All MIBs › ZXR10-SWITCH-ACL-MIB-59
Category: ZTE ZXR10 Security and Access Control
Description: Defines ZTE ZXR10 switch ACL configuration for platform series 59xx with extended filtering rule capabilities.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ZXR10-SWITCH-ACL-MIB-59?
ZXR10-SWITCH-ACL-MIB-59 is a ZTE proprietary MIB scoped to the 59xx platform series of ZXR10 switches, defining objects for Access Control List (ACL) configuration with extended filtering rule capabilities used to permit or deny traffic based on matching criteria. Its data is primarily configuration-oriented, covering ACL rule definitions, match conditions, and actions applied to switch ports or VLANs. From a monitoring perspective, it supports verifying security/software configuration state -- confirming which ACL rules are active and applied -- more than reporting live hardware faults, though ACL hit counters (if present in the full object tree) would support traffic filtering audit. It is a vendor-specific extension without an apparent dependency on the standard IETF ACL-related MIBs. It is typically deployed on ZXR10 59xx-series access/aggregation switches used for security policy enforcement at the network edge. Network engineers evaluating or troubleshooting this functionality can download the ZXR10-SWITCH-ACL-MIB-59 file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in ZXR10-SWITCH-ACL-MIB-59. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- ZTE ZXR10 5900-series switch
Monitoring Examples
Only the generic IMPORTS clause is present in sample_objects, so specific ACL table or rule object names cannot be confirmed from the given extract. In a realistic scenario, an operator would poll an ACL rule table to verify a specific filtering rule (e.g., blocking a subnet or protocol) is correctly applied to a switch port, and check associated match/hit counters to confirm the rule is actively filtering the expected traffic. Because no object names were provided, this remains a general description rather than a grounded example.
This MIB depends on
Related MIBs
Imported Objects
From RFC1155-SMI
| Counter | |
| Gauge | |
| IpAddress | |
| NetworkAddress | |
| mgmt |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Integer32 | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 | |
| enterprises | |
| experimental |
From SNMPv2-TC
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION |
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| zte | 1.3.6.1.4.1.3902 | |||
| zxr10 | 1.3.6.1.4.1.3902.3 | |||
| zxr10switch | 1.3.6.1.4.1.3902.3.102 | |||
| zxr10ACL | 1.3.6.1.4.1.3902.3.102.2 | |||
| zxr10StandardACLTable | 1.3.6.1.4.1.3902.3.102.2.1 | not-accessible | Standard ACL | |
| zxr10StandardACLEntry | 1.3.6.1.4.1.3902.3.102.2.1.1 | not-accessible | Standard ACL | |
| I32 zxr10StandardACLNo | 1.3.6.1.4.1.3902.3.102.2.1.1.1 | Integer32 | read-only | Standard ACL number Configure standard ACL number Configure standard ACL number (expanded range) |
| STR zxr10StandardACLName | 1.3.6.1.4.1.3902.3.102.2.1.1.2 | DisplayString | read-only | Standard ACL name (1-31 characters) |
| STR zxr10StandardACLAlias | 1.3.6.1.4.1.3902.3.102.2.1.1.3 | DisplayString | read-only | Standard ACL alias (1-31 characters) |
| INT zxr10StandardACLMatchorder | 1.3.6.1.4.1.3902.3.102.2.1.1.4 | INTEGER | read-only | Select match order auto Sort rules automatically config Sort rules by configuration order |
| I32 zxr10StandardACLRuleID | 1.3.6.1.4.1.3902.3.102.2.1.1.6 | Integer32 | read-only | rule ACL rule ID |
| INT zxr10StandardACLPermitDeny | 1.3.6.1.4.1.3902.3.102.2.1.1.7 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| IP zxr10StandardACLSrcAddr | 1.3.6.1.4.1.3902.3.102.2.1.1.8 | IpAddress | read-only | A.B.C.D Source address |
| IP zxr10StandardACLSrcAddrSrcWildcard | 1.3.6.1.4.1.3902.3.102.2.1.1.9 | IpAddress | read-only | A.B.C.D Wildcard bits |
| INT zxr10StandardACLSrcAny | 1.3.6.1.4.1.3902.3.102.2.1.1.10 | INTEGER | read-only | Any source |
| INT zxr10StandardACLFlag | 1.3.6.1.4.1.3902.3.102.2.1.1.11 | INTEGER | read-only | Time range enable or disable flag |
| STR zxr10StandardACLTimeRangeName | 1.3.6.1.4.1.3902.3.102.2.1.1.12 | DisplayString | read-only | Configure time range name (1-31 characters) |
| STR zxr10StandardACLRuleDescription | 1.3.6.1.4.1.3902.3.102.2.1.1.13 | DisplayString | read-only | ACL rule description (1-16 characters) |
| zxr10ExtendedACLTable | 1.3.6.1.4.1.3902.3.102.2.2 | not-accessible | Extended ACL | |
| zxr10ExtendedACLEntry | 1.3.6.1.4.1.3902.3.102.2.2.1 | not-accessible | Extended ACL | |
| I32 zxr10ExtendedACLNo | 1.3.6.1.4.1.3902.3.102.2.2.1.1 | Integer32 | read-only | Extended ACL number Configure extended ACL number Configure extended ACL number (expanded range) |
| STR zxr10ExtendedACLName | 1.3.6.1.4.1.3902.3.102.2.2.1.2 | DisplayString | read-only | Extended ACL name WORD Configure extended ACL name (1-31 characters) |
| STR zxr10ExtendedACLAlias | 1.3.6.1.4.1.3902.3.102.2.2.1.3 | DisplayString | read-only | Extended ACL alias WORD ACL alias (1-31 characters) |
| INT zxr10ExtendedACLMatchorder | 1.3.6.1.4.1.3902.3.102.2.2.1.4 | INTEGER | read-only | Select match order auto Sort rules automatically config Sort rules by configuration order |
| I32 zxr10ExtendedACLRuleID | 1.3.6.1.4.1.3902.3.102.2.2.1.6 | Integer32 | read-only | rule ACL rule ID |
| INT zxr10ExtendedACLPermitDeny | 1.3.6.1.4.1.3902.3.102.2.2.1.7 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| IP zxr10ExtendedACLSrcAddr | 1.3.6.1.4.1.3902.3.102.2.2.1.8 | IpAddress | read-only | A.B.C.D Source address |
| IP zxr10ExtendedACLSrcWildcard | 1.3.6.1.4.1.3902.3.102.2.2.1.9 | IpAddress | read-only | A.B.C.D Wildcard bits |
| INT zxr10ExtendedACLSrcAny | 1.3.6.1.4.1.3902.3.102.2.2.1.10 | INTEGER | read-only | Any source |
| IP zxr10ExtendedACLDestAddr | 1.3.6.1.4.1.3902.3.102.2.2.1.11 | IpAddress | read-only | A.B.C.D Destination address |
| IP zxr10ExtendedACLDestWildcard | 1.3.6.1.4.1.3902.3.102.2.2.1.12 | IpAddress | read-only | A.B.C.D Destination wildcard bits |
| INT zxr10ExtendedACLDestAny | 1.3.6.1.4.1.3902.3.102.2.2.1.13 | INTEGER | read-only | Any destination host |
| I32 zxr10ExtendedACLProtocol | 1.3.6.1.4.1.3902.3.102.2.2.1.14 | Integer32 | read-only | 255 Any internet protocol (ip) An IP protocol number 47 Generic Routing Encapsulation (gre) 1 Internet Control Message Protocol (icmp) 2 Internet Group Management Protocol (igmp) 89 Open Shortest Path First Protocol (ospf) 103 Protocol Independent Multicast (pim) 6 Transmission Control Protocol (tcp) 17 User Datagram Protocol (udp) 112 Virtual Router Redundancy Protocol (vrrp) |
| INT zxr10ExtendedACLSrcOpr | 1.3.6.1.4.1.3902.3.102.2.2.1.15 | INTEGER | read-only | eq(1) Match only tcp,udp packets on a given port number ge(2) Match only tcp,udp packets with a no lower port number le(3) Match only tcp,udp packets with a no greater port number range(7) Match tcp,udp packets with a given port range |
| I32 zxr10ExtendedACLSrcPort | 1.3.6.1.4.1.3902.3.102.2.2.1.16 | Integer32 | read-only | Port number 179 Border gateway protocol (bgp) 53 Domain name service (domain) 79 Finger 21 File transfer protocol (ftp) 513 Login (rlogin) 109 Post office protocol v2 (pop2) 110 Post office protocol v3 (pop3) 25 Simple mail transport protocol (smtp) 23 Telnet 80 World wide web (HTTP) |
| I32 zxr10ExtendedACLSrcPort2 | 1.3.6.1.4.1.3902.3.102.2.2.1.17 | Integer32 | read-only | Port number 179 Border gateway protocol (bgp) 53 Domain name service (domain) 79 Finger 21 File transfer protocol (ftp) 513 Login (rlogin) 109 Post office protocol v2 (pop2) 110 Post office protocol v3 (pop3) 25 Simple mail transport protocol (smtp) 23 Telnet 80 World wide web (HTTP) |
| INT zxr10ExtendedACLDestOpr | 1.3.6.1.4.1.3902.3.102.2.2.1.18 | INTEGER | read-only | eq(1) Match only tcp,udp packets on a given port number ge(2) Match only tcp,udp packets with a no lower port number le(3) Match only tcp,udp packets with a no greater port number range(7) Match tcp,udp packets with a given port range |
| I32 zxr10ExtendedACLDestPort | 1.3.6.1.4.1.3902.3.102.2.2.1.19 | Integer32 | read-only | Port number 179 Border gateway protocol (bgp) 53 Domain name service (domain) 79 Finger 21 File transfer protocol (ftp) 513 Login (rlogin) 109 Post office protocol v2 (pop2) 110 Post office protocol v3 (pop3) 25 Simple mail transport protocol (smtp) 23 Telnet 80 World wide web (HTTP) |
| I32 zxr10ExtendedACLDestPort2 | 1.3.6.1.4.1.3902.3.102.2.2.1.20 | Integer32 | read-only | Port number 179 Border gateway protocol (bgp) 53 Domain name service (domain) 79 Finger 21 File transfer protocol (ftp) 513 Login (rlogin) 109 Post office protocol v2 (pop2) 110 Post office protocol v3 (pop3) 25 Simple mail transport protocol (smtp) 23 Telnet 80 World wide web (HTTP) |
| INT zxr10ExtendedACLTCPEstablish | 1.3.6.1.4.1.3902.3.102.2.2.1.21 | INTEGER | read-only | Match established connections |
| I32 zxr10ExtendedACLICMPType | 1.3.6.1.4.1.3902.3.102.2.2.1.23 | Integer32 | read-only | ICMP message type 6 Alternate address 8 Echo (ping) 0 Echo reply 16 Information replies 15 Information requests 18 Mask replies 17 Mask requests 12 All parameter problems 5 All redirects 9 Router discovery advertisements 10 Router discovery solicitations 4 Source quenches 11 All time exceededs 14 Timestamp replies 13 Timestamp requests 30 Traceroute 3 All unreachables |
| I32 zxr10ExtendedACLICMPCode | 1.3.6.1.4.1.3902.3.102.2.2.1.24 | Integer32 | read-only | ICMP message code |
| I32 zxr10ExtendedACLPrecedence | 1.3.6.1.4.1.3902.3.102.2.2.1.25 | Integer32 | read-only | IP precedence |
| I32 zxr10ExtendedACLTOS | 1.3.6.1.4.1.3902.3.102.2.2.1.26 | Integer32 | read-only | IP TOS Tos value |
| I32 zxr10ExtendedACLDSCP | 1.3.6.1.4.1.3902.3.102.2.2.1.27 | Integer32 | read-only | Dscp value |
| INT zxr10ExtendedACLFlag | 1.3.6.1.4.1.3902.3.102.2.2.1.28 | INTEGER | read-only | Time range enable or disable flag |
| STR zxr10ExtendedACLTimeRangeName | 1.3.6.1.4.1.3902.3.102.2.2.1.29 | DisplayString | read-only | Configure time range name (1-31 characters) |
| STR zxr10ExtendedACLRuleDescription | 1.3.6.1.4.1.3902.3.102.2.2.1.30 | DisplayString | read-only | ACL rule description (1-16 characters) |
| zxr10LinkACLTable | 1.3.6.1.4.1.3902.3.102.2.3 | not-accessible | Link ACL | |
| zxr10LinkACLEntry | 1.3.6.1.4.1.3902.3.102.2.3.1 | not-accessible | Link ACL | |
| I32 zxr10LinkACLNo | 1.3.6.1.4.1.3902.3.102.2.3.1.1 | Integer32 | read-only | Link ACL number Configure link ACL number |
| STR zxr10LinkACLName | 1.3.6.1.4.1.3902.3.102.2.3.1.2 | DisplayString | read-only | Link ACL name (1-31 characters) |
| STR zxr10LinkACLAlias | 1.3.6.1.4.1.3902.3.102.2.3.1.3 | DisplayString | read-only | Link ACL alias (1-31 characters) |
| INT zxr10LinkACLMatchorder | 1.3.6.1.4.1.3902.3.102.2.3.1.4 | INTEGER | read-only | Select match order auto Sort rules automatically config Sort rules by configuration order |
| I32 zxr10LinkACLRuleID | 1.3.6.1.4.1.3902.3.102.2.3.1.6 | Integer32 | read-only | rule ACL rule ID |
| INT zxr10LinkACLPermitDeny | 1.3.6.1.4.1.3902.3.102.2.3.1.7 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| I32 zxr10LinkACLProtocol | 1.3.6.1.4.1.3902.3.102.2.3.1.8 | Integer32 | read-only | 65535 Any protocol type(any) Ether protocol number 2054 Address resolution protocol (arp) 2048 Internet protocol (ip) |
| I32 zxr10LinkACLCos | 1.3.6.1.4.1.3902.3.102.2.3.1.9 | Integer32 | read-only | Cos vlan-priority |
| I32 zxr10LinkACLDoutVlanID | 1.3.6.1.4.1.3902.3.102.2.3.1.12 | Integer32 | read-only | Source outer vlan id |
| MAC zxr10LinkACLInMAC | 1.3.6.1.4.1.3902.3.102.2.3.1.13 | MacAddress | read-only | xxxx.xxxx.xxxx Source-mac |
| MAC zxr10LinkACLInMACWildcard | 1.3.6.1.4.1.3902.3.102.2.3.1.14 | MacAddress | read-only | xxxx.xxxx.xxxx Source wildcard bits |
| INT zxr10LinkACLInMACAny | 1.3.6.1.4.1.3902.3.102.2.3.1.15 | INTEGER | read-only | Any source host |
| MAC zxr10LinkACLOutMAC | 1.3.6.1.4.1.3902.3.102.2.3.1.16 | MacAddress | read-only | xxxx.xxxx.xxxx Destination-mac |
| MAC zxr10LinkACLOutMACWildCard | 1.3.6.1.4.1.3902.3.102.2.3.1.17 | MacAddress | read-only | xxxx.xxxx.xxxx Destination wildcard bits |
| INT zxr10LinkACLOutMACAny | 1.3.6.1.4.1.3902.3.102.2.3.1.18 | INTEGER | read-only | Any destination host |
| INT zxr10LinkACLFlag | 1.3.6.1.4.1.3902.3.102.2.3.1.19 | INTEGER | read-only | Time range enable or disable flag |
| STR zxr10LinkACLTimeRangeName | 1.3.6.1.4.1.3902.3.102.2.3.1.20 | DisplayString | read-only | Configure time range name (1-31 characters) |
| STR zxr10LinkACLRuleDescription | 1.3.6.1.4.1.3902.3.102.2.3.1.21 | DisplayString | read-only | ACL rule description (1-16 characters) |
| zxr10HybridACLTable | 1.3.6.1.4.1.3902.3.102.2.4 | not-accessible | Hybrid ACL | |
| zxr10HybridACLEntry | 1.3.6.1.4.1.3902.3.102.2.4.1 | not-accessible | Hybrid ACL | |
| I32 zxr10HybridACLNo | 1.3.6.1.4.1.3902.3.102.2.4.1.1 | Integer32 | read-only | Hybrid ACL number Configure hybrid ACL number |
| STR zxr10HybridACLName | 1.3.6.1.4.1.3902.3.102.2.4.1.2 | DisplayString | read-only | Hybrid ACL name (1-31 characters) |
| STR zxr10HybridACLAlias | 1.3.6.1.4.1.3902.3.102.2.4.1.3 | DisplayString | read-only | Hybrid ACL alias (1-31 characters) |
| INT zxr10HybridACLMatchorder | 1.3.6.1.4.1.3902.3.102.2.4.1.4 | INTEGER | read-only | Select match order auto Sort rules automatically config Sort rules by configuration order |
| I32 zxr10HybridACLRuleID | 1.3.6.1.4.1.3902.3.102.2.4.1.6 | Integer32 | read-only | rule ACL rule ID |
| INT zxr10HybridACLPermitDeny | 1.3.6.1.4.1.3902.3.102.2.4.1.7 | INTEGER | read-only | deny Specify packets to reject permit Specify packets to forward |
| I32 zxr10HybridACLProtocol | 1.3.6.1.4.1.3902.3.102.2.4.1.8 | Integer32 | read-only | 255 Any internet protocol An IP protocol number 47 Generic Routing Encapsulation (gre) 2 Internet Group Management Protocol (igmp) 89 Open Shortest Path First Protocol (ospf) 103 Protocol Independent Multicast (pim) 6 Transmission control protocol (tcp) 17 User datagram protocol (udp) 112 Virtual Router Redundancy Protocol (vrrp) |
| IP zxr10HybridACLSrcAddr | 1.3.6.1.4.1.3902.3.102.2.4.1.9 | IpAddress | read-only | A.B.C.D Source address |
| IP zxr10HybridACLSrcAddrWildcard | 1.3.6.1.4.1.3902.3.102.2.4.1.10 | IpAddress | read-only | A.B.C.D Wildcard bits |
| INT zxr10HybridACLSrcAny | 1.3.6.1.4.1.3902.3.102.2.4.1.11 | INTEGER | read-only | Any source |
| IP zxr10HybridACLDestAddr | 1.3.6.1.4.1.3902.3.102.2.4.1.12 | IpAddress | read-only | A.B.C.D Destination address |
| IP zxr10HybridACLDestAddrWildcard | 1.3.6.1.4.1.3902.3.102.2.4.1.13 | IpAddress | read-only | A.B.C.D Destination wildcard bits |
| INT zxr10HybridACLDestAny | 1.3.6.1.4.1.3902.3.102.2.4.1.14 | INTEGER | read-only | Any destination host |
| INT zxr10HybridACLSrcOpr | 1.3.6.1.4.1.3902.3.102.2.4.1.15 | INTEGER | read-only | eq(1) Match only tcp,udp packets on a given port number |
| I32 zxr10HybridACLSrcPort | 1.3.6.1.4.1.3902.3.102.2.4.1.16 | Integer32 | read-only | Port number 179 Border gateway protocol (bgp) 53 Domain name service (domain) 79 Finger 21 File transfer protocol (ftp) 513 Login (rlogin) 109 Post office protocol v2 (pop2) 110 Post office protocol v3 (pop3) 25 Simple mail transport protocol (smtp) 23 Telnet 80 World wide web (HTTP, 80) |
| INT zxr10HybridACLDestOpr | 1.3.6.1.4.1.3902.3.102.2.4.1.17 | INTEGER | read-only | eq Match only packets on a given port number |
| I32 zxr10HybridACLDestPort | 1.3.6.1.4.1.3902.3.102.2.4.1.18 | Integer32 | read-only | Port number 179 Border gateway protocol (bgp) 53 Domain name service (domain) 79 Finger 21 File transfer protocol (ftp) 513 Login (rlogin) 109 Post office protocol v2 (pop2) 110 Post office protocol v3 (pop3) 25 Simple mail transport protocol (smtp) 23 Telnet 80 World wide web (HTTP, 80) |
| I32 zxr10HybridACLIPNumber | 1.3.6.1.4.1.3902.3.102.2.4.1.23 | Integer32 | read-only | 65535 Any ether protocol type Ether IP protocol number 2054 Address resolution protocol (arp) 2048 Internet protocol (ip) |
| I32 zxr10HybridACLCos | 1.3.6.1.4.1.3902.3.102.2.4.1.24 | Integer32 | read-only | Cos vlan-priority |
| I32 zxr10HybridACLDoutVlanID | 1.3.6.1.4.1.3902.3.102.2.4.1.27 | Integer32 | read-only | Source outer vlan id |
| MAC zxr10HybridACLInMAC | 1.3.6.1.4.1.3902.3.102.2.4.1.28 | MacAddress | read-only | xxxx.xxxx.xxxx Source-mac |
| MAC zxr10HybridACLInMACWildcard | 1.3.6.1.4.1.3902.3.102.2.4.1.29 | MacAddress | read-only | xxxx.xxxx.xxxx Source wildcard bits |
| INT zxr10HybridACLInMACAny | 1.3.6.1.4.1.3902.3.102.2.4.1.30 | INTEGER | read-only | Any source host |
| MAC zxr10HybridACLOutMAC | 1.3.6.1.4.1.3902.3.102.2.4.1.31 | MacAddress | read-only | xxxx.xxxx.xxxx Destination-mac |
| MAC zxr10HybridACLOutMACWildcard | 1.3.6.1.4.1.3902.3.102.2.4.1.32 | MacAddress | read-only | xxxx.xxxx.xxxx Destination wildcard bits |
| INT zxr10HybridACLOutMACAny | 1.3.6.1.4.1.3902.3.102.2.4.1.33 | INTEGER | read-only | Any destination host |
| INT zxr10HybridACLFlag | 1.3.6.1.4.1.3902.3.102.2.4.1.34 | INTEGER | read-only | Time range enable or disable flag |
| STR zxr10HybridACLTimeRangeName | 1.3.6.1.4.1.3902.3.102.2.4.1.35 | DisplayString | read-only | Configure time range name (1-31 characters) |
| STR zxr10HybridACLRuleDescription | 1.3.6.1.4.1.3902.3.102.2.4.1.36 | DisplayString | read-only | ACL Rule Description (1-16 characters) |
RFC description
ZTE ZXR10 switch ACL management covering standard and extended access list configuration and rule management.
Start monitoring ZTE ZXR10 5900-series switch (ACL rule-definition/match-condition config status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.