ZTE-AN-ACL-MIB

MIB Reference — IPNetwork Monitor · Updated October 06, 2026

All MIBs › ZTE-AN-ACL-MIB

Organization: ZTE Corporation

Last Updated: 2020-11-08

Category: ZTE Access Node (ZTE-AN) Management

Description: Manages ZTE access node ACL rule configuration, including IP and MAC-based traffic filtering policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ZTE-AN-ACL-MIB?

ZTE-AN-ACL-MIB is a ZTE enterprise MIB (under zxAnServiceSecurity) that models access control list (ACL) configuration on ZTE access node equipment, supporting standard, hybrid (Layer 2/3/4 combined), and IPv6 hybrid ACL rule types for filtering subscriber and uplink traffic. It exposes ACL definitions in zxAnAclTable (name, row status), match criteria in zxAnAclStandardRuleTable (source IP/mask) and the richer zxAnAclHybridRuleTable/zxAnAclIpv6HybridRuleTable (source/destination IP and MAC with masks, IP protocol, Ethernet type, TCP/UDP port ranges via ZxAnAclPortOperator, 802.1Q/802.1ah VLAN and tag fields, DSCP/ToS/precedence, and permit/deny action), plus an optional time-range binding for schedule-based enforcement. This gives an operator a way to audit which traffic-filtering and security policies are active on an access node, which is essential for confirming that subscriber isolation, anti-spoofing, or QoS-marking ACLs are correctly enforced. It imports IF-MIB and INET-ADDRESS-MIB textual conventions plus ZTE's own ZTE-AN-IF-MIB for sub-interface indexing. It is deployed on ZTE access node (broadband/PON access) platforms, and administrators can download the ZTE-AN-ACL-MIB file to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ZTE-AN-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • ZTE access node (broadband/PON access) platforms

Monitoring Examples

An operator walks zxAnAclHybridRuleTable for a given zxAnAclHybridAclNumber to verify zxAnAclHybridRuleAccessCtrl is set to deny(2) for unauthorized source IP/MAC ranges on an untrusted access interface; a rule unexpectedly showing permit(1), or a missing row where a deny rule was expected, would indicate a misconfigured or removed security ACL exposing that segment to spoofed traffic.

What Can Be Monitored

  • ACL definition and row status
  • standard rule source-IP match criteria
  • hybrid rule source/destination IP, MAC, and port match criteria
  • VLAN tag and DSCP/ToS match fields
  • permit/deny action per rule
  • time-range scheduling bindings
Imported Objects

From IF-MIB

ifIndexOBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DateAndTime
DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION

From ZTE-AN-IF-MIB

zxAnSubIfIndexOBJECT-TYPE

From ZTE-AN-SMI

zxAnServiceSecurityOBJECT-IDENTITY
OIDs

RFC description

Manages access control lists (ACLs) on ZTE access network equipment, defining rules for filtering traffic.

Start monitoring ZTE access node (broadband/PON access) platforms (ACL rule-definition/traffic-filter config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ZTE-AN-ACL-MIB