HUAWEI-ACL-MIB
AI MIB Summary
The HUAWEI-ACL-MIB enables the configuration and monitoring of Access Control List (ACL) groups, rules, and acceleration states on Huawei network devices to manage packet filtering policies. It provides granular visibility into IPv4 and IPv6 rule definitions (basic, advanced, interface, and Ethernet frame types) and exposes compilation status and trap notifications for ACL enforcement.
The HUAWEI-ACL-MIB contains objects to configure ACL module, including ACL group, rule and acl accelerate, and query the current ACL configuration and status. This MIB module objects indicate hwAclNumGroupTable, hwAclBasicRuleTable, hwAclAdvanceRuleTable, hwAclIfRuleTable, hwAclEthernetFrameRuleTable, hwAclIpv6BasicRuleTable, hwAclIpv6AdvanceRuleTable, hwAclIpv6IfRuleTable, hwAclCompileEnableFlag, hwAclCompileNumGroupTable, hwAclIpv6NumGroupTable and acl trap.
To filter data packets, a series of rules need to be configured on the device. These rules are defined by ACL (Access Control List), which are a series of sequential rules consisting of rule permit or deny statements. The rules are described by source address, destination address and port number of data packets. ACL classifies data packets through these device interface applied rules, by which the device decides which packets can be received and which should be rejected.
Main OID:
hwAcl.1.3.6.1.4.1.2011.5.1
296
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
296 total| Object Name |
|---|
hwAclThe HUAWEI-ACL-MIB contains objects to configure ACL module,
including ACL group, rule and acl accelerate,
and query the current ACL configuration and status.
This MIB module objects indicate hwAclNumGroupTable, hwAclBasicRuleTable,
hwAclAdvanceRuleTable, hwAclIfRuleTable, hwAclEthernetFrameRuleTable,
hwAclIpv6BasicRuleTable, hwAclIpv6AdvanceRuleTable, hwAclIpv6IfRuleTable,
hwAclCompileEnableFlag, hwAclCompileNumGroupTable,
hwAclIpv6NumGroupTable and acl trap.
To filter data packets, a series of rules need to be configured
on the device. These rules are defined by ACL (Access Control List),
which are a series of sequential rules consisting of rule
permit or deny statements. The rules are described by source
address, destination address and port number of data packets.
ACL classifies data packets through these device interface applied
rules, by which the device decides which packets can be received
and which should be rejected. MODULE-IDENTITY .1.3.6.1.4.1.2011.5.1 |
hwAclMibObjects OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.1 |
hwAclNumGroupTableThe table of ACL group information including
match order, step, description and so on SEQUENCE OF HwAclNumGroupEntry .1.3.6.1.4.1.2011.5.1.1.2 |
hwAclNumGroupEntryAn entry containing characters of an acl group HwAclNumGroupEntry .1.3.6.1.4.1.2011.5.1.1.2.1 |
hwAclNumGroupAclNumThe index of acl group, identifying an ACL.
The object specifies the range of an ACL number.
The basic ACL is represented by the number
in the range 2000 through 2999. The advanced ACL is
represented by the number in the range 3000 through
3999. The interface-based ACL is represented by the
number in the range 1000 to 1999. The User Defined ACL is
represented by the number in the range 5000 through
5999. The User ACL is represented by the number in the range 6000 through
9999. The Mpls ACL is represented by the number in the range 10000 through
10999. The name ACL is represented by the number
in the range 42768 through 76535.ro Integer32 .1.3.6.1.4.1.2011.5.1.1.2.1.1 |
hwAclNumGroupMatchOrderThe object indicates the match order of rules.
'config' means matching ACL rules in the configuration sequence,
'auto' means the ACL rules are matched following the 'Depth-first' principle.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.2.1.2 |
hwAclNumGroupSubitemNumThe total number of the rules in the acl group.ro Counter32 .1.3.6.1.4.1.2011.5.1.1.2.1.3 |
hwAclNumGroupStepThe object indicates the step value of number acl.
Step here refers to the difference between each ID.
For instance, given the step is set to 5,
the IDs are the multiples of 5 beginning with 5.
The ACL IDs change along with the step. When the step is 5,
the ACL IDs are 5, 10, and 15 and so on.
However, when the step is set to 2, the IDs turn to 2, 4,
and 6 and so on.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.2.1.4 |
hwAclNumGroupDescriptionThe object indicates the description of this acl group.
The object describes the usage of an ACL with a word or a sentence.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.2.1.5 |
hwAclNumGroupCountClearReset the statistics of ACL group.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.2.1.6 |
hwAclNumGroupRowStatusRowStatus, Now support three value:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.2.1.7 |
hwAclNumGroupAclNameThe object indicates the name of an acl group,
The first character must be start with a to z or A to Z,
and the length cannot exceed 64 character.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.2.1.8 |
hwAclNumGroupAclTypeThe type of ACL group.ro Enumeration .1.3.6.1.4.1.2011.5.1.1.2.1.9 |
hwAclBasicRuleTableConfigure the rule for basic acl group. SEQUENCE OF HwAclBasicRuleEntry .1.3.6.1.4.1.2011.5.1.1.4 |
hwAclBasicRuleEntryEach entry is a rule of basic acl. HwAclBasicRuleEntry .1.3.6.1.4.1.2011.5.1.1.4.1 |
hwAclBasicAclNumThe index of basic acl group, the index range is (1..99 | 2000..2999 | 42768..76535 ).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.4.1.1 |
hwAclBasicSubitemThe objects specifies the number of an ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL rule must be given 0 ,but it will be assigned
by step automatically;otherwise,this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.4.1.2 |
hwAclBasicActThe object indicates the action of a basic acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.4.1.3 |
hwAclBasicSrcIpThe object indicates the source IP-address of a basic acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.4.1.4 |
hwAclBasicSrcWildThe object indicates the source IP-address wild of a basic acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.4.1.5 |
hwAclBasicTimeRangeIndexThe object indicates the time range of a basic acl rule.
When the current time is in time range, the rule is valid.
Zero value declares that the acl rule has no time range.
The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.4.1.6 |
hwAclBasicFragmentsThe object indicates the type of the packet.
0: fragmentSubseq, indicating that the packet is a subsequent fragment
1: fragment, indicating that the packet is a fragment
2: nonFragment, indicating that the packet is not a fragment
3: nonSubseq, indicating that the packet is not a subsequent fragment
4: fragmentSpeFirst, indicating that the packet is the first fragment
255: none, invalid value
This object cannot be modified once a rule is created.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.4.1.7 |
hwAclBasicLogThe object indicates whether to log the matched packets.
The log contents include sequence number of ACL rule, packets passed
or discarded, upper layer protocol type over IP, source/destination
address, source/destination port number, and number of packets.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.4.1.8 |
hwAclBasicEnableThe object indicates whether the rule is valid or invalid.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.4.1.9 |
hwAclBasicCountThe object indicates the statistics of matched packets by the rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.4.1.10 |
hwAclBasicVrfNameThe object indicates the VRF name of this rule.
It specifies the VPN-instance to which the packet belongs.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.4.1.11 |
hwAclBasicRowStatusRowStatus, Now support three value:CreateAndGo,Active and Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.4.1.12 |
hwAclBasicDescriptionThe object indicates the description of this basic rule.
The object describes the usage of an ACL with a word or a sentence.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.4.1.13 |
hwAclAdvancedRuleTableConfigure the rule for advanced acl group. SEQUENCE OF HwAclAdvancedRuleEntry .1.3.6.1.4.1.2011.5.1.1.5 |
hwAclAdvancedRuleEntryEach entry contains a rule of advanced acl group. HwAclAdvancedRuleEntry .1.3.6.1.4.1.2011.5.1.1.5.1 |
hwAclAdvancedAclNumThe index of advanced acl table, the index range is (100..199 | 3000..3999 | 42768..76535).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.1 |
hwAclAdvancedSubitemThe object specifies the number of an advanced ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL rule must be given 0 ,but it will be assigned
by step automatically;otherwise,this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.5.1.2 |
hwAclAdvancedActThe object indicates the action of an advanced acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.5.1.3 |
hwAclAdvancedProtocolThe object indicates the protocol type of the rule.
It specifies the protocol type over IP.The number of IP protocol is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.4 |
hwAclAdvancedSrcIpThe object indicates the source IP-address of an advanced acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.5.1.5 |
hwAclAdvancedSrcWildThe object indicates the source IP-address wild of an advanced acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.5.1.6 |
hwAclAdvancedSrcOpThe object indicates the source Port operation symbol of an advanced acl
rule. It compares the port operators of source address.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.5.1.7 |
hwAclAdvancedSrcPort1The object indicates the fourth layer sourec port 1.
It specifies the source port information of UDP or TCP packets.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.8 |
hwAclAdvancedSrcPort2The object indicates the fourth layer source port2.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.9 |
hwAclAdvancedDestIpThe object indicates the destination IP-address of an advanced acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.5.1.10 |
hwAclAdvancedDestWildThe object indicates the destination IP-address wild of an advanced acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.5.1.11 |
hwAclAdvancedDestOpThe object indicates the destination Port operation symbol of an advanced
acl group. It compares the port operators of destination address.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.5.1.12 |
hwAclAdvancedDestPort1The object indicates the fourth layer destination port1.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.13 |
hwAclAdvancedDestPort2The object indicates the fourth layer destination port2.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.14 |
hwAclAdvancedPrecedenceThe object indicates the value of IP-packet's precedence,
It filters packets according to precedence field.The invalid
value is 255.rw Integer32 (0..7|255) .1.3.6.1.4.1.2011.5.1.1.5.1.15 |
hwAclAdvancedTosThe object indicates the value of IP-packet's TOS,
It filters packets according to type of service.The invalid
value is 255.rw Integer32 (0..15|255) .1.3.6.1.4.1.2011.5.1.1.5.1.16 |
hwAclAdvancedDscpThe object indicates the value of frame.The invalid
value is 255.rw Integer32 (0..63|255) .1.3.6.1.4.1.2011.5.1.1.5.1.17 |
hwAclAdvancedEstablishThe object indicates whether or not establishing.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.5.1.18 |
hwAclAdvancedTimeRangeIndexThe object indicates the time range of an advanced acl rule.
When the current time is in the time range, the rule is valid.
Zero value declares that the acl rule has no time range.The
invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.19 |
hwAclAdvancedIcmpTypeThe object indicates the type of ICMP packet.
It filters ICMP packets according to the ICMP message type.
The invalid value is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.5.1.20 |
hwAclAdvancedIcmpCodeThe object indicates the code of ICMP packet.
It filters ICMP packets according to the message code.
The invalid value is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.5.1.21 |
hwAclAdvancedFragmentsThe object indicates the type of the packet.
0: fragmentSubseq, indicating that the packet is a subsequent fragment
1: fragment, indicating that the packet is a fragment
2: nonFragment, indicating that the packet is not a fragment
3: nonSubseq, indicating that the packet is not a subsequent fragment
4: fragmentSpeFirst, indicating that the packet is the first fragment
255: none, invalid value
This object cannot be modified once a rule is created.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.5.1.22 |
hwAclAdvancedLogThe object indicates whether to log the matched packets. The log
contents include sequence number of ACL rule,
packets passed or discarded, upper layer protocol type over IP,
source/destination address, source/destination port number,
and number of packetsrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.5.1.23 |
hwAclAdvancedEnableThe object indicates whether the rule is valid or invalid.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.5.1.24 |
hwAclAdvancedCountThe object indicates the statistics of matched packets by the rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.5.1.25 |
hwAclAdvancedVrfNameThe object indicates the VRF name of this rule,
It specifies the VPN-instance to which the packet belongs.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.5.1.26 |
hwAclAdvancedRowStatusRowStatus, Now support three state:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.5.1.27 |
hwAclAdvancedTcpSyncFlagThe object indicates the code of TCP Sync flag(0~63),
The invalid value is -1.rw Integer32 (-1|0..63) .1.3.6.1.4.1.2011.5.1.1.5.1.28 |
hwAclAdvancedDescriptionThe object indicates the description of this advanced rule.
The object describes the usage of an ACL with a word or a sentence.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.5.1.29 |
hwAclAdvancedSrcPoolNameThe object indicates the source pool name.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.5.1.30 |
hwAclAdvancedDestPoolNameThe object indicates the destination pool name.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.5.1.31 |
hwAclAdvancedProtocolNewThe object indicates the protocol type of the rule.
It specifies the protocol type over IP.The number of IP protocol is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.5.1.32 |
hwAclAdvancedVniThe object indicates the ID of VXLAN,
The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.33 |
hwAclAdvancedIgmpTypeThe object indicates the type of igmp,
The invalid value is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.5.1.34 |
hwAclAdvancedTtlOpThe object indicates the ttl operation symbol of an advanced acl
rule.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.5.1.35 |
hwAclAdvancedTtlExpireThe object indicates the begin ttl value.
The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.36 |
hwAclAdvancedTtlExpireEndThe object indicates the end ttl value.
The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.37 |
hwAclAdvancedPktLenOpThe object indicates the packet length operation symbol of an advanced acl
rule.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.5.1.38 |
hwAclAdvancedPktLenBeginThe object indicates the begin packet length value.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.39 |
hwAclAdvancedPktLenEndThe object indicates the end packet length value.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.5.1.40 |
hwAclIfRuleTableConfigure the rule for interface-based acl group. SEQUENCE OF HwAclIfRuleEntry .1.3.6.1.4.1.2011.5.1.1.6 |
hwAclIfRuleEntryEach entry contains a rule of interface-based acl group. HwAclIfRuleEntry .1.3.6.1.4.1.2011.5.1.1.6.1 |
hwAclIfAclNumThe index of interface-based acl group, the index range is (1000..1999 | 42768..76535).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.6.1.1 |
hwAclIfSubitemThe object specifies the number of an ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL rule must be given 0 ,but it will be assigned
by step automatically;otherwise,this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.6.1.2 |
hwAclIfActThe object indicates the action of an interface-based acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.6.1.3 |
hwAclIfIndexThe object indicates the index of an interface.
It specifies the interface information of the packets.The invalid
interface index is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.6.1.4 |
hwAclIfAnyThe object indicates whether or not matching any interface.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.6.1.5 |
hwAclIfTimeRangeIndexThe object indicates the time range of an interface-based acl rule.
when the current time is in time range, the rule is valid.
Zero value declares that the acl rule has no time range.
The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.6.1.6 |
hwAclIfLogThe object indicates whether to log the matched packets.
The log contents include sequence number of ACL rule,
packets passed or discarded, upper layer protocol type over IP,
source/destination address, source/destination port number,
and number of packets.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.6.1.7 |
hwAclIfEnableThe object indicates whether the rule is valid or invalid.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.6.1.8 |
hwAclIfCountThe object indicates the statistics of matched packets by the rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.6.1.9 |
hwAclIfRowStatusRowStatus,Now support three state:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.6.1.11 |
hwAclUserRuleTableConfigure the rule for user acl group. SEQUENCE OF HwAclUserRuleEntry .1.3.6.1.4.1.2011.5.1.1.7 |
hwAclUserRuleEntryEach entry contains a rule of user acl group. HwAclUserRuleEntry .1.3.6.1.4.1.2011.5.1.1.7.1 |
hwAclUserAclNumThe index of user acl table, the index range is (6000..9999).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.1 |
hwAclUserSubitemThe object specifies the number of an User ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principlero Unsigned32 .1.3.6.1.4.1.2011.5.1.1.7.1.2 |
hwAclUserActThe object indicates the action of an User acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.7.1.3 |
hwAclUserProtocolThe object indicates the protocol type of the rule.
It specifies the protocol type over IP.The number of IP protocol is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.4 |
hwAclUserSrcIpThe object indicates the source IP-address of an User acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.7.1.5 |
hwAclUserSrcWildThe object indicates the source IP-address wild of an User acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.7.1.6 |
hwAclUserSrcOpThe object indicates the source Port operation symbol of an User acl
rule. It compares the port operators of source address.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.7.1.7 |
hwAclUserSrcPort1The object indicates the fourth layer sourec port 1.
It specifies the source port information of UDP or TCP packets.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.8 |
hwAclUserSrcPort2The object indicates the fourth layer source port2.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.9 |
hwAclUserDestIpThe object indicates the destination IP-address of an User acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.7.1.10 |
hwAclUserDestWildThe object indicates the destination IP-address wild of an User acl rule.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.7.1.11 |
hwAclUserDestOpThe object indicates the destination Port operation symbol of an User
acl group. It compares the port operators of destination address.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.7.1.12 |
hwAclUserDestPort1The object indicates the fourth layer destination port1.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.13 |
hwAclUserDestPort2The object indicates the fourth layer destination port2.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.14 |
hwAclUserPrecedenceThe object indicates the value of IP-packet's precedence,
It filters packets according to precedence field.The invalid
value is 255.rw Integer32 (0..7|255) .1.3.6.1.4.1.2011.5.1.1.7.1.15 |
hwAclUserTosThe object indicates the value of IP-packet's TOS,
It filters packets according to type of service.The invalid
value is 255.rw Integer32 (0..15|255) .1.3.6.1.4.1.2011.5.1.1.7.1.16 |
hwAclUserDscpThe object indicates the value of frame.The invalid
value is 255.rw Integer32 (0..63|255) .1.3.6.1.4.1.2011.5.1.1.7.1.17 |
hwAclUserEstablishThe object indicates whether or not establishing.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.7.1.18 |
hwAclUserTimeRangeIndexThe object indicates the time range of an User acl rule.
When the current time is in the time range, the rule is valid.
Zero value declares that the acl rule has no time range.The
invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.19 |
hwAclUserIcmpTypeThe object indicates the type of ICMP packet.
It filters ICMP packets according to the ICMP message type.
The invalid value is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.7.1.20 |
hwAclUserIcmpCodeThe object indicates the code of ICMP packet.
It filters ICMP packets according to the message code.
The invalid value is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.7.1.21 |
hwAclUserFragmentsThe object indicates whether or not matching fragmented packet,
It specifies that this rule is only valid for
the non-first fragment packets.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.7.1.22 |
hwAclUserLogThe object indicates whether to log the matched packets. The log
contents include sequence number of ACL rule,
packets passed or discarded, upper layer protocol type over IP,
source/destination address, source/destination port number,
and number of packetsrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.7.1.23 |
hwAclUserEnableThe object indicates whether the rule is valid or invalid.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.7.1.24 |
hwAclUserCountThe object indicates the statistics of matched packets by the rule.ro Counter32 .1.3.6.1.4.1.2011.5.1.1.7.1.25 |
hwAclUserVrfNameThe object indicates the VRF name of this rule,
It specifies the VPN-instance to which the packet belongs.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.7.1.26 |
hwAclUserSrcUserGroupNameThe object indicates the source user group name of this rule.
if modetype source is user, null sting means any userrw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.7.1.27 |
hwAclUserDestUserGroupNameThe object indicates the destination user group name of this rule.
if modetype destination is user, null sting means any userrw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.7.1.28 |
hwAclUserSrcModeTypeThe object indicates ACL's mode type,
Now support four state
0 Any match rule from any user group or any ip subnet,
1 NetAny match rule from any ip subnet,
2 UserAny match rule from any user group,
3 Net match rule from an ip subnet,
4 User match rule from a user grouprw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.29 |
hwAclUserDestModeTypeThe object indicates ACL's mode type,
Now support four state
0 Any match rule from any user group or any ip subnet,
1 NetAny match rule from any ip subnet,
2 UserAny match rule from any user group,
3 Net match rule from an ip subnet,
4 User match rule from a user grouprw Integer32 .1.3.6.1.4.1.2011.5.1.1.7.1.30 |
hwAclUserRowStatusRowStatus, Now support three state:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.7.1.31 |
hwAclUserTcpSyncFlagThe object indicates the code of TCP Sync flag(0~63),
The invalid value is -1.rw Integer32 (-1|0..63) .1.3.6.1.4.1.2011.5.1.1.7.1.32 |
hwAclUserSrcUserGroupNumThe object indicates the source user group num of this rule.
if modetype source is user, null sting means any userrw Integer32 (0..64000|65535) .1.3.6.1.4.1.2011.5.1.1.7.1.33 |
hwAclUserDestUserGroupNumThe object indicates the destination user group name of this rule.
if modetype destination is user, null sting means any userrw Integer32 (0..64000|65535) .1.3.6.1.4.1.2011.5.1.1.7.1.34 |
hwAclCompileEnableFlagThe object indicates whether acl compiler is enabled. when acl compiler
is enabled, and ACL accelerate function is enabled, then matching packets
by rule is efficient.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.10 |
hwAclCompileNumGroupTableThe ACL compiler table extending the Acl-number-group table SEQUENCE OF HwAclCompileNumGroupEntry .1.3.6.1.4.1.2011.5.1.1.11 |
hwAclCompileNumGroupEntryThe entry of Acl-number-group compiler extended table HwAclCompileNumGroupEntry .1.3.6.1.4.1.2011.5.1.1.11.1 |
hwAclCompileNumGroupStatusThe object indicates the status of Acl-number-group compiler.
'notCompile' means acl accelerate function is disabled,
'compiled' means acl accelerate function is enabled,
'changeAfterCompile' means acl is changed after compiled.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.11.1.1 |
hwAclIpv6BasicRuleTableConfigure the rule for ipv6 basic acl group. SEQUENCE OF HwAclIpv6BasicRuleEntry .1.3.6.1.4.1.2011.5.1.1.12 |
hwAclIpv6BasicRuleEntryEach entry is a rule of ipv6 basic acl. HwAclIpv6BasicRuleEntry .1.3.6.1.4.1.2011.5.1.1.12.1 |
hwAclIpv6BasicAclNumThe index of ipv6 basic acl group, the index range is (2000..2999 | 42768..75535).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.12.1.1 |
hwAclIpv6BasicSubitemThe objects specifies the number of an ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL rule must be given 0 ,but it will be assigned
automatically; otherwise, this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.12.1.2 |
hwAclIpv6BasicActThe object indicates the action of a ipv6 basic acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.12.1.3 |
hwAclIpv6BasicSrcIpThe object indicates the source IPv6-address of a ipv6 basic acl rule.rw Ipv6Address (IPV6-TC) .1.3.6.1.4.1.2011.5.1.1.12.1.4 |
hwAclIpv6BasicSrcPrefixThe object indicates the source IPv6-address prefix length of a ipv6 basic acl rule.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.12.1.5 |
hwAclIpv6BasicTimeRangeIndexThe object indicates the time range of a ipv6 basic acl rule.
When the current time is in time range, the rule is valid.
Zero value declares that the acl rule has no time range.
The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.12.1.6 |
hwAclIpv6BasicFragmentThe object indicates the type of the packet.
1: fragment, indicating that the packet is a fragment
255: none, invalid value
This object cannot be modified once a rule is created.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.12.1.7 |
hwAclIpv6BasicLogThe object indicates whether to log the matched packets.
The log contents include sequence number of ACL rule, packets passed
or discarded, upper layer protocol type over IP, source/destination
address, source/destination port number, and number of packets.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.12.1.8 |
hwAclIpv6BasicEnableThe object indicates whether the rule is valid or invalid.ro EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.2011.5.1.1.12.1.9 |
hwAclIpv6BasicCountThe object indicates the statistics of matched packets by the rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.12.1.10 |
hwAclIpv6BasicVrfNameThe object indicates the VRF name of this rule.
It specifies the VPN-instance to which the packet belongs.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.12.1.11 |
hwAclIpv6BasicRowStatusRowStatus, Now support three value: CreateAndGo, Active and Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.12.1.12 |
hwAclIpv6BasicDescriptionThe object indicates the description of this IPv6 basic rule.
The object describes the usage of an IPv6 ACL with a word or a sentence.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.12.1.13 |
hwAclIpv6BasicSrcMaskThe object indicates the source IPv6-address mask of a ipv6 basic acl rule. Its mode is positive.rw Ipv6Address (IPV6-TC) .1.3.6.1.4.1.2011.5.1.1.12.1.14 |
hwAclIpv6AdvancedRuleTableConfigure the rule for ipv6 advanced acl group. SEQUENCE OF HwAclIpv6AdvancedRuleEntry .1.3.6.1.4.1.2011.5.1.1.13 |
hwAclIpv6AdvancedRuleEntryEach entry contains a rule of ipv6 advanced acl group. HwAclIpv6AdvancedRuleEntry .1.3.6.1.4.1.2011.5.1.1.13.1 |
hwAclIpv6AdvancedAclNumThe index of ipv6 advanced acl table, the index range is (3000..3999 | 42768..75535).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.1 |
hwAclIpv6AdvancedSubitemThe object specifies the number of an ipv6 advanced ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL rule must be given 0 ,but it will be assigned
automatically;otherwise,this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.13.1.2 |
hwAclIpv6AdvancedActThe object indicates the action of an ipv6 advanced acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.13.1.3 |
hwAclIpv6AdvancedProtocolThe object indicates the protocol type of the rule.
It specifies the protocol type over IP.The number of IPv6 protocol is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.4 |
hwAclIpv6AdvancedSrcIpThe object indicates the source IPv6-address of an ipv6 advanced acl rule.rw Ipv6Address (IPV6-TC) .1.3.6.1.4.1.2011.5.1.1.13.1.5 |
hwAclIpv6AdvancedSrcPrefixThe object indicates the source IPv6-address prefix length of an ipv6 advanced acl rule.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.6 |
hwAclIpv6AdvancedSrcOpThe object indicates the source Port operation symbol of an ipv6 advanced acl
rule. It compares the port operators of source address.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.13.1.7 |
hwAclIpv6AdvancedSrcPort1The object indicates the fourth layer sourec port 1.
It specifies the source port information of UDP or TCP packets.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.8 |
hwAclIpv6AdvancedSrcPort2The object indicates the fourth layer source port2.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.9 |
hwAclIpv6AdvancedDestIpThe object indicates the destination IPv6-address of an ipv6 advanced acl rule.rw Ipv6Address (IPV6-TC) .1.3.6.1.4.1.2011.5.1.1.13.1.10 |
hwAclIpv6AdvancedDestPrefixThe object indicates the destination IPv6-address prefix length of an ipv6 advanced acl rule.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.11 |
hwAclIpv6AdvancedDestOpThe object indicates the destination Port operation symbol of an ipv6 advanced
acl group. It compares the port operators of destination address.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'neq' means not equal to,
'range' means between,
'invalid' means this operation of the rule is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.13.1.12 |
hwAclIpv6AdvancedDestPort1The object indicates the fourth layer destination port1.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.13 |
hwAclIpv6AdvancedDestPort2The object indicates the fourth layer destination port2.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.14 |
hwAclIpv6AdvancedPrecedenceThe object indicates the value of IPv6-packet's precedence,
It filters packets according to precedence field. The invalid
value is 255.rw Integer32 (0..7|255) .1.3.6.1.4.1.2011.5.1.1.13.1.15 |
hwAclIpv6AdvancedTosThe object indicates the value of IPv6-packet's TOS,
It filters packets according to type of service. The invalid
value is 255.rw Integer32 (0..15|255) .1.3.6.1.4.1.2011.5.1.1.13.1.16 |
hwAclIpv6AdvancedDscpThe object indicates the value of frame.The invalid
value is 255.rw Integer32 (0..63|255) .1.3.6.1.4.1.2011.5.1.1.13.1.17 |
hwAclIpv6AdvancedEstablishThe object indicates whether or not establishing.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.13.1.18 |
hwAclIpv6AdvancedTimeRangeIndexThe object indicates the time range of an ipv6 advanced acl rule.
When the current time is in the time range, the rule is valid.
Zero value declares that the acl rule has no time range.The
invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.13.1.19 |
hwAclIpv6AdvancedIcmpTypeThe object indicates the type of ICMPv6 packet.
It filters ICMP packets according to the ICMPv6 message type.
The invalid value is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.13.1.20 |
hwAclIpv6AdvancedIcmpCodeThe object indicates the code of ICMPv6 packet.
It filters ICMPv6 packets according to the message code.
The invalid value is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.13.1.21 |
hwAclIpv6AdvancedFragmentThe object indicates the type of the packet.
1: fragment, indicating that the packet is a fragment
255: none, invalid value
This object cannot be modified once a rule is created.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.13.1.22 |
hwAclIpv6AdvancedLogThe object indicates whether to log the matched packets. The log
contents include sequence number of ACL rule,
packets passed or discarded, upper layer protocol type over IP,
source/destination address, source/destination port number,
and number of packetsrw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.13.1.23 |
hwAclIpv6AdvancedEnableThe object indicates whether the rule is valid or invalid.ro EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.2011.5.1.1.13.1.24 |
hwAclIpv6AdvancedCountThe object indicates the statistics of matched packets by the rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.13.1.25 |
hwAclIpv6AdvancedVrfNameThe object indicates the VRF name of this rule,
It specifies the VPN-instance to which the packet belongs.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.13.1.26 |
hwAclIpv6AdvancedRowStatusRowStatus, Now support three state:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.13.1.27 |
hwAclIpv6AdvancedDescriptionThe object indicates the description of this IPv6 advanced rule.
The object describes the usage of an IPv6 ACL with a word or a sentence.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.13.1.28 |
hwAclIpv6AdvancedSrcMaskThe object indicates the source IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive.rw Ipv6Address (IPV6-TC) .1.3.6.1.4.1.2011.5.1.1.13.1.29 |
hwAclIpv6AdvancedDestMaskThe object indicates the destination IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive.rw Ipv6Address (IPV6-TC) .1.3.6.1.4.1.2011.5.1.1.13.1.30 |
hwAclIpv6AdvancedProtocolNewThe object indicates the protocol type of the rule.
It specifies the protocol type over IP.The number of IPv6 protocol is 65535.rw Integer32 (0..255|65535) .1.3.6.1.4.1.2011.5.1.1.13.1.31 |
hwAclEthernetFrameRuleTableConfigure the rule for ethernet-frame-based acl group. SEQUENCE OF HwAclEthernetFrameRuleEntry .1.3.6.1.4.1.2011.5.1.1.14 |
hwAclEthernetFrameRuleEntryEach entry contains a rule of ethernet-frame-based acl group. HwAclEthernetFrameRuleEntry .1.3.6.1.4.1.2011.5.1.1.14.1 |
hwAclEthernetFrameAclNumThe index of ethernet-frame-based acl group, the index range is (4000..4999 | 42768..76535).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.1 |
hwAclEthernetFrameSubitemThe object specifies the number of an ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL rule must be given 0 ,but it will be assigned
by step automatically;otherwise,this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.14.1.2 |
hwAclEthernetFrameActThe object indicates the action of an ethernet-frame-based acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.14.1.3 |
hwAclEthernetFrameTypeThe object indicates the type of an ethernet frame.
It specifies the interface information of the packets. The invalid
ethernet frame type is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.4 |
hwAclEthernetFrameTypeMaskThe object indicates the mask of ethernet frame.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.5 |
hwAclEthernetFrameSrcMacThe object indicates the source mac address of rule.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.14.1.6 |
hwAclEthernetFrameSrcMacMaskThe object indicates the source mac mask of rule.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.14.1.7 |
hwAclEthernetFrameDstMacThe object indicates the destination mac address of rule.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.14.1.8 |
hwAclEthernetFrameDstMacMaskThe object indicates the destination mac mask of rule.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.14.1.9 |
hwAclEthernetFrameTimeRangeIndexThe object indicates the time range of a ethernet frame
acl rule. When the current time is in time range, the rule
is valid. Zero value declares that the acl rule has no
time range. The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.10 |
hwAclEthernetFrameLogThe object indicates whether to log the matched packets.
The log contents include sequence number of ACL rule,
packets passed or discarded, source/destination mac addr,
protocol of ethernet frame, and number of packets.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.14.1.11 |
hwAclEthernetFrameEnableThe object indicates whether the rule is valid or invalid.ro EnabledStatus (P-BRIDGE-MIB) .1.3.6.1.4.1.2011.5.1.1.14.1.12 |
hwAclEthernetFrameCountThe object indicates the statistics of matched packets by rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.14.1.13 |
hwAclEthernetFrameRowStatusRowStatus,Now support three state:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.14.1.14 |
hwAclEthernetFrameEncapTypeThe object indicates the encapsulation type of rule.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.14.1.15 |
hwAclEthernetFrameDoubleTagThe object indicates two tags of rule. False value do not
care the number of tags.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.14.1.16 |
hwAclEthernetFrameVlanIdThe object indicates the vlan ID of rule. The invalid
vlan ID is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.17 |
hwAclEthernetFrameVlanIdMaskThe object indicates the vlan ID mask of rule.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.18 |
hwAclEthernetFrameCVlanIdThe object indicates the ce-vlan ID of rule. The invalid
vlan ID is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.19 |
hwAclEthernetFrameCVlanIdMaskThe object indicates the ce-vlan ID mask of rule.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.14.1.20 |
hwAclEthernetFrameRule8021pThe object indicates the 8021p value of S-tag.rw Integer32 (0..7 | 255) .1.3.6.1.4.1.2011.5.1.1.14.1.21 |
hwAclEthernetFrameRuleCVlan8021pThe object indicates the 8021p value of C-tag.rw Integer32 (0..7 | 255) .1.3.6.1.4.1.2011.5.1.1.14.1.22 |
hwAclEthernetFrameDescriptionThe object indicates the description of this ethernetframe rule.
The object describes the usage of an ACL with a word or a sentence.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.14.1.23 |
hwAclAppliedTableConfigure the applied ACL. SEQUENCE OF HwAclAppliedEntry .1.3.6.1.4.1.2011.5.1.1.15 |
hwAclAppliedEntryEach entry contains a applied ACL. HwAclAppliedEntry .1.3.6.1.4.1.2011.5.1.1.15.1 |
hwAclAppliedOperationThe actions taken when packets conforming or exceeding the configured. Enumeration .1.3.6.1.4.1.2011.5.1.1.15.1.1 |
hwAclAppliedScopeTypeThe scope that ACL apply on. Enumeration .1.3.6.1.4.1.2011.5.1.1.15.1.2 |
hwAclAppliedScopeIndexWhen the scope is global, this field is invalid;
When the scope is vlan, this field is vlan ID;
When the scope is interface, this field is interface index. Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.3 |
hwAclAppliedDirectionThe direction acl apply on. Enumeration .1.3.6.1.4.1.2011.5.1.1.15.1.4 |
hwAclAppliedAclNumThe index of ACL group.
Basic ACL in range 2000~2999;
Advance ACL in range 3000~3999;
Link ACL in range 4000~4999; Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.5 |
hwAclAppliedSubitemThe object specifies the number of an ACL rule. Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.6 |
hwAclAppliedAclNum2The index of ACL group.
65535 means this field is valid. Integer32 (2000..3999|65535) .1.3.6.1.4.1.2011.5.1.1.15.1.7 |
hwAclAppliedSubitem2The object specifies the number of an ACL rule. Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.8 |
hwAclAppliedStatModeThe object specifies the mode of statistics.
When action is statistic, this field is valid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.15.1.9 |
hwAclAppliedStatCountThe object indicates the statistics of matched packets by the policy.
When action is statistic or limit, this field is valid.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.15.1.10 |
hwAclAppliedLimitCirCommitted information rate. Unit: kbps.rw Integer32 (0 | 64..10000000) .1.3.6.1.4.1.2011.5.1.1.15.1.11 |
hwAclAppliedLimitPirPeak information rate. Unit: kbps.
0 is the default value.rw Integer32 (0 | 64..10000000) .1.3.6.1.4.1.2011.5.1.1.15.1.12 |
hwAclAppliedLimitCbsCommitted burst size. Unit: byte.
0 is the default value.rw Integer32 (0 | 4096..16773120) .1.3.6.1.4.1.2011.5.1.1.15.1.13 |
hwAclAppliedLimitPbsPeak burst size. Unit: byte.
0 is the default value.rw Integer32 (0 | 4096..16773120) .1.3.6.1.4.1.2011.5.1.1.15.1.14 |
hwAclAppliedLimitGreenActionGreen action.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.15.1.15 |
hwAclAppliedLimitGreenValueThe value is to remark When green action is remarking.
For remarking DSCP, the range is 0~63;
For remarking 8021p, the range is 0~7.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.16 |
hwAclAppliedLimitYellowActionYellow action.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.15.1.17 |
hwAclAppliedLimitYellowValueThe value is to remark When yellow action is remarking.
For remarking DSCP, the range is 0~63;
For remarking 8021p, the range is 0~7.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.18 |
hwAclAppliedLimitRedActionRed action.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.15.1.19 |
hwAclAppliedLimitRedValueThe value is to remark When red action is remarking.
For remarking DSCP, the range is 0~63;
For remarking 8021p, the range is 0~7.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.20 |
hwAclAppliedMirrObservedPortThe mirror observe port number.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.21 |
hwAclAppliedMirrRspanVlanThe object specifies the RSPAN vlan.
0 means mirror to local port.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.22 |
hwAclAppliedRedirectIfIndexThe redirect output interface.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.23 |
hwAclAppliedRedirectIpAddrThe redirect IP next hop address.rw IpAddress .1.3.6.1.4.1.2011.5.1.1.15.1.24 |
hwAclAppliedRedirectIpv6AddrThe redirect IPv6 next hop address.rw Ipv6Address (IPV6-TC) .1.3.6.1.4.1.2011.5.1.1.15.1.25 |
hwAclAppliedRemarkVlanThe remarked vlan ID.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.26 |
hwAclAppliedRemarkCVlanThe remarked ce-vlan ID.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.27 |
hwAclAppliedRemark8021pThe remarked 8021p value.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.28 |
hwAclAppliedRemarkDscpThe remarked DSCP value.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.29 |
hwAclAppliedRemarkIpPreThe remarked IP precedence value.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.30 |
hwAclAppliedRemarkLocalPreThe remarked local precedence value.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.15.1.31 |
hwAclAppliedRemarkMacAddrThe remarked MAC address.rw MacAddress (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.15.1.32 |
hwAclAppliedIsIPv6AclThe object indicates whether is IPv6 ACL. TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.15.1.33 |
hwAclAppliedRowStatusRowStatus,Now support three state:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.15.1.51 |
hwAclIpv6NumGroupTableThe table of IPv6 ACL group information. SEQUENCE OF HwAclIpv6NumGroupEntry .1.3.6.1.4.1.2011.5.1.1.16 |
hwAclIpv6NumGroupEntryAn entry containing characters of an IPv6 ACL group. HwAclIpv6NumGroupEntry .1.3.6.1.4.1.2011.5.1.1.16.1 |
hwAclIpv6NumGroupAclNumThe index of IPv6 ACL group, identifying an IPv6 ACL.ro Integer32 .1.3.6.1.4.1.2011.5.1.1.16.1.1 |
hwAclIpv6NumGroupMatchOrderThe object indicates the match order of rules.
'config' means matching ACL rules in the configuration sequence,
'auto' means the ACL6 rules are matched following the 'Depth-first' principle.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.16.1.2 |
hwAclIpv6NumGroupSubitemNumThe total number of the rules in the ACL6 group.ro Counter32 .1.3.6.1.4.1.2011.5.1.1.16.1.3 |
hwAclIpv6NumGroupCountClearReset the statistics of ACL6 group.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.16.1.4 |
hwAclIpv6NumGroupAclNameThe object indicates the name of an acl6 group,
The first character must be start with a to z or A to Z,
and the length cannot exceed 64 character.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.16.1.5 |
hwAclIpv6NumGroupDescriptionThe object indicates the description of this acl6 group.
The object describes the usage of an ACL6 with a word or a sentence.rw OCTET STRING .1.3.6.1.4.1.2011.5.1.1.16.1.6 |
hwAclIpv6NumGroupAclTypeThe type of IPv6 ACL group.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.16.1.7 |
hwAclIpv6NumGroupRowStatusRowStatus, Now support three value:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.16.1.51 |
hwAclIpv6NumGroupStepThe object indicates the step value of number IPv6 ACL.
Step here refers to the difference between each ID.
For instance, given the step is set to 5,
the IDs are the multiples of 5 beginning with 5.
The IPv6 ACL IDs change along with the step. When the step is 5,
the IPv6 ACL IDs are 5, 10, and 15 and so on.
However, when the step is set to 2, the IDs turn to 2, 4,
and 6 and so on.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.16.1.52 |
hwAclIpv6IfRuleTableConfigure the rule for interface-based acl6 group. SEQUENCE OF HwAclIpv6IfRuleEntry .1.3.6.1.4.1.2011.5.1.1.17 |
hwAclIpv6IfRuleEntryEach entry contains a rule of interface-based acl6 group. HwAclIpv6IfRuleEntry .1.3.6.1.4.1.2011.5.1.1.17.1 |
hwAclIpv6IfAclNumThe index of interface-based acl6 group, the index range is (1000..1999 | 42768..75535).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.17.1.1 |
hwAclIpv6IfSubitemThe object specifies the number of an ACL6 rule.
If the number specified has been assigned to an ACL6 rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL6. It will be placed at the end of the
ACL6 when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL6 rule must be given 0, but it will be assigned
automatically;otherwise, this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.17.1.2 |
hwAclIpv6IfActThe object indicates the action of an interface-based acl6 rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.17.1.3 |
hwAclIpv6IfIndexThe object indicates the index of an interface.
It specifies the interface information of the packets. The invalid
interface index is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.17.1.4 |
hwAclIpv6IfAnyThe object indicates whether or not matching any interface.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.17.1.5 |
hwAclIpv6IfTimeRangeIndexThe object indicates the time range of an interface-based acl6 rule.
when the current time is in time range, the rule is valid.
Zero value declares that the acl rule has no time range.
The invalid value is 0.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.17.1.6 |
hwAclIpv6IfLogThe object indicates whether to log the matched packets.
The log contents include sequence number of ACL6 rule,
packets passed or discarded, upper layer protocol type over IP,
source/destination address, source/destination port number,
and number of packets.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.17.1.7 |
hwAclIpv6IfEnableThe object indicates whether the rule is valid or invalid.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.17.1.8 |
hwAclIpv6IfCountThe object indicates the statistics of matched packets by basic rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.17.1.9 |
hwAclIpv6IfRowStatusRowStatus,Now support three state:CreateAndGo,Active,Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.17.1.11 |
hwAclMplsRuleTableConfigure the rule for mpls acl group. SEQUENCE OF HwAclMplsRuleEntry .1.3.6.1.4.1.2011.5.1.1.18 |
hwAclMplsRuleEntryEach entry is a rule of mpls acl. HwAclMplsRuleEntry .1.3.6.1.4.1.2011.5.1.1.18.1 |
hwAclMplsAclNumThe index of mpls acl group, the index range is (10000..10999 | 42768..76535).ro Integer32 .1.3.6.1.4.1.2011.5.1.1.18.1.1 |
hwAclMplsSubitemThe objects specifies the number of an ACL rule.
If the number specified has been assigned to an ACL rule,
the new rule will overwrite the old one,
which is equal to editing the old rule.
If the number is not assigned, the system will define
a rule with the number and insert it to the place
corresponding to its number. If no number is specified,
the system will define a rule, assign a number to it and
add it into the ACL. It will be placed at the end of the
ACL when configuration sequence is adopted; otherwise,
it will be placed based on the 'Depth-first' principle.
When ACL rules are following the 'Depth-first' principle,
the number of an ACL rule must be given 0 ,but it will be assigned
by step automatically;otherwise,this rule will not be created.ro Unsigned32 .1.3.6.1.4.1.2011.5.1.1.18.1.2 |
hwAclMplsActThe object indicates the action of a basic acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.18.1.3 |
hwAclMplsExp1The object indicates the exp1 of a mpls acl rule.rw Integer32 (0..7|255) .1.3.6.1.4.1.2011.5.1.1.18.1.4 |
hwAclMplsExp2The object indicates the exp2 of a mpls acl rule.rw Integer32 (0..7|255) .1.3.6.1.4.1.2011.5.1.1.18.1.5 |
hwAclMplsExp3The object indicates the exp3 of a mpls acl rule.rw Integer32 (0..7|255) .1.3.6.1.4.1.2011.5.1.1.18.1.6 |
hwAclMplsExp4The object indicates the exp4 of a mpls acl rule.rw Integer32 (0..7|255) .1.3.6.1.4.1.2011.5.1.1.18.1.7 |
hwAclMplsLabel1The object indicates the label1 of a mpls acl rule.rw Integer32 (-1|0..1048575) .1.3.6.1.4.1.2011.5.1.1.18.1.8 |
hwAclMplsLabel2The object indicates the label2 of a mpls acl rule.rw Integer32 (-1|0..1048575) .1.3.6.1.4.1.2011.5.1.1.18.1.9 |
hwAclMplsLabel3The object indicates the label3 of a mpls acl rule.rw Integer32 (-1|0..1048575) .1.3.6.1.4.1.2011.5.1.1.18.1.10 |
hwAclMplsLabel4The object indicates the label4 of a mpls acl rule.rw Integer32 (-1|0..1048575) .1.3.6.1.4.1.2011.5.1.1.18.1.11 |
hwAclMplsTTLOP1The object indicates the ttl operation symbol of a mpls
acl rule. It compares the operators of ttl value.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'range' means between,
'invalid' means this operation of the ttl is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.18.1.12 |
hwAclMplsTTL1BeginThe object indicates the begin value of a mpls ttl.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.18.1.13 |
hwAclMplsTTL1EndThe object indicates the end value of a mpls ttl.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.18.1.14 |
hwAclMplsTTLOP2The object indicates the ttl operation symbol of a mpls
acl rule. It compares the operators of ttl value.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'range' means between,
'invalid' means this operation of the ttl is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.18.1.15 |
hwAclMplsTTL2BeginThe object indicates the begin value of a mpls ttl.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.18.1.16 |
hwAclMplsTTL2EndThe object indicates the end value of a mpls ttl.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.18.1.17 |
hwAclMplsTTLOP3The object indicates the ttl operation symbol of a mpls
acl rule. It compares the operators of ttl value.
'lt' means less than,
'eq' means equal to,
'gt' means greater than,
'range' means between,
'invalid' means this operation of the ttl is invalid.rw Enumeration .1.3.6.1.4.1.2011.5.1.1.18.1.18 |
hwAclMplsTTL3BeginThe object indicates the begin value of a mpls ttl.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.18.1.19 |
hwAclMplsTTL3EndThe object indicates the end value of a mpls ttl.rw Integer32 .1.3.6.1.4.1.2011.5.1.1.18.1.20 |
hwAclMplsRowStatusRowStatus, Now support three value:CreateAndGo,Active and Destroy.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.2011.5.1.1.18.1.21 |
hwAclMplsCountThe object indicates the statistics of matched packets by the rule.ro Counter64 .1.3.6.1.4.1.2011.5.1.1.18.1.22 |
hwAclMibTrap OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.2 |
hwAclTrapOid OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.2.1 |
hwAclTrapsDefine OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.2.2 |
hwAclTraps OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.2.2.1 |
hwAclResourceTrapsTable OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.2.2.1.1 |
hwAclResSlotStrThe infomation of slot.ro OCTET STRING .1.3.6.1.4.1.2011.5.1.2.2.1.1.1 |
hwAclResStageThe stage where trap infomation exists.ro OCTET STRING .1.3.6.1.4.1.2011.5.1.2.2.1.1.2 |
hwAclResLimitThe usage of rule resource.ro Integer32 .1.3.6.1.4.1.2011.5.1.2.2.1.1.3 |
hwAclResourceTrapsEntry OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.2.2.1.1.4 |
hwAclResThresholdExceedClearTrapAcl resource lack clear trap NOTIFICATION-TYPE .1.3.6.1.4.1.2011.5.1.2.2.1.1.4.1 |
hwAclResThresholdExceedTrapAcl resource lack trap NOTIFICATION-TYPE .1.3.6.1.4.1.2011.5.1.2.2.1.1.4.2 |
hwAclResTotalCountExceedClearTrapAcl resource full clear trap NOTIFICATION-TYPE .1.3.6.1.4.1.2011.5.1.2.2.1.1.4.3 |
hwAclResTotalCountExceedTrapAcl resource full trap NOTIFICATION-TYPE .1.3.6.1.4.1.2011.5.1.2.2.1.1.4.4 |
hwAclResourceTrapsGroups OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.2.2.1.1.5 |
hwAclMibConformance OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.3 |
hwAclMibCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.3.1 |
hwAclMibGroups OBJECT IDENTIFIER .1.3.6.1.4.1.2011.5.1.3.2 |