MIB Viewer

ARISTA-ACL-MIB

101 objects
The MIB module for managing Access Control Lists (ACLs) on Arista devices.
Imported Objects
ARISTA-SMI-MIBaristaMibs
INET-ADDRESS-MIBInetAddressIPv6
RMON2-MIBTimeFilter
SNMPv2-CONFMODULE-COMPLIANCE OBJECT-GROUP
SNMPv2-SMICounter64 IpAddress MODULE-IDENTITY OBJECT-TYPE Unsigned32
SNMPv2-TCDisplayString MacAddress TEXTUAL-CONVENTION TimeStamp TruthValue
OIDNameAccessStatusDescription
1.3.6.1.4.1.30065.3.5IdentityaristaAclMIBThe MIB module for managing Access Control Lists (ACLs) on Arista devices.
1.3.6.1.4.1.30065.3.5.1NodearistaAcl
1.3.6.1.4.1.30065.3.5.1.1NodearistaIpAcl
1.3.6.1.4.1.30065.3.5.1.1.1TablearistaIpAclTablenot-accessiblecurrentA table that contains IP ACLs that are configured on the switch.
1.3.6.1.4.1.30065.3.5.1.1.1.1RowaristaIpAclEntrynot-accessiblecurrentInformation about a specific IP ACL that is configured on the switch.
1.3.6.1.4.1.30065.3.5.1.1.1.1.1ColumnaristaIpAclNamenot-accessiblecurrentThe name of the IP ACL.
1.3.6.1.4.1.30065.3.5.1.1.1.1.2ColumnaristaIpAclReadOnlyread-onlycurrentThis attribute has value 'true(1)' if the IP ACL is configured as read-only; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.1.1.1.3ColumnaristaIpAclStatsEnabledread-onlycurrentThis attribute has value 'true(1)' if the IP ACL is configured to have per-rule statistics enabled; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.1.1.1.4ColumnaristaIpAclCountersIncompleteread-onlycurrentThis attribute has value 'true(1)' if the IP ACL has incomplete counter; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.1.2TablearistaIpAclRuleTablenot-accessiblecurrentA table that contains IP ACL rules that are configured on the switch.
1.3.6.1.4.1.30065.3.5.1.1.2.1RowaristaIpAclRuleEntrynot-accessiblecurrentConfiguration information about a specific IP ACL rule.
1.3.6.1.4.1.30065.3.5.1.1.2.1.1ColumnaristaIpAclRuleSeqIdnot-accessiblecurrentThis attribute is the sequence ID for this ACL rule.
1.3.6.1.4.1.30065.3.5.1.1.2.1.2ColumnaristaIpAclRuleProtoread-onlycurrentThis attribute is the IP protocol to be matched by this ACL rule. The value 0 indicates the rule matches any IP protocol.
1.3.6.1.4.1.30065.3.5.1.1.2.1.3ColumnaristaIpAclRuleSrcread-onlycurrentThis attribute is the IP source address to be matched by this ACL rule, subject to the aristaIpAclRuleSrcMask value.
1.3.6.1.4.1.30065.3.5.1.1.2.1.4ColumnaristaIpAclRuleSrcMaskread-onlycurrentThis attribute is the IP source-address mask in this ACL rule. For the source address of the packet to match the rule, the bitwise logical-AND of the address a…
1.3.6.1.4.1.30065.3.5.1.1.2.1.5ColumnaristaIpAclRuleDestread-onlycurrentThis attribute is the IP destination address to be matched by this ACL rule, subject to the aristaIpAclRuleDestMask value.
1.3.6.1.4.1.30065.3.5.1.1.2.1.6ColumnaristaIpAclRuleDestMaskread-onlycurrentThis attribute is the IP destination-address mask in this ACL rule. For the destination address of the packet to match the rule, the bitwise logical-AND of the…
1.3.6.1.4.1.30065.3.5.1.1.2.1.7ColumnaristaIpAclRuleL4PortSrcOperread-onlycurrentThis attribute determines TCP/UDP source-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpAclRuleL4PortsSr…
1.3.6.1.4.1.30065.3.5.1.1.2.1.8ColumnaristaIpAclRuleL4PortsSrcread-onlycurrentThis attribute is a list of TCP/UDP source ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum of 10 …
1.3.6.1.4.1.30065.3.5.1.1.2.1.9ColumnaristaIpAclRuleL4PortDestOperread-onlycurrentThis attribute determines TCP/UDP destination-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpAclRuleL4Po…
1.3.6.1.4.1.30065.3.5.1.1.2.1.10ColumnaristaIpAclRuleL4PortsDestread-onlycurrentThis attribute is a list of TCP/UDP destination ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum o…
1.3.6.1.4.1.30065.3.5.1.1.2.1.11ColumnaristaIpAclRuleTtlOperread-onlycurrentThis attribute is the IP TTL (Time To Live) operation code used in this ACL rule. Combined with attribute aristaIpAclRuleTtl, it specifies the IP TTL matching …
1.3.6.1.4.1.30065.3.5.1.1.2.1.12ColumnaristaIpAclRuleTtlread-onlycurrentThis attribute is the IP TTL value in this ACL rule. Attribute aristaIpAclRuleTtlOper determines how the TTL values is matched in this ACL rule.
1.3.6.1.4.1.30065.3.5.1.1.2.1.13ColumnaristaIpAclRuleTrackedread-onlycurrentThis attribute has the value 'true(1)' if this ACL rule is tracked; otherwise, the value is 'false(2)'. A tracked rule matches packets in existing ICMP/UDP/TCP…
1.3.6.1.4.1.30065.3.5.1.1.2.1.14ColumnaristaIpAclRuleFragmentsread-onlycurrentThis attribute has value 'true(1)' if this ACL rule is configured to match IP fragments; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.1.2.1.15ColumnaristaIpAclRuleTcpFlagsread-onlycurrentThis attribute describes TCP flags that are matched by this ACL rule.
1.3.6.1.4.1.30065.3.5.1.1.2.1.16ColumnaristaIpAclRuleEstablishedread-onlycurrentThis attribute has value 'true(1)' if this ACL rule matches existing TCP connections; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.1.2.1.17ColumnaristaIpAclRuleIcmpTyperead-onlycurrentThis attribute is the ICMP type that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
1.3.6.1.4.1.30065.3.5.1.1.2.1.18ColumnaristaIpAclRuleIcmpCoderead-onlycurrentThis attribute is the ICMP code that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
1.3.6.1.4.1.30065.3.5.1.1.2.1.19ColumnaristaIpAclRuleActionread-onlycurrentThis attribute is the action applied to this ACL rule.
1.3.6.1.4.1.30065.3.5.1.1.2.1.20ColumnaristaIpAclRuleLogread-onlycurrentThis attribute has value 'true(1)' if logging is required in this ACL rule; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.1.2.1.21ColumnaristaIpAclRuleRemarkread-onlycurrentThis attribute is the remark string applied to this ACL rule.
1.3.6.1.4.1.30065.3.5.1.1.3TablearistaIpAclRuleStatsTablenot-accessiblecurrentA table that contains statistics for IP ACL rules.
1.3.6.1.4.1.30065.3.5.1.1.3.1RowaristaIpAclRuleStatsEntrynot-accessiblecurrentStatistics for a specific IP ACL rules.
1.3.6.1.4.1.30065.3.5.1.1.3.1.1ColumnaristaIpAclRuleTimeMarknot-accessiblecurrentA TimeFilter for this entry. See the TimeFilter textual convention to see how this works.
1.3.6.1.4.1.30065.3.5.1.1.3.1.2ColumnaristaIpAclRuleStatsPktCountread-onlycurrentThis attribute is the number of packets that this ACL rule matched.
1.3.6.1.4.1.30065.3.5.1.1.3.1.3ColumnaristaIpAclRuleStatsLastUpdateTimeread-onlycurrentThe value of sysUpTime at the time the aristaIpAclRuleStatsPktCount was last updated for this ACL rule.
1.3.6.1.4.1.30065.3.5.1.2NodearistaMacAcl
1.3.6.1.4.1.30065.3.5.1.2.1TablearistaMacAclTablenot-accessiblecurrentA table that contains MAC ACLs that are configured on the switch.
1.3.6.1.4.1.30065.3.5.1.2.1.1RowaristaMacAclEntrynot-accessiblecurrentInformation about a specific MAC ACL that is configured on the switch.
1.3.6.1.4.1.30065.3.5.1.2.1.1.1ColumnaristaMacAclNamenot-accessiblecurrentThe name of the MAC ACL.
1.3.6.1.4.1.30065.3.5.1.2.1.1.2ColumnaristaMacAclReadOnlyread-onlycurrentThis attribute has value 'true(1)' if the MAC ACL is configured as read-only; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.2.1.1.3ColumnaristaMacAclStatsEnabledread-onlycurrentThis attribute has value 'true(1)' if the MAC ACL is configured to have per-entry statistics enabled; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.2.1.1.4ColumnaristaMacAclCountersIncompleteread-onlycurrentThis attribute has value 'true(1)' if the MAC ACL has incomplete counter statistics; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.2.2TablearistaMacAclRuleTablenot-accessiblecurrentA table that contains MAC ACL rules that are configured on the switch.
1.3.6.1.4.1.30065.3.5.1.2.2.1RowaristaMacAclRuleEntrynot-accessiblecurrentConfiguration information about a specific MAC ACL rule.
1.3.6.1.4.1.30065.3.5.1.2.2.1.1ColumnaristaMacAclRuleSeqIdnot-accessiblecurrentThis attribute is the sequence ID for this ACL rule.
1.3.6.1.4.1.30065.3.5.1.2.2.1.2ColumnaristaMacAclRuleSrcread-onlycurrentThis attribute is the MAC source address to be matched by this ACL rule, subject to the aristaMacAclRuleSrcMask value.
1.3.6.1.4.1.30065.3.5.1.2.2.1.3ColumnaristaMacAclRuleSrcMaskread-onlycurrentThis attribute is the MAC source-address mask in this ACL rule. For the source address of the packet to match the rule, the bitwise logical-AND of the address …
1.3.6.1.4.1.30065.3.5.1.2.2.1.4ColumnaristaMacAclRuleDestread-onlycurrentThis attribute is the MAC destination address to be matched by this ACL rule, subject to the aristaMacAclRuleSrcMask value.
1.3.6.1.4.1.30065.3.5.1.2.2.1.5ColumnaristaMacAclRuleDestMaskread-onlycurrentThis attribute is the MAC destination-address mask in this ACL rule. For the destination address of the packet to match the rule, the bitwise logical-AND of th…
1.3.6.1.4.1.30065.3.5.1.2.2.1.6ColumnaristaMacAclRuleProtoread-onlycurrentThis attribute is the MAC protocol number to be matched by this ACL rule. The protocol value 4294967295 (0xFFFFFFFF) is a value that indicates the rule matches…
1.3.6.1.4.1.30065.3.5.1.2.2.1.7ColumnaristaMacAclRuleActionread-onlycurrentThis attribute is the action applied to this ACL rule.
1.3.6.1.4.1.30065.3.5.1.2.2.1.8ColumnaristaMacAclRuleLogread-onlycurrentThis attribute has value 'true(1)' if logging is required in this ACL rule; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.2.2.1.9ColumnaristaMacAclRuleRemarkread-onlycurrentThis attribute is the remark string applied to this ACL rule.
1.3.6.1.4.1.30065.3.5.1.2.3TablearistaMacAclRuleStatsTablenot-accessiblecurrentA table that contains statistics information for MAC ACL rules.
1.3.6.1.4.1.30065.3.5.1.2.3.1RowaristaMacAclRuleStatsEntrynot-accessiblecurrentStatistics for MAC ACL rules.
1.3.6.1.4.1.30065.3.5.1.2.3.1.1ColumnaristaMacAclRuleTimeMarknot-accessiblecurrentA TimeFilter for this entry. See the TimeFilter textual convention to see how this works.
1.3.6.1.4.1.30065.3.5.1.2.3.1.2ColumnaristaMacAclRuleStatsPktCountread-onlycurrentThis attribute is the number of packets that this ACL rule matched.
1.3.6.1.4.1.30065.3.5.1.2.3.1.3ColumnaristaMacAclRuleStatsLastUpdateTimeread-onlycurrentThe value of sysUpTime at the time the aristaMacAclRuleStatsPktCount was last updated for this ACL rule.
1.3.6.1.4.1.30065.3.5.1.3NodearistaIpv6Acl
1.3.6.1.4.1.30065.3.5.1.3.1TablearistaIpv6AclTablenot-accessiblecurrentA table that contains IPv6 ACLs that are configured on the switch.
1.3.6.1.4.1.30065.3.5.1.3.1.1RowaristaIpv6AclEntrynot-accessiblecurrentInformation about a specific IPv6 ACL that is configured on the switch.
1.3.6.1.4.1.30065.3.5.1.3.1.1.1ColumnaristaIpv6AclNamenot-accessiblecurrentThe name of the IPv6 ACL.
1.3.6.1.4.1.30065.3.5.1.3.1.1.2ColumnaristaIpv6AclReadOnlyread-onlycurrentThis attribute has value 'true(1)' if the IPv6 ACL is configured as read-only; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.3.1.1.3ColumnaristaIpv6AclStatsEnabledread-onlycurrentThis attribute has value 'true(1)' if the IPv6 ACL is configured to have per-entry statistics enabled; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.3.1.1.4ColumnaristaIpv6AclCountersIncompleteread-onlycurrentThis attribute has value 'true(1)' if the IPv6 ACL has incomplete counter statistics; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.3.2TablearistaIpv6AclRuleTablenot-accessiblecurrentA table that contains IPv6 ACL rules that are configured on the switch.
1.3.6.1.4.1.30065.3.5.1.3.2.1RowaristaIpv6AclRuleEntrynot-accessiblecurrentConfiguration information about a specific IPv6 ACL rule.
1.3.6.1.4.1.30065.3.5.1.3.2.1.1ColumnaristaIpv6AclRuleSeqIdnot-accessiblecurrentThis attribute is the sequence ID for this ACL rule.
1.3.6.1.4.1.30065.3.5.1.3.2.1.2ColumnaristaIpv6AclRuleProtoread-onlycurrentThis attribute is the IPv6 upper layer protocol to be matched by this ACL rule. The value 0 indicates the rule matches any IPv6 protocol.
1.3.6.1.4.1.30065.3.5.1.3.2.1.3ColumnaristaIpv6AclRuleSrcread-onlycurrentThis attribute is the IPv6 source address to be matched by this ACL rule, subject to the aristaIpv6AclRuleSrcMask value.
1.3.6.1.4.1.30065.3.5.1.3.2.1.4ColumnaristaIpv6AclRuleSrcMaskread-onlycurrentThis attribute is the IPv6 source-address mask in this ACL rule. For the source address of the packet to match the rule, the bitwise logical-AND of the address…
1.3.6.1.4.1.30065.3.5.1.3.2.1.5ColumnaristaIpv6AclRuleDestread-onlycurrentThis attribute is the IPv6 destination address to be matched by this ACL rule, subject to the aristaIpv6AclRuleDestMask value.
1.3.6.1.4.1.30065.3.5.1.3.2.1.6ColumnaristaIpv6AclRuleDestMaskread-onlycurrentThis attribute is the IPv6 destination-address mask in this ACL rule. For the destination address of the packet to match the rule, the bitwise logical-AND of t…
1.3.6.1.4.1.30065.3.5.1.3.2.1.7ColumnaristaIpv6AclRuleL4PortSrcOperread-onlycurrentThis attribute determines TCP/UDP source-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpv6AclRuleL4Ports…
1.3.6.1.4.1.30065.3.5.1.3.2.1.8ColumnaristaIpv6AclRuleL4PortsSrcread-onlycurrentThis attribute is a list of TCP/UDP source ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum of 10 …
1.3.6.1.4.1.30065.3.5.1.3.2.1.9ColumnaristaIpv6AclRuleL4PortDestOperread-onlycurrentThis attribute determines TCP/UDP destination-port matching behavior in this ACL rule. If this attribute has value 'any(0)', then attribute aristaIpv6AclRuleL4…
1.3.6.1.4.1.30065.3.5.1.3.2.1.10ColumnaristaIpv6AclRuleL4PortsDestread-onlycurrentThis attribute is a list of TCP/UDP destination ports to be matched in this ACL rule. They are represented as decimal strings, separated by spaces. A maximum o…
1.3.6.1.4.1.30065.3.5.1.3.2.1.11ColumnaristaIpv6AclRuleHopLimitOperread-onlycurrentThis attribute is the IPv6 Hop Limit operation code used in this ACL rule. Combined with attribute aristaIpv6AclRuleHopLimit, it specifies the IPv6 Hop Limit m…
1.3.6.1.4.1.30065.3.5.1.3.2.1.12ColumnaristaIpv6AclRuleHopLimitread-onlycurrentThis attribute is the IPv6 Hop Limit value in this ACL rule. Attribute aristaIpv6AclRuleHopLimitOper determines how the Hop Limit values is matched in this ACL…
1.3.6.1.4.1.30065.3.5.1.3.2.1.13ColumnaristaIpv6AclRuleTcpFlagsread-onlycurrentThis attribute describes TCP flags that are matched by this ACL rule.
1.3.6.1.4.1.30065.3.5.1.3.2.1.14ColumnaristaIpv6AclRuleEstablishedread-onlycurrentThis attribute has value 'true(1)' if this ACL rule matches existing TCP connections; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.3.2.1.15ColumnaristaIpv6AclRuleIcmpTyperead-onlycurrentThis attribute is the ICMP type that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
1.3.6.1.4.1.30065.3.5.1.3.2.1.16ColumnaristaIpv6AclRuleIcmpCoderead-onlycurrentThis attribute is the ICMP code that is matched by this ACL rule. The attribute is ignored in the ACL rule if the value is 65535.
1.3.6.1.4.1.30065.3.5.1.3.2.1.17ColumnaristaIpv6AclRuleActionread-onlycurrentThis attribute is the action applied to this ACL rule.
1.3.6.1.4.1.30065.3.5.1.3.2.1.18ColumnaristaIpv6AclRuleLogread-onlycurrentThis attribute has value 'true(1)' if logging is required in this ACL rule; otherwise, the value is 'false(2)'.
1.3.6.1.4.1.30065.3.5.1.3.2.1.19ColumnaristaIpv6AclRuleRemarkread-onlycurrentThis attribute is the remark string applied to this ACL rule.
1.3.6.1.4.1.30065.3.5.1.3.3TablearistaIpv6AclRuleStatsTablenot-accessiblecurrentA table that contains statistics information for IPv6 ACL rules.
1.3.6.1.4.1.30065.3.5.1.3.3.1RowaristaIpv6AclRuleStatsEntrynot-accessiblecurrentStatistics for IPv6 ACL rules.
1.3.6.1.4.1.30065.3.5.1.3.3.1.1ColumnaristaIpv6AclRuleTimeMarknot-accessiblecurrentA TimeFilter for this entry. See the TimeFilter textual convention to see how this works.
1.3.6.1.4.1.30065.3.5.1.3.3.1.2ColumnaristaIpv6AclRuleStatsPktCountread-onlycurrentThis attribute is the number of packets that this ACL rule matched.
1.3.6.1.4.1.30065.3.5.1.3.3.1.3ColumnaristaIpv6AclRuleStatsLastUpdateTimeread-onlycurrentThe value of sysUpTime at the time the aristaIpv6AclRuleStatsPktCount was last updated for this ACL rule.
1.3.6.1.4.1.30065.3.5.1.4ScalararistaAclDpSupportFlagsread-onlycurrentThis attribute describes the data-plane ACL support matrix. If data-plane ACLs are supported, the acl bit is 1; otherwise, other bits are 0. If data-plane ACLs…
1.3.6.1.4.1.30065.3.5.2NodearistaAclConformance
1.3.6.1.4.1.30065.3.5.2.1NodearistaAclCompliances
1.3.6.1.4.1.30065.3.5.2.1.1CompliancearistaAclCompliancecurrentThe compliance statement for Arista switches that support Access Control Lists (ACLs).
1.3.6.1.4.1.30065.3.5.2.2NodearistaAclGroups
1.3.6.1.4.1.30065.3.5.2.2.1GrouparistaAclGroupcurrentThe group of required ACL objects.
Type Definitions
NameSyntaxStatusDescription
AristaAclRangeOperatorINTEGER { any(0), eq(1), gt(2), lt(3), neq(4), range(5) }currentRange operator used by an ACL rule.
AristaAclRuleActionINTEGER { permit(0), deny(1), remark(2) }currentAction associated with an ACL rule. If the action has value 'remark(2)', then only the remark field of the ACL rule is meaningful; all other fields are don't-cares.
MIB Viewer