Snagaclname, Snagaclaction, Snagaclprotocol – Brocade Unified IP MIB Reference (Supporting FastIron Releases 07.5.00 and 08.0.10) User Manual

Page 425: Snagaclsourceip, Snagaclsourcemask

Advertising
background image

Unified IP MIB Reference

399

53-1003106-01

IPv4 ACL table

40

snAgAclName
brcdIp.1.2.2.15.2.1.3
Syntax: DisplayString

Read-write

Shows the ACL name.

snAgAclAction
brcdIp.1.2.2.15.2.1.4
Syntax: Integer

Read-write

Indicates if IP packets that matched this access control list
are permitted or denied:

deny(0)

permit(1)

The default action when no ACLs are configured on a
device is to permit all traffic. However, once you configure
an ACL and apply it to a port, the default action for that
port is to deny all traffic that is not explicitly permitted on
the port.

If you want to tightly control access, configure ACLs
consisting of permit entries for the access you want
to permit. The ACLs implicitly deny all other access.

If you want to secure access in environments with
many users, you might want to configure ACLs that
consist of explicit deny entries, then add an entry to
permit all access to the end of each ACL. The
software permits packets that are not denied by the
deny entries.

snAgAclProtocol
brcdIp.1.2.2.15.2.1.5
Syntax: IPProtocol

Read-write

Indicates the protocol denied or permitted by the extended
ACL.
The protocol can be one of the following well-known
names or any protocol number from 0 through 255:

Internet Control Message Protocol (ICMP)

Internet Group Management Protocol (IGMP)

Internet Gateway Routing Protocol (IGRP)

Internet Protocol (IP)

Open Shortest Path First (OSPF)

Transmission Control Protocol (TCP)

User Datagram Protocol (UDP)

Entering “0” indicates any protocol.

snAgAclSourceIp
brcdIp.1.2.2.15.2.1.6
Syntax: IpAddress

Read-write

Applies only to extended ACLs.
Identifies the source IP address of the packet that will
either be permitted or denied.

snAgAclSourceMask
brcdIp.1.2.2.15.2.1.7
Syntax: IpAddress

Read-write

Applies only to extended ACLs.
Identifies the source IP subnet mask of the packet that will
either be permitted or denied.

Name, OID, and syntax

Access

Description

Advertising
This manual is related to the following products: