All MIBs › ZXR10-ACL-MIB
Organization: ZTE Corporation
Last Updated: 2017-04-14
Category: ZTE ZXR10 Routing and Switching
Description: Manages ZTE ZXR10 router ACL rule configuration for IPv4 and IPv6 traffic filtering policies.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ZXR10-ACL-MIB?
This is a ZTE-specific MIB for the ZXR10 family of carrier and enterprise routers/switches, dedicated to Access Control List (ACL) configuration for both IPv4 and IPv6 traffic filtering. It exposes configuration-oriented data describing ACL rules, rule ordering, match criteria, and the interfaces or services to which they are applied, rather than raw traffic throughput counters. Its monitoring value lies in security and policy compliance verification: administrators can confirm which filtering rules are active on which interfaces and, where hit counters are present, observe how frequently specific rules match traffic, which helps detect unexpected permit/deny behavior or a misconfigured security policy. It typically works alongside interface and routing MIBs (IF-MIB, IP-MIB) since ACLs are applied per-interface and affect traffic otherwise reported by those standard MIBs. It is typically deployed by network engineers auditing and troubleshooting traffic-filtering security policies on ZXR10 routers in service provider or enterprise core/edge networks, often after loading the ZXR10-ACL-MIB MIB Browser file to inspect ACL rule objects directly.
IPNetwork Monitor allows you to monitor SNMP objects defined in ZXR10-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- ZTE ZXR10 router/switch
Monitoring Examples
An engineer polls the ACL rule table on a ZXR10 router to verify that a newly deployed rule blocking a specific source subnet is present and correctly ordered relative to existing rules. If traffic that should be blocked is still passing, checking rule hit counters (where available) against the configured match criteria helps identify whether the rule was applied to the wrong interface or direction. No sample objects were present in the source extract, so exact table/object names cannot be confirmed here.
What Can Be Monitored
- ACL rule configuration
- rule match/hit counters
- rule-to-interface binding
- IPv4/IPv6 filter policy state
This MIB depends on
Related MIBs
Imported Objects
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter | |
| Counter32 | |
| Gauge | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 | |
| enterprises |
From SNMPv2-TC
| DisplayString | |
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION |
From ZXR10-SMI
| zxr10 | OBJECT-IDENTITY |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| zxr10AclMIB | 1.3.6.1.4.1.3902.3.1100 | |||
| zxr10ACL | 1.3.6.1.4.1.3902.3.1100.1 | The MIB module to describe the ACL protocol. | ||
| zxr10IPv4ACLTable | 1.3.6.1.4.1.3902.3.1100.1.1 | not-accessible | IPv4 ACL Table | |
| zxr10IPv4ACLEntry | 1.3.6.1.4.1.3902.3.1100.1.1.1 | not-accessible | IPv4 ACL | |
| STR zxr10IPv4ACLName | 1.3.6.1.4.1.3902.3.1100.1.1.1.1 | DisplayString | read-only | ipv4-access-list WORD Name of an IPv4 access-list (1-31 characters) |
| I32 zxr10IPv4ACLRuleID | 1.3.6.1.4.1.3902.3.1100.1.1.1.2 | Integer32 | read-only | rule (Optional)ID of this rule |
| INT zxr10IPv4ACLPermitDeny | 1.3.6.1.4.1.3902.3.1100.1.1.1.3 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| IP zxr10IPv4ACLSrcAddr | 1.3.6.1.4.1.3902.3.1100.1.1.1.4 | IpAddress | read-only | A.B.C.D Source address |
| IP zxr10IPv4ACLSrcWildcard | 1.3.6.1.4.1.3902.3.1100.1.1.1.5 | IpAddress | read-only | A.B.C.D Wildcard bits |
| INT zxr10IPv4ACLSrcAny | 1.3.6.1.4.1.3902.3.1100.1.1.1.6 | INTEGER | read-only | Any source address |
| IP zxr10IPv4ACLDestAddr | 1.3.6.1.4.1.3902.3.1100.1.1.1.7 | IpAddress | read-only | A.B.C.D Destination address |
| IP zxr10IPv4ACLDestWildcard | 1.3.6.1.4.1.3902.3.1100.1.1.1.8 | IpAddress | read-only | A.B.C.D Destination wildcard bits |
| INT zxr10IPv4ACLDestAny | 1.3.6.1.4.1.3902.3.1100.1.1.1.9 | INTEGER | read-only | Any destination address |
| INT zxr10IPv4ACLProtocol | 1.3.6.1.4.1.3902.3.1100.1.1.1.10 | INTEGER | read-only | An IP protocol number gre Generic Routing Encapsulation (47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol (2) ip Any internet protocol ospf Open Shortest Path First Protocol (89) pim Protocol Independent Multicast (103) tcp Transmission Control Protocol(6) udp User Datagram Protocol(17) vrrp Virtual Router Redundancy Protocol (112) |
| INT zxr10IPv4ACLSrcOpr | 1.3.6.1.4.1.3902.3.1100.1.1.1.11 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv4ACLSrcPort | 1.3.6.1.4.1.3902.3.1100.1.1.1.12 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4ACLSrcPort2 | 1.3.6.1.4.1.3902.3.1100.1.1.1.13 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4ACLDestOpr | 1.3.6.1.4.1.3902.3.1100.1.1.1.14 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv4ACLDestPort | 1.3.6.1.4.1.3902.3.1100.1.1.1.15 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4ACLDestPort2 | 1.3.6.1.4.1.3902.3.1100.1.1.1.16 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4ACLTCPEstablish | 1.3.6.1.4.1.3902.3.1100.1.1.1.17 | INTEGER | read-only | (Optional)Match established connections |
| INT zxr10IPv4ACLICMPType | 1.3.6.1.4.1.3902.3.1100.1.1.1.18 | INTEGER | read-only | 0-254|256 ICMP code 255 Any ICMP code alternate-address Alternate address (6) echo Echo (ping, 8) echo-reply Echo reply (0) information-reply Information replies (16) information-request Information requests (15) mask-request Mask requests (17) mask-reply Mask replies (18) parameter-problem All parameter problems (12) redirect All redirects (5) router-advertisement Router discovery advertisements (9) router-solicitation Router discovery solicitations (10) source-quench Source quenches (4) time-exceeded All time exceededs (11) timestamp-reply Timestamp replies (14) timestamp-request Timestamp requests (13) traceroute Traceroute (30) unreachable All unreachables (3) |
| INT zxr10IPv4ACLICMPCode | 1.3.6.1.4.1.3902.3.1100.1.1.1.19 | INTEGER | read-only | 0-254|256 (Optional)ICMP code 255 Any ICMP code |
| I32 zxr10IPv4ACLPrecedence | 1.3.6.1.4.1.3902.3.1100.1.1.1.20 | Integer32 | read-only | Precedence level |
| I32 zxr10IPv4ACLTOS | 1.3.6.1.4.1.3902.3.1100.1.1.1.21 | Integer32 | read-only | Type of service(ToS) |
| I32 zxr10IPv4ACLDSCP | 1.3.6.1.4.1.3902.3.1100.1.1.1.22 | Integer32 | read-only | DSCP value |
| INT zxr10IPv4ACLStateFlag | 1.3.6.1.4.1.3902.3.1100.1.1.1.23 | INTEGER | read-only | Timerange enable or disable flag |
| STR zxr10IPv4ACLTimerangeName | 1.3.6.1.4.1.3902.3.1100.1.1.1.24 | DisplayString | read-only | time-range (Optional)Configure time range |
| ROW zxr10IPv4ACLRowStatus | 1.3.6.1.4.1.3902.3.1100.1.1.1.25 | RowStatus | read-only | createAndGo(4) Configure IPv4 ACL or rule destroy(6) Delete IPv4 ACL or rule |
| INT zxr10IPv4ACLFragment | 1.3.6.1.4.1.3902.3.1100.1.1.1.26 | INTEGER | read-only | Fragment enable or disable flag |
| INT zxr10IPv4ACLTcpFlagOprBitMap | 1.3.6.1.4.1.3902.3.1100.1.1.1.27 | INTEGER | read-only | Match on the specify TCP flag bit. 1 means + , and 0 means -. Bit from low to high represents: first : ack second : fin third : psh fourth : rst fifth : syn sixth : urg |
| INT zxr10IPv4ACLTcpFlagVlaBitMap | 1.3.6.1.4.1.3902.3.1100.1.1.1.28 | INTEGER | read-only | Match when the TCP flag set or not. 1 means setted , and 0 means not. Bit from low to high represents: first : ack second : fin third : psh fourth : rst fifth : syn sixth : urg |
| INT zxr10IPv4ACLIpBitMap | 1.3.6.1.4.1.3902.3.1100.1.1.1.29 | INTEGER | read-only | Match on the specify ip flag bit. 1 means setted , and 0 means not. Bit from low to high represents: first : DSCP second : TOS third : Precedence fourth : ICMPCode fifth : ICMPType sixth : ipprotocol seventh : fragment (obsolete, default value 1) |
| INT zxr10IPv4ACLTtlOpr | 1.3.6.1.4.1.3902.3.1100.1.1.1.30 | INTEGER | read-only | eq (Optional)Match only packets on a given ttl value ge (Optional)Match only packets with a no lower ttl value le (Optional)Match only packets with a no greater ttl value neq (Optional)Match only packets with a no equeal ttl value range (Optional)Match only packet on a given ttl value range |
| INT zxr10IPv4ACLTtlValue | 1.3.6.1.4.1.3902.3.1100.1.1.1.31 | INTEGER | read-only | The TTL value |
| INT zxr10IPv4ACLTtlBegin | 1.3.6.1.4.1.3902.3.1100.1.1.1.32 | INTEGER | read-only | The TTL value Begin |
| INT zxr10IPv4ACLTtlEnd | 1.3.6.1.4.1.3902.3.1100.1.1.1.33 | INTEGER | read-only | The TTL value End |
| INT zxr10IPv4ACLRuleType | 1.3.6.1.4.1.3902.3.1100.1.1.1.34 | INTEGER | read-only | The acl rule type |
| zxr10IPv6ACLTable | 1.3.6.1.4.1.3902.3.1100.1.2 | not-accessible | IPv6 ACL Table | |
| zxr10IPv6ACLEntry | 1.3.6.1.4.1.3902.3.1100.1.2.1 | not-accessible | IPv6 ACL | |
| STR zxr10IPv6ACLName | 1.3.6.1.4.1.3902.3.1100.1.2.1.1 | DisplayString | read-only | ipv6-access-list WORD Name of an IPv6 access-list (1-31 characters) |
| I32 zxr10IPv6ACLRuleID | 1.3.6.1.4.1.3902.3.1100.1.2.1.2 | Integer32 | read-only | rule (Optional)ID of this rule |
| INT zxr10IPv6ACLPermitDeny | 1.3.6.1.4.1.3902.3.1100.1.2.1.3 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| I32 zxr10IPv6ACLflowlabel | 1.3.6.1.4.1.3902.3.1100.1.2.1.4 | Integer32 | read-only | Flowlabel value |
| STR zxr10IPv6ACLSrcAddr | 1.3.6.1.4.1.3902.3.1100.1.2.1.5 | DisplayString | read-only | Source address |
| INT zxr10IPv6ACLSrcWildcard | 1.3.6.1.4.1.3902.3.1100.1.2.1.6 | INTEGER | read-only | Source Wildcard |
| INT zxr10IPv6ACLSrcAny | 1.3.6.1.4.1.3902.3.1100.1.2.1.7 | INTEGER | read-only | Any source address |
| STR zxr10IPv6ACLDestAddr | 1.3.6.1.4.1.3902.3.1100.1.2.1.8 | DisplayString | read-only | Destination address |
| INT zxr10IPv6ACLDestWildcard | 1.3.6.1.4.1.3902.3.1100.1.2.1.9 | INTEGER | read-only | Destination Wildcard |
| INT zxr10IPv6ACLDestAny | 1.3.6.1.4.1.3902.3.1100.1.2.1.10 | INTEGER | read-only | Any destination address |
| INT zxr10IPv6ACLProtocol | 1.3.6.1.4.1.3902.3.1100.1.2.1.11 | INTEGER | read-only | An IP protocol number gre Generic Routing Encapsulation (47) icmp Internet Control Message Protocol(58) igmp Internet Group Management Protocol (2) ip Any internet protocol ospf Open Shortest Path First Protocol (89) pim Protocol Independent Multicast (103) tcp Transmission Control Protocol(6) udp User Datagram Protocol(17) vrrp Virtual Router Redundancy Protocol (112) |
| INT zxr10IPv6ACLSrcOpr | 1.3.6.1.4.1.3902.3.1100.1.2.1.12 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv6ACLSrcPort | 1.3.6.1.4.1.3902.3.1100.1.2.1.13 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6ACLSrcPort2 | 1.3.6.1.4.1.3902.3.1100.1.2.1.14 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6ACLDestOpr | 1.3.6.1.4.1.3902.3.1100.1.2.1.15 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv6ACLDestPort | 1.3.6.1.4.1.3902.3.1100.1.2.1.16 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6ACLDestPort2 | 1.3.6.1.4.1.3902.3.1100.1.2.1.17 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6ACLTCPEstablish | 1.3.6.1.4.1.3902.3.1100.1.2.1.18 | INTEGER | read-only | (Optional)Match established connections |
| INT zxr10IPv6ACLTcpFlagOprBitMap | 1.3.6.1.4.1.3902.3.1100.1.2.1.19 | INTEGER | read-only | Match on the specify TCP flag bit. 1 means + , and 0 means -. Bit from low to high represents: first : ack second : fin third : psh fourth : rst fifth : syn sixth : urg |
| INT zxr10IPv6ACLTcpFlagVlaBitMap | 1.3.6.1.4.1.3902.3.1100.1.2.1.20 | INTEGER | read-only | Match when the TCP flag set or not. 1 means setted , and 0 means not. Bit from low to high represents: first : ack second : fin third : psh fourth : rst fifth : syn sixth : urg |
| INT zxr10IPv6ACLHeaderOptionBitMap | 1.3.6.1.4.1.3902.3.1100.1.2.1.21 | INTEGER | read-only | Matches if the specify IPv6 header is present. 1 means setted , and 0 means not. Bit from low to high represents: first : hop-by-hop second : destopts third : routing fourth : fragments fifth : authen sixth : esp |
| INT zxr10IPv6ACLICMPType | 1.3.6.1.4.1.3902.3.1100.1.2.1.22 | INTEGER | read-only | 0-254|256 ICMP type 255 Any ICMP type destination-unreachable Destination unreachable (1) echo-reply Echo reply (129) echo-request Echo request (ping, 128) mld-query Multicast Listener Discovery Query (130) mld-reduction Multicast Listener Discovery Reduction (132) mld-report Multicast Listener Discovery Report (131) nd-na Neighbor discovery neighbor advertisments (136) nd-ns Neighbor discovery neighbor solicitations (135) packet-too-big Packet too big (2) parameter-problem All parameter problems (4) redirect Neighbor redirect (137) router-advertisment Neighbor discovery router advertisments (134) router-renumbering All router renumbering (138) router-solicitation Neighbor discovery router solicitations (133) time-exceeded Time exceeded (3) |
| INT zxr10IPv6ACLICMPCode | 1.3.6.1.4.1.3902.3.1100.1.2.1.23 | INTEGER | read-only | 0-254|256 ICMP code 255 Any ICMP code |
| I32 zxr10IPv6ACLDSCP | 1.3.6.1.4.1.3902.3.1100.1.2.1.24 | Integer32 | read-only | DSCP value |
| INT zxr10IPv6ACLStateFlag | 1.3.6.1.4.1.3902.3.1100.1.2.1.25 | INTEGER | read-only | Timerange enable or disable flag |
| STR zxr10IPv6ACLTimerangeName | 1.3.6.1.4.1.3902.3.1100.1.2.1.26 | DisplayString | read-only | time-range (Optional)Configure time range |
| ROW zxr10IPv6ACLRowStatus | 1.3.6.1.4.1.3902.3.1100.1.2.1.27 | RowStatus | read-only | createAndGo(4) Configure IPv6 ACL or rule destroy(6) Delete IPv6 ACL or rule |
| INT zxr10IPv6ACLIpBitMap | 1.3.6.1.4.1.3902.3.1100.1.2.1.28 | INTEGER | read-only | Match on the specify ip flag bit. 1 means setted , and 0 means not. Bit from low to high represents: first : DSCP second : (reserved, default value 0) third : (reserved, default value 0) fourth : ICMPCode fifth : ICMPType sixth : FlowLabel seventh : ipv6protocol |
| zxr10LinkACLTable | 1.3.6.1.4.1.3902.3.1100.1.3 | not-accessible | Link ACL | |
| zxr10LinkACLEntry | 1.3.6.1.4.1.3902.3.1100.1.3.1 | not-accessible | Link ACL | |
| STR zxr10LinkACLName | 1.3.6.1.4.1.3902.3.1100.1.3.1.1 | DisplayString | read-only | link-access-list WORD Name of an link access-list (1-31 characters) |
| I32 zxr10LinkACLRuleID | 1.3.6.1.4.1.3902.3.1100.1.3.1.2 | Integer32 | read-only | rule (Optional)ID of this rule |
| INT zxr10LinkACLPermitDeny | 1.3.6.1.4.1.3902.3.1100.1.3.1.3 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| I32 zxr10LinkACLProtocol | 1.3.6.1.4.1.3902.3.1100.1.3.1.4 | Integer32 | read-only | Link protocal |
| STR zxr10LinkACLSourceMAC | 1.3.6.1.4.1.3902.3.1100.1.3.1.5 | DisplayString | read-only | Source MAC address |
| STR zxr10LinkACLSourceMACWildcard | 1.3.6.1.4.1.3902.3.1100.1.3.1.6 | DisplayString | read-only | Source MAC wildcard |
| INT zxr10LinkACLSourceMACAny | 1.3.6.1.4.1.3902.3.1100.1.3.1.7 | INTEGER | read-only | any Any source MAC address |
| STR zxr10LinkACLDestinationMAC | 1.3.6.1.4.1.3902.3.1100.1.3.1.8 | DisplayString | read-only | Destination MAC address |
| STR zxr10LinkACLDestinationMACWildCard | 1.3.6.1.4.1.3902.3.1100.1.3.1.9 | DisplayString | read-only | Destination MAC wildcard |
| INT zxr10LinkACLDestinationMACAny | 1.3.6.1.4.1.3902.3.1100.1.3.1.10 | INTEGER | read-only | any Any destination MAC address |
| I32 zxr10LinkACLIncos | 1.3.6.1.4.1.3902.3.1100.1.3.1.11 | Integer32 | read-only | Value of inner cos |
| I32 zxr10LinkACLOutCos | 1.3.6.1.4.1.3902.3.1100.1.3.1.12 | Integer32 | read-only | Value of outer cos |
| I32 zxr10LinkACLInVlanIDBegin | 1.3.6.1.4.1.3902.3.1100.1.3.1.13 | Integer32 | read-only | Value of inner vlan |
| I32 zxr10LinkACLOutVlanIDBegin | 1.3.6.1.4.1.3902.3.1100.1.3.1.14 | Integer32 | read-only | Value of outer vlan |
| INT zxr10LinkACLStateFlag | 1.3.6.1.4.1.3902.3.1100.1.3.1.15 | INTEGER | read-only | Timerange enable or disable flag |
| STR zxr10LinkACLTimerangeName | 1.3.6.1.4.1.3902.3.1100.1.3.1.16 | DisplayString | read-only | time-range (Optional)Configure time range WORD Time range name (1-31 characters) |
| ROW zxr10LinkACLRowStatus | 1.3.6.1.4.1.3902.3.1100.1.3.1.17 | RowStatus | read-only | createAndGo(4) Configure ACL or rule destroy(6) Delete ACL or rule |
| INT zxr10LinkACLLinkBitMap | 1.3.6.1.4.1.3902.3.1100.1.3.1.18 | INTEGER | read-only | Match on the specify limk flag bit. 1 means setted , and 0 means not. Bit from low to high represents: first : in cos second : out cos third : in vlan fourth : out vlan fifth : linkprotocol |
| I32 zxr10LinkACLInVlanIDEnd | 1.3.6.1.4.1.3902.3.1100.1.3.1.19 | Integer32 | read-only | Value of inner vlan |
| I32 zxr10LinkACLOutVlanIDEnd | 1.3.6.1.4.1.3902.3.1100.1.3.1.20 | Integer32 | read-only | Value of outer vlan |
| zxr10IPv4MixedACLTable | 1.3.6.1.4.1.3902.3.1100.1.4 | not-accessible | IPv4 Mixed ACL Table | |
| zxr10IPv4MixedACLEntry | 1.3.6.1.4.1.3902.3.1100.1.4.1 | not-accessible | IPv4Mixed ACL | |
| STR zxr10IPv4MixedACLName | 1.3.6.1.4.1.3902.3.1100.1.4.1.1 | DisplayString | read-only | IPv4Mixed-access-list WORD Name of an IPv4 mixed access-list (1-31 characters) |
| I32 zxr10IPv4MixedACLRuleID | 1.3.6.1.4.1.3902.3.1100.1.4.1.2 | Integer32 | read-only | rule (Optional)ID of this rule |
| INT zxr10IPv4MixedACLPermitDeny | 1.3.6.1.4.1.3902.3.1100.1.4.1.3 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| I32 zxr10IPv4MixedACLLinkProtocol | 1.3.6.1.4.1.3902.3.1100.1.4.1.4 | Integer32 | read-only | Link protocal |
| STR zxr10IPv4MixedACLSourceMAC | 1.3.6.1.4.1.3902.3.1100.1.4.1.5 | DisplayString | read-only | Source MAC address |
| STR zxr10IPv4MixedACLSourceMACWildcard | 1.3.6.1.4.1.3902.3.1100.1.4.1.6 | DisplayString | read-only | Source MAC wildcard |
| INT zxr10IPv4MixedACLSourceMACAny | 1.3.6.1.4.1.3902.3.1100.1.4.1.7 | INTEGER | read-only | any Any source MAC address |
| STR zxr10IPv4MixedACLDestinationMAC | 1.3.6.1.4.1.3902.3.1100.1.4.1.8 | DisplayString | read-only | Destination MAC address |
| STR zxr10IPv4MixedACLDestinationMACWildCard | 1.3.6.1.4.1.3902.3.1100.1.4.1.9 | DisplayString | read-only | Destination MAC wildcard |
| INT zxr10IPv4MixedACLDestinationMACAny | 1.3.6.1.4.1.3902.3.1100.1.4.1.10 | INTEGER | read-only | any Any destination MAC address |
| I32 zxr10IPv4MixedACLIncos | 1.3.6.1.4.1.3902.3.1100.1.4.1.11 | Integer32 | read-only | Value of inner cos |
| I32 zxr10IPv4MixedACLOutCos | 1.3.6.1.4.1.3902.3.1100.1.4.1.12 | Integer32 | read-only | Value of outer cos |
| I32 zxr10IPv4MixedACLInVlanIDBegin | 1.3.6.1.4.1.3902.3.1100.1.4.1.13 | Integer32 | read-only | Value of inner vlan |
| I32 zxr10IPv4MixedACLOutVlanIDBegin | 1.3.6.1.4.1.3902.3.1100.1.4.1.14 | Integer32 | read-only | Value of outer vlan |
| IP zxr10IPv4MixedACLSrcAddr | 1.3.6.1.4.1.3902.3.1100.1.4.1.15 | IpAddress | read-only | A.B.C.D Source address |
| IP zxr10IPv4MixedACLSrcWildcard | 1.3.6.1.4.1.3902.3.1100.1.4.1.16 | IpAddress | read-only | A.B.C.D Wildcard bits |
| INT zxr10IPv4MixedACLSrcAny | 1.3.6.1.4.1.3902.3.1100.1.4.1.17 | INTEGER | read-only | Any source address |
| IP zxr10IPv4MixedACLDestAddr | 1.3.6.1.4.1.3902.3.1100.1.4.1.18 | IpAddress | read-only | A.B.C.D Destination address |
| IP zxr10IPv4MixedACLDestWildcard | 1.3.6.1.4.1.3902.3.1100.1.4.1.19 | IpAddress | read-only | A.B.C.D Destination wildcard bits |
| INT zxr10IPv4MixedACLDestAny | 1.3.6.1.4.1.3902.3.1100.1.4.1.20 | INTEGER | read-only | Any destination address |
| INT zxr10IPv4MixedACLProtocol | 1.3.6.1.4.1.3902.3.1100.1.4.1.21 | INTEGER | read-only | An IP protocol number gre Generic Routing Encapsulation (47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol (2) ip Any internet protocol ospf Open Shortest Path First Protocol (89) pim Protocol Independent Multicast (103) tcp Transmission Control Protocol(6) udp User Datagram Protocol(17) vrrp Virtual Router Redundancy Protocol (112) |
| INT zxr10IPv4MixedACLSrcOpr | 1.3.6.1.4.1.3902.3.1100.1.4.1.22 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv4MixedACLSrcPort | 1.3.6.1.4.1.3902.3.1100.1.4.1.23 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4MixedACLSrcPort2 | 1.3.6.1.4.1.3902.3.1100.1.4.1.24 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4MixedACLDestOpr | 1.3.6.1.4.1.3902.3.1100.1.4.1.25 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv4MixedACLDestPort | 1.3.6.1.4.1.3902.3.1100.1.4.1.26 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4MixedACLDestPort2 | 1.3.6.1.4.1.3902.3.1100.1.4.1.27 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv4MixedACLTCPEstablish | 1.3.6.1.4.1.3902.3.1100.1.4.1.28 | INTEGER | read-only | (Optional)Match established connections |
| INT zxr10IPv4MixedACLICMPType | 1.3.6.1.4.1.3902.3.1100.1.4.1.29 | INTEGER | read-only | 0-254|256 ICMP type 255 Any ICMP type alternate-address Alternate address (6) echo Echo (ping, 8) echo-reply Echo reply (0) information-reply Information replies (16) information-request Information requests (15) mask-request Mask requests (17) mask-reply Mask replies (18) parameter-problem All parameter problems (12) redirect All redirects (5) router-advertisement Router discovery advertisements (9) router-solicitation Router discovery solicitations (10) source-quench Source quenches (4) time-exceeded All time exceededs (11) timestamp-reply Timestamp replies (14) timestamp-request Timestamp requests (13) traceroute Traceroute (30) unreachable All unreachables (3) |
| INT zxr10IPv4MixedACLICMPCode | 1.3.6.1.4.1.3902.3.1100.1.4.1.30 | INTEGER | read-only | 0-254|256 ICMP code 255 Any ICMP code |
| I32 zxr10IPv4MixedACLPrecedence | 1.3.6.1.4.1.3902.3.1100.1.4.1.31 | Integer32 | read-only | Precedence level |
| I32 zxr10IPv4MixedACLTOS | 1.3.6.1.4.1.3902.3.1100.1.4.1.32 | Integer32 | read-only | Type of service(ToS) |
| I32 zxr10IPv4MixedACLDSCP | 1.3.6.1.4.1.3902.3.1100.1.4.1.33 | Integer32 | read-only | DSCP value |
| INT zxr10IPv4MixedACLStateFlag | 1.3.6.1.4.1.3902.3.1100.1.4.1.34 | INTEGER | read-only | Timerange enable or disable flag |
| STR zxr10IPv4MixedACLTimerangeName | 1.3.6.1.4.1.3902.3.1100.1.4.1.35 | DisplayString | read-only | time-range (Optional)Configure time range |
| ROW zxr10IPv4MixedACLRowStatus | 1.3.6.1.4.1.3902.3.1100.1.4.1.36 | RowStatus | read-only | createAndGo(4) Configure IPv4 Mixed ACL or rule destroy(6) Delete IPv4 Mixed ACL or rule |
| INT zxr10IPv4MixedACLIpBitMap | 1.3.6.1.4.1.3902.3.1100.1.4.1.37 | INTEGER | read-only | Match on the specify ip flag bit. 1 means setted , and 0 means not. Bit from low to high represents: first : DSCP second : TOS third : Precedence fourth : ICMPCode fifth : ICMPType sixth : ipprotocol seventh : fragment (obsolete, default value 1) |
| INT zxr10IPv4MixedACLLinkBitMap | 1.3.6.1.4.1.3902.3.1100.1.4.1.38 | INTEGER | read-only | Match on the specify limk flag bit. 1 means setted , and 0 means not. Bit from low to high represents: first : in cos second : out cos third : in vlan fourth : out vlan fifth : linkprotocol |
| I32 zxr10IPv4MixedACLInVlanIDEnd | 1.3.6.1.4.1.3902.3.1100.1.4.1.39 | Integer32 | read-only | Value of inner vlan |
| I32 zxr10IPv4MixedACLOutVlanIDEnd | 1.3.6.1.4.1.3902.3.1100.1.4.1.40 | Integer32 | read-only | Value of outer vlan |
| INT zxr10IPv4MixedACLFragment | 1.3.6.1.4.1.3902.3.1100.1.4.1.41 | INTEGER | read-only | Fragment enable or disable flag |
| zxr10IPv6MixedACLTable | 1.3.6.1.4.1.3902.3.1100.1.5 | not-accessible | IPv6 Mixed ACL Table | |
| zxr10IPv6MixedACLEntry | 1.3.6.1.4.1.3902.3.1100.1.5.1 | not-accessible | IPv6 Mixed ACL | |
| STR zxr10IPv6MixedACLName | 1.3.6.1.4.1.3902.3.1100.1.5.1.1 | DisplayString | read-only | IPv6Mixed-access-list WORD Name of an IPv6 Mixed access-list (1-31 characters) |
| I32 zxr10IPv6MixedACLRuleID | 1.3.6.1.4.1.3902.3.1100.1.5.1.2 | Integer32 | read-only | rule (Optional)ID of this rule |
| INT zxr10IPv6MixedACLPermitDeny | 1.3.6.1.4.1.3902.3.1100.1.5.1.3 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| I32 zxr10IPv6MixedACLLinkProtocol | 1.3.6.1.4.1.3902.3.1100.1.5.1.4 | Integer32 | read-only | Link protocal |
| STR zxr10IPv6MixedACLSourceMAC | 1.3.6.1.4.1.3902.3.1100.1.5.1.5 | DisplayString | read-only | Source MAC address |
| STR zxr10IPv6MixedACLSourceMACWildcard | 1.3.6.1.4.1.3902.3.1100.1.5.1.6 | DisplayString | read-only | Source MAC wildcard |
| INT zxr10IPv6MixedACLSourceMACAny | 1.3.6.1.4.1.3902.3.1100.1.5.1.7 | INTEGER | read-only | any Any source MAC address |
| STR zxr10IPv6MixedACLDestinationMAC | 1.3.6.1.4.1.3902.3.1100.1.5.1.8 | DisplayString | read-only | Destination MAC address |
| STR zxr10IPv6MixedACLDestinationMACWildCard | 1.3.6.1.4.1.3902.3.1100.1.5.1.9 | DisplayString | read-only | Destination MAC wildcard |
| INT zxr10IPv6MixedACLDestinationMACAny | 1.3.6.1.4.1.3902.3.1100.1.5.1.10 | INTEGER | read-only | any Any destination MAC address |
| I32 zxr10IPv6MixedACLIncos | 1.3.6.1.4.1.3902.3.1100.1.5.1.11 | Integer32 | read-only | Value of inner cos |
| I32 zxr10IPv6MixedACLOutCos | 1.3.6.1.4.1.3902.3.1100.1.5.1.12 | Integer32 | read-only | Value of outer cos |
| I32 zxr10IPv6MixedACLInVlanIDBegin | 1.3.6.1.4.1.3902.3.1100.1.5.1.13 | Integer32 | read-only | Value of inner vlan |
| I32 zxr10IPv6MixedACLOutVlanIDBegin | 1.3.6.1.4.1.3902.3.1100.1.5.1.14 | Integer32 | read-only | Value of outer vlan |
| I32 zxr10IPv6MixedACLflowlabel | 1.3.6.1.4.1.3902.3.1100.1.5.1.15 | Integer32 | read-only | Flowlabel value |
| STR zxr10IPv6MixedACLSrcAddr | 1.3.6.1.4.1.3902.3.1100.1.5.1.16 | DisplayString | read-only | X:X::X:X Source address |
| INT zxr10IPv6MixedACLSrcWildcard | 1.3.6.1.4.1.3902.3.1100.1.5.1.17 | INTEGER | read-only | Source Wildcard |
| INT zxr10IPv6MixedACLSrcAny | 1.3.6.1.4.1.3902.3.1100.1.5.1.18 | INTEGER | read-only | Any source address |
| STR zxr10IPv6MixedACLDestAddr | 1.3.6.1.4.1.3902.3.1100.1.5.1.19 | DisplayString | read-only | X:X::X:X Destination address |
| INT zxr10IPv6MixedACLDestWildcard | 1.3.6.1.4.1.3902.3.1100.1.5.1.20 | INTEGER | read-only | Destination Wildcard |
| INT zxr10IPv6MixedACLDestAny | 1.3.6.1.4.1.3902.3.1100.1.5.1.21 | INTEGER | read-only | Any destination address |
| INT zxr10IPv6MixedACLProtocol | 1.3.6.1.4.1.3902.3.1100.1.5.1.22 | INTEGER | read-only | An IP protocol number gre Generic Routing Encapsulation (47) icmp Internet Control Message Protocol(58) igmp Internet Group Management Protocol (2) ip Any internet protocol ospf Open Shortest Path First Protocol (89) pim Protocol Independent Multicast (103) tcp Transmission Control Protocol(6) udp User Datagram Protocol(17) vrrp Virtual Router Redundancy Protocol (112) |
| INT zxr10IPv6MixedACLSrcOpr | 1.3.6.1.4.1.3902.3.1100.1.5.1.23 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv6MixedACLSrcPort | 1.3.6.1.4.1.3902.3.1100.1.5.1.24 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6MixedACLSrcPort2 | 1.3.6.1.4.1.3902.3.1100.1.5.1.25 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6MixedACLDestOpr | 1.3.6.1.4.1.3902.3.1100.1.5.1.26 | INTEGER | read-only | eq (Optional)Match only packets on a given port number ge (Optional)Match only packets with a no lower port number le (Optional)Match only packets with a no greater port number range (Optional)Match only packet on a given port range |
| INT zxr10IPv6MixedACLDestPort | 1.3.6.1.4.1.3902.3.1100.1.5.1.27 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6MixedACLDestPort2 | 1.3.6.1.4.1.3902.3.1100.1.5.1.28 | INTEGER | read-only | Port number bootpc Bootstrap protocol (BOOTP) client (68) bootps Bootstrap protocol (BOOTP) server (67) domain Domain name service (DNS, 53) ntp Network time protocol (123) pim-auto-rp PIM auto-RP (496) rip Routing information protocol (router, in.routed, 520) snmp Simple network management protocol (161) snmptrap SNMP traps (162) tftp Trivial file transfer protocol (69) |
| INT zxr10IPv6MixedACLTCPEstablish | 1.3.6.1.4.1.3902.3.1100.1.5.1.29 | INTEGER | read-only | (Optional)Match established connections |
| INT zxr10IPv6MixedACLTcpFlagOprBitMap | 1.3.6.1.4.1.3902.3.1100.1.5.1.30 | INTEGER | read-only | Match on the specify TCP flag bit. 1 means + , and 0 means -. Bit from low to high represents: first : ack second : fin third : psh fourth : rst fifth : syn sixth : urg |
| INT zxr10IPv6MixedACLTcpFlagVlaBitMap | 1.3.6.1.4.1.3902.3.1100.1.5.1.31 | INTEGER | read-only | Match when the TCP flag set or not. 1 means setted , and 0 means not. Bit from low to high represents: first : ack second : fin third : psh fourth : rst fifth : syn sixth : urg |
| INT zxr10IPv6MixedACLHeaderOptionBitMap | 1.3.6.1.4.1.3902.3.1100.1.5.1.32 | INTEGER | read-only | Matches if the specify IPv6 header is present. 1 means setted , and 0 means not. Bit from low to high represents: first : hop-by-hop second : destopts third : routing fourth : fragments fifth : authen sixth : esp |
| INT zxr10IPv6MixedACLICMPType | 1.3.6.1.4.1.3902.3.1100.1.5.1.33 | INTEGER | read-only | 0-254|256 ICMP type 255 Any ICMP type destination-unreachable Destination unreachable (1) echo-reply Echo reply (129) echo-request Echo request (ping, 128) mld-query Multicast Listener Discovery Query (130) mld-reduction Multicast Listener Discovery Reduction (132) mld-report Multicast Listener Discovery Report (131) nd-na Neighbor discovery neighbor advertisments (136) nd-ns Neighbor discovery neighbor solicitations (135) packet-too-big Packet too big (2) parameter-problem All parameter problems (4) redirect Neighbor redirect (137) router-advertisment Neighbor discovery router advertisments (134) router-renumbering All router renumbering (138) router-solicitation Neighbor discovery router solicitations (133) time-exceeded Time exceeded (3) |
| INT zxr10IPv6MixedACLICMPCode | 1.3.6.1.4.1.3902.3.1100.1.5.1.34 | INTEGER | read-only | 0-254|256 ICMP code 255 Any ICMP code |
| I32 zxr10IPv6MixedACLDSCP | 1.3.6.1.4.1.3902.3.1100.1.5.1.35 | Integer32 | read-only | DSCP value |
| INT zxr10IPv6MixedACLStateFlag | 1.3.6.1.4.1.3902.3.1100.1.5.1.36 | INTEGER | read-only | Timerange enable or disable flag |
| STR zxr10IPv6MixedACLTimerangeName | 1.3.6.1.4.1.3902.3.1100.1.5.1.37 | DisplayString | read-only | time-range (Optional)Configure time range |
| ROW zxr10IPv6MixedACLRowStatus | 1.3.6.1.4.1.3902.3.1100.1.5.1.38 | RowStatus | read-only | createAndGo(4) Configure IPv6 Mixed ACL or rule destroy(6) Delete IPv6 Mixed ACL or rule |
| INT zxr10IPv6MixedACLIpBitMap | 1.3.6.1.4.1.3902.3.1100.1.5.1.39 | INTEGER | read-only | Match on the specify ip flag bit. 1 means setted , and 0 means not. Bit from low to high represents: first : DSCP second : (reserved, default value 0) third : (reserved, default value 0) fourth : ICMPCode fifth : ICMPType sixth : FlowLabel seventh : ipv6protocol |
| INT zxr10IPv6MixedACLLinkBitMap | 1.3.6.1.4.1.3902.3.1100.1.5.1.40 | INTEGER | read-only | Match on the specify limk flag bit. 1 means setted , and 0 means not. Bit from low to high represents: first : in cos second : out cos third : in vlan fourth : out vlan fifth : linkprotocol |
| I32 zxr10IPv6MixedACLInVlanIDEnd | 1.3.6.1.4.1.3902.3.1100.1.5.1.41 | Integer32 | read-only | Value of inner vlan |
| I32 zxr10IPv6MixedACLOutVlanIDEnd | 1.3.6.1.4.1.3902.3.1100.1.5.1.42 | Integer32 | read-only | Value of outer vlan |
RFC description
Configures and manages IPv4/IPv6 access control lists on ZTE ZXR10 routers.
Start monitoring ZTE ZXR10 router/switch (IPv4/IPv6 ACL rule/match-criteria config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.