DLINKSW-ACL-MIB
AI MIB Summary
The DLINKSW-ACL-MIB module enables the monitoring and management of Access Control List (ACL) configurations and rule states on D-Link managed Layer 2 and Layer 3 switches via SNMP. It exposes specific metrics including ACL rule identifiers, hit counters, packet/byte statistics, and the operational status of defined filtering policies.
The Structure of Access Control List Information for the proprietary enterprise.
Main OID:
dlinkSwAclMIB.1.3.6.1.4.1.171.14.28
246
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
246 total| Object Name |
|---|
dlinkSwAclMIBThe Structure of Access Control List Information for the
proprietary enterprise. MODULE-IDENTITY .1.3.6.1.4.1.171.14.28 |
dAclMIBNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.0 |
dAclMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1 |
dAclGeneral OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1.1 |
dAclReSeqTableA table consists of a list of information about how re-sequencing
the rules in access lists. SEQUENCE OF DAclReSeqEntry .1.3.6.1.4.1.171.14.28.1.1.1 |
dAclReSeqEntryAn entry appears in this table for controlling the re-sequence of
an access-list. DAclReSeqEntry .1.3.6.1.4.1.171.14.28.1.1.1.1 |
dAclReSeqAccessListNameIndicates the name of an access list. DisplayString .1.3.6.1.4.1.171.14.28.1.1.1.1.1 |
dAclReSeqStartingNumberIndicates the initial value of sequence number of the corresponding
access list.rw Integer32 ( 1..65535 ) .1.3.6.1.4.1.171.14.28.1.1.1.1.2 |
dAclReSeqIncrementIndicates the number that the sequence numbers step.
If the increment value is 5 and the beginning sequence number is 20,
the subsequent sequence numbers are 25, 30, 35, 40, and so on.rw Integer32 ( 1..32 ) .1.3.6.1.4.1.171.14.28.1.1.1.1.3 |
dAclMac OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1.2 |
dAclMacAccessListNumberIndicates the number of entries present in the MAC access list
table.ro Unsigned32 .1.3.6.1.4.1.171.14.28.1.2.1 |
dAclMacAccessListTableThe table contains information about MAC access list. SEQUENCE OF DAclMacAccessListEntry .1.3.6.1.4.1.171.14.28.1.2.2 |
dAclMacAccessListEntryAn entry defined in dAclMacAccessListTable. An entry is
created/removed when an MAC access list is created/deleted. DAclMacAccessListEntry .1.3.6.1.4.1.171.14.28.1.2.2.1 |
dAclMacAccessListNameThe name of the MAC access list. DisplayString .1.3.6.1.4.1.171.14.28.1.2.2.1.1 |
dAclMacAccessListRowStatusThis object allows the dynamic creation and deletion of a MAC
access list.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.2.1.2 |
dAclMacAccessListIdThe number of the MAC access list.
If user specify value zero(0) for this node, agent will assign a number
for it. After the table created, this node should not be changed.rw Integer32 .1.3.6.1.4.1.171.14.28.1.2.2.1.3 |
dAclMacAccessListCounterEnabledThis object indicates the counter state of the access list is
enabled('true') or disabled('false'). And the counter state just
for the all interface that applied the access list in
dAclMacAccessGroupTable.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.2.1.4 |
dAclMacAccessListClearStatActionThis object is used to clear statistics of the access list when set
to 'clear'. No action is taken if this object is set to 'noOp'.
The 'clear' action just for the all interface that applied the access
list in dAclMacAccessGroupTable.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.28.1.2.2.1.5 |
dAclMacAccessListRemarkThe description of the MAC access list.rw DisplayString .1.3.6.1.4.1.171.14.28.1.2.2.1.6 |
dAclMacAccessRuleTableA table consists of a list of rules for the MAC access list. SEQUENCE OF DAclMacAccessRuleEntry .1.3.6.1.4.1.171.14.28.1.2.3 |
dAclMacAccessRuleEntryAn entry is defined dAclMacAccessRuleTable.
The first instance identifier index value identifies the
dAclMacAccessListEntry that a MAC access rule (dAclMacAccessRuleEntry)
belongs to. An entry is removed from this table when its
corresponding dAclMacAccessListEntry is deleted. DAclMacAccessRuleEntry .1.3.6.1.4.1.171.14.28.1.2.3.1 |
dAclMacAccessRuleSnSpecifies the sequence number of this rule.
The lower the number is, the higher the priority of the rule.
The special value of 0 means the sequence number will be automatically
determined by the agent. Integer32 .1.3.6.1.4.1.171.14.28.1.2.3.1.1 |
dAclMacAccessRuleRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.3.1.2 |
dAclMacAccessRuleActionThis object indicates the result of the packet examination is to
permit or deny or prevent to CPU.rw DlinkAclRuleType .1.3.6.1.4.1.171.14.28.1.2.3.1.3 |
dAclMacAccessRuleSrcMacAddrSpecifies a source MAC address.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.3.1.4 |
dAclMacAccessRuleSrcMacWildcardThis object is a wildcard bitmap to specify a group of source
MAC addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
source MAC address is specified. When the value of all '00'Hs indicates
host source MAC address is specified.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.3.1.5 |
dAclMacAccessRuleDstMacAddrSpecifies a destination MAC address.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.3.1.6 |
dAclMacAccessRuleDstMacWildcardThis object is a wildcard bitmap to specify a group of destination
MAC addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
destination MAC address is specified. When the value of all '00'Hs
indicates host destination MAC address is specified.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.3.1.7 |
dAclMacAccessRulePacketTypeSpecifies the Ethernet frame type. The value of none (1) means the
frame type is not specified.rw Enumeration .1.3.6.1.4.1.171.14.28.1.2.3.1.8 |
dAclMacAccessRuleEthernetTypeSpecifies the Ethernet type for an Ethernet II or SNAP packet.
The special value of -1 means the Ethernet type value is not specified.
It is only meaningful when the dAclMacAccessRulePacketType is
'ethernet'.rw Integer32 (-1 | 0..65535) .1.3.6.1.4.1.171.14.28.1.2.3.1.9 |
dAclMacAccessRuleLlcDSAPSpecifies the DSAP value for the LLC packet. If the value is -1, it
means the DSAP number is not specified.
It is only meaningful when the dAclMacAccessRulePacketType is 'llc'.rwobsolete Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.2.3.1.10 |
dAclMacAccessRuleLlcSSAPSpecifies the SSAP value for the LLC packet. If the value is -1, it
means the SSAP number is not specified.
It is only meaningful when the dAclMacAccessRulePacketType is 'llc'.rwobsolete Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.2.3.1.11 |
dAclMacAccessRuleLlcCntlSpecifies the control field for the LLC packet. If the value is -1, it
means the SSAP number is not specified.
It is only meaningful when the dAclMacAccessRulePacketType is 'llc'.rwobsolete Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.2.3.1.12 |
dAclMacAccessRuleDot1pSpecifies the priority value. The value of -1 means the priority
is not specified.rw Integer32 (-1 | 0..7) .1.3.6.1.4.1.171.14.28.1.2.3.1.13 |
dAclMacAccessRuleInnerDot1pSpecifies the inner priority value. The value of -1 means the
inner priority is not specified.rw Integer32 (-1 | 0..7) .1.3.6.1.4.1.171.14.28.1.2.3.1.14 |
dAclMacAccessRuleVlanIDSpecifies the VLAN ID.
A value of zero indicates the VLAN ID is not specified.
This node and dAclMacAccessRuleVlanRangeMin/dAclMacAccessRuleVlanRangeMax
cannot be specified at same time in a row.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.2.3.1.15 |
dAclMacAccessRuleInnerVlanIDSpecifies the inner VLAN ID. A value of zero indicates
the inner VLAN ID is not specified.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.2.3.1.16 |
dAclMacAccessRuleTimeNameSpecifies the name of time-period profile associated with
the access-list delineating its activation period.
The value 'NULL' means that this rule is not bound with any Time
mechanism.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.3.1.17 |
dAclMacAccessRuleEthernetTypeMaskSpecifies the mask for ethernet type defined by dAclMacAccessRuleEthernetType.
Valid values are from 0x0000 to 0xFFFF.
Default value is 0xFFFF.
This node is valid only for the dAclMacAccessRuleEthernetType specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.2.3.1.18 |
dAclMacAccessRuleDot1pMaskSpecifies the mask for priority defined by dAclMacAccessRuleDot1p.
Valid values are from 0x00 to 0x07.
Default value is 0x07.
This node is valid only for the dAclMacAccessRuleDot1p specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.2.3.1.19 |
dAclMacAccessRuleInnerDot1pMaskSpecifies the mask for inner priority defined by dAclMacAccessRuleInnerDot1p.
Valid values are from 0x00 to 0x07.
Default value is 0x07.
This node is valid only for the dAclMacAccessRuleInnerDot1p specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.2.3.1.20 |
dAclMacAccessRuleVlanIDMaskSpecifies the mask for VLAN ID defined by dAclMacAccessRuleVlanID.
Valid values are from 0x0000 to 0x0FFF.
This node and dAclMacAccessRuleVlanRangeMin/dAclMacAccessRuleVlanRangeMax
cannot be specified at same time in a row.
Default value is 0x0FFF.
This node is valid only for the dAclMacAccessRuleVlanID specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.2.3.1.21 |
dAclMacAccessRuleInnerVlanIDMaskSpecifies the mask for inner VLAN ID defined by dAclMacAccessRuleInnerVlanID.
Valid values are from 0x0000 to 0x0FFF.
Default value is 0x0FFF.
This node is valid only for the dAclMacAccessRuleInnerVlanID specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.2.3.1.22 |
dAclMacAccessRuleVlanRangeMinSpecifies the minimum outer VLAN ID of a VLAN range. A value of zero
indicates the VLAN range is not specified.
This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot
be specified at same time in a row.
This node is valid only for the dAclMacAccessRuleVlanRangeMax specified.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.2.3.1.23 |
dAclMacAccessRuleVlanRangeMaxSpecifies the maximum outer VLAN ID of a VLAN range. A value of zero
indicates the VLAN range is not specified.
This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot
be specified at same time in a row.
This node is valid only for the dAclMacAccessRuleVlanRangeMin specified.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.2.3.1.24 |
dAclMacAccessGroupTableThe table represents a list of MAC access group configuration. SEQUENCE OF DAclMacAccessGroupEntry .1.3.6.1.4.1.171.14.28.1.2.4 |
dAclMacAccessGroupEntryAn entry in dAclMacAccessGroupTable contains interface specific
MAC access list association. DAclMacAccessGroupEntry .1.3.6.1.4.1.171.14.28.1.2.4.1 |
dAclMacAccessGroupIfIndexIndicates the ifIndex of the interface.
Only physical port is valid interface. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.171.14.28.1.2.4.1.1 |
dAclMacAccessGroupApplyDirectionIndicates whether this access list is to be attached to ingress
or egress direction. Enumeration .1.3.6.1.4.1.171.14.28.1.2.4.1.2 |
dAclMacAccessGroupRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.2.4.1.3 |
dAclMacAccessGroupAclNameThe name of the MAC access list to be applied.rw DisplayString .1.3.6.1.4.1.171.14.28.1.2.4.1.4 |
dAclMacAccessGroupAclIdThe ID of the MAC access list to be applied.
User maybe specify access list ID(by this object) or name (by
dAclMacAccessGroupAclName) to be applied. If both access list
ID and name are specified, the access list name specified by
dAclMacAccessGroupAclName will be take.rw Integer32 .1.3.6.1.4.1.171.14.28.1.2.4.1.5 |
dAclIp OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1.3 |
dAclIpAccessListNumberIndicates the number of entries present in the IP access list
table.ro Unsigned32 .1.3.6.1.4.1.171.14.28.1.3.1 |
dAclIpAccessListTableThe table contains IP access list configuration. SEQUENCE OF DAclIpAccessListEntry .1.3.6.1.4.1.171.14.28.1.3.2 |
dAclIpAccessListEntryAn entry defined in dAclIpAccessListTable. An entry is
created/removed when an IP access list is created/deleted. DAclIpAccessListEntry .1.3.6.1.4.1.171.14.28.1.3.2.1 |
dAclIpAccessListNameThe name of the IP access list. DisplayString .1.3.6.1.4.1.171.14.28.1.3.2.1.1 |
dAclIpAccessListRowStatusThis object allows the dynamic creation and
deletion of an IP access list.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.3.2.1.2 |
dAclIpAccessExtendedThis object indicates the IP access list is extended ('true') or
standard ('false').
A standard ip access list means only IP address related i.e.
source or destination IP address is specified for the filter.
For an extended IP access list, more fields can be chosen for the
filter.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.3.2.1.3 |
dAclIpAccessListIdThe number of the IP access list.
If user specify value zero(0) for this node, agent will assign a number
for it. After the table created, this node should not be changed.rw Integer32 .1.3.6.1.4.1.171.14.28.1.3.2.1.4 |
dAclIpAccessListCounterEnabledThis object indicates the counter state of the access list is
enabled('true') or disabled('false'). And the counter just for
the all interface that applied the access list in
dAclIpAccessGroupTable.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.3.2.1.5 |
dAclIpAccessListClearStatActionThis object is used to clear statistics of the access list when set
to 'clear'. No action is taken if this object is set to 'noOp'.
The 'clear' action just for the all interface that applied the access
list in dAclIpAccessGroupTable.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.28.1.3.2.1.6 |
dAclIpAccessListRemarkThe description of the IP access list.rw DisplayString .1.3.6.1.4.1.171.14.28.1.3.2.1.7 |
dAclIpAccessRuleTableThe table contains a list of IP access rules for IP access lists. SEQUENCE OF DAclIpAccessRuleEntry .1.3.6.1.4.1.171.14.28.1.3.3 |
dAclIpAccessRuleEntryAn entry is defined dAclIpAccessRuleTable.
The first instance identifier index value identifies the
dAclIpAccessListEntry that an IP access rule (dAclIpAccessRuleEntry)
belongs to. An entry is removed from this table when its
corresponding dAclIpAccessRuleEntry is deleted. DAclIpAccessRuleEntry .1.3.6.1.4.1.171.14.28.1.3.3.1 |
dAclIpAccessRuleSnSpecifies the sequence number of this rule.
The lower the number is, the higher the priority of the rule.
The special value of 0 means the sequence number will be automatically
determined by the agent. Integer32 .1.3.6.1.4.1.171.14.28.1.3.3.1.1 |
dAclIpAccessRuleRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.3.3.1.2 |
dAclIpAccessRuleActionThis object indicates the result of the packet examination is to
permit or deny or prevent to CPU.rw DlinkAclRuleType .1.3.6.1.4.1.171.14.28.1.3.3.1.3 |
dAclIpAccessRuleProtocolSpecifies the IP protocol.rw Enumeration .1.3.6.1.4.1.171.14.28.1.3.3.1.4 |
dAclIpAccessRuleUserDefProtocolSpecifies the user defined protocol ID when the dAclIpAccessRuleProtocol
is 'userDefine (1)'. The value of -1 means the user defined protocol ID
is not specified.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.3.3.1.5 |
dAclIpAccessRuleSrcAddrSpecifies a source IP address.rw IpAddress .1.3.6.1.4.1.171.14.28.1.3.3.1.6 |
dAclIpAccessRuleSrcWildcardThis object is a wildcard bitmap to specify a group of source IP
addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
IP source address is specified. When the value of all '00'Hs indicates
host IP source address is specified.rw IpAddress .1.3.6.1.4.1.171.14.28.1.3.3.1.7 |
dAclIpAccessRuleDstAddrSpecifies a destination IP address.rw IpAddress .1.3.6.1.4.1.171.14.28.1.3.3.1.8 |
dAclIpAccessRuleDstWildcardThis object is a wildcard bitmap to specify a group of destination IP
addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
IP destination address is specified. When the value of all '00'Hs indicates
host IP destination address is specified.rw IpAddress .1.3.6.1.4.1.171.14.28.1.3.3.1.9 |
dAclIpAccessRuleSrcOperatorThis object indicates how a packet's source TCP/UDP port number is
compared.
When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses
the dAclIpAccessRuleSrcPort as an operand which is the only one needed.
When the value of this object is range(6) needs 2 operands. One is
dAclIpAccessRuleSrcPort, which is the starting port number of the
range, and the other operand is dAclIpAccessRuleSrcPortRange,
which is the ending port number of the range.
When the value of this object is mask(7) needs 2 operands. One is
dAclIpAccessRuleSrcPort, the other operand is dAclIpAccRuleSrcPortMask.
This object is used for TCP/UDP protocol only, hence when the object
'dAclIpAccessRuleProtocol' is set to other than TCP/UDP, the object has
to be 'none(1)'.rw DlinkAclPortOperatorType .1.3.6.1.4.1.171.14.28.1.3.3.1.10 |
dAclIpAccessRuleSrcPortThis object indicates the source port number of TCP/UDP protocol.
If the value is -1, it means the value is not specified.
If the dAclIpAccessRuleSrcOperator object in the same row is
range(6), this object will be the starting port number of the port
range.
This object only can be configured dAclIpAccessRuleSrcOperator in
the same row is not 'none(1)'.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.3.3.1.11 |
dAclIpAccessRuleSrcPortRangeThe source port number of the TCP/UDP protocol. If the
dAclIpAccessRuleSrcOperator object in the same row is range(6), this
object will be the ending port number of the port range.
The value of -1 means the ending port number is not specified.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.3.3.1.12 |
dAclIpAccessRuleDstOperatorThis object indicates how a packet's TCP/UDP destination port number is
compared.
When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses
the dAclIpAccessRuleSrcPort as an operand which is the only one needed.
When the value of this object is range(6) needs 2 operands. One is
dAclIpAccessRuleSrcPort, which is the starting port number of the
range, and the other operand is dAclIpAccessRuleDstPortRange,
which is the ending port number of the range.
When the value of this object is mask(7) needs 2 operands. One is
dAclIpAccessRuleDstPort, the other operand is dAclIpAccRuleDstPortMask.
This object is used for TCP/UDP protocol only, hence when the object
'dAclIpAccessRuleProtocol' is set to other than TCP/UDP, the object has
to be 'none(1)'.rw DlinkAclPortOperatorType .1.3.6.1.4.1.171.14.28.1.3.3.1.13 |
dAclIpAccessRuleDstPortThis object indicates the destination port number of TCP/UDP protocol.
If the value is -1, it means the value is not specified.
If the dAclIpAccessRuleDstOperator object in the same row is
range(6), this object will be the starting port number of the port
range.
This object only can be configured dAclIpAccessRuleDstOperator in
the same row is not 'none(1)'.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.3.3.1.14 |
dAclIpAccessRuleDstPortRangeThe destination port number of the TCP/UDP protocol. If the
dAclIpAccessRuleDstOperator object in the same row is range(6), this
object will be the ending port number of the port range.
The value of -1 means the ending port number is not specified.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.3.3.1.15 |
dAclIpAccessRuleQosPrecedenceSpecifies the value of precedence.
The value of -1 means the value is not specified or not applicable.
dAclIpAccessRuleQosPrecedence and dAclIpAccessRuleQosDscp cannot
be specified at same time in a row.rw Integer32 (-1 | 0..7) .1.3.6.1.4.1.171.14.28.1.3.3.1.16 |
dAclIpAccessRuleQosTosSpecifies the value of type of service.
The value of -1 means the value is not specified or not applicable.
dAclIpAccessRuleQosTos and dAclIpAccessRuleQosDscp cannot
be specified at same time in a row.rw Integer32 (-1 | 0..15) .1.3.6.1.4.1.171.14.28.1.3.3.1.17 |
dAclIpAccessRuleQosDscpSpecifies the value of DSCP code.
The value of -1 means the value is not specified or not applicable.
Neither dAclIpAccessRuleQosPrecedence nor dAclIpAccessRuleQosTos
cannot be specified with dAclIpAccessRuleQosDscp at same time
in a row.rw Integer32 (-1 | 0..63) .1.3.6.1.4.1.171.14.28.1.3.3.1.18 |
dAclIpAccessRuleIcmpTypeThis object indicates the type of ICMP protocol.
If the value is -1, it means the value is not specified.
This object is used for ICMP protocol only, hence when the object
'dAclIpAccessRuleProtocol' is set to other than ICMP, the object has
to be -1.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.3.3.1.19 |
dAclIpAccessRuleIcmpCodeThis object indicates the code of ICMP protocol.
If the value is -1, it means the value is not specified.
This object is used for ICMP protocol only, hence when the object
'dAclIpAccessRuleProtocol' is set to other than ICMP, the object has
to be -1.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.3.3.1.20 |
dAclIpAccessRuleTimeNameSpecifies the name of time-period profile associated with the
access-list delineating its activation period.
The value 'NULL' means that this rule is not bound with any Time
mechanism.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.3.3.1.21 |
dAclIpAccRuleTcpFlagSpecifies the TCP flag fields.
This node is available only for TCP protocol.
The default value for this node is empty set, which means no TCP flag
values are set.rw TcpFlag .1.3.6.1.4.1.171.14.28.1.3.3.1.22 |
dAclIpAccRuleFragmentsThis object indicates the Packet fragment filtering status
is enabled('true') or disabled('false').rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.3.3.1.23 |
dAclIpAccRuleUserDefProtocolMaskSpecifies the mask for protocol ID defined by dAclIpAccessRuleUserDefProtocol.
Valid values are from 0x00 to 0xFF.
Default value is 0xFF.
This node is valid only for the dAclIpAccessRuleUserDefProtocol specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.3.3.1.24 |
dAclIpAccRuleSrcPortMaskSpecifies the mask for L4 source port defined by dAclIpAccessRuleSrcPort.
Valid values are from 0x0 to 0xFFFF.
Default value is 0xFFFF.
This object only can be configured dAclIpAccessRuleSrcOperator in the
same row is 'mask(7)'.
This node is valid only for the dAclIpAccessRuleSrcPort specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.3.3.1.25 |
dAclIpAccRuleDstPortMaskSpecifies the mask for L4 destination port defined by dAclIpAccessRuleDstPort.
Valid values are from 0x0 to 0xFFFF.
Default value is 0xFFFF.
This object only can be configured dAclIpAccessRuleDstOperator in the
same row is 'mask(7)'.
This node is valid only for the dAclIpAccessRuleDstPort specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.3.3.1.26 |
dAclIpAccRuleQosPrecedenceMaskSpecifies the mask for ip precedence defined by dAclIpAccessRuleQosPrecedence.
Valid values are from 0x0 to 0x7.
Default value is 0x7.
This node is valid only for the dAclIpAccessRuleQosPrecedence specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.3.3.1.27 |
dAclIpAccRuleQosTosMaskSpecifies the mask for type of service defined by dAclIpAccessRuleQosTos.
Valid values are from 0x0 to 0xF.
Default value is 0xF.
This node is valid only for the dAclIpAccessRuleQosTos specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.3.3.1.28 |
dAclIpAccRuleQosDscpMaskSpecifies the mask for DSCP code defined by dAclIpAccessRuleQosDscp.
Valid values are from 0x0 to 0x3F.
Default value is 0x3F.
This node is valid only for the dAclIpAccessRuleQosDscp specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.3.3.1.29 |
dAclIpAccessGroupTableThe table represents a list of IP access group configuration. SEQUENCE OF DAclIpAccessGroupEntry .1.3.6.1.4.1.171.14.28.1.3.4 |
dAclIpAccessGroupEntryAn entry in dAclIpAccessGroupTable contains interface specific
IP access list association. DAclIpAccessGroupEntry .1.3.6.1.4.1.171.14.28.1.3.4.1 |
dAclIpAccessGroupIfIndexIndicates the ifIndex of the interface.
Only physical port is valid interface. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.171.14.28.1.3.4.1.1 |
dAclIpAccessGroupApplyDirectionIndicates whether this access list is to be attached to ingress or egress direction. Enumeration .1.3.6.1.4.1.171.14.28.1.3.4.1.2 |
dAclIpAccessGroupStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.3.4.1.3 |
dAclIpAccessGroupAclNameThe name of the IP access list to be applied.rw DisplayString .1.3.6.1.4.1.171.14.28.1.3.4.1.4 |
dAclIpAccessGroupAclIdThe ID of the IP access list to be applied.
User maybe specify access list ID(by this object) or name (by
dAclIpAccessGroupAclName) to be applied. If both access list
ID and name are specified, the access list name specified by
dAclIpAccessGroupAclName will be take.rw Integer32 .1.3.6.1.4.1.171.14.28.1.3.4.1.5 |
dAclIPv6 OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1.4 |
dAclIPv6AccessListNumberIndicates the number of entries present in the IPv6 access list
table.ro Unsigned32 .1.3.6.1.4.1.171.14.28.1.4.1 |
dAclIPv6AccessListTableThe table contains IPv6 access list configuration. SEQUENCE OF DAclIPv6AccessListEntry .1.3.6.1.4.1.171.14.28.1.4.2 |
dAclIPv6AccessListEntryAn entry defined in dAclIPv6AccessListTable. An entry is
created/removed when an IPv6 access list is created/deleted. DAclIPv6AccessListEntry .1.3.6.1.4.1.171.14.28.1.4.2.1 |
dAclIPv6AccessListNameThe name of the IPv6 access list. DisplayString .1.3.6.1.4.1.171.14.28.1.4.2.1.1 |
dAclIPv6AccessListRowStatusThis object allows the dynamic creation and
deletion of an IPv6 access list.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.4.2.1.2 |
dAclIPv6AccessExtendedThis object indicates the IPv6 access list is extended ('true') or
standard ('false').
A standard ip access list means only IPv6 address related i.e.
source or destination IPv6 address is specified for the filter.
For an extended IPv6 access list, more fields can be chosen for the
filter.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.4.2.1.3 |
dAclIPv6AccessListIdThe number of the IPv6 access list.rw Integer32 .1.3.6.1.4.1.171.14.28.1.4.2.1.4 |
dAclIPv6AccessListCounterEnabledThis object indicates the counter state of the access list is
enabled('true') or disabled('false'). And the counter just for
the all interface that applied the access list in
dAclIPv6AccessGroupTable.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.4.2.1.5 |
dAclIPv6AccessListClearStatActionThis object is used to clear statistics of the access list when set
to 'clear'. No action is taken if this object is set to 'noOp'.
The 'clear' action just for the all interface that applied the access
list in dAclIPv6AccessGroupTable.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.28.1.4.2.1.6 |
dAclIPv6AccessListRemarkThe description of the IPv6 access list.rw DisplayString .1.3.6.1.4.1.171.14.28.1.4.2.1.7 |
dAclIPv6AccessRuleTableThe table contains a list of IPv6 access rules for IPv6 access lists. SEQUENCE OF DAclIPv6AccessRuleEntry .1.3.6.1.4.1.171.14.28.1.4.3 |
dAclIPv6AccessRuleEntryAn entry is defined dAclIPv6AccessRuleTable.
The first instance identifier index value identifies the
dAclIPv6AccessListEntry that an IPv6 access rule (dAclIPv6AccessRuleEntry)
belongs to. An entry is removed from this table when its
corresponding dAclIPv6AccessRuleEntry is deleted. DAclIPv6AccessRuleEntry .1.3.6.1.4.1.171.14.28.1.4.3.1 |
dAclIPv6AccessRuleSnSpecifies the sequence number of this rule.
The lower the number is, the higher the priority of the rule.
The special value of 0 means the sequence number will be automatically
determined by the agent. Integer32 .1.3.6.1.4.1.171.14.28.1.4.3.1.1 |
dAclIPv6AccessRuleRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.4.3.1.2 |
dAclIPv6AccessRuleActionThis object indicates the result of the packet examination is to
permit or deny or prevent to CPU.rw DlinkAclRuleType .1.3.6.1.4.1.171.14.28.1.4.3.1.3 |
dAclIPv6AccessRuleProtocolSpecifies the IP protocol.rw Enumeration .1.3.6.1.4.1.171.14.28.1.4.3.1.4 |
dAclIPv6AccessRuleUserDefProtocolSpecifies the user defined protocol ID when the
dAclIPv6AccessRuleProtocol is 'userDefine (1)'.
The value of -1 means the user defined protocol ID is not
specified.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.4.3.1.5 |
dAclIPv6AccessRuleSrcAddrSpecifies a source IPv6 address.rw InetAddressIPv6 (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.28.1.4.3.1.6 |
dAclIPv6AccessRuleSrcPrefixLenSpecifies the length in bits of source IPv6 address will be
matched. In other words, the value of 0 indicates any source
IPv6 address is specified. When the value of 128 indicates
host IPv6 source address is specified.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.28.1.4.3.1.7 |
dAclIPv6AccessRuleDstAddrSpecifies a destination IPv6 address.rw InetAddressIPv6 (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.28.1.4.3.1.8 |
dAclIPv6AccessRuleDstPrefixLenSpecifies the length in bits of destination IPv6 address will be
matched. In other words, the value of 0 indicates any destination
IPv6 address is specified. When the value of 128 indicates
host IPv6 destination address is specified.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.171.14.28.1.4.3.1.9 |
dAclIPv6AccessRuleSrcOperatorThis object indicates how a packet's TCP/UDP source port number is
compared.
When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses
the dAclIPv6AccessRuleSrcPort as an operand which is the only one needed.
When the value of this object is range(6) needs 2 operands. One is
dAclIPv6AccessRuleSrcPort, which is the starting port number of the
range, and the other operand is dAclIPv6AccessRuleSrcPortRange,
which is the ending port number of the range.
When the value of this object is mask(7) needs 2 operands. One is
dAclIPv6AccessRuleSrcPort, the other operand is dAclIPv6AccessRuleSrcPortMask.
This object is used for TCP/UDP protocol only, hence when the object
'dAclIPv6AccessRuleProtocol' is set to other than TCP/UDP, the object has
to be 'none(1)'.rw DlinkAclPortOperatorType .1.3.6.1.4.1.171.14.28.1.4.3.1.10 |
dAclIPv6AccessRuleSrcPortThis object indicates the source port number of TCP/UDP protocol.
If the value is -1, it means the value is not specified.
If the dAclIPv6AccessRuleSrcOperator object in the same row is
range(6), this object will be the starting port number of the port
range.
This object only can be configured dAclIPv6AccessRuleSrcOperator in
the same row is not 'none(1)'.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.4.3.1.11 |
dAclIPv6AccessRuleSrcPortRangeThe source port number of the TCP/UDP protocol. If the
dAclIPv6AccessRuleSrcOperator object in the same row is range(6), this
object will be the ending port number of the port range.
The value of -1 means the ending port number is not specified.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.4.3.1.12 |
dAclIPv6AccessRuleDstOperatorThis object indicates how a packet's TCP/UDP destination port number is
compared.
When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses
the dAclIPv6AccessRuleDstPort as an operand which is the only one needed.
When the value of this object is range(6) needs 2 operands. One is
dAclIPv6AccessRuleDstPort, which is the starting port number of the
range, and the other operand is dAclIPv6AccessRuleDstPortRange,
which is the ending port number of the range.
When the value of this object is mask(7) needs 2 operands. One is
dAclIPv6AccessRuleDstPort, the other operand is dAclIPv6AccessRuleDstPortMask.
This object is used for TCP/UDP protocol only, hence when the object
'dAclIPv6AccessRuleProtocol' is set to other than TCP/UDP, the object has
to be 'none(1)'.rw DlinkAclPortOperatorType .1.3.6.1.4.1.171.14.28.1.4.3.1.13 |
dAclIPv6AccessRuleDstPortThis object indicates the destination port number of TCP/UDP protocol.
If the value is -1, it means the value is not specified.
If the dAclIPv6AccessRuleDstOperator object in the same row is
range(6), this object will be the starting port number of the port
range.
This object only can be configured dAclIPv6AccessRuleDstOperator in
the same row is not 'none(1)'.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.4.3.1.14 |
dAclIPv6AccessRuleDstPortRangeThe destination port number of the TCP/UDP protocol. If the
dAclIPv6AccessRuleDstOperator object in the same row is range(6), this
object will be the ending port number of the port range.
The value of -1 means the ending port number is not specified.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.4.3.1.15 |
dAclIPv6AccessRuleDscpSpecifies the matching DSCP code value in IPv6 header.
The value of -1 means the DSCP value is not specified.rw Integer32 (-1 | 0 .. 63) .1.3.6.1.4.1.171.14.28.1.4.3.1.16 |
dAclIPv6AccessRuleIcmpTypeThis object indicates the type of ICMP protocol.
The value of -1 means the ICMP type is not specified.
This object is used for ICMP protocol only, hence when the object
'dAclIPv6AccessRuleProtocol' is set to other than ICMP, the object has
to be -1.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.4.3.1.17 |
dAclIPv6AccessRuleIcmpCodeThis object indicates the code of ICMP protocol.
If the value is -1, it means the value is not specified.
This object is used for ICMP protocol only, hence when the object
'dAclIPv6AccessRuleProtocol' is set to other than ICMP, the object has
to be -1.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.4.3.1.18 |
dAclIPv6AccessRuleTimeNameSpecifies the name of time-period profile associated with the
access-list delineating its activation period.
The value 'NULL' means that this rule is not bound with any Time
mechanism.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.4.3.1.19 |
dAclIPv6AccRuleTcpFlagSpecifies the TCP flag fields. And this node is available only for TCP protocol.
The default value for this node is empty set, which means no TCP flag values are set.rw TcpFlag .1.3.6.1.4.1.171.14.28.1.4.3.1.20 |
dAclIPv6AccRuleFragmentsThis object indicates the Packet fragment filtering status
is enabled('true') or disabled('false').rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.4.3.1.21 |
dAclIPv6AccRuleFlowLabelThis object indicates the Flow label value.
The value of -1 means the flow-label value is not specified.rw Integer32 (-1 | 0..1048575) .1.3.6.1.4.1.171.14.28.1.4.3.1.22 |
dAclIPv6AccRuleTrafficClassSpecifies the matching traffic class value in IPv6 header.
The value of -1 means the traffic class value is not specified.
This node and dAclIPv6AccessRuleDscp cannot be specified at same time in a row.rw Integer32 (-1 | 0 .. 255) .1.3.6.1.4.1.171.14.28.1.4.3.1.23 |
dAclIPv6AccRuleUserDefProtocolMaskSpecifies the mask for protocol ID defined by dAclIPv6AccessRuleUserDefProtocol.
Valid values are from 0x00 to 0xFF.
Default value is 0xFF.
This node is valid only for the dAclIPv6AccessRuleUserDefProtocol specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.4.3.1.24 |
dAclIPv6AccRuleSrcPortMaskSpecifies the mask for L4 source port defined by dAclIPv6AccessRuleSrcPort.
Valid values are from 0x0 to 0xFFFF.
Default value is 0xFFFF.
This object only can be configured dAclIPv6AccessRuleSrcOperator in the
same row is 'mask(7)'.
This node is valid only for the dAclIPv6AccessRuleSrcPort specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.4.3.1.25 |
dAclIPv6AccRuleDstPortMaskSpecifies the mask for L4 destination port defined by dAclIPv6AccessRuleDstPort.
Valid values are from 0x0 to 0xFFFF.
Default value is 0xFFFF.
This object only can be configured dAclIPv6AccessRuleDstOperator in the
same row is 'mask(7)'.
This node is valid only for the dAclIPv6AccessRuleDstPort specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.4.3.1.26 |
dAclIPv6AccRuleDscpMaskSpecifies the mask for DSCP code defined by dAclIPv6AccessRuleDscp.
Valid values are from 0x0 to 0x3F.
Default value is 0x3F.
This node is valid only for the dAclIPv6AccessRuleDscp specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.4.3.1.27 |
dAclIPv6AccRuleFlowLabelMaskSpecifies the mask for Flow label value defined by dAclIPv6AccRuleFlowLabel.
Valid values are from 0x0 to 0xFFFFF.
Default value is 0xFFFFF.
This node is valid only for the dAclIPv6AccRuleFlowLabel specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.4.3.1.28 |
dAclIPv6AccRuleTrafficClassMaskSpecifies the mask for traffic class defined by dAclIPv6AccRuleTrafficClass.
Valid values are from 0x0 to 0xFF.
Default value is 0xFF.
This node is valid only for the dAclIPv6AccRuleTrafficClass specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.4.3.1.29 |
dAclIPv6AccessGroupTableThe table represents a list of IPv6 access group configuration. SEQUENCE OF DAclIPv6AccessGroupEntry .1.3.6.1.4.1.171.14.28.1.4.4 |
dAclIPv6AccessGroupEntryAn entry in dAclIPv6AccessGroupTable contains interface specific
IPv6 access list association. DAclIPv6AccessGroupEntry .1.3.6.1.4.1.171.14.28.1.4.4.1 |
dAclIPv6AccessGroupIfIndexIndicates the ifIndex of the interface.
Only physical port is valid interface. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.171.14.28.1.4.4.1.1 |
dAclIpv6AccessGroupApplyDirectionIndicates whether this ACL access list is to be attached to ingress or egress direction. Enumeration .1.3.6.1.4.1.171.14.28.1.4.4.1.2 |
dAclIPv6AccessGroupStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.4.4.1.3 |
dAclIPv6AccessGroupAclNameThe name of the IPv6 access list to be applied.rw DisplayString .1.3.6.1.4.1.171.14.28.1.4.4.1.4 |
dAclIPv6AccessGroupAclIdThe ID of the IPv6 access list to be applied.
User maybe specify access list ID(by this object) or name (by
dAclIPv6AccessGroupAclName) to be applied. If both access list
ID and name are specified, the access list name specified by
dAclIPv6AccessGroupAclName will be take.rw Integer32 .1.3.6.1.4.1.171.14.28.1.4.4.1.5 |
dAclExpert OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1.5 |
dAclExpertAccessListNumberIndicates the number of entries present in the extended expert
access list table.ro Unsigned32 .1.3.6.1.4.1.171.14.28.1.5.1 |
dAclExpertAccessListTableThe table contains information about extended expert access list. SEQUENCE OF DAclExpertAccessListEntry .1.3.6.1.4.1.171.14.28.1.5.2 |
dAclExpertAccessListEntryAn entry defined in dAclExpertAccessListTable. An entry is
created/removed when an extended expert access list is
created/deleted. DAclExpertAccessListEntry .1.3.6.1.4.1.171.14.28.1.5.2.1 |
dAclExpertAccessListNameThe name of the extended expert access list. DisplayString .1.3.6.1.4.1.171.14.28.1.5.2.1.1 |
dAclExpertAccessListRowStatusThis object allows the dynamic creation and
deletion of an extended expert access list.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.2.1.2 |
dAclExpertAccessListIdThe number of the extended expert access list.rw Integer32 .1.3.6.1.4.1.171.14.28.1.5.2.1.3 |
dAclExpertAccessListCounterEnabledThis object indicates the counter state of the access list is
enabled('true') or disabled('false'). And the counter just for
the all interface that applied the access list in
dAclExpertAccessGroupTable.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.2.1.4 |
dAclExpertAccessListClearStatActionThis object is used to clear statistics of the access list when set
to 'clear'. No action is taken if this object is set to 'noOp'.
The 'clear' action just for the all interface that applied the access
list in dAclExpertAccessGroupTable.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.28.1.5.2.1.5 |
dAclExpertAccessListRemarkThe description of the Expert access list.rw DisplayString .1.3.6.1.4.1.171.14.28.1.5.2.1.6 |
dAclExpertAccessRuleTableA table consists of a list of rules for the extended expert access list. SEQUENCE OF DAclExpertAccessRuleEntry .1.3.6.1.4.1.171.14.28.1.5.3 |
dAclExpertAccessRuleEntryAn entry is defined ddAclExpertAccessRuleTable.
The first instance identifier index value identifies the
dAclExpertAccessListEntry that a extended expert access rule
(dAclExpertAccessRuleEntry) belongs to.
An entry is removed from this table when its
corresponding dAclExpertAccessListEntry is deleted. DAclExpertAccessRuleEntry .1.3.6.1.4.1.171.14.28.1.5.3.1 |
dAclExpertAccRuleSnSpecifies the sequence number of this rule.
The lower the number is, the higher the priority of the rule.
The special value of 0 means the sequence number will be automatically
determined by the agent. Integer32 .1.3.6.1.4.1.171.14.28.1.5.3.1.1 |
dAclExpertAccRuleRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.3.1.2 |
dAclExpertAccRuleActionThis object indicates the result of the packet examination is to
permit or deny or prevent to CPU.rw DlinkAclRuleType .1.3.6.1.4.1.171.14.28.1.5.3.1.3 |
dAclExpertAccRuleProtocolSpecifies the IP protocol.rw Enumeration .1.3.6.1.4.1.171.14.28.1.5.3.1.4 |
dAclExpertAccRuleUserDefProtocolSpecifies the user defined protocol ID when the
dAclExpertAccRuleProtocol is 'userDefine (1)'.
The value of -1 means the user defined protocol ID is not
specified.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.5.3.1.5 |
dAclExpertAccRuleSrcIpAddrSpecifies a source IP address.rw IpAddress .1.3.6.1.4.1.171.14.28.1.5.3.1.6 |
dAclExpertAccRuleSrcIpWildcardThis object is a wildcard bitmap to specify a group of source IP
addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
IP source address is specified. When the value of all '00'Hs indicates
host IP source address is specified.rw IpAddress .1.3.6.1.4.1.171.14.28.1.5.3.1.7 |
dAclExpertAccRuleSrcMacAddrSpecifies a source MAC address.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.3.1.8 |
dAclExpertAccRuleSrcMacWildcardThis object is a wildcard bitmap to specify a group of source
MAC addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
source MAC address is specified. When the value of all '00'Hs indicates
host source MAC address is specified.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.3.1.9 |
dAclExpertAccRuleSrcOperatorThis object indicates how a packet's source TCP/UDP port number is
compared.
When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses
the dAclExpertAccsRuleSrcPort as an operand which is the only one needed.
When the value of this object is range(6) needs 2 operands. One is
dAclExpertAccsRuleSrcPort, which is the starting port number of the
range, and the other operand is dAclExpertAccsRuleSrcPortRange,
which is the ending port number of the range.
When the value of this object is mask(7) needs 2 operands. One is
dAclExpertAccsRuleSrcPort, the other operand is dAclExpertAccsRuleSrcPortMask.
This object is used for TCP/UDP protocol only, hence when the object
'dAclExpertAccRuleProtocol' is set to other than TCP/UDP, the object has
to be 'none(1)'.rw DlinkAclPortOperatorType .1.3.6.1.4.1.171.14.28.1.5.3.1.10 |
dAclExpertAccRuleSrcPortThis object indicates the source port number of TCP/UDP protocol.
If the value is -1, it means the value is not specified.
If the dAclExpertAccsRuleSrcOperator object in the same row is
range(6), this object will be the starting port number of the port
range.
This object only can be configured dAclExpertAccsRuleSrcOperator in
the same row is not 'none(1)'.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.5.3.1.11 |
dAclExpertAccRuleSrcPortRangeThe source port number of the TCP/UDP protocol. If the
dAclExpertAccsRuleSrcOperator object in the same row is range(6), this
object will be the ending port number of the port range.
The value of -1 means the ending port number is not specified.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.5.3.1.12 |
dAclExpertAccRuleDstIpAddrSpecifies a destination IP address.rw IpAddress .1.3.6.1.4.1.171.14.28.1.5.3.1.13 |
dAclExpertAccRuleDstIpWildcardThis object is a wildcard bitmap to specify a group of destination IP
addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
IP destination address is specified. When the value of all '00'Hs indicates
host IP destination address is specified.rw IpAddress .1.3.6.1.4.1.171.14.28.1.5.3.1.14 |
dAclExpertAccRuleDstMacAddrSpecifies a destination MAC address.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.3.1.15 |
dAclExpertAccRuleDstMacWildcardThis object is a wildcard bitmap to specify a group of destination
MAC addresses. The bit value 1 indicates the corresponding bit will
be ignored. The bit value 0 indicates the corresponding bit will be
checked. In other words, when the value of all 'ff'Hs indicates any
destination MAC address is specified. When the value of all '00'Hs
indicates host destination MAC address is specified.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.3.1.16 |
dAclExpertAccRuleDstOperatorThis object indicates how a packet's TCP/UDP destination port number is
compared.
When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses
the dAclExpertAccsRuleDstPort as an operand which is the only one needed.
When the value of this object is range(6) needs 2 operands. One is
dAclExpertAccsRuleDstPort, which is the starting port number of the
range, and the other operand is dAclExpertAccsRuleDstPortRange,
which is the ending port number of the range.
When the value of this object is mask(7) needs 2 operands. One is
dAclExpertAccsRuleDstPort, the other operand is dAclExpertAccsRuleDstPortMask.
This object is used for TCP/UDP protocol only, hence when the object
'dAclExpertAccRuleProtocol' is set to other than TCP/UDP, the object has
to be 'none(1)'.rw DlinkAclPortOperatorType .1.3.6.1.4.1.171.14.28.1.5.3.1.17 |
dAclExpertAccRuleDstPortThis object indicates the destination port number of TCP/UDP protocol.
If the value is -1, it means the value is not specified.
If the dAclExpertAccsRuleDstOperator object in the same row is
range(6), this object will be the starting port number of the port
range.
This object only can be configured dAclExpertAccsRuleDstOperator in
the same row is not 'none(1)'.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.5.3.1.18 |
dAclExpertAccRuleDstPortRangeThe destination port number of the TCP/UDP protocol. If the
dAclExpertAccsRuleDstOperator object in the same row is range(6), this
object will be the ending port number of the port range.
The value of -1 means the ending port number is not specified.rw Integer32 (-1..65535) .1.3.6.1.4.1.171.14.28.1.5.3.1.19 |
dAclExpertAccRuleVlanIDSpecifies the VLAN ID.
A value of zero indicates the VLAN ID is not specified.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.5.3.1.20 |
dAclExpertAccRuleInnerVlanIDSpecifies the inner VLAN ID. A value of zero indicates
the inner VLAN ID is not specified.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.5.3.1.21 |
dAclExpertAccRuleQosPrecedenceSpecifies the value of precedence.
The value of -1 means the value is not specified or not applicable.
dAclExpertAccRuleQosPrecedence and dAclExpertAccRuleQosDscp cannot
be specified at same time in a row.rw Integer32 (-1 | 0..7) .1.3.6.1.4.1.171.14.28.1.5.3.1.22 |
dAclExpertAccRuleQosTosSpecifies the value of type of service.
The value of -1 means the value is not specified or not applicable.
dAclExpertAccRuleQosTos and dAclExpertAccRuleQosDscp cannot
be specified at same time in a row.rw Integer32 (-1 | 0..15) .1.3.6.1.4.1.171.14.28.1.5.3.1.23 |
dAclExpertAccRuleQosDscpSpecifies the value of DSCP code.
The value of -1 means the value is not specified or not applicable.
Neither dAclExpertAccRuleQosPrecedence nor dAclExpertAccRuleQosTos
can be specified with dAclExpertAccRuleQosDscp at same time in a
row.rw Integer32 (-1 | 0..63) .1.3.6.1.4.1.171.14.28.1.5.3.1.24 |
dAclExpertAccRuleIcmpTypeThis object indicates the type of ICMP protocol.
If the value is -1, it means the value is not specified.
This object is used for ICMP protocol only, hence when the object
'dAclExpertAccRuleProtocol' is set to other than ICMP, the object has
to be -1.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.5.3.1.25 |
dAclExpertAccRuleIcmpCodeThis object indicates the code of ICMP protocol.
If the value is -1, it means the value is not specified.
This object is used for ICMP protocol only, hence when the object
'dAclExpertAccRuleProtocol' is set to other than ICMP, the object has
to be -1.rw Integer32 (-1 | 0..255) .1.3.6.1.4.1.171.14.28.1.5.3.1.26 |
dAclExpertAccRuleTimeNameSpecifies the name of time-period profile associated with the
access-list delineating its activation period.
The value 'NULL' means that this rule is not bound with any Time
mechanism.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.3.1.27 |
dAclExpertAccRuleTcpFlagSpecifies the TCP flag fields.
This node is available only for TCP protocol.
The default value for this node is empty set, which means no TCP flag
values are set.rw TcpFlag .1.3.6.1.4.1.171.14.28.1.5.3.1.28 |
dAclExpertAccRuleFragmentsThis object indicates the Packet fragment filtering status
is enabled('true') or disabled('false').rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.3.1.29 |
dAclExpertAccRuleOuterCosSpecifies the value of inner priority.
The value of -1 means the value is not specified or not applicable.rw Integer32 (-1 | 0..7) .1.3.6.1.4.1.171.14.28.1.5.3.1.30 |
dAclExpertAccRuleInnerCosSpecifies the value of inner priority, the node is availabe just for the
node dAclExpertAccRuleOuterCos be specified.
The value of -1 means the value is not specified or not applicable.rw Integer32 (-1 | 0..7) .1.3.6.1.4.1.171.14.28.1.5.3.1.31 |
dAclExpertAccRuleUserDefProtocolMaskSpecifies the mask for protocol ID defined by dAclExpertAccRuleUserDefProtocol.
Valid values are from 0x00 to 0xFF.
Default value is 0xFF.
This node is valid only for the dAclExpertAccRuleUserDefProtocol specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.32 |
dAclExpertAccRuleSrcPortMaskSpecifies the mask for L4 source port defined by dAclExpertAccRuleSrcPort.
Valid values are from 0x0 to 0xFFFF.
Default value is 0xFFFF.
This object only can be configured dAclExpertAccRuleSrcOperator in the
same row is 'mask(7)'.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.33 |
dAclExpertAccRuleDstPortMaskSpecifies the mask for L4 destination port defined by dAclExpertAccRuleDstPort.
Valid values are from 0x0 to 0xFFFF.
Default value is 0xFFFF.
This object only can be configured dAclExpertAccRuleDstOperator in the
same row is 'mask(7)'.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.34 |
dAclExpertAccRuleVlanIDMaskSpecifies the mask for VLAN ID defined by dAclExpertAccRuleVlanID.
Valid values are from 0x0000 to 0x0FFF.
This node and dAclExpertAccRuleVlanRangeMin/dAclExpertAccRuleVlanRangeMax
cannot be specified at same time in a row.
Default value is 0x0FFF.
This node is valid only for the dAclExpertAccRuleVlanID specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.35 |
dAclExpertAccRuleInnerVlanIDMaskSpecifies the mask for inner VLAN ID defined by dAclExpertAccRuleInnerVlanID.
Valid values are from 0x0000 to 0x0FFF.
Default value is 0x0FFF.
This node is valid only for the dAclExpertAccRuleInnerVlanID specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.36 |
dAclExpertAccRuleQosPrecedenceMaskSpecifies the mask for ip precedence defined by dAclExpertAccRuleQosPrecedence.
Valid values are from 0x0 to 0x7.
Default value is 0x7.
This node is valid only for the dAclExpertAccRuleQosPrecedence specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.37 |
dAclExpertAccRuleQosTosMaskSpecifies the mask for type of service defined by dAclExpertAccRuleQosTos.
Valid values are from 0x0 to 0xF.
Default value is 0xF.
This node is valid only for the dAclExpertAccRuleQosTos specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.38 |
dAclExpertAccRuleQosDscpMaskSpecifies the mask for DSCP code defined by dAclExpertAccRuleQosDscp.
Valid values are from 0x0 to 0x3F.
Default value is 0x3F.
This node is valid only for the dAclExpertAccRuleQosDscp specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.39 |
dAclExpertAccRuleOuterCosMaskSpecifies the mask for priority defined by dAclExpertAccRuleOuterCos.
Valid values are from 0x00 to 0x07.
Default value is 0x07.
This node is valid only for the dAclExpertAccRuleOuterCos specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.40 |
dAclExpertAccRuleInnerCosMaskSpecifies the mask for inner priority defined by dAclExpertAccRuleInnerCos.
Valid values are from 0x00 to 0x07.
Default value is 0x07.
This node is valid only for the dAclExpertAccRuleInnerCos specified.rw OCTET STRING .1.3.6.1.4.1.171.14.28.1.5.3.1.41 |
dAclExpertAccRuleVlanRangeMinSpecifies the minimum outer VLAN ID of a VLAN range. A value of zero
indicates the VLAN range is not specified.
This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot
be specified at same time in a row.
This node is valid only for the dAclExpertAccRuleVlanRangeMax specified.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.5.3.1.42 |
dAclExpertAccRuleVlanRangeMaxSpecifies the maximum outer VLAN ID of a VLAN range. A value of zero
indicates the VLAN range is not specified.
This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot
be specified at same time in a row.
This node is valid only for the dAclExpertAccRuleVlanRangeMin specified.rw VlanIdOrNone (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.5.3.1.43 |
dAclExpertAccessGroupTableThe table represents a list of extended expert access group
configuration. SEQUENCE OF DAclExpertAccessGroupEntry .1.3.6.1.4.1.171.14.28.1.5.4 |
dAclExpertAccessGroupEntryAn entry in dAclExpertAccessGroupTable contains interface specific
extended expert access list association. DAclExpertAccessGroupEntry .1.3.6.1.4.1.171.14.28.1.5.4.1 |
dAclExpertAccessGroupIfIndexIndicates the ifIndex of the interface.
Only physical port is valid interface. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.171.14.28.1.5.4.1.1 |
dAclExpertAccessGroupApplyDirectionIndicates whether this ACL access list is to be attached to ingress or egress direction. Enumeration .1.3.6.1.4.1.171.14.28.1.5.4.1.2 |
dAclExpertAccessGroupRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.5.4.1.3 |
dAclExpertAccessGroupAclNameThe name of the Expert access list to be applied.rw DisplayString .1.3.6.1.4.1.171.14.28.1.5.4.1.4 |
dAclExpertAccessGroupAclIdThe ID of the Expert access list to be applied.
User maybe specify access list ID(by this object) or name (by
dAclExpertAccessGroupAclName) to be applied. If both access list
ID and name are specified, the access list name specified by
dAclExpertAccessGroupAclName will be take.rw Integer32 .1.3.6.1.4.1.171.14.28.1.5.4.1.5 |
dAclVlan OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1.6 |
dAclVlanSubMapTableThe table contains a list of sub-map configuration. The first
instance identifier index value (dAclVlanAccMapName) identifies the
entry(dAclVlanSubMapEntry) belongs to.
A VLAN access map can contain multiple sub-maps, the packet that
matches a sub-map (that is packet permitted by the associated
access-list) will take the action specified for the same entry.
No further check against the next sub-maps is done.
If the packet does not match a sub-map, then the next sub-map will
be checked. The checking sequence is determined by the value of
dAclVlanAccSubMapSeq for a same VLAN acess map. SEQUENCE OF DAclVlanSubMapEntry .1.3.6.1.4.1.171.14.28.1.6.1 |
dAclVlanSubMapEntryAn entry is defined dAclVlanSubMapTable. DAclVlanSubMapEntry .1.3.6.1.4.1.171.14.28.1.6.1.1 |
dAclVlanAccMapNameThis object is used to specify the name of an VLAN
acess map. DisplayString .1.3.6.1.4.1.171.14.28.1.6.1.1.1 |
dAclVlanAccSubMapSeqIndicates the sequence number of a VLAN access rule.
The value range is 1 to 65535.
The value of 0 indicates the number is not specified and
sequence number will be automatically assigned. Integer32 ( 0 | 1..65535 ) .1.3.6.1.4.1.171.14.28.1.6.1.1.2 |
dAclVlanAccSubMapRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.6.1.1.3 |
dAclVlanAccSubMapMatchAclNameThis object indicates the name of MAC/IP/IPv6 ACL
which will be associated.rw DisplayString .1.3.6.1.4.1.171.14.28.1.6.1.1.4 |
dAclVlanAccessSubMapActionThis object indicates the action when the packet that matches
a sub-map (that is packet permitted by the associated access-list).rw Enumeration .1.3.6.1.4.1.171.14.28.1.6.1.1.5 |
dAclVlanAccSubMapRedirectIfIndexThis object indicates ifIndex of the interface the packet will be
redirected.
When the dAclVlanAccessAction in the same row
is set to other than 'redirect', the object has to be zero,
which indicates the redirected interface is not specified or not
applicable.rw InterfaceIndexOrZero (IF-MIB) .1.3.6.1.4.1.171.14.28.1.6.1.1.6 |
dAclVlanAccSubMapMatchAclIdThis object indicates the ID of MAC/IP/IPv6 ACL access list
which will be associated.
User may specify access list ID(by this object) or name (by
dAclVlanAccSubMapMatchAclName) to be applied. If both access list
ID and name are specified, the access list name specified by
dAclVlanAccSubMapMatchAclName will be take.rw Integer32 .1.3.6.1.4.1.171.14.28.1.6.1.1.7 |
dAclVlanFilterTableThe table represents a list of VLAN access map configuration. SEQUENCE OF DAclVlanFilterEntry .1.3.6.1.4.1.171.14.28.1.6.2 |
dAclVlanFilterEntryAn entry in dAclVlanFilterTable contains vlan-specific
VLAN access map association. DAclVlanFilterEntry .1.3.6.1.4.1.171.14.28.1.6.2.1 |
dAclVlanFilterVlanIdIndicates the VLAN ID of the entry. VlanId (Q-BRIDGE-MIB) .1.3.6.1.4.1.171.14.28.1.6.2.1.1 |
dAclVlanFilterRowStatusThe row status variable, used according to installation
and removal conventions for conceptual rows.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.6.2.1.2 |
dAclVlanFilterVlanAccMapNameThe name of the access list to be applied for the VLAN.
NULL value indicates the access list is not specified.rw DisplayString .1.3.6.1.4.1.171.14.28.1.6.2.1.3 |
dAclVlanAccessMapTableThe table contains a list of VLAN access map configuration. SEQUENCE OF DAclVlanAccessMapEntry .1.3.6.1.4.1.171.14.28.1.6.3 |
dAclVlanAccessMapEntryAn entry is defined dAclVlanAccessMapTable. DAclVlanAccessMapEntry .1.3.6.1.4.1.171.14.28.1.6.3.1 |
dAclVlanAccessMapCounterEnabledThis object indicates the counter state of the VLAN access map
is enabled('true') or disabled('false').
The counter state setting just for the all VLAN interface that applied
the access map in dAclVlanFilterTable.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.171.14.28.1.6.3.1.1 |
dAclVlanAccessMapClearStatActionThis object is used to clear statistics of the VLAN access map
when set to 'clear'. No action is taken if this object is set to 'noOp'.
The 'clear' action just for the all entry that applied the VLAN
access map in dAclVlanFilterTable.
When read, the value 'noOp' is returned.rw Enumeration .1.3.6.1.4.1.171.14.28.1.6.3.1.2 |
dAclCounter OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.1.7 |
dAclAccessGroupCounterTableThis table maintains counter information associated with
a specific access list rule in the access rule table.
Please refer to the dAclMacAccessRuleTable, dAclIpAccessRuleTable,
dAclIPv6AccessRuleTable and dAclExpertAccessRuleTable for
detailed ACL rule information. SEQUENCE OF DAclAccessGroupCounterEntry .1.3.6.1.4.1.171.14.28.1.7.1 |
dAclAccessGroupCounterEntryAn entry is defined dAclAccessGroupCounterTable. DAclAccessGroupCounterEntry .1.3.6.1.4.1.171.14.28.1.7.1.1 |
dAclAccessGroupCounterAccListIdThe ID of an access list which access group counter enabled.
the access list was defined by the tables:
dAclMacAccessListTable, dAclIpAccessListTable,
dAclIPv6AccessListTable, dAclExpertAccessListTable. Integer32 .1.3.6.1.4.1.171.14.28.1.7.1.1.1 |
dAclAccessGroupCounterAccRuleSnSpecifies the sequence number of this rule entry as related to the
dAclAccessGroupCounterAccListId. Integer32 .1.3.6.1.4.1.171.14.28.1.7.1.1.2 |
dAclAccessGroupCounterIngressStatThis object indicates the total number of matched packets for the access rule
applied on inbound of all interface in dAclMacAccessGroupTable,
dAclIpAccessGroupTable, dAclIPv6AccessGroupTable, or
dAclExpertAccessGroupTable.ro Counter64 .1.3.6.1.4.1.171.14.28.1.7.1.1.3 |
dAclAccessGroupCounterEgressStatThis object indicates the total number of matched packets for the access rule
applied on outbound of all interface in dAclMacAccessGroupTable,
dAclIpAccessGroupTable, dAclIPv6AccessGroupTable, or
dAclExpertAccessGroupTable.ro Counter64 .1.3.6.1.4.1.171.14.28.1.7.1.1.4 |
dAclVlanFilterCounterTableThis table maintains counter information associated with
a specific access sub map in the dAclVlanSubMapTable. SEQUENCE OF DAclVlanFilterCounterEntry .1.3.6.1.4.1.171.14.28.1.7.2 |
dAclVlanFilterCounterEntryAn entry is defined dAclVlanFilterCounterTable. DAclVlanFilterCounterEntry .1.3.6.1.4.1.171.14.28.1.7.2.1 |
dAclVlanFilterCounterAccMapNameThe name of a VLAN access map which counter enabled. the VLAN
access map was defined by the dAclVlanSubMapTable. DisplayString .1.3.6.1.4.1.171.14.28.1.7.2.1.1 |
dAclVlanFilterCounterSubMapSeqIndicates the sequence number of a VLAN access sub map. the vlan
sub map sequence number was defined by the dAclVlanSubMapTable. Integer32 .1.3.6.1.4.1.171.14.28.1.7.2.1.2 |
dAclVlanFilterCounterStatisticsThis object indicates the total number of matched packets for the
sub map that applied on all VLAN interface in dAclVlanFilterTable.ro Counter64 .1.3.6.1.4.1.171.14.28.1.7.2.1.3 |
dAclMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.2 |
dAclCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.2.1 |
dAclGroups OBJECT IDENTIFIER .1.3.6.1.4.1.171.14.28.2.2 |