Description 1
ACL¹æÔò¶¯×÷(permit¡¢deny¡¢±ê¼ÇµÈ)
Sources for this description
Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)
OID reference
1.3.6.1.4.1.17409.2.3.3.2.2.1.15
ACL¹æÔò¶¯×÷(permit¡¢deny¡¢±ê¼ÇµÈ)
Identification
{1 3 6 1 4 1 17409 2 3 3 2 2 1 15}
Definitions may combine these properties differently.
Numbers refer to source variants above. Each value is shown only for variants that define it.
| Value | Name | Source variants |
|---|---|---|
| 1 | permit | 1 |
| 2 | deny | 1 |
| 3 | mark | 1 |
At least one MIB declaration places this object in a table row. A value belongs to a row instance; its suffix depends on the row's INDEX or AUGMENTS definition.
In NSCRTV-FTTX-EPON-MIB, the row index consists of these components in order:
aclRuleListIndex (INTEGER): one numeric subidentifier for the non-negative value.aclRuleIndex (INTEGER): one numeric subidentifier for the non-negative value.An instance has the form .1.3.6.1.4.1.17409.2.3.3.2.2.1.15.<aclRuleListIndex>.<aclRuleIndex>. Use values present on the device and permitted by its MIB. Other definitions can differ.
Published row index variants: aclRuleIndex; aclRuleListIndex, aclRuleIndex.
snmpwalk [connection options] DEVICE .1.3.6.1.4.1.17409.2.3.3.2.2.1.15
Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.
Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.
Available source records contain 3 distinct definitions; some records may not include a definition.
aclAction OBJECT-TYPE
SYNTAX INTEGER
{
permit(1),
deny(2),
mark(3)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"
ACL¹æÔò¶¯×÷(permit¡¢deny¡¢±ê¼ÇµÈ)"
::= { aclRuleEntry 15 }aclActionParameter OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"
ACL规则动作参数。只对aclAction为mark(3)有效,对于aclAction其他值,
此对象禁止配置,get时返回NULL。
按照INTERNET顺序从左往右的方向排列,第一个为OCTET0,第n个为OCTET
[n-1]。
OCTET 0 表示 MARK 类型。后面的OCTET 表示这种类型的MARK的目标值,这
是否这些OCTET的长度取决于MARK类型,比如对应于改MARK类型的参数的SYNTAX
为INTEGER,则需要4个字节,表示对应的数值。
MARK类型 目标值的SYNTAX 描述
-------------------------------------------------------------------
0 Reserved
1 INTEGER (0..7) MARK 801.1p的值(外层VLAN)
2 INTEGER (1..4094) MARK VLAN ID(外层VLAN)
3 INTEGER (0..7) MARK TOS PRECEDENCE
4 INTEGER (0..63) MARK DSCP
5..255 Reserved
比如修改VLAN ID为100,对应的值为:02 00 00 00 64"
::= { aclRuleEntry 15 }aclAction OBJECT-TYPE
SYNTAX INTEGER
{
permit(1),
deny(2),
mark(3)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"
"
::= { aclRuleEntry 15 }
Meaning
Identical descriptions are grouped. Different wording and device-specific notes are retained.
Description 1
ACL¹æÔò¶¯×÷(permit¡¢deny¡¢±ê¼ÇµÈ)
Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)
Description 2
ACL规则动作参数。只对aclAction为mark(3)有效,对于aclAction其他值, 此对象禁止配置,get时返回NULL。 按照INTERNET顺序从左往右的方向排列,第一个为OCTET0,第n个为OCTET [n-1]。 OCTET 0 表示 MARK 类型。后面的OCTET 表示这种类型的MARK的目标值,这 是否这些OCTET的长度取决于MARK类型,比如对应于改MARK类型的参数的SYNTAX 为INTEGER,则需要4个字节,表示对应的数值。 MARK类型 目标值的SYNTAX 描述 ------------------------------------------------------------------- 0 Reserved 1 INTEGER (0..7) MARK 801.1p的值(外层VLAN) 2 INTEGER (1..4094) MARK VLAN ID(外层VLAN) 3 INTEGER (0..7) MARK TOS PRECEDENCE 4 INTEGER (0..63) MARK DSCP 5..255 Reserved 比如修改VLAN ID为100,对应的值为:02 00 00 00 64
FS.COM MIB copies (LibreNMS/Observium Community)
Evidence
Matching descriptions are grouped; open a group to compare definitions and supporting files.
Status in source: current.
Names: aclAction
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"aclAction",
"OBJECT-TYPE",
"SYNTAX",
"INTEGER",
"{",
"permit",
"(",
"1",
")",
",",
"deny",
"(",
"2",
")",
",",
"mark",
"(",
"3",
")",
"}",
"MAX-ACCESS",
"read-create",
"STATUS",
"current",
"DESCRIPTION",
"\" ACL¹æÔò¶¯×÷(permit¡¢deny¡¢±ê¼ÇµÈ)\"",
"::=",
"{",
"aclRuleEntry",
"15",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"INTEGER",
[
"enumSpec",
[
[
"permit",
1
],
[
"deny",
2
],
[
"mark",
3
]
]
]
],
null,
[
"MaxAccessPart",
"read-create"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"ACL¹æÔò¶¯×÷(permit¡¢deny¡¢±ê¼ÇµÈ)"
],
null,
null,
null,
null
]
}Vendor MIB copy from the Observium Community archive.
Module: NSCRTV-FTTX-EPON-MIB
See published definition above
{'SNMPv2-TC': ['DateAndTime', 'MacAddress', 'TimeStamp', 'RowStatus', 'TruthValue', 'DisplayString', 'TEXTUAL-CONVENTION'], 'BRIDGE-MIB': ['BridgeId', 'Timeout'], 'SNMPv2-SMI': ['IpAddress', 'Unsigned32', 'Integer32', 'Counter32', 'OBJECT-TYPE', 'TimeTicks', 'Gauge32', 'Counter64', 'MODULE-IDENTITY', 'OBJECT-IDENTITY', 'enterprises']}Source data warning: Recovered from a file whose complete MIB does not parse. The original assignment and definition are preserved. Registration and implementation details may be inaccurate; consult the original file. Other damaged or unresolved declarations are not established registrations.
· Download NSCRTV-FTTX-EPON-MIBRelated source files and packages:
Status in source: current.
Names: aclActionParameter
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"aclActionParameter",
"OBJECT-TYPE",
"SYNTAX",
"OCTET",
"STRING",
"MAX-ACCESS",
"read-create",
"STATUS",
"current",
"DESCRIPTION",
"\" ACL规则动作参数。只对aclAction为mark(3)有效,对于aclAction其他值, 此对象禁止配置,get时返回NULL。 按照INTERNET顺序从左往右的方向排列,第一个为OCTET0,第n个为OCTET [n-1]。 OCTET 0 表示 MARK 类型。后面的OCTET 表示这种类型的MARK的目标值,这 是否这些OCTET的长度取决于MARK类型,比如对应于改MARK类型的参数的SYNTAX 为INTEGER,则需要4个字节,表示对应的数值。 MARK类型 目标值的SYNTAX 描述 ------------------------------------------------------------------- 0 Reserved 1 INTEGER (0..7) MARK 801.1p的值(外层VLAN) 2 INTEGER (1..4094) MARK VLAN ID(外层VLAN) 3 INTEGER (0..7) MARK TOS PRECEDENCE 4 INTEGER (0..63) MARK DSCP 5..255 Reserved 比如修改VLAN ID为100,对应的值为:02 00 00 00 64\"",
"::=",
"{",
"aclRuleEntry",
"15",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"OCTET STRING"
],
null,
[
"MaxAccessPart",
"read-create"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"ACL规则动作参数。只对aclAction为mark(3)有效,对于aclAction其他值, 此对象禁止配置,get时返回NULL。 按照INTERNET顺序从左往右的方向排列,第一个为OCTET0,第n个为OCTET [n-1]。 OCTET 0 表示 MARK 类型。后面的OCTET 表示这种类型的MARK的目标值,这 是否这些OCTET的长度取决于MARK类型,比如对应于改MARK类型的参数的SYNTAX 为INTEGER,则需要4个字节,表示对应的数值。 MARK类型 目标值的SYNTAX 描述 ------------------------------------------------------------------- 0 Reserved 1 INTEGER (0..7) MARK 801.1p的值(外层VLAN) 2 INTEGER (1..4094) MARK VLAN ID(外层VLAN) 3 INTEGER (0..7) MARK TOS PRECEDENCE 4 INTEGER (0..63) MARK DSCP 5..255 Reserved 比如修改VLAN ID为100,对应的值为:02 00 00 00 64"
],
null,
null,
null,
null
]
}Vendor MIB copy from the Observium Community archive. FS.COM support.
Module: NSCRTV-EPON-PON-PORT-MIB
See published definition above
{'SNMPv2-TC': ['DateAndTime', 'MacAddress', 'TimeStamp', 'RowStatus', 'TruthValue', 'DisplayString', 'TEXTUAL-CONVENTION'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'Counter32', 'Unsigned32', 'TimeTicks'], 'NSCRTV-EPONEOC-EPON-MIB': ['EponDeviceIndex', 'EponCardIndex', 'EponPortIndex', 'EponAlarmCode', 'EponAlarmInstance', 'EponSeverityType', 'AutoNegotiationTechAbility', 'TAddress', 'EponStats15MinRecordType', 'EponStats24HourRecordType', 'EponStatsThresholdType', 'ponPortObjects']}Status in source: current.
Names: aclAction
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"aclAction",
"OBJECT-TYPE",
"SYNTAX",
"INTEGER",
"{",
"permit",
"(",
"1",
")",
",",
"deny",
"(",
"2",
")",
",",
"mark",
"(",
"3",
")",
"}",
"MAX-ACCESS",
"read-create",
"STATUS",
"current",
"DESCRIPTION",
"\" \"",
"::=",
"{",
"aclRuleEntry",
"15",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"INTEGER",
[
"enumSpec",
[
[
"permit",
1
],
[
"deny",
2
],
[
"mark",
3
]
]
]
],
null,
[
"MaxAccessPart",
"read-create"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
""
],
null,
null,
null,
null
]
}Vendor MIB copy from the LibreNMS archive.
Module: NSCRTV-FTTX-EPON-MIB
See published definition above
{'SNMPv2-TC': ['DateAndTime', 'TruthValue', 'RowStatus', 'MacAddress', 'DisplayString', 'TimeStamp', 'TEXTUAL-CONVENTION'], 'BRIDGE-MIB': ['BridgeId', 'Timeout'], 'SNMPv2-SMI': ['enterprises', 'TimeTicks', 'IpAddress', 'Unsigned32', 'Gauge32', 'Counter32', 'Counter64', 'BITS', 'OBJECT-TYPE', 'OBJECT-IDENTITY', 'NOTIFICATION-TYPE']}Related source files and packages:
Registration
| OID | Name | Direct children | Descendants | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.1 | aclRuleListIndex, aclRuleIndex | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.2 | aclRuleIndex, matchedSourseMac | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.3 | matchedSourseMac, matchedDestinationMac, matchedSourceMac | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.4 | matchedDestinationMac, matchedVlanId | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.5 | matchedVlanId, matchedEthernetType | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.6 | matchedEthernetType, matchedSourseIP | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.7 | matchedSourseIP, matchedDestinationIP, matchedSourceIP | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.8 | matchedDestinationIP, matchedIpMessageType | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.9 | matchedIpMessageType, matchedDscp | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.10 | matchedDscp, matchedSoursePort | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.11 | matchedSoursePort, matchedDestinationPort, matchedSourcePort | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.12 | matchedDestinationPort, aclRuleRowStatus | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.13 | aclRuleRowStatus, matchedFieldSelection | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.14 | matchedFieldSelection, aclAction | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.16 | aclActionParameter | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.17 | matchedSourseMacMask, matchedSourceMacMask | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.18 | matchedDestinationMacMask | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.19 | matchedSourseIPMask, matchedSourceIPMask | 0 | 0 | |
| 1.3.6.1.4.1.17409.2.3.3.2.2.1.20 | matchedDestinationIPMask | 0 | 0 |