless of content. |
| I32 aclIpv6RuleProtocol | 1.3.6.1.4.1.7244.2.3.2.13.1.8 | Integer32 | read-create | icmp - 1 igmp - 2 ip - 4 tcp - 6 udp - 17 All values from 1 to 255 are valid. |
| I32 aclIpv6RuleSrcL4Port | 1.3.6.1.4.1.7244.2.3.2.13.1.9 | Integer32 | read-create | The Source Port Number (Layer 4) used in the ACL Classification. |
| I32 aclIpv6RuleSrcL4PortRangeStart | 1.3.6.1.4.1.7244.2.3.2.13.1.10 | Integer32 | read-create | The Source Port Number(Layer 4) range start. |
| I32 aclIpv6RuleSrcL4PortRangeEnd | 1.3.6.1.4.1.7244.2.3.2.13.1.11 | Integer32 | read-create | The Source Port Number(Layer 4) range end. |
| I32 aclIpv6RuleDestL4Port | 1.3.6.1.4.1.7244.2.3.2.13.1.12 | Integer32 | read-create | The Destination Port (Layer 4) used in ACl classification. |
| I32 aclIpv6RuleDestL4PortRangeStart | 1.3.6.1.4.1.7244.2.3.2.13.1.13 | Integer32 | read-create | The Destination Port (Layer 4) starting range used in ACL classification. |
| I32 aclIpv6RuleDestL4PortRangeEnd | 1.3.6.1.4.1.7244.2.3.2.13.1.14 | Integer32 | read-create | The Destination Port (Layer 4) ending range used in ACL classification. |
| ROW aclIpv6RuleStatus | 1.3.6.1.4.1.7244.2.3.2.13.1.15 | RowStatus | read-create | Status of this instance. active(1) - this ACL Rule is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance |
| I32 aclIpv6RuleFlowLabel | 1.3.6.1.4.1.7244.2.3.2.13.1.16 | Integer32 | read-create | Flow label is 20-bit number that is unique to an IPv6 packet, used by end stations to signify quality-of-service handling in routers. |
| I32 aclIpv6RuleIPDSCP | 1.3.6.1.4.1.7244.2.3.2.13.1.17 | Integer32 | read-create | The Differentiated Services Code Point value. |
| ADR aclRuleSrcIpv6Prefix | 1.3.6.1.4.1.7244.2.3.2.13.1.18 | Ipv6AddressPrefix | read-write | The Ipv6 Prefix Address configured on the Service Port. |
| I32 aclRuleSrcIpv6PrefixLength | 1.3.6.1.4.1.7244.2.3.2.13.1.19 | Integer32 | read-create | The Prefix Length. |
| ADR aclRuleDstIpv6Prefix | 1.3.6.1.4.1.7244.2.3.2.13.1.20 | Ipv6AddressPrefix | read-write | The Ipv6 Prefix Address configured on the Service Port. |
| I32 aclRuleDstIpv6PrefixLength | 1.3.6.1.4.1.7244.2.3.2.13.1.21 | Integer32 | read-create | The Prefix Length. |
| STR aclIpv6RuleTimeRangeName | 1.3.6.1.4.1.7244.2.3.2.13.1.22 | DisplayString | read-create | Name of the time range, that the ACL rule has referenced.It must start with alphabet and shall consist of 1 to 31 alphanumeric characters. |
| INT aclIpv6RuleTimeRangeStatus | 1.3.6.1.4.1.7244.2.3.2.13.1.23 | INTEGER | read-only | Flag that indicates the ACL rule status. If the status is active, it implies that the ACL rule is in effect. If the status is inactive, it implies that the ACL rule is not in effect. |
| I32 aclNamedIpv4IndexNextFree | 1.3.6.1.4.1.7244.2.3.2.14 | Integer32 | read-only | This object contains an unused value for the aclIndex to be used when creating a new named IPv4 ACL. A value of zero indicates the ACL table is full. |
| aclVlanTable | 1.3.6.1.4.1.7244.2.3.2.15 | not-accessible | A table of ACL VLAN instances per direction. | |
| aclVlanEntry | 1.3.6.1.4.1.7244.2.3.2.15.1 | not-accessible | ||
| I32 aclVlanIndex | 1.3.6.1.4.1.7244.2.3.2.15.1.1 | Integer32 | not-accessible | The Vlan to which this ACL instance applies. |
| INT aclVlanDirection | 1.3.6.1.4.1.7244.2.3.2.15.1.2 | INTEGER | not-accessible | The Vlan direction to which this ACL instance applies. |
| U32 aclVlanSequence | 1.3.6.1.4.1.7244.2.3.2.15.1.3 | Unsigned32 | not-accessible | The relative evaluation sequence of this ACL for this Vlan and direction. When multiple ACLs are allowed for a given Vlan and direction, the sequence number determines the order in which the list of ACLs are evaluated, with lower sequence numbers given higher precedence. The sequence number value is arbitrary, but must be a unique non-zero value for a given Vlan and direction. Setting this object to an existing sequence number value for a given Vlan and direction causes the ACL corresponding to that value to be replaced with this ACL. |
| INT aclVlanAclType | 1.3.6.1.4.1.7244.2.3.2.15.1.4 | INTEGER | not-accessible | The type of this ACL, which is used to interpret the aclVlanId object value. Each type of ACL uses its own numbering scheme for identification (see aclVlanAclId object for details). The aclVlanAclId object must be specified along with this object. |
| I32 aclVlanAclId | 1.3.6.1.4.1.7244.2.3.2.15.1.5 | Integer32 | not-accessible | The ACL identifier value, which is interpreted based on the aclVlanType object. For the IP ACLs, the actual ACL number is its identifier as follows: IP standard ranges from 1-99, while IP extended ranges from 100-199. Here, aclVlanAclId represents aclIndex. The MAC ACLs use an internally-generated index value that is assigned when the ACL is created. Here, aclVlanAclId represents aclMacIndex. The IPv6 ACLs use an internally-generated index value that is assigned when the ACL is created.Here, aclVlanAclId represents aclIpv6Index. The aclVlanType object must be specified along with this object. |
| ROW aclVlanStatus | 1.3.6.1.4.1.7244.2.3.2.15.1.6 | RowStatus | read-create | Status of this instance. active(1) - this ACL Vlan instance is active createAndGo(4) - set to this value to assign an ACL to a Vlan and direction destroy(6) - set to this value to remove an ACL from a Vlan and direction |
RFC description
Quality of service access control list management for Quanta network switches.
Start monitoring Quanta data-center Ethernet switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.