ACLMGMT-MIB
AI MIB Summary
The ACLMGMT-MIB provides SNMP access to proprietary enterprise Access Control List configurations and status, enabling the monitoring of firewall rule definitions, hit counts, and packet filtering states. This module facilitates the programmatic management of network security policies and traffic control mechanisms on vendor-specific hardware.
The structure of Access Control List information for the proprietary enterprise.
Main OID:
swAclMgmtMIB.dlink-common-mgmt.9
373
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
373 total| Object Name |
|---|
swAclMgmtMIBThe structure of Access Control List information for the
proprietary enterprise. MODULE-IDENTITY .dlink-common-mgmt.9 |
swAclCtrl OBJECT IDENTIFIER .dlink-common-mgmt.9.1 |
swCpuInterfacefilterStateEnable or disable CPU Interface Filtering (also called Software ACL).
The default is disabled. If enabled, the filtering entries in the
swAclRuleMgmt tables will be set to active if its RuleSwAclState is
enabled. If disabled, the software ACL function will be disabled.rw Enumeration .dlink-common-mgmt.9.1.1 |
swACLTotalUsedRuleEntriesThe total number of used ACL rule entries.ro INTEGER .dlink-common-mgmt.9.1.2 |
swACLTotalUnusedRuleEntriesThe total number of unused ACL rule entries.ro INTEGER .dlink-common-mgmt.9.1.3 |
swAclMaskMgmt OBJECT IDENTIFIER .dlink-common-mgmt.9.2 |
swACLEthernetTableThis table contains ACL mask Ethernet information.
The access profile will be created on the switch to define which
part of each incoming frame's layer 2 header will be examined
by the switch. Masks entered will be combined with the
values the switch finds in the specified frame header fields. SEQUENCE OF SwACLEthernetEntry .dlink-common-mgmt.9.2.1 |
swACLEthernetEntryA list of information about the ACL for Ethernet. SwACLEthernetEntry .dlink-common-mgmt.9.2.1.1 |
swACLEthernetProfileIDThe ID of the ACL mask entry unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.2.1.1.1 |
swACLEthernetUsevlanSpecifies that the switch will examine the VLAN part of each packet header.rw Enumeration .dlink-common-mgmt.9.2.1.1.2 |
swACLEthernetMacAddrMaskStateThis object indicates the status of the MAC address mask.
other (1) - Neither source MAC address nor destination MAC address are masked.
dst-mac-addr (2) - Destination MAC addresses within received frames are
to be filtered when matched with the MAC address entry for the table.
src-mac-addr (3) - Source MAC addresses within received frames are to
be filtered when matched with the MAC address entry for the table.
dst-src-mac-addr (4) - Source or destination MAC addresses within received
frames are to be filtered when matched with the MAC address entry of the table.rw Enumeration .dlink-common-mgmt.9.2.1.1.3 |
swACLEthernetSrcMacAddrMaskThis object specifies the MAC address mask for the source MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.2.1.1.4 |
swACLEthernetDstMacAddrMaskThis object specifies the MAC address mask for the destination MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.2.1.1.5 |
swACLEthernetUse8021pSpecifies if the switch will examine the 802.1p priority value in the frame's header
or not.rw Enumeration .dlink-common-mgmt.9.2.1.1.6 |
swACLEthernetUseEthernetTypeSpecifies if the switch will examine the Ethernet type value in each frame's header
or not.rw Enumeration .dlink-common-mgmt.9.2.1.1.7 |
swACLEthernetRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.2.1.1.8 |
swACLEthernetOwnerThe owner of the ACL mask entry. The type of ACL entry created. ACL type
entries can only be modified when being configured through the same
type command. For example IP-MAC Binding entries can only be modified
or deleted through the IP-MAC Binding configurations or commands.ro Enumeration .dlink-common-mgmt.9.2.1.1.9 |
swACLEthernetUnusedRuleEntriesThe number of unused rule entries of this Ethernet profile entry.ro INTEGER .dlink-common-mgmt.9.2.1.1.10 |
swACLEthernetProfileNameThe name of the ACL mask entry unique to the mask list.rw DisplayString .dlink-common-mgmt.9.2.1.1.11 |
swACLIpTableThis table contains the ACL mask for IP information.
Access profiles will be created on the switch to define which
part of the incoming frame's IP layer packet header will be
examined by the switch. Masks entered will be combined
with the values the switch finds in the specified frame
header fields. SEQUENCE OF SwACLIpEntry .dlink-common-mgmt.9.2.2 |
swACLIpEntryA list of information about the ACL of the IP Layer. SwACLIpEntry .dlink-common-mgmt.9.2.2.1 |
swACLIpProfileIDThe ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.2.2.1.1 |
swACLIpUsevlanThis object indicates if the IP layer VLAN part is examined or not.rw Enumeration .dlink-common-mgmt.9.2.2.1.2 |
swACLIpIpAddrMaskStateThis object indicates the status of IP address mask.
other (1) - Neither source IP address nor destination IP address are
masked.
dst-ip-addr (2) - Destination IP addresses within received frames
are to be filtered when matched with the IP address entry of the table.
src-ip-addr (3) - Source IP addresses within received frames are
to be filtered when matched with the IP address entry of the table.
dst-src-ip-addr (4) - Destination or source IP addresses within received
frames are to be filtered when matched with the IP address entry of the
table.rw Enumeration .dlink-common-mgmt.9.2.2.1.3 |
swACLIpSrcIpAddrMaskThis object specifies the IP address mask for the source IP address.rw IpAddress .dlink-common-mgmt.9.2.2.1.4 |
swACLIpDstIpAddrMaskThis object specifies the IP address mask for the destination IP address.rw IpAddress .dlink-common-mgmt.9.2.2.1.5 |
swACLIpUseDSCPThis object indicates if the DSCP protocol in the packet header
is to be examined or not.rw Enumeration .dlink-common-mgmt.9.2.2.1.6 |
swACLIpUseProtoTypeThat object indicates which protocol will be examined.rw Enumeration .dlink-common-mgmt.9.2.2.1.7 |
swACLIpIcmpOptionThis object indicates which fields are defined for ICMP.
none (1)- Both fields are null.
type (2)- Type field identified.
code (3)- Code field identified.
type-code (4)- Both ICMP fields identified.rw Enumeration .dlink-common-mgmt.9.2.2.1.8 |
swACLIpIgmpOptionIndicates if the IGMP options field is identified or not.rw Enumeration .dlink-common-mgmt.9.2.2.1.9 |
swACLIpTcpOptionThis object indicates the status of the filtered address of TCP.
other (1) - Neither source port nor destination port are
masked.
dst-addr (2) - Packets will be filtered if this destination port
is identified in received frames.
src-addr (3) - Packets will be filtered if this source port is
identified in received frames.
dst-src-addr (4) - Packets will be filtered if this destination
or source port is identified in received frames.rw Enumeration .dlink-common-mgmt.9.2.2.1.10 |
swACLIpUdpOptionThis object indicates the status of the filtered address of UDP .
other (1) - Neither source port nor destination port are
masked.
dst-addr (2) - Packets will be filtered if this destination port
is identified in received frames.
src-addr (3) - Packets will be filtered if this source port is
identified in received frames.
dst-src-addr (4) - Packets will be filtered if this destination
or source port is identified in received frames.rw Enumeration .dlink-common-mgmt.9.2.2.1.11 |
swACLIpTCPorUDPSrcPortMaskSpecifies a TCP port mask for the source port if swACLIpUseProtoType is TCP
Specifies a UDP port mask for the source port if swACLIpUseProtoType is UDP.rw OCTET STRING .dlink-common-mgmt.9.2.2.1.12 |
swACLIpTCPorUDPDstPortMaskSpecifies a TCP port mask for the destination port if swACLIpUseProtoType is TCP
Specifies a UDP port mask for the destination port if swACLIpUseProtoType is UDP.rw OCTET STRING .dlink-common-mgmt.9.2.2.1.13 |
swACLIpTCPFlagBitSpecifies a TCP connection flag mask.rw Enumeration .dlink-common-mgmt.9.2.2.1.14 |
swACLIpTCPFlagBitMaskA value which indicates the set of TCP flags that this
entity may potentially offer. The value is a sum of flag bits.
This sum initially takes the value zero. Then, for each flag, L,
is added in the range 1 through 6, for which this node performs
transactions where 2^(L-1) is added to the sum.
Note that values should be calculated accordingly:
Flag functionality
6 urg bit
5 ack bit
4 psh bit
3 rst bit
2 syn bit
1 fin bit
For example, if you want to enable urg bit and ack bit, you
should set value 48{2^(5-1) + 2^(6-1)}.rw INTEGER .dlink-common-mgmt.9.2.2.1.15 |
swACLIpProtoIDOptionSpecifies if the switch will examine each frame's protocol ID field or not.rw Enumeration .dlink-common-mgmt.9.2.2.1.16 |
swACLIpProtoIDSpecifies that the rule applies to the IP protocol ID behind the IP header.rw INTEGER .dlink-common-mgmt.9.2.2.1.17 |
swACLIpProtoIDMaskSpecifies that the rule applies to the IP protocol ID and the mask options
behind the IP header.rw OCTET STRING .dlink-common-mgmt.9.2.2.1.18 |
swACLIpRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.2.2.1.19 |
swACLIpOwnerThe owner of the ACL mask entry. The type of ACL entry created. ACL type
entries can only be modified when being configured through the same
type command. For example, IP-MAC Binding entries can only be modified
or deleted through the IP-MAC Binding configurations or commands.ro Enumeration .dlink-common-mgmt.9.2.2.1.20 |
swACLIpUnusedRuleEntriesThe number of unused rule entries this IP profile entry.ro INTEGER .dlink-common-mgmt.9.2.2.1.22 |
swACLIpProfileNameThe name of the ACL mask entry unique to the mask list.rw DisplayString .dlink-common-mgmt.9.2.2.1.23 |
swACLPktContMaskTableThis table contains the ACL mask for user-defined information.
An access profile will be created on the switch to define which part
of each incoming frame's user-defined part of the packet header
will be examined by switch. Masks entered will be combined
with the values the switch finds in the specified frame header fields. SEQUENCE OF SwACLPktContMaskEntry .dlink-common-mgmt.9.2.3 |
swACLPktContMaskEntryA list of information about user-defined ACLs. SwACLPktContMaskEntry .dlink-common-mgmt.9.2.3.1 |
swACLPktContMaskProfileIDThe ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.2.3.1.1 |
swACLPktContMaskOffset0to15Specifies that the rule applies to the packet content (Offset0to15) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.2.3.1.2 |
swACLPktContMaskOffset16to31Specifies that the rule applies to the packet content (Offset16to31) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.2.3.1.3 |
swACLPktContMaskOffset32to47Specifies that the rule applies to the packet content (Offset32to47) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.2.3.1.4 |
swACLPktContMaskOffset48to63Specifies that the rule applies to the packet content (Offset48to63) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.2.3.1.5 |
swACLPktContMaskOffset64to79Specifies that the rule applies to the packet content (Offset64to79) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.2.3.1.6 |
swACLPktContMaskRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.2.3.1.7 |
swACLPktContMaskOwnerThe owner of the ACL mask entry. The type of ACL entry created. ACL type
entries can only be modified when being configured through the same
type command. For example, IP-MAC Binding entries can only be modified
or deleted through the IP-MAC Binding configurations or commands.ro Enumeration .dlink-common-mgmt.9.2.3.1.8 |
swACLPktContMaskUnusedRuleEntriesThe number of unused rule entries of this IP profile entry.ro INTEGER .dlink-common-mgmt.9.2.3.1.9 |
swACLPktContMaskProfileNameThe name of the ACL mask entry unique to the mask list.rw DisplayString .dlink-common-mgmt.9.2.3.1.10 |
swACLIpv6MaskTableThis table contains user-defined ACL mask information.
An access profile will be created on the switch to define which
parts of each incoming frame's IPv6 part of the packet header will
be examined by the switch. Masks entered will be combined
with the values the switch finds in the specified frame header fields. SEQUENCE OF SwACLIpv6MaskEntry .dlink-common-mgmt.9.2.4 |
swACLIpv6MaskEntryA list of information about user-defined ACLs. SwACLIpv6MaskEntry .dlink-common-mgmt.9.2.4.1 |
swACLIpv6MaskProfileIDThe ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.2.4.1.1 |
swACLIpv6MaskClassSpecifies that the rule applies to the IPv6 class field and the mask options.rw Enumeration .dlink-common-mgmt.9.2.4.1.2 |
swACLIpv6MaskFlowlabelSpecifies that the rule applies to the IPv6 flowlabel field and the mask options.rw Enumeration .dlink-common-mgmt.9.2.4.1.3 |
swACLIpv6IpAddrMaskStateThis object indicates the status of the IPv6 address mask.
other (1) - Neither source IPv6 address nor destination IPv6 address are
masked.
dst-ipv6-addr (2) - Received frame destination IPv6 address is
currently used to be filtered as it meets with the IPv6
address entry of the table.
src-ipv6-addr (3) - Received frame source IPv6 address is currently
used to be filtered as it meets with the IPv6 address entry of
the table.
dst-src-ipv6-addr (4) - Received frame destination IPv6 address or
source IPv6 address is currently used to be filtered as it meets
with the IPv6 address entry of the table.rw Enumeration .dlink-common-mgmt.9.2.4.1.4 |
swACLIpv6MaskSrcIpv6MaskSpecifies that the rule applies to the Source IPv6 address and the mask options.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.2.4.1.5 |
swACLIpv6MaskDstIpv6MaskSpecifies that the rule applies to the Destination IPv6 address and the mask options.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.2.4.1.6 |
swACLIpv6MaskRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.2.4.1.7 |
swACLIpv6MaskOwnerThe owner of the ACL mask entry. The type of ACL entry created. ACL type
entries can only be modified when being configured through the same
type command. For example, IP-MAC Binding entries can only be modified
or deleted through the IP-MAC Binding configurations or commands.ro Enumeration .dlink-common-mgmt.9.2.4.1.8 |
swACLIpv6MaskUnusedRuleEntriesThe number of unused rule entries of this IP profile entry.ro INTEGER .dlink-common-mgmt.9.2.4.1.9 |
swACLIpv6MaskProfileNameThe name of the ACL mask entry unique to the mask list.rw DisplayString .dlink-common-mgmt.9.2.4.1.10 |
swACLIpv6MaskUseProtoTypeThat object indicates which protocol will be examined.rw Enumeration .dlink-common-mgmt.9.2.4.1.11 |
swACLIpv6MaskTcpOptionThis object indicates the status of the filtered address of TCP.
other (1) - Neither source port nor destination port are
masked.
dst-addr (2) - Packets will be filtered if this destination port
is identified in received frames.
src-addr (3) - Packets will be filtered if this source port is
identified in received frames.
dst-src-addr (4) - Packets will be filtered if this destination
or source port is identified in received frames.rw Enumeration .dlink-common-mgmt.9.2.4.1.12 |
swACLIpv6MaskUdpOptionThis object indicates the status of the filtered address of UDP.
other (1) - Neither source port nor destination port is
masked.
dst-addr (2) - Packets will be filtered if this destination port
is identified in received frames.
src-addr (3) - Packets will be filtered if this source port is
identified in received frames.
dst-src-addr (4) - Packets will be filtered if this destination
or source port is identified in received frames.rw Enumeration .dlink-common-mgmt.9.2.4.1.13 |
swACLIpv6MaskTCPorUDPSrcPortMaskSpecifies a TCP port mask for the source port if swACLIpv6MaskUseProtoType is TCP
Specifies a UDP port mask for the source port if swACLIpv6MaskUseProtoType is UDP.rw OCTET STRING .dlink-common-mgmt.9.2.4.1.14 |
swACLIpv6MaskTCPorUDPDstPortMaskSpecifies a TCP port mask for the destination port if swACLIpv6MaskUseProtoType is TCP
Specifies a UDP port mask for the destination port if swACLIpv6MaskUseProtoType is UDP.rw OCTET STRING .dlink-common-mgmt.9.2.4.1.15 |
swACLMaskDelAllStateUsed to delete all ACL masks.rw Enumeration .dlink-common-mgmt.9.2.5 |
swIBPACLEthernetTableThis table contains IP-MAC-Binding ACL mask Ethernet information.
Access profiles will be created on the switch by row creation and to
define which parts of each incoming frame's layer 2 header part
the switch will examine. Masks can be entered that will be combined
with the values the switch finds in the specified frame header fields.obsolete SEQUENCE OF SwIBPACLEthernetEntry .dlink-common-mgmt.9.2.6 |
swIBPACLEthernetEntryA list of information about the Ethernet ACL.obsolete SwIBPACLEthernetEntry .dlink-common-mgmt.9.2.6.1 |
swIBPACLEthernetProfileIDThe ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.roobsolete INTEGER .dlink-common-mgmt.9.2.6.1.1 |
swIBPACLEthernetUseEthernetTypeSpecifies if the switch will examine the Ethernet type value in each frame's header
or not.roobsolete Enumeration .dlink-common-mgmt.9.2.6.1.2 |
swIBPACLIpTableThis table contains IP-MAC-Binding IP ACL mask information.
Access profiles will be created on the switch by row creation and to
define which parts of each incoming frame's IP layer part of the header
the switch will examine. Masks can be entered that will be combined
with the values the switch finds in the specified frame header fields.obsolete SEQUENCE OF SwIBPACLIpEntry .dlink-common-mgmt.9.2.7 |
swIBPACLIpEntryA list of information about the IP layer of the ACL.obsolete SwIBPACLIpEntry .dlink-common-mgmt.9.2.7.1 |
swIBPACLIpProfileIDThe ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.roobsolete INTEGER .dlink-common-mgmt.9.2.7.1.1 |
swIBPACLIpSrcMacAddrMaskThis object specifies the MAC address mask for the source MAC address.roobsolete MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.2.7.1.2 |
swIBPACLIpSrcIpAddrMaskThis object specifies IP address masks for the source IP address.roobsolete IpAddress .dlink-common-mgmt.9.2.7.1.3 |
swACLPktContMaskOptionTableThis table contains the ACL mask for user-defined option information.
An access profile will be created on the switch to define which part
of each incoming frame's user-defined part of the packet header
will be examined by switch. Masks entered will be combined
with the values the switch finds in the specified frame header fields. SEQUENCE OF SwACLPktContMaskOptionEntry .dlink-common-mgmt.9.2.8 |
swACLPktContMaskOptionEntryA list of information about the user-defined ACL. SwACLPktContMaskOptionEntry .dlink-common-mgmt.9.2.8.1 |
swACLPktContMaskOptionProfileIDThe ID of the ACL mask entry, unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.2.8.1.1 |
swACLPktContMaskOffsetChunk1StateSpecifies the state of chunk1.rw Enumeration .dlink-common-mgmt.9.2.8.1.2 |
swACLPktContMaskOffsetChunk1OffsetValueSpecifies the frame content offset of chunk1.rw INTEGER .dlink-common-mgmt.9.2.8.1.3 |
swACLPktContMaskOffsetChunk1MaskSpecifies the frame content mask of chunk1.rw OCTET STRING .dlink-common-mgmt.9.2.8.1.4 |
swACLPktContMaskOffsetChunk2StateSpecifies the state of chunk2.rw Enumeration .dlink-common-mgmt.9.2.8.1.5 |
swACLPktContMaskOffsetChunk2OffsetValueSpecifies the frame content offset of chunk2.rw INTEGER .dlink-common-mgmt.9.2.8.1.6 |
swACLPktContMaskOffsetChunk2MaskSpecifies the frame content mask of chunk2.rw OCTET STRING .dlink-common-mgmt.9.2.8.1.7 |
swACLPktContMaskOffsetChunk3StateSpecifies the state of chunk3.rw Enumeration .dlink-common-mgmt.9.2.8.1.8 |
swACLPktContMaskOffsetChunk3OffsetValueSpecifies the frame content offset of chunk3.rw INTEGER .dlink-common-mgmt.9.2.8.1.9 |
swACLPktContMaskOffsetChunk3MaskSpecifies the frame content mask of chunk3.rw OCTET STRING .dlink-common-mgmt.9.2.8.1.10 |
swACLPktContMaskOffsetChunk4StateSpecifies the state of chunk4.rw Enumeration .dlink-common-mgmt.9.2.8.1.11 |
swACLPktContMaskOffsetChunk4OffsetValueSpecifies the frame content offset of chunk4.rw INTEGER .dlink-common-mgmt.9.2.8.1.12 |
swACLPktContMaskOffsetChunk4MaskSpecifies the frame content mask of chunk4.rw OCTET STRING .dlink-common-mgmt.9.2.8.1.13 |
swACLPktContMaskOptionRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.2.8.1.14 |
swACLPktContMaskOptionOwnerThe owner of the ACL mask entry. The type of ACL entry created. ACL type
entries can only be modified when being configured through the same
type command. For example, IP-MAC Binding entries can only be modified
or deleted through the IP-MAC Binding configurations or commands.ro Enumeration .dlink-common-mgmt.9.2.8.1.15 |
swACLPktContMaskOptionUnusedRuleEntriesThe number of unused rule entries of this IP profile entry.ro INTEGER .dlink-common-mgmt.9.2.8.1.16 |
swACLPktContMaskOptionProfileNameThe name of the ACL mask entry unique to the mask list.rw DisplayString .dlink-common-mgmt.9.2.8.1.17 |
swAclRuleMgmt OBJECT IDENTIFIER .dlink-common-mgmt.9.3 |
swACLEtherRuleTableThis table contains Ethernet ACL information. SEQUENCE OF SwACLEtherRuleEntry .dlink-common-mgmt.9.3.1 |
swACLEtherRuleEntryA list of information about the ACL rule of the layer 2 part of each packet. SwACLEtherRuleEntry .dlink-common-mgmt.9.3.1.1 |
swACLEtherRuleProfileIDThe ID of the ACL rule entry, which is unique to the mask list.
The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.3.1.1.1 |
swACLEtherRuleAccessIDThe ID of the the ACL rule entry relates to the swACLEtherRuleProfileID.
When row creation is set to 0, assignment of an Access ID for ports is automatic
and the swACLEtherRulePort creates Rule entries for the swACLEtherRulePort accordingly.
When set from 1 to 65535, an access ID will be created for the swACLEtherRulePort.
The swACLEtherRulePort must be set to one port only otherwise the row creation will fail.ro INTEGER .dlink-common-mgmt.9.3.1.1.2 |
swACLEtherRuleVlanSpecifies that the access rule will apply to this VLAN only.rw SnmpAdminString .dlink-common-mgmt.9.3.1.1.3 |
swACLEtherRuleSrcMacAddressSpecifies that the access rule will apply to only packets with
this source MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.3.1.1.4 |
swACLEtherRuleDstMacAddressSpecifies that the access rule will apply to only packets
with this destination MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.3.1.1.5 |
swACLEtherRule8021PSpecifies that the access rule will apply only to packets with
this 802.1p priority value. A value of -1 indicates that this node
is not actively used.rw INTEGER(-1..7) .dlink-common-mgmt.9.3.1.1.6 |
swACLEtherRuleEtherTypeSpecifies that the access rule will apply only to packets with this
hexadecimal 802.1Q Ethernet type value in the packet header.rw OCTET STRING .dlink-common-mgmt.9.3.1.1.7 |
swACLEtherRuleEnablePrioritySpecifies that the access rule will apply only to packets with
priority value.rw Enumeration .dlink-common-mgmt.9.3.1.1.8 |
swACLEtherRulePrioritySpecifies that the priority will be changed in packets while the swACLEtherRuleEnablePriority
is enabled .rw INTEGER .dlink-common-mgmt.9.3.1.1.9 |
swACLEtherRuleReplacePrioritySpecifies if the switch will change priorities of packets that match the access profile
802.1p priority tag field or not .rw Enumeration .dlink-common-mgmt.9.3.1.1.10 |
swACLEtherRuleEnableReplaceDscpSpecifies if the switch will change priorities of packets that match the access profile
DSCP field or not.
Replace DSCP and replace ToS precedence can not both be supported.rw Enumeration .dlink-common-mgmt.9.3.1.1.11 |
swACLEtherRuleRepDscpSpecifies a value to be written to the DSCP field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write the value in the DSCP field of the packet.rw INTEGER .dlink-common-mgmt.9.3.1.1.12 |
swACLEtherRulePermitThis object indicates if the result of the packet examination is 'permit' or 'deny'.
The default is 'permit'.
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.rw Enumeration .dlink-common-mgmt.9.3.1.1.13 |
swACLEtherRulePortSpecifies that the access rule will only apply to port(s).
This object and swACLEtherRuleVID can not be set together.rw INTEGER .dlink-common-mgmt.9.3.1.1.14 |
swACLEtherRuleRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.3.1.1.15 |
swACLEtherRuleOwnerThe owner of the ACL rule entry. Only owners can modify this entry.ro Enumeration .dlink-common-mgmt.9.3.1.1.16 |
swACLEtherRuleRxRateSpecifies the rx rate, 0 denotes no_limit. The maximum value of this object depends on the device.rw INTEGER .dlink-common-mgmt.9.3.1.1.17 |
swACLEtherRuleEnableReplaceTosPrecedenceSpecifies if the switch will change priorities of packets that match the access profile
ToS precedence field or not.
Replace DSCP and replace ToS precedence can not both be supported.rw Enumeration .dlink-common-mgmt.9.3.1.1.18 |
swACLEtherRuleRepTosPrecedenceSpecifies a value to be written to the ToS precedence field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write the value in the ToS precedence field of the packet.rw INTEGER .dlink-common-mgmt.9.3.1.1.19 |
swACLEtherRuleVIDSpecifies this rule only applies to the specified VLAN. There are two conditions:
1.only the portlist that belongs to this VLAN will be included;
2.packets must belong to this VLAN.
This object and swACLEtherRulePort can not be set together.
When you set swACLEtherRulePort, the value of this object will automatically change to 0.
And this object can not be set to 0.rw INTEGER .dlink-common-mgmt.9.3.1.1.20 |
swACLIpRuleTable SEQUENCE OF SwACLIpRuleEntry .dlink-common-mgmt.9.3.2 |
swACLIpRuleEntry SwACLIpRuleEntry .dlink-common-mgmt.9.3.2.1 |
swACLIpRuleProfileIDThe ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.3.2.1.1 |
swACLIpRuleAccessIDThe ID of the ACL rule entry relates to swACLIPRuleProfileID.
Row creation set to 0 indicates automatic assignment of the Access ID
for the ports in the swACLIpRulePort to create Rule entries
for swACLIpRulePort accordingly.
Set to 1-65535 causes creation of an access ID for the swACLIpRulePort.
The swACLIpRulePort must be set to one port only otherwise the row
creation will fail.ro INTEGER .dlink-common-mgmt.9.3.2.1.2 |
swACLIpRuleVlanSpecifies that the access rule will only apply to this VLAN.rw SnmpAdminString .dlink-common-mgmt.9.3.2.1.3 |
swACLIpRuleSrcIpaddressSpecifies an IP source address.rw IpAddress .dlink-common-mgmt.9.3.2.1.4 |
swACLIpRuleDstIpaddressSpecifies an IP destination address.rw IpAddress .dlink-common-mgmt.9.3.2.1.5 |
swACLIpRuleDscpSpecifies the value of DSCP. The value can be configured from 0 to 63.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..63) .dlink-common-mgmt.9.3.2.1.6 |
swACLIpRuleProtocolSpecifies the IP protocol.
For some older chips, this object can not be set. When getting this object,
it always returns the type which has been configured in swACLIpEntry.
For some newer chips, this object can only set the type which
has been configured in swACLIpEntry. The default value is none (1).rw Enumeration .dlink-common-mgmt.9.3.2.1.7 |
swACLIpRuleTypeSpecifies that the rule applies to the value of ICMP type traffic.
A value of -1 denotes that this object is not active.rw INTEGER(-1..255) .dlink-common-mgmt.9.3.2.1.8 |
swACLIpRuleCodeSpecifies that the rule applies to the value of ICMP code traffic.
A value of -1 denotes that this object is not active.rw INTEGER(-1..255) .dlink-common-mgmt.9.3.2.1.9 |
swACLIpRuleSrcPortSpecifies that the rule applies to the range of the TCP/UDP source ports.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..65535) .dlink-common-mgmt.9.3.2.1.10 |
swACLIpRuleDstPortSpecifies the TCP/UDP destination port range.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..65535) .dlink-common-mgmt.9.3.2.1.11 |
swACLIpRuleFlagBitsA value which indicates the set of TCP flags that this
entity may potentially offer. The value is a sum of flag bits.
This sum initially takes the value zero. Then, for each flag, L
is added in the range 1 through 6, for which this node performs
transactions, where 2^(L - 1) is added to the sum.
Note that values should be calculated accordingly:
Flag functionality
6 urg bit
5 ack bit
4 psh bit
3 rst bit
2 syn bit
1 fin bit
For example, it you want to enable urg bit and ack bit, you
should set value 48{2^(5-1) + 2^(6-1)}.rw INTEGER .dlink-common-mgmt.9.3.2.1.12 |
swACLIpRuleProtoIDSpecifies that the rule applies to the value of IP protocol ID traffic.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..255) .dlink-common-mgmt.9.3.2.1.13 |
swACLIpRuleUserMaskSpecifies that the rule applies to the IP protocol ID and the range of
options behind the IP header.rw OCTET STRING .dlink-common-mgmt.9.3.2.1.14 |
swACLIpRuleEnablePrioritySpecifies that the access rule will apply only to packets with this
priority value.rw Enumeration .dlink-common-mgmt.9.3.2.1.15 |
swACLIpRulePrioritySpecifies the priority will change in packets while the swACLIpRuleEnablePriority
is enabled.rw INTEGER .dlink-common-mgmt.9.3.2.1.16 |
swACLIpRuleReplacePrioritySpecifies whether the packets that match the access profile will change the
802.1p priority tag field by the switch or not.rw Enumeration .dlink-common-mgmt.9.3.2.1.17 |
swACLIpRuleEnableReplaceDscpSpecifies if the switch will change priorities of packets that match the access profile
DSCP field or not.
Replace DSCP and replace ToS precedence can not both be supported.rw Enumeration .dlink-common-mgmt.9.3.2.1.18 |
swACLIpRuleRepDscpSpecifies a value to be written to the DSCP field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write the value in the DSCP field of the packet.rw INTEGER .dlink-common-mgmt.9.3.2.1.19 |
swACLIpRulePermitThis object indicates if the result of the packet examination is to 'permit' or 'deny'.
The default is 'permit'.
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.rw Enumeration .dlink-common-mgmt.9.3.2.1.20 |
swACLIpRulePortSpecifies that the access rule will only apply to port(s).
This object and swACLIpRuleVID can not be set together.rw INTEGER .dlink-common-mgmt.9.3.2.1.21 |
swACLIpRuleRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.3.2.1.22 |
swACLIpRuleOwnerThe owner of the ACL rule entry. Only owners can modify this entry.ro Enumeration .dlink-common-mgmt.9.3.2.1.23 |
swACLIpRuleRxRateSpecifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device.rw INTEGER .dlink-common-mgmt.9.3.2.1.24 |
swACLIpRuleEnableReplaceTosPrecedenceSpecifies if the switch will change priorities of packets that match the access profile
ToS precedence field or not.
Replace DSCP and replace ToS precedence can not both be supported.rw Enumeration .dlink-common-mgmt.9.3.2.1.26 |
swACLIpRuleRepTosPrecedenceSpecifies a value to be written to the ToS precedence field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write the value in the ToS precedence field of the packet.rw INTEGER .dlink-common-mgmt.9.3.2.1.27 |
swACLIpRuleVIDSpecifies this rule only applies to the specified VLAN. There are two conditions:
1.only the portlist that belongs to this VLAN will be included;
2.packets must belong to this VLAN.
This object and swACLIpRulePort can not be set together.
When you set swACLIpRulePort, the value of this object will automatically change to 0.
And this object can not be set 0.rw INTEGER .dlink-common-mgmt.9.3.2.1.28 |
swACLIpv6RuleTableThis table contains the IPv6 ACL rule information. SEQUENCE OF SwACLIpv6RuleEntry .dlink-common-mgmt.9.3.4 |
swACLIpv6RuleEntryA list of information about ACL rules regarding the IPv6 part of each packet. SwACLIpv6RuleEntry .dlink-common-mgmt.9.3.4.1 |
swACLIpv6RuleProfileIDThe ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.3.4.1.1 |
swACLIpv6RuleAccessIDThe ID of the ACL rule entry relates to swACLIpv6RuleProfileID.
When row creation is set to 0, this indicates the access ID
will be assigned automatically for the ports in the swACLIpv6RulePort
to create rule entries for swACLIpv6RulePort accordingly.
Set to 1-65535 indicates creation of an access ID for the swACLIpv6RulePort.
The swACLIpv6RulePort must be set to one port only, otherwise
the row creation will fail.ro INTEGER .dlink-common-mgmt.9.3.4.1.2 |
swACLIpv6RuleClassSpecifies that the rule applies to the IPv6 class field.rw INTEGER .dlink-common-mgmt.9.3.4.1.3 |
swACLIpv6RuleFlowlabelSpecifies that the rule applies to the IPv6 flow label field.rw OCTET STRING .dlink-common-mgmt.9.3.4.1.4 |
swACLIpv6RuleSrcIpv6AddrSpecifies that the rule applies to the source IPv6 address.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.3.4.1.5 |
swACLIpv6RuleDstIpv6AddrSpecifies that the rule applies to the destination IPv6 address.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.3.4.1.6 |
swACLIpv6RuleEnablePrioritySpecifies that the access rule will apply only to packets with
priority value.rw Enumeration .dlink-common-mgmt.9.3.4.1.7 |
swACLIpv6RulePrioritySpecifies the priority will change in packets while the swACLIpv6RuleReplacePriority
is enabled.rw INTEGER .dlink-common-mgmt.9.3.4.1.8 |
swACLIpv6RuleReplacePrioritySpecifies if the switch will change priorities of packets that match the access profile
802.1p priority tag or not.rw Enumeration .dlink-common-mgmt.9.3.4.1.9 |
swACLIpv6RulePermitThis object indicates if the result of packet examination is to 'permit' or 'deny'.
The default is 'permit'.
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.
mirror - Specifies the packets that match the access profile are copied to
the mirror port.
Note: The ACL mirror function will work after mirror has been enabled
and the mirror port has been configured.rw Enumeration .dlink-common-mgmt.9.3.4.1.10 |
swACLIpv6RulePortSpecifies that the access rule will apply only to port(s).
This object and swACLIpv6RuleVID can not be set together.rw INTEGER .dlink-common-mgmt.9.3.4.1.11 |
swACLIpv6RuleRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.3.4.1.12 |
swACLIpv6RuleOwnerThe owner of the ACL rule entry. Only owners can modify this entry.ro Enumeration .dlink-common-mgmt.9.3.4.1.13 |
swACLIpv6RuleRxRateSpecifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device.rw INTEGER .dlink-common-mgmt.9.3.4.1.14 |
swACLIpv6RuleEnableReplaceDscpSpecifies if the switch will change priorities of packets that match the access profile
DSCP field or not.
Replace DSCP and replace ToS precedence can not both be supported.rw Enumeration .dlink-common-mgmt.9.3.4.1.15 |
swACLIpv6RuleRepDscpSpecifies a value to be written to the DSCP field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write the value in the DSCP field of the packet.rw INTEGER .dlink-common-mgmt.9.3.4.1.16 |
swACLIpv6RuleEnableReplaceTosPrecedenceSpecifies if the switch will change priorities of packets that match the access profile
ToS precedence field or not.
Replace DSCP and replace ToS precedence can not both be supported.rw Enumeration .dlink-common-mgmt.9.3.4.1.17 |
swACLIpv6RuleRepTosPrecedenceSpecifies a value to be written to the ToS precedence field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write the value in the ToS precedence field of the packet.rw INTEGER .dlink-common-mgmt.9.3.4.1.18 |
swACLIpv6RuleVIDSpecifies this rule only applies to the specified VLAN. There are two conditions:
1.only the portlist that belongs to this VLAN will be included;
2.packets must belong to this VLAN.
This object and swACLIpv6RulePort can not be set together.
When you set swACLIpv6RulePort, the value of this object will automatically change to 0.
And this object can not be set 0.rw INTEGER .dlink-common-mgmt.9.3.4.1.19 |
swACLIpv6RuleProtocolSpecifies the IPv6 protocol.
For some older chips, this object can not be set. When getting this object,
it always returns the type which has been configured in swACLIpv6Entry.
For some newer chips, this object can only set the type which
has been configured in swACLIpv6Entry. The default value is none (1).rw Enumeration .dlink-common-mgmt.9.3.4.1.20 |
swACLIpv6RuleSrcPortSpecifies that the rule applies to the range of the TCP/UDP source ports.rw INTEGER .dlink-common-mgmt.9.3.4.1.21 |
swACLIpv6RuleDstPortSpecifies the TCP/UDP destination ports range.rw INTEGER .dlink-common-mgmt.9.3.4.1.22 |
swIBPACLEtherRuleTableThis table contains IP-MAC-Binding Ethernet ACL Rule information.obsolete SEQUENCE OF SwIBPACLEtherRuleEntry .dlink-common-mgmt.9.3.5 |
swIBPACLEtherRuleEntryA list of information about the ACL rule of the layer 2 part of each packet.obsolete SwIBPACLEtherRuleEntry .dlink-common-mgmt.9.3.5.1 |
swIBPACLEtherRuleProfileIDThe ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.roobsolete INTEGER .dlink-common-mgmt.9.3.5.1.1 |
swIBPACLEtherRuleAccessIDThe ID of the ACL rule entry in relation to swACLEtherRuleProfileID.
When row creation is set to 0, this indicates automatically assigning an Access
for the ports in the swACLEtherRulePort to create rule entries for swACLEtherRulePort
accordingly.
Set to 1-65535 indicates to create the exact access ID for the swACLEtherRulePort
and the swACLEtherRulePort must set one port only, otherwise the row creation will
fail.roobsolete INTEGER .dlink-common-mgmt.9.3.5.1.2 |
swIBPACLEtherRuleEtherTypeSpecifies that the access rule will apply only to packets with this
802.1Q Ethernet type value in the packet header.roobsolete OCTET STRING .dlink-common-mgmt.9.3.5.1.3 |
swIBPACLEtherRulePermitThis object indicates if the result of the examination is 'permit' or 'deny'.
The default is 'permit' (1).
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.roobsolete Enumeration .dlink-common-mgmt.9.3.5.1.4 |
swIBPACLEtherRulePortSpecifies that the access rule will only apply to port(s).roobsolete PortList .dlink-common-mgmt.9.3.5.1.5 |
swIBPACLIpRuleTableobsolete SEQUENCE OF SwIBPACLIpRuleEntry .dlink-common-mgmt.9.3.6 |
swIBPACLIpRuleEntryobsolete SwIBPACLIpRuleEntry .dlink-common-mgmt.9.3.6.1 |
swIBPACLIpRuleProfileIDThe ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.roobsolete INTEGER .dlink-common-mgmt.9.3.6.1.1 |
swIBPACLIpRuleAccessIDThe ID of the ACL rule entry in relation to swACLIPRuleProfileID.
When the row creation is set to 0, this indicates assigning an access ID automatically
for the ports in the swACLIpRulePort to create rule entries for swACLIpRulePort
accordingly.
Set to 1-65535 indicates to create the exact access ID for the swACLIpRulePort
and the swACLIpRulePort must be set for one port only, otherwise the row creation will
fail.roobsolete INTEGER .dlink-common-mgmt.9.3.6.1.2 |
swIBPACLIpRuleSrcMacAddressSpecifies that the access rule will apply to only packets with
this source MAC address.roobsolete MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.3.6.1.3 |
swIBPACLIpRuleSrcIpaddressSpecifies an IP source address.roobsolete IpAddress .dlink-common-mgmt.9.3.6.1.4 |
swIBPACLIpRulePermitThis object indicates if the result of the examination is 'permit' or 'deny'; the default is 'permit' (1)
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.roobsolete Enumeration .dlink-common-mgmt.9.3.6.1.5 |
swIBPACLIpRulePortSpecifies that the access rule will only apply to port(s).roobsolete PortList .dlink-common-mgmt.9.3.6.1.6 |
swACLCounterTableThis table maintains counter information associated with a specific
rule in the ACL rule table. Please refer to the swACLEtherRuleTable,
swACLIpRuleTable, swACLIpv6RuleTable and swACLPktContRuleTable
for detailed ACL rule information. SEQUENCE OF SwACLCounterEntry .dlink-common-mgmt.9.3.8 |
swACLCounterEntryThe entry maintains counter information associated with the ACL
rule table. SwACLCounterEntry .dlink-common-mgmt.9.3.8.1 |
swACLCounterProfileIDThe ID of the ACL mask entry, which is unique in the mask
list.ro INTEGER .dlink-common-mgmt.9.3.8.1.1 |
swACLCounterAccessIDThe ID of the ACL rule entry as related to the
swACLCounterProfileID.ro INTEGER .dlink-common-mgmt.9.3.8.1.2 |
swACLCounterStateSpecifies whether the counter feature will be enabled/disabled.
1. This is optional. The default is disable.
2. If the rule is not bound with flow_meter, then all packets that match will be counted.
If the rule is bound with flow_meter, then the 'counter' will be overridden.rw Enumeration .dlink-common-mgmt.9.3.8.1.3 |
swACLCounterTotalCounterThe number of matched packets.ro Counter64 .dlink-common-mgmt.9.3.8.1.4 |
swACLCounterGreenCounterThe number of matched green packets.ro Counter64 .dlink-common-mgmt.9.3.8.1.5 |
swACLCounterYellowCounterThe number of matched yellow packets.ro Counter64 .dlink-common-mgmt.9.3.8.1.6 |
swACLCounterRedCounterThe number of matched red packets.ro Counter64 .dlink-common-mgmt.9.3.8.1.7 |
swACLPktContRuleVarOffsetTableThis table is used to configure ACL user defined packet content
rules for devices that support limited selection of packet content. SEQUENCE OF SwACLPktContRuleVarOffsetEntry .dlink-common-mgmt.9.3.9 |
swACLPktContRuleVarOffsetEntryA list which contains information on the ACL rules for user-defined parts of a packet. SwACLPktContRuleVarOffsetEntry .dlink-common-mgmt.9.3.9.1 |
swACLPktContRuleVarOffsetProfileIDThe ID of ACL mask entry, which is unique to the mask list.ro INTEGER .dlink-common-mgmt.9.3.9.1.1 |
swACLPktContRuleVarOffsetAccessIDThe ID of ACL rule entry related to swACLPktContRuleVarOffsetProfileID.ro INTEGER .dlink-common-mgmt.9.3.9.1.2 |
swACLPktContRuleVarOffsetOffsetIndex1Specifies the first offset will apply in getting the mask for this rule.rw INTEGER .dlink-common-mgmt.9.3.9.1.8 |
swACLPktContRuleVarOffsetMask1Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex1 and swACLPktContRuleVarOffsetData1.ro OCTET STRING .dlink-common-mgmt.9.3.9.1.9 |
swACLPktContRuleVarOffsetData1Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex1 and swACLPktContRuleVarOffsetMask1.rw OCTET STRING .dlink-common-mgmt.9.3.9.1.10 |
swACLPktContRuleVarOffsetOffsetIndex2Specifies the second offset will apply in getting the mask for this rule.rw INTEGER .dlink-common-mgmt.9.3.9.1.11 |
swACLPktContRuleVarOffsetMask2Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex2 and swACLPktContRuleVarOffsetData2.ro OCTET STRING .dlink-common-mgmt.9.3.9.1.12 |
swACLPktContRuleVarOffsetData2Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex2 and swACLPktContRuleVarOffsetMask2.rw OCTET STRING .dlink-common-mgmt.9.3.9.1.13 |
swACLPktContRuleVarOffsetOffsetIndex3Specifies the third offset will apply in getting the mask for this rule.rw INTEGER .dlink-common-mgmt.9.3.9.1.14 |
swACLPktContRuleVarOffsetMask3Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex3 and swACLPktContRuleVarOffsetData3.ro OCTET STRING .dlink-common-mgmt.9.3.9.1.15 |
swACLPktContRuleVarOffsetData3Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex3 and swACLPktContRuleVarOffsetMask3.rw OCTET STRING .dlink-common-mgmt.9.3.9.1.16 |
swACLPktContRuleVarOffsetOffsetIndex4Specifies the fourth offset will apply in getting the mask for this rule.rw INTEGER .dlink-common-mgmt.9.3.9.1.17 |
swACLPktContRuleVarOffsetMask4Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex4 and swACLPktContRuleVarOffsetData4.ro OCTET STRING .dlink-common-mgmt.9.3.9.1.18 |
swACLPktContRuleVarOffsetData4Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex4 and swACLPktContRuleVarOffsetMask4.rw OCTET STRING .dlink-common-mgmt.9.3.9.1.19 |
swACLPktContRuleVarOffsetOffsetIndex5Specifies the fifth offset will apply in getting the mask for this rule.rw INTEGER .dlink-common-mgmt.9.3.9.1.20 |
swACLPktContRuleVarOffsetMask5Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex5 and swACLPktContRuleVarOffsetData5.ro OCTET STRING .dlink-common-mgmt.9.3.9.1.21 |
swACLPktContRuleVarOffsetData5Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex5 and swACLPktContRuleVarOffsetMask5.rw OCTET STRING .dlink-common-mgmt.9.3.9.1.22 |
swACLPktContRuleVarOffsetEnablePrioritySpecifies that the access rule will apply only to packets with this
priority value.rw Enumeration .dlink-common-mgmt.9.3.9.1.23 |
swACLPktContRuleVarOffsetPrioritySpecifies the priority will change to the packets.rw INTEGER .dlink-common-mgmt.9.3.9.1.24 |
swACLPktContRuleVarOffsetReplacePrioritySpecifies if the switch will change priorities of packets that match the access profile
802.1p priority tag or not .rw Enumeration .dlink-common-mgmt.9.3.9.1.25 |
swACLPktContRuleVarOffsetRxRateSpecifies that the access rule will apply an RX rate. 0 denotes no limit.rw INTEGER .dlink-common-mgmt.9.3.9.1.28 |
swACLPktContRuleVarOffsetPermitThis object indicates the result of the packet examination is to permit or deny.
The default is permit.
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that do not match the access profile
are not permitted to be forwarded by the switch and will be filtered.rw Enumeration .dlink-common-mgmt.9.3.9.1.29 |
swACLPktContRuleVarOffsetPortSpecifies that the access rule will apply only to port(s).rw PortList .dlink-common-mgmt.9.3.9.1.30 |
swACLPktContRuleVarOffsetRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.3.9.1.33 |
swACLPktContRuleVarOffsetReplacePriorityWithThe value of this node will be used to replace the 802.1p priority tag of the packet that matched the access profile.rw INTEGER .dlink-common-mgmt.9.3.9.1.34 |
swCpuAclMaskMgmt OBJECT IDENTIFIER .dlink-common-mgmt.9.4 |
swCpuAclEthernetTableThis table contains software ACL mask Ethernet information.
Access profiles will be created on the switch to define which
part of each incoming frame's layer 2 header will be examined by
the switch. Masks entered will be combined with the values
the switch finds in the specified frame header fields. SEQUENCE OF SwCpuAclEthernetEntry .dlink-common-mgmt.9.4.1 |
swCpuAclEthernetEntryA list of information about Ethernet ACL masks. SwCpuAclEthernetEntry .dlink-common-mgmt.9.4.1.1 |
swCpuAclEthernetProfileIDThe ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.4.1.1.1 |
swCpuAclEthernetUsevlanSpecifies that the switch will examine the VLAN part of each packet header.rw Enumeration .dlink-common-mgmt.9.4.1.1.2 |
swCpuAclEthernetMacAddrMaskStateThis object indicates the status of the MAC address mask.
other (1) - Neither source MAC addresses nor destination MAC addresses are
masked.
dst-mac-addr (2) - Destination MAC addresses within received frames are
to be filtered when matched with the MAC address entry of the table.
src-mac-addr (3) - Source MAC address within received frames are to
be filtered when matched with the MAC address entry of the table.
dst-src-mac-addr (4) - Source or destination MAC addresses within received
frames are to be filtered when matched with the MAC address entry of this table.rw Enumeration .dlink-common-mgmt.9.4.1.1.3 |
swCpuAclEthernetSrcMacAddrMaskThis object specifies the MAC address mask for the source MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.4.1.1.4 |
swCpuAclEthernetDstMacAddrMaskThis object specifies the MAC address mask for the destination MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.4.1.1.5 |
swCpuAclEthernetUse8021pSpecifies if the switch will examine the 802.1p priority value in the frame's header
or not.rw Enumeration .dlink-common-mgmt.9.4.1.1.6 |
swCpuAclEthernetUseEthernetTypeSpecifies if the switch will examine the Ethernet type value in each frame's header
or not.rw Enumeration .dlink-common-mgmt.9.4.1.1.7 |
swCpuAclEthernetRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.4.1.1.8 |
swCpuAclIpTableThis table contains software ACL mask IP information.
Access profiles will be created on the switch to define which
parts of each incoming frame's IP layer 2 header will be examined
by the switch. Masks entered will be combined with the
values the switch finds in the specified frame header fields. SEQUENCE OF SwCpuAclIpEntry .dlink-common-mgmt.9.4.2 |
swCpuAclIpEntryA list of information about the software ACL of the IP Layer. SwCpuAclIpEntry .dlink-common-mgmt.9.4.2.1 |
swCpuAclIpProfileIDThe ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.4.2.1.1 |
swCpuAclIpUsevlanThis object indicates if the IP layer VLAN part is examined or not.rw Enumeration .dlink-common-mgmt.9.4.2.1.2 |
swCpuAclIpIpAddrMaskStateThis object indicates the status of IP address mask.
other (1) - Neither source IP addresses nor destination IP address are
masked.
dst-ip-addr (2) - Destination IP addresses within received frames are
to be filtered when matched with the IP address entry of this table.
src-ip-addr (3) - Source IP addresses within received frames are to
be filtered when matched with the IP address entry of this table.
dst-src-ip-addr (4) - Destination or source IP addresses within received
frames are to be filtered when matched with the IP address entry of the
table.rw Enumeration .dlink-common-mgmt.9.4.2.1.3 |
swCpuAclIpSrcIpAddrMaskThis object specifies the IP address mask for the source IP address.rw IpAddress .dlink-common-mgmt.9.4.2.1.4 |
swCpuAclIpDstIpAddrMaskThis object specifies the IP address mask for the destination IP address.rw IpAddress .dlink-common-mgmt.9.4.2.1.5 |
swCpuAclIpUseDSCPThis object indicates if the DSCP protocol in the packet header is to be examined or not.rw Enumeration .dlink-common-mgmt.9.4.2.1.6 |
swCpuAclIpUseProtoTypeThis object indicates which protocol will be examined.rw Enumeration .dlink-common-mgmt.9.4.2.1.7 |
swCpuAclIpIcmpOptionThis object indicates which fields are identified for ICMP.
none (1)- Both fields are null.
type (2)- Type field identified.
code (3)- Code field identified.
type-code (4)- Both ICMP fields identified.rw Enumeration .dlink-common-mgmt.9.4.2.1.8 |
swCpuAclIpIgmpOptionThis object indicates if the IGMP options field is identified or not.rw Enumeration .dlink-common-mgmt.9.4.2.1.9 |
swCpuAclIpTcpOptionThis object indicates the status of filtered addresses of TCP.
other (1) - Neither source port nor destination port are
masked.
dst-addr (2) - Packets will be filtered if this destination port is
identified in received frames.
src-addr (3) - Packets will be filtered if this source port is
identified in received frames.
dst-src-addr (4) - Packets will be filtered is this destination or
source port is identified in received frames.rw Enumeration .dlink-common-mgmt.9.4.2.1.10 |
swCpuAclIpUdpOptionThis object indicates the status of filtered addresses of UDP.
other (1) - Neither source port nor destination port are
masked.
dst-addr (2) - Packets will be filtered if this destination port
is identified in received frames.
src-addr (3) - Packets will be filtered if this source port
is identified in received frames.
dst-src-addr (4) - Packets will be filtered if this destination
or source port is identified in received frames.rw Enumeration .dlink-common-mgmt.9.4.2.1.11 |
swCpuAclIpTCPorUDPSrcPortMaskSpecifies a TCP port mask for the source port if swCpuAclIpUseProtoType is TCP.
Specifies a UDP port mask for the source port if swCpuAclIpUseProtoType is UDP.rw OCTET STRING .dlink-common-mgmt.9.4.2.1.12 |
swCpuAclIpTCPorUDPDstPortMaskSpecifies a TCP port mask for the destination port if swCpuAclIpUseProtoType is TCP.
Specifies a UDP port mask for the destination port if swCpuAclIpUseProtoType is UDP.rw OCTET STRING .dlink-common-mgmt.9.4.2.1.13 |
swCpuAclIpTCPFlagBitSpecifies a TCP connection flag mask.rw Enumeration .dlink-common-mgmt.9.4.2.1.14 |
swCpuAclIpTCPFlagBitMaskA value which indicates the set of TCP flags that this
entity may potentially offer. The value is a sum of flag bits.
This sum initially takes the value zero. Then, for each flag, L
is added in the range 1 through 6, for which this node performs
transactions where 2^(L - 1) is added to the sum.
Note that values should be calculated accordingly:
Flag functionality
6 urg bit
5 ack bit
4 psh bit
3 rst bit
2 syn bit
1 fin bit
For example, if you want to enable urg bit and ack bit, you
should set value 48{2^(5-1) + 2^(6-1)}.rw INTEGER .dlink-common-mgmt.9.4.2.1.15 |
swCpuAclIpProtoIDOptionSpecifies if the switch will examine each frame's Protocol ID field or not.rw Enumeration .dlink-common-mgmt.9.4.2.1.16 |
swCpuAclIpProtoIDrw INTEGER .dlink-common-mgmt.9.4.2.1.17 |
swCpuAclIpProtoIDMaskSpecifies that the rule applies to the IP protocol ID and the mask options
behind the IP header.rw OCTET STRING .dlink-common-mgmt.9.4.2.1.18 |
swCpuAclIpRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.4.2.1.19 |
swCpuAclPktContMaskTableThis table contains user-defined software ACL information.
Access profiles will be created on the switch to define which
part of each incoming frame's user-defined part of the packet header
will be examined by the switch. Masks entered will be combined
with the values the switch finds in the specified frame header fields. SEQUENCE OF SwCpuAclPktContMaskEntry .dlink-common-mgmt.9.4.3 |
swCpuAclPktContMaskEntryA list of information about user-defined software ACLs. SwCpuAclPktContMaskEntry .dlink-common-mgmt.9.4.3.1 |
swCpuAclPktContMaskProfileIDThe ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.4.3.1.1 |
swCpuAclPktContMaskOffset0to15Specifies that the rule applies to the packet content (Offset0to15) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.4.3.1.2 |
swCpuAclPktContMaskOffset16to31Specifies that the rule applies to the packet content (Offset16to31) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.4.3.1.3 |
swCpuAclPktContMaskOffset32to47Specifies that the rule applies to the packet content (Offset32to47) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.4.3.1.4 |
swCpuAclPktContMaskOffset48to63Specifies that the rule applies to the packet content (Offset48to63) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.4.3.1.5 |
swCpuAclPktContMaskOffset64to79Specifies that the rule applies to the packet content (Offset64to79) and
the mask options.rw OCTET STRING .dlink-common-mgmt.9.4.3.1.6 |
swCpuAclPktContMaskRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.4.3.1.7 |
swCpuAclIpv6MaskTableThis table contains IPv6 software ACL mask information.
An access profile will be created on the switch to define which
part of each incoming frame's IPv6 part of the packet header
will be examined by switch. Masks entered will be combined
with the values the switch finds in the specified frame header fields. SEQUENCE OF SwCpuAclIpv6MaskEntry .dlink-common-mgmt.9.4.4 |
swCpuAclIpv6MaskEntryA list of information about user-defined software ACLs. SwCpuAclIpv6MaskEntry .dlink-common-mgmt.9.4.4.1 |
swCpuAclIpv6MaskProfileIDThe ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.4.4.1.1 |
swCpuAclIpv6MaskClassSpecifies that the rule applies to the IPv6 class field and the mask options.rw Enumeration .dlink-common-mgmt.9.4.4.1.2 |
swCpuAclIpv6MaskFlowlabelSpecifies that the rule applies to the IPv6 flowlabel field and the mask options.rw Enumeration .dlink-common-mgmt.9.4.4.1.3 |
swCpuAclIpv6IpAddrMaskStateThis object indicates the status of IPv6 address mask.
other (1) - Neither source IPv6 address nor destination IPv6 address are
masked.
dst-ipv6-addr (2) - Packets will be filtered if this destination IPv6 address
is identified as a match in received frames.
src-ipv6-addr (3) - Packets will be filtered if this source IPv6 address
is identified as a match in received frames.
dst-src-ipv6-addr (4) - Packets will be filtered if this destination or source
IPv6 address is identified as a match in received frames.rw Enumeration .dlink-common-mgmt.9.4.4.1.4 |
swCpuAclIpv6MaskSrcIpv6MaskSpecifies that the rule applies to the source IPv6 address and the mask options.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.4.4.1.5 |
swCpuAclIpv6MaskDstIpv6MaskSpecifies that the rule applies to the destination IPv6 address and the mask options.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.4.4.1.6 |
swCpuAclIpv6MaskRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.4.4.1.7 |
swCpuACLMaskDelAllStateUsed to delete all software ACL masks.rw Enumeration .dlink-common-mgmt.9.4.5 |
swCpuAclRuleMgmt OBJECT IDENTIFIER .dlink-common-mgmt.9.5 |
swCpuAclEtherRuleTableThis table contains Ethernet software ACL rule information. SEQUENCE OF SwCpuAclEtherRuleEntry .dlink-common-mgmt.9.5.1 |
swCpuAclEtherRuleEntryA list of information about the software ACL rule of the layer 2 part of each packet. SwCpuAclEtherRuleEntry .dlink-common-mgmt.9.5.1.1 |
swCpuAclEtherRuleProfileIDThe ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.5.1.1.1 |
swCpuAclEtherRuleAccessIDThe ID of the software ACL rule entry as it relates to swCpuAclEtherRuleProfileID.ro INTEGER .dlink-common-mgmt.9.5.1.1.2 |
swCpuAclEtherRuleVlanSpecifies that the access rule will only apply to this VLAN.rw SnmpAdminString .dlink-common-mgmt.9.5.1.1.3 |
swCpuAclEtherRuleSrcMacAddressSpecifies that the access rule will only apply to the packets with
this source MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.5.1.1.4 |
swCpuAclEtherRuleDstMacAddressSpecifies that the access rule will only apply to the packets with this destination MAC address.rw MacAddress (SNMPv2-TC) .dlink-common-mgmt.9.5.1.1.5 |
swCpuAclEtherRule8021PSpecifies that the access rule will only apply to packets with
this 802.1p priority value. A value of -1 indicates that this node is not actively used.rw INTEGER(-1..7) .dlink-common-mgmt.9.5.1.1.6 |
swCpuAclEtherRuleEtherTypeSpecifies that the access rule will only apply to packets with this
802.1Q Ethernet type value in the packet header.rw OCTET STRING .dlink-common-mgmt.9.5.1.1.7 |
swCpuAclEtherRulePermitThis object indicates if the result of the packet examination is to 'permit' or 'deny'.
The default is 'permit'.
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.rw Enumeration .dlink-common-mgmt.9.5.1.1.8 |
swCpuAclEtherRuleRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.5.1.1.9 |
swCpuAclEtherRulePortSpecifies that the access rule will only apply to port(s).rw PortList .dlink-common-mgmt.9.5.1.1.10 |
swCpuAclIpRuleTableThis table contains IPv4 software ACL rule information. SEQUENCE OF SwCpuAclIpRuleEntry .dlink-common-mgmt.9.5.2 |
swCpuAclIpRuleEntryA list of information about this software ACL rule. SwCpuAclIpRuleEntry .dlink-common-mgmt.9.5.2.1 |
swCpuAclIpRuleProfileIDThe ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.5.2.1.1 |
swCpuAclIpRuleAccessIDThe ID of the software ACL for the IPv4 rule entry.ro INTEGER .dlink-common-mgmt.9.5.2.1.2 |
swCpuAclIpRuleVlanSpecifies that the access rule will apply only to this VLAN.rw SnmpAdminString .dlink-common-mgmt.9.5.2.1.3 |
swCpuAclIpRuleSrcIpaddressSpecifies an IP source address.rw IpAddress .dlink-common-mgmt.9.5.2.1.4 |
swCpuAclIpRuleDstIpaddressSpecifies an IP destination address.rw IpAddress .dlink-common-mgmt.9.5.2.1.5 |
swCpuAclIpRuleDscpSpecifies the value of DSCP, the value can be configured from 0 to 63.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..63) .dlink-common-mgmt.9.5.2.1.6 |
swCpuAclIpRuleProtocolSpecifies the IP protocol which has been configured in swCpuAclIpEntry.ro Enumeration .dlink-common-mgmt.9.5.2.1.7 |
swCpuAclIpRuleTypeSpecifies the rule applies to the value of ICMP type traffic.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..255) .dlink-common-mgmt.9.5.2.1.8 |
swCpuAclIpRuleCodeSpecifies the rule applies to the value of ICMP code traffic.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..255) .dlink-common-mgmt.9.5.2.1.9 |
swCpuAclIpRuleSrcPortSpecifies the rule applies to the range of TCP/UDP source ports.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..65535) .dlink-common-mgmt.9.5.2.1.10 |
swCpuAclIpRuleDstPortSpecifies the range of TCP/UDP destination ports.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..65535) .dlink-common-mgmt.9.5.2.1.11 |
swCpuAclIpRuleFlagBitsA value which indicates the set of TCP flags that this
entity may potentially offer. The value is a sum of flag bits.
This sum initially takes the value zero. Then, for each flag, L
is added in the range 1 through 6, for which this node performs
transactions where, 2^(L - 1) is added to the sum.
Note that values should be calculated accordingly:
Flag functionality
6 urg bit
5 ack bit
4 psh bit
3 rst bit
2 syn bit
1 fin bit
For example, it you want to enable urg bit and ack bit, you
should set the value 48{2^(5-1) + 2^(6-1)}.rw INTEGER .dlink-common-mgmt.9.5.2.1.12 |
swCpuAclIpRuleProtoIDSpecifies the rule applies to the value of IP protocol ID traffic.
A value of -1 indicates that this node is not actively used.rw INTEGER(-1..255) .dlink-common-mgmt.9.5.2.1.13 |
swCpuAclIpRuleUserMaskSpecifies that the rule applies to the IP protocol ID and the range of
options behind the IP header.rw OCTET STRING .dlink-common-mgmt.9.5.2.1.14 |
swCpuAclIpRulePermitThis object indicates if the result of the packet examination is to 'permit' or 'deny'.
The default is 'permit'.
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.rw Enumeration .dlink-common-mgmt.9.5.2.1.15 |
swCpuAclIpRuleRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.5.2.1.16 |
swCpuAclIpRulePortSpecifies that the access rule will only apply to port(s).rw PortList .dlink-common-mgmt.9.5.2.1.17 |
swCpuAclPktContRuleTableThis table contains user-defined software ACL rule information. SEQUENCE OF SwCpuAclPktContRuleEntry .dlink-common-mgmt.9.5.3 |
swCpuAclPktContRuleEntryA list of information about the software ACL rule of the user-defined part of each packet. SwCpuAclPktContRuleEntry .dlink-common-mgmt.9.5.3.1 |
swCpuAclPktContRuleProfileIDThe ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.5.3.1.1 |
swCpuAclPktContRuleAccessIDThe ID of the software ACL rule entry related to swCpuAclPktContRuleProfileID.ro INTEGER .dlink-common-mgmt.9.5.3.1.2 |
swCpuAclPktContRuleOffset0to15Specifies that the rule applies to the user-defined packet.rw OCTET STRING .dlink-common-mgmt.9.5.3.1.3 |
swCpuAclPktContRuleOffset16to31Specifies that the rule applies to the user-defined packet.rw OCTET STRING .dlink-common-mgmt.9.5.3.1.4 |
swCpuAclPktContRuleOffset32to47Specifies that the rule applies to the user-defined packet.rw OCTET STRING .dlink-common-mgmt.9.5.3.1.5 |
swCpuAclPktContRuleOffset48to63Specifies that the rule applies to the user-defined packet.rw OCTET STRING .dlink-common-mgmt.9.5.3.1.6 |
swCpuAclPktContRuleOffset64to79Specifies that the rule applies to the user-defined packet.rw OCTET STRING .dlink-common-mgmt.9.5.3.1.7 |
swCpuAclPktContRulePermitThis object indicates if the result of the packet examination is to 'permit' or 'deny'.
The default is 'permit'.
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.rw Enumeration .dlink-common-mgmt.9.5.3.1.8 |
swCpuAclPktContRuleRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.5.3.1.9 |
swCpuAclPktContRulePortSpecifies that the access rule will only apply to port(s).rw PortList .dlink-common-mgmt.9.5.3.1.10 |
swCpuAclIpv6RuleTableThis table contains user-defined ACL rule information. SEQUENCE OF SwCpuAclIpv6RuleEntry .dlink-common-mgmt.9.5.4 |
swCpuAclIpv6RuleEntryA list of information about the ACL rule of the user-defined part of each packet. SwCpuAclIpv6RuleEntry .dlink-common-mgmt.9.5.4.1 |
swCpuAclIpv6RuleProfileIDThe ID of the ACL mask entry. This is unique in the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.5.4.1.1 |
swCpuAclIpv6RuleAccessIDThe ID of the ACL rule entry in relation to swCpuAclIpv6RuleProfileID.ro INTEGER .dlink-common-mgmt.9.5.4.1.2 |
swCpuAclIpv6RuleClassSpecifies that the rule applies to the IPv6 class field.rw INTEGER .dlink-common-mgmt.9.5.4.1.3 |
swCpuAclIpv6RuleFlowlabelSpecifies that the rule applies to the IPv6 flowlabel field.rw OCTET STRING .dlink-common-mgmt.9.5.4.1.4 |
swCpuAclIpv6RuleSrcIpv6AddrSpecifies that the rule applies to the source IPv6 address.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.5.4.1.5 |
swCpuAclIpv6RuleDstIpv6AddrSpecifies that the rule applies to the destination IPv6 address.
This should be a 16 byte octet string.rw Ipv6Address .dlink-common-mgmt.9.5.4.1.6 |
swCpuAclIpv6RulePermitThis object indicates if the result of the examination is to 'permit' or 'deny'.
The default is 'permit' (1).
permit - Specifies that packets that match the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets that match the access profile
are not permitted to be forwarded by the switch and will be filtered.rw Enumeration .dlink-common-mgmt.9.5.4.1.7 |
swCpuAclIpv6RuleRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.5.4.1.8 |
swCpuAclIpv6RulePortSpecifies that the access rule will apply only to port(s).rw PortList .dlink-common-mgmt.9.5.4.1.9 |
swAclMeteringMgmt OBJECT IDENTIFIER .dlink-common-mgmt.9.6 |
swAclMeterTableThis table is used to configure the flow-based metering function.
The access rule must first be created before the parameters of this
function can be applied. Users may set the preferred bandwidth for
this rule, in Kbps; once the bandwidth has been exceeded, overflow
packets will be either dropped or set for a drop precedence,
depending on user configuration. SEQUENCE OF SwAclMeterEntry .dlink-common-mgmt.9.6.1 |
swAclMeterEntryThis entry displays parameters and configurations set for the flow
metering function. SwAclMeterEntry .dlink-common-mgmt.9.6.1.1 |
swAclMeterProfileIDThe ID of the ACL mask entry is unique in the mask list. The maximum value of this object depends on the device.ro INTEGER .dlink-common-mgmt.9.6.1.1.1 |
swAclMeterAccessIDThe ID of the ACL rule entry as related to the swAclMeterProfileID.ro INTEGER .dlink-common-mgmt.9.6.1.1.2 |
swAclMeterRateSpecifies the committed bandwidth in Kbps for the flow.
NOTE:
1. Specifying 0 will disable this flow meter setting.
2. Users must set the swAclMeterActionForRateExceed object to activate this entry.rw INTEGER .dlink-common-mgmt.9.6.1.1.3 |
swAclMeterActionForRateExceedSpecifies the action to take for those packets exceeding the committed rate.
NOTE:
Users must also set the swAclMeterRate to activate this entry.rw Enumeration .dlink-common-mgmt.9.6.1.1.4 |
swAclMeterRemarkDscpMark the packet with a specified DSCP.
It can be set when swAclMeterActionForRateExceed sets remark-dscp (3).rw INTEGER .dlink-common-mgmt.9.6.1.1.5 |
swAclMeterBurstSizeThis specifies the burst size for the single rate two color mode.
The unit is Kbytes. That is to say, 1 means 1kbytes.
The set value range is 0..n, the value n is determined by project,
the value of 0 means to delete this flow_meter setting.rw INTEGER .dlink-common-mgmt.9.6.1.1.6 |
swAclMeterModetr-tcm: two rate three color mode;
sr-tcm: single rate three color mode.rw Enumeration .dlink-common-mgmt.9.6.1.1.7 |
swAclMeterTrtcmCirSpecifies the 'committed information rate' of 'two rate three color mode'.
The unit is Kbps.rw INTEGER .dlink-common-mgmt.9.6.1.1.8 |
swAclMeterTrtcmCbsSpecifies the 'committed burst size' of 'two rate three color mode'.
1. The unit is Kbytes. That is to say, 1 means 1Kbytes.
2. This parameter is an optional parameter. The default value is 4*1024.
3. The max set value is 16*1024.rw INTEGER .dlink-common-mgmt.9.6.1.1.9 |
swAclMeterTrtcmPirSpecifies the 'Peak Information Rate' of 'two rate three color mode'.
The unit is Kbps.rw INTEGER .dlink-common-mgmt.9.6.1.1.10 |
swAclMeterTrtcmPbsSpecifies the 'peak burst size' of 'two rate three color mode'.
1. The unit is Kbytes. That is to say, 1 means 1kbytes.
2. This parameter is an optional parameter. The default value is 4*1024.
3. The max set value is 16*1024.rw INTEGER .dlink-common-mgmt.9.6.1.1.11 |
swAclMeterTrtcmColorModeSpecifies the meter mode.
The default is color-blind mode. The final color of the packet is determined
by the initial color of the packet and the metering result.rw Enumeration .dlink-common-mgmt.9.6.1.1.12 |
swAclMeterTrtcmConformStateSpecifies the action state when packet is in 'green color'.
permit: permit the packet.
replace-dscp: change the DSCP value of packet.rw Enumeration .dlink-common-mgmt.9.6.1.1.13 |
swAclMeterTrtcmConformReplaceDscpSpecifies the DSCP value of the packet when the packet is in 'green color'.rw INTEGER .dlink-common-mgmt.9.6.1.1.14 |
swAclMeterTrtcmConformCounterStateSpecifies the counter state when the packet is in 'green color'.
1. This is optional. The default is 'disable'.
2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
3. counter will be cleared when the function is disabled.rw Enumeration .dlink-common-mgmt.9.6.1.1.15 |
swAclMeterTrtcmExceedStateSpecifies the action state when packet is in 'yellow color'.
permit: permit the packet.
replace-dscp: change the DSCP value of the packet.
drop: drop the packet.rw Enumeration .dlink-common-mgmt.9.6.1.1.16 |
swAclMeterTrtcmExceedReplaceDscpSpecifies the DSCP value of packet when packet is in 'yellow color'.rw INTEGER .dlink-common-mgmt.9.6.1.1.17 |
swAclMeterTrtcmExceedCounterStateSpecifies the counter state when packet is in 'yellow color'.
1. This is optional. The default is 'disable'.
2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
3. counter will be cleared when the function is disabled.rw Enumeration .dlink-common-mgmt.9.6.1.1.18 |
swAclMeterTrtcmViolateStateSpecifies the action state when packet is in 'red color'.
permit: permit the packet.
replace-dscp: change the DSCP value of packet.
drop: drop the packet.rw Enumeration .dlink-common-mgmt.9.6.1.1.19 |
swAclMeterTrtcmViolateReplaceDscpSpecifies the DSCP value of the packet when packet is in 'red color'.rw INTEGER .dlink-common-mgmt.9.6.1.1.20 |
swAclMeterTrtcmViolateCounterStateSpecifies the counter state when packet is in 'red color'.
1. This is optional. The default is 'disable'.
2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
3. counter will be cleared when the function is disabled.rw Enumeration .dlink-common-mgmt.9.6.1.1.21 |
swAclMeterSrtcmCirSpecifies the 'committed information rate' of 'single rate three color mode'.
The unit is Kbps.rw INTEGER .dlink-common-mgmt.9.6.1.1.22 |
swAclMeterSrtcmCbsSpecifies the 'committed burst size' of 'single rate three color mode'.
1. The unit is Kbytes. That is to say, 1 means 1Kbytes.
2. The max set value is 16*1024.rw INTEGER .dlink-common-mgmt.9.6.1.1.23 |
swAclMeterSrtcmEbsSpecifies the 'Excess burst size' of 'single rate three color mode'.
1. The unit is Kbytes. That is to say, 1 means 1kbytes.
2. The max set value is 16*1024.rw INTEGER .dlink-common-mgmt.9.6.1.1.24 |
swAclMeterSrtcmColorModeSpecifies the meter mode.
The default is color-blind mode. The final color of packet is determined
by the initial color of the packet and the metering result.rw Enumeration .dlink-common-mgmt.9.6.1.1.25 |
swAclMeterSrtcmConformStateSpecifies the action state when the packet is in 'green color'.
permit: permit the packet.
replace-dscp: change the DSCP value of packet.rw Enumeration .dlink-common-mgmt.9.6.1.1.26 |
swAclMeterSrtcmConformReplaceDscpSpecifies the DSCP value of the packet when packet is in 'green color'.rw INTEGER .dlink-common-mgmt.9.6.1.1.27 |
swAclMeterSrtcmConformCounterStateSpecifies the counter state when the packet is in 'green color'.
1. This is optional. The default is 'disable'.
2. The resource may be limited such that counter can not be turned on. The limitation is project dependent.
3. counter will be cleared when the function is disabled.rw Enumeration .dlink-common-mgmt.9.6.1.1.28 |
swAclMeterSrtcmExceedStateSpecifies the action state when the packet is in 'yellow color'.
permit: permit the packet.
replace-dscp: change the DSCP value of packet.
drop: drop the packet.rw Enumeration .dlink-common-mgmt.9.6.1.1.29 |
swAclMeterSrtcmExceedReplaceDscpSpecifies the DSCP value of the packet when packet is in 'yellow color'.rw INTEGER .dlink-common-mgmt.9.6.1.1.30 |
swAclMeterSrtcmExceedCounterStateSpecifies the counter state when the packet is in 'yellow color'.
1. This is optional. The default is 'disable'.
2. The resource may be limited such that counter can not be turned on. The limitation is project dependent.
3. counter will be cleared when the function is disabled.rw Enumeration .dlink-common-mgmt.9.6.1.1.31 |
swAclMeterSrtcmViolateStateSpecifies the action state when the packet is in 'red color'.
permit: permit the packet.
replace-dscp: change the DSCP value of packet.
drop: drop the packet.rw Enumeration .dlink-common-mgmt.9.6.1.1.32 |
swAclMeterSrtcmViolateReplaceDscpSpecifies the DSCP value of the packet when packet is in 'red color'.rw INTEGER .dlink-common-mgmt.9.6.1.1.33 |
swAclMeterSrtcmViolateCounterStateSpecifies the counter state when the packet is in 'red color'.
1. This is optional. The default is 'disable'.
2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
3. counter will be cleared when the function is disabled.rw Enumeration .dlink-common-mgmt.9.6.1.1.34 |
swAclMeterRowStatusThis object indicates the status of this entry.rw RowStatus (SNMPv2-TC) .dlink-common-mgmt.9.6.1.1.35 |
swAclMeteringNumOfEntryInUseUsed to display total entries of the flow metering.ro INTEGER .dlink-common-mgmt.9.6.2 |