All MIBs › RADLAN-IPSTDACL-MIB
Category: Routing, Vendor: RADLAN/Cisco SB
Description: Manages standard IP access control lists for traffic filtering based on source IP address.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is RADLAN-IPSTDACL-MIB?
RADLAN-IPSTDACL-MIB is a RADLAN embedded-switch-software MIB for configuring standard IP access control lists (ACLs) that filter traffic based solely on source IP address, in contrast to extended ACLs that also match on destination and higher-layer criteria. Its data is entirely configuration-oriented, defining ACL names, individual access control entries (ACEs), their match criteria (source IP/prefix, and in some cases destination), and the permit/drop action taken. As a monitoring tool it is used to audit and verify security policy, confirming which ACL rules are actually applied to an interface, checking that a given ACE's source address/prefix and action match the intended security policy, and catching a misconfigured rule that could either block legitimate traffic or fail to block malicious traffic. It is part of RADLAN's broader family of ACL MIBs (alongside extended and MAC ACL variants) built on the same embedded switch platform. It is typically deployed on OEM switches running RADLAN's embedded switch software wherever basic source-IP traffic filtering is required. Engineers can download the RADLAN-IPSTDACL-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in RADLAN-IPSTDACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- OEM switches running RADLAN embedded switch software
Monitoring Examples
An administrator would walk rlIpStdAclTable/rlIpStdAclEntry for a given rlIpStdAclAclName to inspect each rlIpStdAclAceIndex's rlIpStdAclSrcIpAddr, rlIpStdAclSrcPrefLen, and implied permit/drop action. Finding an ACE with an unexpectedly broad rlIpStdAclSrcPrefLen (e.g., matching a /8 instead of the intended /32) would explain why traffic from unintended source addresses is being permitted or dropped by the ACL.
What Can Be Monitored
- ACL names and entries
- source IP address/prefix match criteria
- ACE permit/drop action
- per-ACE index ordering
Imported Objects
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressPrefixLength | |
| InetAddressType | |
| InetVersion | |
| InetZoneIndex |
From RADLAN-MIB
| rnd | OBJECT-IDENTITY |
From SNMPv2-SMI
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TimeStamp | |
| TruthValue |
OIDs
RFC description
IP standard access control lists with classification and filtering rules for IPv4 and IPv6 traffic.
Start monitoring OEM switches running RADLAN embedded switch software (standard IP ACLs) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.