MIBs Depot

ACLMGMT-MIB

Registered at
1.3.6.1.4.1.171.12.9
Last updated
1908-04-18 00:00
Organization
D-Link Corp.
Namespace
dlink
Source file
ACLMGMT-MIB
Digest
sha256:1ee53117ae5cd20883e8b8ab3f89409da9796667c0ead33616a3964db921b6ce

Description

The structure of Access Control List information for the proprietary enterprise.

Contact

http://support.dlink.com

Imports

FromSymbols
DLINK-ID-REC-MIBdlink-common-mgmt
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMICounter32, Counter64, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, TimeTicks, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

ACLMGMT-MIB
DLINK-ID-REC-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
Ipv6Address
TEXTUAL-CONVENTION
This data type is used to model IPv6 addresses. This is a binary string of 16 octets in network byte-order.
current
PortList
type

Objects

NameOIDSyntaxAccessStatus
swAclCtrl
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.9.1
swCpuInterfacefilterState
OBJECT-TYPE
Enable or disable CPU Interface Filtering (also called Software ACL). The default is disabled. If enabled, the filtering entries in the swAclRuleMgmt tables will be set to active if its RuleSwAclState is enabled. If disabled, the software ACL function will be disabled.
1.3.6.1.4.1.171.12.9.1.1INTEGER {enable(1), disable(2)}read-writecurrent
swACLTotalUsedRuleEntries
OBJECT-TYPE
The total number of used ACL rule entries.
1.3.6.1.4.1.171.12.9.1.2INTEGERread-onlycurrent
swACLTotalUnusedRuleEntries
OBJECT-TYPE
The total number of unused ACL rule entries.
1.3.6.1.4.1.171.12.9.1.3INTEGERread-onlycurrent
swAclMaskMgmt
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.9.2
swACLEthernetTable
OBJECT-TYPE
This table contains ACL mask Ethernet information. The access profile will be created on the switch to define which part of each incoming frame's layer 2 header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.2.1not-accessiblecurrent
swACLEthernetEntry
OBJECT-TYPE
A list of information about the ACL for Ethernet.
1.3.6.1.4.1.171.12.9.2.1.1not-accessiblecurrent
swACLEthernetProfileID
OBJECT-TYPE
The ID of the ACL mask entry unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.2.1.1.1INTEGERread-onlycurrent
swACLEthernetUsevlan
OBJECT-TYPE
Specifies that the switch will examine the VLAN part of each packet header.
1.3.6.1.4.1.171.12.9.2.1.1.2INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLEthernetMacAddrMaskState
OBJECT-TYPE
This object indicates the status of the MAC address mask. other (1) - Neither source MAC address nor destination MAC address are masked. dst-mac-addr (2) - Destination MAC addresses within received frames are to be filtered when matched with the MAC address entry for the table. src-mac-addr (3) - Source MAC addresses within received frames are to be filtered when matched with the MAC address entry for the table. dst-src-mac-addr (4) - Source or destination MAC addresses within received frames are to be filtered when matched with the MAC address entry of the table.
1.3.6.1.4.1.171.12.9.2.1.1.3INTEGER {other(1), dst-mac-addr(2), src-mac-addr(3), dst-src-mac-addr(4)}read-createcurrent
swACLEthernetSrcMacAddrMask
OBJECT-TYPE
This object specifies the MAC address mask for the source MAC address.
1.3.6.1.4.1.171.12.9.2.1.1.4MacAddressread-createcurrent
swACLEthernetDstMacAddrMask
OBJECT-TYPE
This object specifies the MAC address mask for the destination MAC address.
1.3.6.1.4.1.171.12.9.2.1.1.5MacAddressread-createcurrent
swACLEthernetUse8021p
OBJECT-TYPE
Specifies if the switch will examine the 802.1p priority value in the frame's header or not.
1.3.6.1.4.1.171.12.9.2.1.1.6INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLEthernetUseEthernetType
OBJECT-TYPE
Specifies if the switch will examine the Ethernet type value in each frame's header or not.
1.3.6.1.4.1.171.12.9.2.1.1.7INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLEthernetRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.2.1.1.8RowStatusread-createcurrent
swACLEthernetOwner
OBJECT-TYPE
The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands.
1.3.6.1.4.1.171.12.9.2.1.1.9INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLEthernetUnusedRuleEntries
OBJECT-TYPE
The number of unused rule entries of this Ethernet profile entry.
1.3.6.1.4.1.171.12.9.2.1.1.10INTEGERread-onlycurrent
swACLEthernetProfileName
OBJECT-TYPE
The name of the ACL mask entry unique to the mask list.
1.3.6.1.4.1.171.12.9.2.1.1.11DisplayString (SIZE(1..32))read-createcurrent
swACLIpTable
OBJECT-TYPE
This table contains the ACL mask for IP information. Access profiles will be created on the switch to define which part of the incoming frame's IP layer packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.2.2not-accessiblecurrent
swACLIpEntry
OBJECT-TYPE
A list of information about the ACL of the IP Layer.
1.3.6.1.4.1.171.12.9.2.2.1not-accessiblecurrent
swACLIpProfileID
OBJECT-TYPE
The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.2.2.1.1INTEGERread-onlycurrent
swACLIpUsevlan
OBJECT-TYPE
This object indicates if the IP layer VLAN part is examined or not.
1.3.6.1.4.1.171.12.9.2.2.1.2INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpIpAddrMaskState
OBJECT-TYPE
This object indicates the status of IP address mask. other (1) - Neither source IP address nor destination IP address are masked. dst-ip-addr (2) - Destination IP addresses within received frames are to be filtered when matched with the IP address entry of the table. src-ip-addr (3) - Source IP addresses within received frames are to be filtered when matched with the IP address entry of the table. dst-src-ip-addr (4) - Destination or source IP addresses within received frames are to be filtered when matched with the IP address entry of the table.
1.3.6.1.4.1.171.12.9.2.2.1.3INTEGER {other(1), dst-ip-addr(2), src-ip-addr(3), dst-src-ip-addr(4)}read-createcurrent
swACLIpSrcIpAddrMask
OBJECT-TYPE
This object specifies the IP address mask for the source IP address.
1.3.6.1.4.1.171.12.9.2.2.1.4IpAddressread-createcurrent
swACLIpDstIpAddrMask
OBJECT-TYPE
This object specifies the IP address mask for the destination IP address.
1.3.6.1.4.1.171.12.9.2.2.1.5IpAddressread-createcurrent
swACLIpUseDSCP
OBJECT-TYPE
This object indicates if the DSCP protocol in the packet header is to be examined or not.
1.3.6.1.4.1.171.12.9.2.2.1.6INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpUseProtoType
OBJECT-TYPE
That object indicates which protocol will be examined.
1.3.6.1.4.1.171.12.9.2.2.1.7INTEGER {none(1), icmp(2), igmp(3), tcp(4), udp(5), protocolId(6)}read-createcurrent
swACLIpIcmpOption
OBJECT-TYPE
This object indicates which fields are defined for ICMP. none (1)- Both fields are null. type (2)- Type field identified. code (3)- Code field identified. type-code (4)- Both ICMP fields identified.
1.3.6.1.4.1.171.12.9.2.2.1.8INTEGER {none(1), type(2), code(3), type-code(4)}read-createcurrent
swACLIpIgmpOption
OBJECT-TYPE
Indicates if the IGMP options field is identified or not.
1.3.6.1.4.1.171.12.9.2.2.1.9INTEGER {enable(1), disable(2)}read-createcurrent
swACLIpTcpOption
OBJECT-TYPE
This object indicates the status of the filtered address of TCP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
1.3.6.1.4.1.171.12.9.2.2.1.10INTEGER {other(1), dst-addr(2), src-addr(3), dst-src-addr(4)}read-createcurrent
swACLIpUdpOption
OBJECT-TYPE
This object indicates the status of the filtered address of UDP . other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
1.3.6.1.4.1.171.12.9.2.2.1.11INTEGER {other(1), dst-addr(2), src-addr(3), dst-src-addr(4)}read-createcurrent
swACLIpTCPorUDPSrcPortMask
OBJECT-TYPE
Specifies a TCP port mask for the source port if swACLIpUseProtoType is TCP Specifies a UDP port mask for the source port if swACLIpUseProtoType is UDP.
1.3.6.1.4.1.171.12.9.2.2.1.12OCTET STRING (SIZE(2))read-createcurrent
swACLIpTCPorUDPDstPortMask
OBJECT-TYPE
Specifies a TCP port mask for the destination port if swACLIpUseProtoType is TCP Specifies a UDP port mask for the destination port if swACLIpUseProtoType is UDP.
1.3.6.1.4.1.171.12.9.2.2.1.13OCTET STRING (SIZE(2))read-createcurrent
swACLIpTCPFlagBit
OBJECT-TYPE
Specifies a TCP connection flag mask.
1.3.6.1.4.1.171.12.9.2.2.1.14INTEGER {enable(1), disable(2)}read-createcurrent
swACLIpTCPFlagBitMask
OBJECT-TYPE
A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L, is added in the range 1 through 6, for which this node performs transactions where 2^(L-1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, if you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}.
1.3.6.1.4.1.171.12.9.2.2.1.15INTEGER (0..63)read-createcurrent
swACLIpProtoIDOption
OBJECT-TYPE
Specifies if the switch will examine each frame's protocol ID field or not.
1.3.6.1.4.1.171.12.9.2.2.1.16INTEGER {enable(1), disable(2)}read-createcurrent
swACLIpProtoID
OBJECT-TYPE
Specifies that the rule applies to the IP protocol ID behind the IP header.
1.3.6.1.4.1.171.12.9.2.2.1.17INTEGER (0..255)read-createcurrent
swACLIpProtoIDMask
OBJECT-TYPE
Specifies that the rule applies to the IP protocol ID and the mask options behind the IP header.
1.3.6.1.4.1.171.12.9.2.2.1.18OCTET STRING (SIZE(20))read-createcurrent
swACLIpRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.2.2.1.19RowStatusread-createcurrent
swACLIpOwner
OBJECT-TYPE
The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands.
1.3.6.1.4.1.171.12.9.2.2.1.20INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLIpUnusedRuleEntries
OBJECT-TYPE
The number of unused rule entries this IP profile entry.
1.3.6.1.4.1.171.12.9.2.2.1.22INTEGERread-onlycurrent
swACLIpProfileName
OBJECT-TYPE
The name of the ACL mask entry unique to the mask list.
1.3.6.1.4.1.171.12.9.2.2.1.23DisplayString (SIZE(1..32))read-createcurrent
swACLPktContMaskTable
OBJECT-TYPE
This table contains the ACL mask for user-defined information. An access profile will be created on the switch to define which part of each incoming frame's user-defined part of the packet header will be examined by switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.2.3not-accessiblecurrent
swACLPktContMaskEntry
OBJECT-TYPE
A list of information about user-defined ACLs.
1.3.6.1.4.1.171.12.9.2.3.1not-accessiblecurrent
swACLPktContMaskProfileID
OBJECT-TYPE
The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.2.3.1.1INTEGERread-onlycurrent
swACLPktContMaskOffset0to15
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset0to15) and the mask options.
1.3.6.1.4.1.171.12.9.2.3.1.2OCTET STRING (SIZE(16))read-createcurrent
swACLPktContMaskOffset16to31
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset16to31) and the mask options.
1.3.6.1.4.1.171.12.9.2.3.1.3OCTET STRING (SIZE(16))read-createcurrent
swACLPktContMaskOffset32to47
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset32to47) and the mask options.
1.3.6.1.4.1.171.12.9.2.3.1.4OCTET STRING (SIZE(16))read-createcurrent
swACLPktContMaskOffset48to63
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset48to63) and the mask options.
1.3.6.1.4.1.171.12.9.2.3.1.5OCTET STRING (SIZE(16))read-createcurrent
swACLPktContMaskOffset64to79
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset64to79) and the mask options.
1.3.6.1.4.1.171.12.9.2.3.1.6OCTET STRING (SIZE(16))read-createcurrent
swACLPktContMaskRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.2.3.1.7RowStatusread-createcurrent
swACLPktContMaskOwner
OBJECT-TYPE
The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands.
1.3.6.1.4.1.171.12.9.2.3.1.8INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLPktContMaskUnusedRuleEntries
OBJECT-TYPE
The number of unused rule entries of this IP profile entry.
1.3.6.1.4.1.171.12.9.2.3.1.9INTEGERread-onlycurrent
swACLPktContMaskProfileName
OBJECT-TYPE
The name of the ACL mask entry unique to the mask list.
1.3.6.1.4.1.171.12.9.2.3.1.10DisplayString (SIZE(1..32))read-createcurrent
swACLIpv6MaskTable
OBJECT-TYPE
This table contains user-defined ACL mask information. An access profile will be created on the switch to define which parts of each incoming frame's IPv6 part of the packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.2.4not-accessiblecurrent
swACLIpv6MaskEntry
OBJECT-TYPE
A list of information about user-defined ACLs.
1.3.6.1.4.1.171.12.9.2.4.1not-accessiblecurrent
swACLIpv6MaskProfileID
OBJECT-TYPE
The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.2.4.1.1INTEGERread-onlycurrent
swACLIpv6MaskClass
OBJECT-TYPE
Specifies that the rule applies to the IPv6 class field and the mask options.
1.3.6.1.4.1.171.12.9.2.4.1.2INTEGER {enable(1), disable(2)}read-createcurrent
swACLIpv6MaskFlowlabel
OBJECT-TYPE
Specifies that the rule applies to the IPv6 flowlabel field and the mask options.
1.3.6.1.4.1.171.12.9.2.4.1.3INTEGER {enable(1), disable(2)}read-createcurrent
swACLIpv6IpAddrMaskState
OBJECT-TYPE
This object indicates the status of the IPv6 address mask. other (1) - Neither source IPv6 address nor destination IPv6 address are masked. dst-ipv6-addr (2) - Received frame destination IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table. src-ipv6-addr (3) - Received frame source IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table. dst-src-ipv6-addr (4) - Received frame destination IPv6 address or source IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table.
1.3.6.1.4.1.171.12.9.2.4.1.4INTEGER {other(1), dst-ipv6-addr(2), src-ipv6-addr(3), dst-src-ipv6-addr(4)}read-createcurrent
swACLIpv6MaskSrcIpv6Mask
OBJECT-TYPE
Specifies that the rule applies to the Source IPv6 address and the mask options. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.2.4.1.5Ipv6Addressread-createcurrent
swACLIpv6MaskDstIpv6Mask
OBJECT-TYPE
Specifies that the rule applies to the Destination IPv6 address and the mask options. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.2.4.1.6Ipv6Addressread-createcurrent
swACLIpv6MaskRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.2.4.1.7RowStatusread-createcurrent
swACLIpv6MaskOwner
OBJECT-TYPE
The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands.
1.3.6.1.4.1.171.12.9.2.4.1.8INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLIpv6MaskUnusedRuleEntries
OBJECT-TYPE
The number of unused rule entries of this IP profile entry.
1.3.6.1.4.1.171.12.9.2.4.1.9INTEGERread-onlycurrent
swACLIpv6MaskProfileName
OBJECT-TYPE
The name of the ACL mask entry unique to the mask list.
1.3.6.1.4.1.171.12.9.2.4.1.10DisplayString (SIZE(1..32))read-createcurrent
swACLIpv6MaskUseProtoType
OBJECT-TYPE
That object indicates which protocol will be examined.
1.3.6.1.4.1.171.12.9.2.4.1.11INTEGER {none(1), tcp(2), udp(3)}read-createcurrent
swACLIpv6MaskTcpOption
OBJECT-TYPE
This object indicates the status of the filtered address of TCP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
1.3.6.1.4.1.171.12.9.2.4.1.12INTEGER {other(1), dst-addr(2), src-addr(3), dst-src-addr(4)}read-createcurrent
swACLIpv6MaskUdpOption
OBJECT-TYPE
This object indicates the status of the filtered address of UDP. other (1) - Neither source port nor destination port is masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
1.3.6.1.4.1.171.12.9.2.4.1.13INTEGER {other(1), dst-addr(2), src-addr(3), dst-src-addr(4)}read-createcurrent
swACLIpv6MaskTCPorUDPSrcPortMask
OBJECT-TYPE
Specifies a TCP port mask for the source port if swACLIpv6MaskUseProtoType is TCP Specifies a UDP port mask for the source port if swACLIpv6MaskUseProtoType is UDP.
1.3.6.1.4.1.171.12.9.2.4.1.14OCTET STRING (SIZE(2))read-createcurrent
swACLIpv6MaskTCPorUDPDstPortMask
OBJECT-TYPE
Specifies a TCP port mask for the destination port if swACLIpv6MaskUseProtoType is TCP Specifies a UDP port mask for the destination port if swACLIpv6MaskUseProtoType is UDP.
1.3.6.1.4.1.171.12.9.2.4.1.15OCTET STRING (SIZE(2))read-createcurrent
swACLMaskDelAllState
OBJECT-TYPE
Used to delete all ACL masks.
1.3.6.1.4.1.171.12.9.2.5INTEGER {none(1), start(2)}read-writecurrent
swIBPACLEthernetTable
OBJECT-TYPE
This table contains IP-MAC-Binding ACL mask Ethernet information. Access profiles will be created on the switch by row creation and to define which parts of each incoming frame's layer 2 header part the switch will examine. Masks can be entered that will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.2.6not-accessibleobsolete
swIBPACLEthernetEntry
OBJECT-TYPE
A list of information about the Ethernet ACL.
1.3.6.1.4.1.171.12.9.2.6.1not-accessibleobsolete
swIBPACLEthernetProfileID
OBJECT-TYPE
The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.2.6.1.1INTEGERread-onlyobsolete
swIBPACLEthernetUseEthernetType
OBJECT-TYPE
Specifies if the switch will examine the Ethernet type value in each frame's header or not.
1.3.6.1.4.1.171.12.9.2.6.1.2INTEGER {enabled(1), disabled(2)}read-onlyobsolete
swIBPACLIpTable
OBJECT-TYPE
This table contains IP-MAC-Binding IP ACL mask information. Access profiles will be created on the switch by row creation and to define which parts of each incoming frame's IP layer part of the header the switch will examine. Masks can be entered that will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.2.7not-accessibleobsolete
swIBPACLIpEntry
OBJECT-TYPE
A list of information about the IP layer of the ACL.
1.3.6.1.4.1.171.12.9.2.7.1not-accessibleobsolete
swIBPACLIpProfileID
OBJECT-TYPE
The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.2.7.1.1INTEGERread-onlyobsolete
swIBPACLIpSrcMacAddrMask
OBJECT-TYPE
This object specifies the MAC address mask for the source MAC address.
1.3.6.1.4.1.171.12.9.2.7.1.2MacAddressread-onlyobsolete
swIBPACLIpSrcIpAddrMask
OBJECT-TYPE
This object specifies IP address masks for the source IP address.
1.3.6.1.4.1.171.12.9.2.7.1.3IpAddressread-onlyobsolete
swACLPktContMaskOptionTable
OBJECT-TYPE
This table contains the ACL mask for user-defined option information. An access profile will be created on the switch to define which part of each incoming frame's user-defined part of the packet header will be examined by switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.2.8not-accessiblecurrent
swACLPktContMaskOptionEntry
OBJECT-TYPE
A list of information about the user-defined ACL.
1.3.6.1.4.1.171.12.9.2.8.1not-accessiblecurrent
swACLPktContMaskOptionProfileID
OBJECT-TYPE
The ID of the ACL mask entry, unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.2.8.1.1INTEGERread-onlycurrent
swACLPktContMaskOffsetChunk1State
OBJECT-TYPE
Specifies the state of chunk1.
1.3.6.1.4.1.171.12.9.2.8.1.2INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLPktContMaskOffsetChunk1OffsetValue
OBJECT-TYPE
Specifies the frame content offset of chunk1.
1.3.6.1.4.1.171.12.9.2.8.1.3INTEGER (0..31)read-createcurrent
swACLPktContMaskOffsetChunk1Mask
OBJECT-TYPE
Specifies the frame content mask of chunk1.
1.3.6.1.4.1.171.12.9.2.8.1.4OCTET STRING (SIZE(4))read-createcurrent
swACLPktContMaskOffsetChunk2State
OBJECT-TYPE
Specifies the state of chunk2.
1.3.6.1.4.1.171.12.9.2.8.1.5INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLPktContMaskOffsetChunk2OffsetValue
OBJECT-TYPE
Specifies the frame content offset of chunk2.
1.3.6.1.4.1.171.12.9.2.8.1.6INTEGER (0..31)read-createcurrent
swACLPktContMaskOffsetChunk2Mask
OBJECT-TYPE
Specifies the frame content mask of chunk2.
1.3.6.1.4.1.171.12.9.2.8.1.7OCTET STRING (SIZE(4))read-createcurrent
swACLPktContMaskOffsetChunk3State
OBJECT-TYPE
Specifies the state of chunk3.
1.3.6.1.4.1.171.12.9.2.8.1.8INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLPktContMaskOffsetChunk3OffsetValue
OBJECT-TYPE
Specifies the frame content offset of chunk3.
1.3.6.1.4.1.171.12.9.2.8.1.9INTEGER (0..31)read-createcurrent
swACLPktContMaskOffsetChunk3Mask
OBJECT-TYPE
Specifies the frame content mask of chunk3.
1.3.6.1.4.1.171.12.9.2.8.1.10OCTET STRING (SIZE(4))read-createcurrent
swACLPktContMaskOffsetChunk4State
OBJECT-TYPE
Specifies the state of chunk4.
1.3.6.1.4.1.171.12.9.2.8.1.11INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLPktContMaskOffsetChunk4OffsetValue
OBJECT-TYPE
Specifies the frame content offset of chunk4.
1.3.6.1.4.1.171.12.9.2.8.1.12INTEGER (0..31)read-createcurrent
swACLPktContMaskOffsetChunk4Mask
OBJECT-TYPE
Specifies the frame content mask of chunk4.
1.3.6.1.4.1.171.12.9.2.8.1.13OCTET STRING (SIZE(4))read-createcurrent
swACLPktContMaskOptionRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.2.8.1.14RowStatusread-createcurrent
swACLPktContMaskOptionOwner
OBJECT-TYPE
The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands.
1.3.6.1.4.1.171.12.9.2.8.1.15INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLPktContMaskOptionUnusedRuleEntries
OBJECT-TYPE
The number of unused rule entries of this IP profile entry.
1.3.6.1.4.1.171.12.9.2.8.1.16INTEGERread-onlycurrent
swACLPktContMaskOptionProfileName
OBJECT-TYPE
The name of the ACL mask entry unique to the mask list.
1.3.6.1.4.1.171.12.9.2.8.1.17DisplayString (SIZE(1..32))read-createcurrent
swAclRuleMgmt
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.9.3
swACLEtherRuleTable
OBJECT-TYPE
This table contains Ethernet ACL information.
1.3.6.1.4.1.171.12.9.3.1not-accessiblecurrent
swACLEtherRuleEntry
OBJECT-TYPE
A list of information about the ACL rule of the layer 2 part of each packet.
1.3.6.1.4.1.171.12.9.3.1.1not-accessiblecurrent
swACLEtherRuleProfileID
OBJECT-TYPE
The ID of the ACL rule entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.1.1.1INTEGERread-onlycurrent
swACLEtherRuleAccessID
OBJECT-TYPE
The ID of the the ACL rule entry relates to the swACLEtherRuleProfileID. When row creation is set to 0, assignment of an Access ID for ports is automatic and the swACLEtherRulePort creates Rule entries for the swACLEtherRulePort accordingly. When set from 1 to 65535, an access ID will be created for the swACLEtherRulePort. The swACLEtherRulePort must be set to one port only otherwise the row creation will fail.
1.3.6.1.4.1.171.12.9.3.1.1.2INTEGER (0..65535)read-onlycurrent
swACLEtherRuleVlan
OBJECT-TYPE
Specifies that the access rule will apply to this VLAN only.
1.3.6.1.4.1.171.12.9.3.1.1.3SnmpAdminString (SIZE(1..32))read-createcurrent
swACLEtherRuleSrcMacAddress
OBJECT-TYPE
Specifies that the access rule will apply to only packets with this source MAC address.
1.3.6.1.4.1.171.12.9.3.1.1.4MacAddressread-createcurrent
swACLEtherRuleDstMacAddress
OBJECT-TYPE
Specifies that the access rule will apply to only packets with this destination MAC address.
1.3.6.1.4.1.171.12.9.3.1.1.5MacAddressread-createcurrent
swACLEtherRule8021P
OBJECT-TYPE
Specifies that the access rule will apply only to packets with this 802.1p priority value. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.3.1.1.6INTEGER (-1..7)read-createcurrent
swACLEtherRuleEtherType
OBJECT-TYPE
Specifies that the access rule will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
1.3.6.1.4.1.171.12.9.3.1.1.7OCTET STRING (SIZE(2))read-createcurrent
swACLEtherRuleEnablePriority
OBJECT-TYPE
Specifies that the access rule will apply only to packets with priority value.
1.3.6.1.4.1.171.12.9.3.1.1.8INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLEtherRulePriority
OBJECT-TYPE
Specifies that the priority will be changed in packets while the swACLEtherRuleEnablePriority is enabled .
1.3.6.1.4.1.171.12.9.3.1.1.9INTEGER (0..7)read-createcurrent
swACLEtherRuleReplacePriority
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag field or not .
1.3.6.1.4.1.171.12.9.3.1.1.10INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLEtherRuleEnableReplaceDscp
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile DSCP field or not. Replace DSCP and replace ToS precedence can not both be supported.
1.3.6.1.4.1.171.12.9.3.1.1.11INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLEtherRuleRepDscp
OBJECT-TYPE
Specifies a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet.
1.3.6.1.4.1.171.12.9.3.1.1.12INTEGER (0..63)read-createcurrent
swACLEtherRulePermit
OBJECT-TYPE
This object indicates if the result of the packet examination is 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.3.1.1.13INTEGER {deny(1), permit(2)}read-createcurrent
swACLEtherRulePort
OBJECT-TYPE
Specifies that the access rule will only apply to port(s). This object and swACLEtherRuleVID can not be set together.
1.3.6.1.4.1.171.12.9.3.1.1.14PortListread-createcurrent
swACLEtherRuleRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.3.1.1.15RowStatusread-createcurrent
swACLEtherRuleOwner
OBJECT-TYPE
The owner of the ACL rule entry. Only owners can modify this entry.
1.3.6.1.4.1.171.12.9.3.1.1.16INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLEtherRuleRxRate
OBJECT-TYPE
Specifies the rx rate, 0 denotes no_limit. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.1.1.17INTEGERread-createcurrent
swACLEtherRuleEnableReplaceTosPrecedence
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile ToS precedence field or not. Replace DSCP and replace ToS precedence can not both be supported.
1.3.6.1.4.1.171.12.9.3.1.1.18INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLEtherRuleRepTosPrecedence
OBJECT-TYPE
Specifies a value to be written to the ToS precedence field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the ToS precedence field of the packet.
1.3.6.1.4.1.171.12.9.3.1.1.19INTEGER (0..7)read-createcurrent
swACLEtherRuleVID
OBJECT-TYPE
Specifies this rule only applies to the specified VLAN. There are two conditions: 1.only the portlist that belongs to this VLAN will be included; 2.packets must belong to this VLAN. This object and swACLEtherRulePort can not be set together. When you set swACLEtherRulePort, the value of this object will automatically change to 0. And this object can not be set to 0.
1.3.6.1.4.1.171.12.9.3.1.1.20INTEGER (0..4094)read-createcurrent
swACLIpRuleTable
OBJECT-TYPE
1.3.6.1.4.1.171.12.9.3.2not-accessiblecurrent
swACLIpRuleEntry
OBJECT-TYPE
1.3.6.1.4.1.171.12.9.3.2.1not-accessiblecurrent
swACLIpRuleProfileID
OBJECT-TYPE
The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.2.1.1INTEGERread-onlycurrent
swACLIpRuleAccessID
OBJECT-TYPE
The ID of the ACL rule entry relates to swACLIPRuleProfileID. Row creation set to 0 indicates automatic assignment of the Access ID for the ports in the swACLIpRulePort to create Rule entries for swACLIpRulePort accordingly. Set to 1-65535 causes creation of an access ID for the swACLIpRulePort. The swACLIpRulePort must be set to one port only otherwise the row creation will fail.
1.3.6.1.4.1.171.12.9.3.2.1.2INTEGER (0..65535)read-onlycurrent
swACLIpRuleVlan
OBJECT-TYPE
Specifies that the access rule will only apply to this VLAN.
1.3.6.1.4.1.171.12.9.3.2.1.3SnmpAdminString (SIZE(1..32))read-createcurrent
swACLIpRuleSrcIpaddress
OBJECT-TYPE
Specifies an IP source address.
1.3.6.1.4.1.171.12.9.3.2.1.4IpAddressread-createcurrent
swACLIpRuleDstIpaddress
OBJECT-TYPE
Specifies an IP destination address.
1.3.6.1.4.1.171.12.9.3.2.1.5IpAddressread-createcurrent
swACLIpRuleDscp
OBJECT-TYPE
Specifies the value of DSCP. The value can be configured from 0 to 63. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.3.2.1.6INTEGER (-1..63)read-createcurrent
swACLIpRuleProtocol
OBJECT-TYPE
Specifies the IP protocol. For some older chips, this object can not be set. When getting this object, it always returns the type which has been configured in swACLIpEntry. For some newer chips, this object can only set the type which has been configured in swACLIpEntry. The default value is none (1).
1.3.6.1.4.1.171.12.9.3.2.1.7INTEGER {none(1), icmp(2), igmp(3), tcp(4), udp(5), protocolId(6)}read-writecurrent
swACLIpRuleType
OBJECT-TYPE
Specifies that the rule applies to the value of ICMP type traffic. A value of -1 denotes that this object is not active.
1.3.6.1.4.1.171.12.9.3.2.1.8INTEGER (-1..255)read-createcurrent
swACLIpRuleCode
OBJECT-TYPE
Specifies that the rule applies to the value of ICMP code traffic. A value of -1 denotes that this object is not active.
1.3.6.1.4.1.171.12.9.3.2.1.9INTEGER (-1..255)read-createcurrent
swACLIpRuleSrcPort
OBJECT-TYPE
Specifies that the rule applies to the range of the TCP/UDP source ports. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.3.2.1.10INTEGER (-1..65535)read-createcurrent
swACLIpRuleDstPort
OBJECT-TYPE
Specifies the TCP/UDP destination port range. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.3.2.1.11INTEGER (-1..65535)read-createcurrent
swACLIpRuleFlagBits
OBJECT-TYPE
A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L is added in the range 1 through 6, for which this node performs transactions, where 2^(L - 1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, it you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}.
1.3.6.1.4.1.171.12.9.3.2.1.12INTEGER (0..63)read-createcurrent
swACLIpRuleProtoID
OBJECT-TYPE
Specifies that the rule applies to the value of IP protocol ID traffic. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.3.2.1.13INTEGER (-1..255)read-createcurrent
swACLIpRuleUserMask
OBJECT-TYPE
Specifies that the rule applies to the IP protocol ID and the range of options behind the IP header.
1.3.6.1.4.1.171.12.9.3.2.1.14OCTET STRING (SIZE(20))read-createcurrent
swACLIpRuleEnablePriority
OBJECT-TYPE
Specifies that the access rule will apply only to packets with this priority value.
1.3.6.1.4.1.171.12.9.3.2.1.15INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpRulePriority
OBJECT-TYPE
Specifies the priority will change in packets while the swACLIpRuleEnablePriority is enabled.
1.3.6.1.4.1.171.12.9.3.2.1.16INTEGER (0..7)read-createcurrent
swACLIpRuleReplacePriority
OBJECT-TYPE
Specifies whether the packets that match the access profile will change the 802.1p priority tag field by the switch or not.
1.3.6.1.4.1.171.12.9.3.2.1.17INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpRuleEnableReplaceDscp
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile DSCP field or not. Replace DSCP and replace ToS precedence can not both be supported.
1.3.6.1.4.1.171.12.9.3.2.1.18INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpRuleRepDscp
OBJECT-TYPE
Specifies a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet.
1.3.6.1.4.1.171.12.9.3.2.1.19INTEGER (0..63)read-createcurrent
swACLIpRulePermit
OBJECT-TYPE
This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.3.2.1.20INTEGER {deny(1), permit(2)}read-createcurrent
swACLIpRulePort
OBJECT-TYPE
Specifies that the access rule will only apply to port(s). This object and swACLIpRuleVID can not be set together.
1.3.6.1.4.1.171.12.9.3.2.1.21PortListread-createcurrent
swACLIpRuleRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.3.2.1.22RowStatusread-createcurrent
swACLIpRuleOwner
OBJECT-TYPE
The owner of the ACL rule entry. Only owners can modify this entry.
1.3.6.1.4.1.171.12.9.3.2.1.23INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLIpRuleRxRate
OBJECT-TYPE
Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.2.1.24INTEGERread-createcurrent
swACLIpRuleEnableReplaceTosPrecedence
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile ToS precedence field or not. Replace DSCP and replace ToS precedence can not both be supported.
1.3.6.1.4.1.171.12.9.3.2.1.26INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpRuleRepTosPrecedence
OBJECT-TYPE
Specifies a value to be written to the ToS precedence field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the ToS precedence field of the packet.
1.3.6.1.4.1.171.12.9.3.2.1.27INTEGER (0..7)read-createcurrent
swACLIpRuleVID
OBJECT-TYPE
Specifies this rule only applies to the specified VLAN. There are two conditions: 1.only the portlist that belongs to this VLAN will be included; 2.packets must belong to this VLAN. This object and swACLIpRulePort can not be set together. When you set swACLIpRulePort, the value of this object will automatically change to 0. And this object can not be set 0.
1.3.6.1.4.1.171.12.9.3.2.1.28INTEGER (0..4094)read-createcurrent
swACLIpv6RuleTable
OBJECT-TYPE
This table contains the IPv6 ACL rule information.
1.3.6.1.4.1.171.12.9.3.4not-accessiblecurrent
swACLIpv6RuleEntry
OBJECT-TYPE
A list of information about ACL rules regarding the IPv6 part of each packet.
1.3.6.1.4.1.171.12.9.3.4.1not-accessiblecurrent
swACLIpv6RuleProfileID
OBJECT-TYPE
The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.4.1.1INTEGERread-onlycurrent
swACLIpv6RuleAccessID
OBJECT-TYPE
The ID of the ACL rule entry relates to swACLIpv6RuleProfileID. When row creation is set to 0, this indicates the access ID will be assigned automatically for the ports in the swACLIpv6RulePort to create rule entries for swACLIpv6RulePort accordingly. Set to 1-65535 indicates creation of an access ID for the swACLIpv6RulePort. The swACLIpv6RulePort must be set to one port only, otherwise the row creation will fail.
1.3.6.1.4.1.171.12.9.3.4.1.2INTEGER (0..65535)read-onlycurrent
swACLIpv6RuleClass
OBJECT-TYPE
Specifies that the rule applies to the IPv6 class field.
1.3.6.1.4.1.171.12.9.3.4.1.3INTEGER (0..255)read-createcurrent
swACLIpv6RuleFlowlabel
OBJECT-TYPE
Specifies that the rule applies to the IPv6 flow label field.
1.3.6.1.4.1.171.12.9.3.4.1.4OCTET STRING (SIZE(4))read-createcurrent
swACLIpv6RuleSrcIpv6Addr
OBJECT-TYPE
Specifies that the rule applies to the source IPv6 address. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.3.4.1.5Ipv6Addressread-createcurrent
swACLIpv6RuleDstIpv6Addr
OBJECT-TYPE
Specifies that the rule applies to the destination IPv6 address. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.3.4.1.6Ipv6Addressread-createcurrent
swACLIpv6RuleEnablePriority
OBJECT-TYPE
Specifies that the access rule will apply only to packets with priority value.
1.3.6.1.4.1.171.12.9.3.4.1.7INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpv6RulePriority
OBJECT-TYPE
Specifies the priority will change in packets while the swACLIpv6RuleReplacePriority is enabled.
1.3.6.1.4.1.171.12.9.3.4.1.8INTEGER (0..7)read-createcurrent
swACLIpv6RuleReplacePriority
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag or not.
1.3.6.1.4.1.171.12.9.3.4.1.9INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpv6RulePermit
OBJECT-TYPE
This object indicates if the result of packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. mirror - Specifies the packets that match the access profile are copied to the mirror port. Note: The ACL mirror function will work after mirror has been enabled and the mirror port has been configured.
1.3.6.1.4.1.171.12.9.3.4.1.10INTEGER {deny(1), permit(2), mirror(3)}read-createcurrent
swACLIpv6RulePort
OBJECT-TYPE
Specifies that the access rule will apply only to port(s). This object and swACLIpv6RuleVID can not be set together.
1.3.6.1.4.1.171.12.9.3.4.1.11PortListread-createcurrent
swACLIpv6RuleRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.3.4.1.12RowStatusread-createcurrent
swACLIpv6RuleOwner
OBJECT-TYPE
The owner of the ACL rule entry. Only owners can modify this entry.
1.3.6.1.4.1.171.12.9.3.4.1.13INTEGER {any(1), acl(2), ipbind(3), other(4), dhcp(5), netbios(6), ext-netbios(7)}read-onlycurrent
swACLIpv6RuleRxRate
OBJECT-TYPE
Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.4.1.14INTEGERread-createcurrent
swACLIpv6RuleEnableReplaceDscp
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile DSCP field or not. Replace DSCP and replace ToS precedence can not both be supported.
1.3.6.1.4.1.171.12.9.3.4.1.15INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpv6RuleRepDscp
OBJECT-TYPE
Specifies a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet.
1.3.6.1.4.1.171.12.9.3.4.1.16INTEGER (0..63)read-createcurrent
swACLIpv6RuleEnableReplaceTosPrecedence
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile ToS precedence field or not. Replace DSCP and replace ToS precedence can not both be supported.
1.3.6.1.4.1.171.12.9.3.4.1.17INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLIpv6RuleRepTosPrecedence
OBJECT-TYPE
Specifies a value to be written to the ToS precedence field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the ToS precedence field of the packet.
1.3.6.1.4.1.171.12.9.3.4.1.18INTEGER (0..7)read-createcurrent
swACLIpv6RuleVID
OBJECT-TYPE
Specifies this rule only applies to the specified VLAN. There are two conditions: 1.only the portlist that belongs to this VLAN will be included; 2.packets must belong to this VLAN. This object and swACLIpv6RulePort can not be set together. When you set swACLIpv6RulePort, the value of this object will automatically change to 0. And this object can not be set 0.
1.3.6.1.4.1.171.12.9.3.4.1.19INTEGER (0..4094)read-createcurrent
swACLIpv6RuleProtocol
OBJECT-TYPE
Specifies the IPv6 protocol. For some older chips, this object can not be set. When getting this object, it always returns the type which has been configured in swACLIpv6Entry. For some newer chips, this object can only set the type which has been configured in swACLIpv6Entry. The default value is none (1).
1.3.6.1.4.1.171.12.9.3.4.1.20INTEGER {none(1), tcp(2), udp(3)}read-createcurrent
swACLIpv6RuleSrcPort
OBJECT-TYPE
Specifies that the rule applies to the range of the TCP/UDP source ports.
1.3.6.1.4.1.171.12.9.3.4.1.21INTEGER (0..65535)read-createcurrent
swACLIpv6RuleDstPort
OBJECT-TYPE
Specifies the TCP/UDP destination ports range.
1.3.6.1.4.1.171.12.9.3.4.1.22INTEGER (0..65535)read-createcurrent
swIBPACLEtherRuleTable
OBJECT-TYPE
This table contains IP-MAC-Binding Ethernet ACL Rule information.
1.3.6.1.4.1.171.12.9.3.5not-accessibleobsolete
swIBPACLEtherRuleEntry
OBJECT-TYPE
A list of information about the ACL rule of the layer 2 part of each packet.
1.3.6.1.4.1.171.12.9.3.5.1not-accessibleobsolete
swIBPACLEtherRuleProfileID
OBJECT-TYPE
The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.5.1.1INTEGERread-onlyobsolete
swIBPACLEtherRuleAccessID
OBJECT-TYPE
The ID of the ACL rule entry in relation to swACLEtherRuleProfileID. When row creation is set to 0, this indicates automatically assigning an Access for the ports in the swACLEtherRulePort to create rule entries for swACLEtherRulePort accordingly. Set to 1-65535 indicates to create the exact access ID for the swACLEtherRulePort and the swACLEtherRulePort must set one port only, otherwise the row creation will fail.
1.3.6.1.4.1.171.12.9.3.5.1.2INTEGER (0..65535)read-onlyobsolete
swIBPACLEtherRuleEtherType
OBJECT-TYPE
Specifies that the access rule will apply only to packets with this 802.1Q Ethernet type value in the packet header.
1.3.6.1.4.1.171.12.9.3.5.1.3OCTET STRING (SIZE(2))read-onlyobsolete
swIBPACLEtherRulePermit
OBJECT-TYPE
This object indicates if the result of the examination is 'permit' or 'deny'. The default is 'permit' (1). permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.3.5.1.4INTEGER {deny(1), permit(2)}read-onlyobsolete
swIBPACLEtherRulePort
OBJECT-TYPE
Specifies that the access rule will only apply to port(s).
1.3.6.1.4.1.171.12.9.3.5.1.5PortListread-onlyobsolete
swIBPACLIpRuleTable
OBJECT-TYPE
1.3.6.1.4.1.171.12.9.3.6not-accessibleobsolete
swIBPACLIpRuleEntry
OBJECT-TYPE
1.3.6.1.4.1.171.12.9.3.6.1not-accessibleobsolete
swIBPACLIpRuleProfileID
OBJECT-TYPE
The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.3.6.1.1INTEGERread-onlyobsolete
swIBPACLIpRuleAccessID
OBJECT-TYPE
The ID of the ACL rule entry in relation to swACLIPRuleProfileID. When the row creation is set to 0, this indicates assigning an access ID automatically for the ports in the swACLIpRulePort to create rule entries for swACLIpRulePort accordingly. Set to 1-65535 indicates to create the exact access ID for the swACLIpRulePort and the swACLIpRulePort must be set for one port only, otherwise the row creation will fail.
1.3.6.1.4.1.171.12.9.3.6.1.2INTEGER (0..65535)read-onlyobsolete
swIBPACLIpRuleSrcMacAddress
OBJECT-TYPE
Specifies that the access rule will apply to only packets with this source MAC address.
1.3.6.1.4.1.171.12.9.3.6.1.3MacAddressread-onlyobsolete
swIBPACLIpRuleSrcIpaddress
OBJECT-TYPE
Specifies an IP source address.
1.3.6.1.4.1.171.12.9.3.6.1.4IpAddressread-onlyobsolete
swIBPACLIpRulePermit
OBJECT-TYPE
This object indicates if the result of the examination is 'permit' or 'deny'; the default is 'permit' (1) permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.3.6.1.5INTEGER {deny(1), permit(2)}read-onlyobsolete
swIBPACLIpRulePort
OBJECT-TYPE
Specifies that the access rule will only apply to port(s).
1.3.6.1.4.1.171.12.9.3.6.1.6PortListread-onlyobsolete
swACLCounterTable
OBJECT-TYPE
This table maintains counter information associated with a specific rule in the ACL rule table. Please refer to the swACLEtherRuleTable, swACLIpRuleTable, swACLIpv6RuleTable and swACLPktContRuleTable for detailed ACL rule information.
1.3.6.1.4.1.171.12.9.3.8not-accessiblecurrent
swACLCounterEntry
OBJECT-TYPE
The entry maintains counter information associated with the ACL rule table.
1.3.6.1.4.1.171.12.9.3.8.1not-accessiblecurrent
swACLCounterProfileID
OBJECT-TYPE
The ID of the ACL mask entry, which is unique in the mask list.
1.3.6.1.4.1.171.12.9.3.8.1.1INTEGERread-onlycurrent
swACLCounterAccessID
OBJECT-TYPE
The ID of the ACL rule entry as related to the swACLCounterProfileID.
1.3.6.1.4.1.171.12.9.3.8.1.2INTEGER (1..65535)read-onlycurrent
swACLCounterState
OBJECT-TYPE
Specifies whether the counter feature will be enabled/disabled. 1. This is optional. The default is disable. 2. If the rule is not bound with flow_meter, then all packets that match will be counted. If the rule is bound with flow_meter, then the 'counter' will be overridden.
1.3.6.1.4.1.171.12.9.3.8.1.3INTEGER {enabled(1), disabled(2)}read-writecurrent
swACLCounterTotalCounter
OBJECT-TYPE
The number of matched packets.
1.3.6.1.4.1.171.12.9.3.8.1.4Counter64read-onlycurrent
swACLCounterGreenCounter
OBJECT-TYPE
The number of matched green packets.
1.3.6.1.4.1.171.12.9.3.8.1.5Counter64read-onlycurrent
swACLCounterYellowCounter
OBJECT-TYPE
The number of matched yellow packets.
1.3.6.1.4.1.171.12.9.3.8.1.6Counter64read-onlycurrent
swACLCounterRedCounter
OBJECT-TYPE
The number of matched red packets.
1.3.6.1.4.1.171.12.9.3.8.1.7Counter64read-onlycurrent
swACLPktContRuleVarOffsetTable
OBJECT-TYPE
This table is used to configure ACL user defined packet content rules for devices that support limited selection of packet content.
1.3.6.1.4.1.171.12.9.3.9not-accessiblecurrent
swACLPktContRuleVarOffsetEntry
OBJECT-TYPE
A list which contains information on the ACL rules for user-defined parts of a packet.
1.3.6.1.4.1.171.12.9.3.9.1not-accessiblecurrent
swACLPktContRuleVarOffsetProfileID
OBJECT-TYPE
The ID of ACL mask entry, which is unique to the mask list.
1.3.6.1.4.1.171.12.9.3.9.1.1INTEGER (1..256)read-onlycurrent
swACLPktContRuleVarOffsetAccessID
OBJECT-TYPE
The ID of ACL rule entry related to swACLPktContRuleVarOffsetProfileID.
1.3.6.1.4.1.171.12.9.3.9.1.2INTEGER (1..65535)read-onlycurrent
swACLPktContRuleVarOffsetOffsetIndex1
OBJECT-TYPE
Specifies the first offset will apply in getting the mask for this rule.
1.3.6.1.4.1.171.12.9.3.9.1.8INTEGER (0..76)read-createcurrent
swACLPktContRuleVarOffsetMask1
OBJECT-TYPE
Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex1 and swACLPktContRuleVarOffsetData1.
1.3.6.1.4.1.171.12.9.3.9.1.9OCTET STRING (SIZE(4))read-onlycurrent
swACLPktContRuleVarOffsetData1
OBJECT-TYPE
Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex1 and swACLPktContRuleVarOffsetMask1.
1.3.6.1.4.1.171.12.9.3.9.1.10OCTET STRING (SIZE(4))read-createcurrent
swACLPktContRuleVarOffsetOffsetIndex2
OBJECT-TYPE
Specifies the second offset will apply in getting the mask for this rule.
1.3.6.1.4.1.171.12.9.3.9.1.11INTEGER (0..76)read-createcurrent
swACLPktContRuleVarOffsetMask2
OBJECT-TYPE
Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex2 and swACLPktContRuleVarOffsetData2.
1.3.6.1.4.1.171.12.9.3.9.1.12OCTET STRING (SIZE(4))read-onlycurrent
swACLPktContRuleVarOffsetData2
OBJECT-TYPE
Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex2 and swACLPktContRuleVarOffsetMask2.
1.3.6.1.4.1.171.12.9.3.9.1.13OCTET STRING (SIZE(4))read-createcurrent
swACLPktContRuleVarOffsetOffsetIndex3
OBJECT-TYPE
Specifies the third offset will apply in getting the mask for this rule.
1.3.6.1.4.1.171.12.9.3.9.1.14INTEGER (0..76)read-createcurrent
swACLPktContRuleVarOffsetMask3
OBJECT-TYPE
Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex3 and swACLPktContRuleVarOffsetData3.
1.3.6.1.4.1.171.12.9.3.9.1.15OCTET STRING (SIZE(4))read-onlycurrent
swACLPktContRuleVarOffsetData3
OBJECT-TYPE
Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex3 and swACLPktContRuleVarOffsetMask3.
1.3.6.1.4.1.171.12.9.3.9.1.16OCTET STRING (SIZE(4))read-createcurrent
swACLPktContRuleVarOffsetOffsetIndex4
OBJECT-TYPE
Specifies the fourth offset will apply in getting the mask for this rule.
1.3.6.1.4.1.171.12.9.3.9.1.17INTEGER (0..76)read-createcurrent
swACLPktContRuleVarOffsetMask4
OBJECT-TYPE
Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex4 and swACLPktContRuleVarOffsetData4.
1.3.6.1.4.1.171.12.9.3.9.1.18OCTET STRING (SIZE(4))read-onlycurrent
swACLPktContRuleVarOffsetData4
OBJECT-TYPE
Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex4 and swACLPktContRuleVarOffsetMask4.
1.3.6.1.4.1.171.12.9.3.9.1.19OCTET STRING (SIZE(4))read-createcurrent
swACLPktContRuleVarOffsetOffsetIndex5
OBJECT-TYPE
Specifies the fifth offset will apply in getting the mask for this rule.
1.3.6.1.4.1.171.12.9.3.9.1.20INTEGER (0..76)read-createcurrent
swACLPktContRuleVarOffsetMask5
OBJECT-TYPE
Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex5 and swACLPktContRuleVarOffsetData5.
1.3.6.1.4.1.171.12.9.3.9.1.21OCTET STRING (SIZE(4))read-onlycurrent
swACLPktContRuleVarOffsetData5
OBJECT-TYPE
Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex5 and swACLPktContRuleVarOffsetMask5.
1.3.6.1.4.1.171.12.9.3.9.1.22OCTET STRING (SIZE(4))read-createcurrent
swACLPktContRuleVarOffsetEnablePriority
OBJECT-TYPE
Specifies that the access rule will apply only to packets with this priority value.
1.3.6.1.4.1.171.12.9.3.9.1.23INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLPktContRuleVarOffsetPriority
OBJECT-TYPE
Specifies the priority will change to the packets.
1.3.6.1.4.1.171.12.9.3.9.1.24INTEGER (0..7)read-createcurrent
swACLPktContRuleVarOffsetReplacePriority
OBJECT-TYPE
Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag or not .
1.3.6.1.4.1.171.12.9.3.9.1.25INTEGER {enabled(1), disabled(2)}read-createcurrent
swACLPktContRuleVarOffsetRxRate
OBJECT-TYPE
Specifies that the access rule will apply an RX rate. 0 denotes no limit.
1.3.6.1.4.1.171.12.9.3.9.1.28INTEGER (64..1024000)read-writecurrent
swACLPktContRuleVarOffsetPermit
OBJECT-TYPE
This object indicates the result of the packet examination is to permit or deny. The default is permit. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that do not match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.3.9.1.29INTEGER {deny(1), permit(2)}read-createcurrent
swACLPktContRuleVarOffsetPort
OBJECT-TYPE
Specifies that the access rule will apply only to port(s).
1.3.6.1.4.1.171.12.9.3.9.1.30PortListread-createcurrent
swACLPktContRuleVarOffsetRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.3.9.1.33RowStatusread-createcurrent
swACLPktContRuleVarOffsetReplacePriorityWith
OBJECT-TYPE
The value of this node will be used to replace the 802.1p priority tag of the packet that matched the access profile.
1.3.6.1.4.1.171.12.9.3.9.1.34INTEGER (0..7)read-createcurrent
swCpuAclMaskMgmt
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.9.4
swCpuAclEthernetTable
OBJECT-TYPE
This table contains software ACL mask Ethernet information. Access profiles will be created on the switch to define which part of each incoming frame's layer 2 header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.4.1not-accessiblecurrent
swCpuAclEthernetEntry
OBJECT-TYPE
A list of information about Ethernet ACL masks.
1.3.6.1.4.1.171.12.9.4.1.1not-accessiblecurrent
swCpuAclEthernetProfileID
OBJECT-TYPE
The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.4.1.1.1INTEGERread-onlycurrent
swCpuAclEthernetUsevlan
OBJECT-TYPE
Specifies that the switch will examine the VLAN part of each packet header.
1.3.6.1.4.1.171.12.9.4.1.1.2INTEGER {enabled(1), disabled(2)}read-createcurrent
swCpuAclEthernetMacAddrMaskState
OBJECT-TYPE
This object indicates the status of the MAC address mask. other (1) - Neither source MAC addresses nor destination MAC addresses are masked. dst-mac-addr (2) - Destination MAC addresses within received frames are to be filtered when matched with the MAC address entry of the table. src-mac-addr (3) - Source MAC address within received frames are to be filtered when matched with the MAC address entry of the table. dst-src-mac-addr (4) - Source or destination MAC addresses within received frames are to be filtered when matched with the MAC address entry of this table.
1.3.6.1.4.1.171.12.9.4.1.1.3INTEGER {other(1), dst-mac-addr(2), src-mac-addr(3), dst-src-mac-addr(4)}read-createcurrent
swCpuAclEthernetSrcMacAddrMask
OBJECT-TYPE
This object specifies the MAC address mask for the source MAC address.
1.3.6.1.4.1.171.12.9.4.1.1.4MacAddressread-createcurrent
swCpuAclEthernetDstMacAddrMask
OBJECT-TYPE
This object specifies the MAC address mask for the destination MAC address.
1.3.6.1.4.1.171.12.9.4.1.1.5MacAddressread-createcurrent
swCpuAclEthernetUse8021p
OBJECT-TYPE
Specifies if the switch will examine the 802.1p priority value in the frame's header or not.
1.3.6.1.4.1.171.12.9.4.1.1.6INTEGER {enabled(1), disabled(2)}read-createcurrent
swCpuAclEthernetUseEthernetType
OBJECT-TYPE
Specifies if the switch will examine the Ethernet type value in each frame's header or not.
1.3.6.1.4.1.171.12.9.4.1.1.7INTEGER {enabled(1), disabled(2)}read-createcurrent
swCpuAclEthernetRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.4.1.1.8RowStatusread-createcurrent
swCpuAclIpTable
OBJECT-TYPE
This table contains software ACL mask IP information. Access profiles will be created on the switch to define which parts of each incoming frame's IP layer 2 header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.4.2not-accessiblecurrent
swCpuAclIpEntry
OBJECT-TYPE
A list of information about the software ACL of the IP Layer.
1.3.6.1.4.1.171.12.9.4.2.1not-accessiblecurrent
swCpuAclIpProfileID
OBJECT-TYPE
The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.4.2.1.1INTEGERread-onlycurrent
swCpuAclIpUsevlan
OBJECT-TYPE
This object indicates if the IP layer VLAN part is examined or not.
1.3.6.1.4.1.171.12.9.4.2.1.2INTEGER {enabled(1), disabled(2)}read-createcurrent
swCpuAclIpIpAddrMaskState
OBJECT-TYPE
This object indicates the status of IP address mask. other (1) - Neither source IP addresses nor destination IP address are masked. dst-ip-addr (2) - Destination IP addresses within received frames are to be filtered when matched with the IP address entry of this table. src-ip-addr (3) - Source IP addresses within received frames are to be filtered when matched with the IP address entry of this table. dst-src-ip-addr (4) - Destination or source IP addresses within received frames are to be filtered when matched with the IP address entry of the table.
1.3.6.1.4.1.171.12.9.4.2.1.3INTEGER {other(1), dst-ip-addr(2), src-ip-addr(3), dst-src-ip-addr(4)}read-createcurrent
swCpuAclIpSrcIpAddrMask
OBJECT-TYPE
This object specifies the IP address mask for the source IP address.
1.3.6.1.4.1.171.12.9.4.2.1.4IpAddressread-createcurrent
swCpuAclIpDstIpAddrMask
OBJECT-TYPE
This object specifies the IP address mask for the destination IP address.
1.3.6.1.4.1.171.12.9.4.2.1.5IpAddressread-createcurrent
swCpuAclIpUseDSCP
OBJECT-TYPE
This object indicates if the DSCP protocol in the packet header is to be examined or not.
1.3.6.1.4.1.171.12.9.4.2.1.6INTEGER {enabled(1), disabled(2)}read-createcurrent
swCpuAclIpUseProtoType
OBJECT-TYPE
This object indicates which protocol will be examined.
1.3.6.1.4.1.171.12.9.4.2.1.7INTEGER {none(1), icmp(2), igmp(3), tcp(4), udp(5), protocolId(6)}read-createcurrent
swCpuAclIpIcmpOption
OBJECT-TYPE
This object indicates which fields are identified for ICMP. none (1)- Both fields are null. type (2)- Type field identified. code (3)- Code field identified. type-code (4)- Both ICMP fields identified.
1.3.6.1.4.1.171.12.9.4.2.1.8INTEGER {none(1), type(2), code(3), type-code(4)}read-createcurrent
swCpuAclIpIgmpOption
OBJECT-TYPE
This object indicates if the IGMP options field is identified or not.
1.3.6.1.4.1.171.12.9.4.2.1.9INTEGER {enable(1), disable(2)}read-createcurrent
swCpuAclIpTcpOption
OBJECT-TYPE
This object indicates the status of filtered addresses of TCP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered is this destination or source port is identified in received frames.
1.3.6.1.4.1.171.12.9.4.2.1.10INTEGER {other(1), dst-addr(2), src-addr(3), dst-src-addr(4)}read-createcurrent
swCpuAclIpUdpOption
OBJECT-TYPE
This object indicates the status of filtered addresses of UDP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
1.3.6.1.4.1.171.12.9.4.2.1.11INTEGER {other(1), dst-addr(2), src-addr(3), dst-src-addr(4)}read-createcurrent
swCpuAclIpTCPorUDPSrcPortMask
OBJECT-TYPE
Specifies a TCP port mask for the source port if swCpuAclIpUseProtoType is TCP. Specifies a UDP port mask for the source port if swCpuAclIpUseProtoType is UDP.
1.3.6.1.4.1.171.12.9.4.2.1.12OCTET STRING (SIZE(2))read-createcurrent
swCpuAclIpTCPorUDPDstPortMask
OBJECT-TYPE
Specifies a TCP port mask for the destination port if swCpuAclIpUseProtoType is TCP. Specifies a UDP port mask for the destination port if swCpuAclIpUseProtoType is UDP.
1.3.6.1.4.1.171.12.9.4.2.1.13OCTET STRING (SIZE(2))read-createcurrent
swCpuAclIpTCPFlagBit
OBJECT-TYPE
Specifies a TCP connection flag mask.
1.3.6.1.4.1.171.12.9.4.2.1.14INTEGER {enable(1), disable(2)}read-createcurrent
swCpuAclIpTCPFlagBitMask
OBJECT-TYPE
A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L is added in the range 1 through 6, for which this node performs transactions where 2^(L - 1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, if you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}.
1.3.6.1.4.1.171.12.9.4.2.1.15INTEGER (0..63)read-createcurrent
swCpuAclIpProtoIDOption
OBJECT-TYPE
Specifies if the switch will examine each frame's Protocol ID field or not.
1.3.6.1.4.1.171.12.9.4.2.1.16INTEGER {enable(1), disable(2)}read-createcurrent
swCpuAclIpProtoID
OBJECT-TYPE
1.3.6.1.4.1.171.12.9.4.2.1.17INTEGER (0..255)read-createcurrent
swCpuAclIpProtoIDMask
OBJECT-TYPE
Specifies that the rule applies to the IP protocol ID and the mask options behind the IP header.
1.3.6.1.4.1.171.12.9.4.2.1.18OCTET STRING (SIZE(20))read-createcurrent
swCpuAclIpRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.4.2.1.19RowStatusread-createcurrent
swCpuAclPktContMaskTable
OBJECT-TYPE
This table contains user-defined software ACL information. Access profiles will be created on the switch to define which part of each incoming frame's user-defined part of the packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.4.3not-accessiblecurrent
swCpuAclPktContMaskEntry
OBJECT-TYPE
A list of information about user-defined software ACLs.
1.3.6.1.4.1.171.12.9.4.3.1not-accessiblecurrent
swCpuAclPktContMaskProfileID
OBJECT-TYPE
The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.4.3.1.1INTEGERread-onlycurrent
swCpuAclPktContMaskOffset0to15
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset0to15) and the mask options.
1.3.6.1.4.1.171.12.9.4.3.1.2OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContMaskOffset16to31
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset16to31) and the mask options.
1.3.6.1.4.1.171.12.9.4.3.1.3OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContMaskOffset32to47
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset32to47) and the mask options.
1.3.6.1.4.1.171.12.9.4.3.1.4OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContMaskOffset48to63
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset48to63) and the mask options.
1.3.6.1.4.1.171.12.9.4.3.1.5OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContMaskOffset64to79
OBJECT-TYPE
Specifies that the rule applies to the packet content (Offset64to79) and the mask options.
1.3.6.1.4.1.171.12.9.4.3.1.6OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContMaskRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.4.3.1.7RowStatusread-createcurrent
swCpuAclIpv6MaskTable
OBJECT-TYPE
This table contains IPv6 software ACL mask information. An access profile will be created on the switch to define which part of each incoming frame's IPv6 part of the packet header will be examined by switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
1.3.6.1.4.1.171.12.9.4.4not-accessiblecurrent
swCpuAclIpv6MaskEntry
OBJECT-TYPE
A list of information about user-defined software ACLs.
1.3.6.1.4.1.171.12.9.4.4.1not-accessiblecurrent
swCpuAclIpv6MaskProfileID
OBJECT-TYPE
The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.4.4.1.1INTEGERread-onlycurrent
swCpuAclIpv6MaskClass
OBJECT-TYPE
Specifies that the rule applies to the IPv6 class field and the mask options.
1.3.6.1.4.1.171.12.9.4.4.1.2INTEGER {enable(1), disable(2)}read-createcurrent
swCpuAclIpv6MaskFlowlabel
OBJECT-TYPE
Specifies that the rule applies to the IPv6 flowlabel field and the mask options.
1.3.6.1.4.1.171.12.9.4.4.1.3INTEGER {enable(1), disable(2)}read-createcurrent
swCpuAclIpv6IpAddrMaskState
OBJECT-TYPE
This object indicates the status of IPv6 address mask. other (1) - Neither source IPv6 address nor destination IPv6 address are masked. dst-ipv6-addr (2) - Packets will be filtered if this destination IPv6 address is identified as a match in received frames. src-ipv6-addr (3) - Packets will be filtered if this source IPv6 address is identified as a match in received frames. dst-src-ipv6-addr (4) - Packets will be filtered if this destination or source IPv6 address is identified as a match in received frames.
1.3.6.1.4.1.171.12.9.4.4.1.4INTEGER {other(1), dst-ipv6-addr(2), src-ipv6-addr(3), dst-src-ipv6-addr(4)}read-createcurrent
swCpuAclIpv6MaskSrcIpv6Mask
OBJECT-TYPE
Specifies that the rule applies to the source IPv6 address and the mask options. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.4.4.1.5Ipv6Addressread-createcurrent
swCpuAclIpv6MaskDstIpv6Mask
OBJECT-TYPE
Specifies that the rule applies to the destination IPv6 address and the mask options. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.4.4.1.6Ipv6Addressread-createcurrent
swCpuAclIpv6MaskRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.4.4.1.7RowStatusread-createcurrent
swCpuACLMaskDelAllState
OBJECT-TYPE
Used to delete all software ACL masks.
1.3.6.1.4.1.171.12.9.4.5INTEGER {none(1), start(2)}read-writecurrent
swCpuAclRuleMgmt
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.9.5
swCpuAclEtherRuleTable
OBJECT-TYPE
This table contains Ethernet software ACL rule information.
1.3.6.1.4.1.171.12.9.5.1not-accessiblecurrent
swCpuAclEtherRuleEntry
OBJECT-TYPE
A list of information about the software ACL rule of the layer 2 part of each packet.
1.3.6.1.4.1.171.12.9.5.1.1not-accessiblecurrent
swCpuAclEtherRuleProfileID
OBJECT-TYPE
The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.5.1.1.1INTEGERread-onlycurrent
swCpuAclEtherRuleAccessID
OBJECT-TYPE
The ID of the software ACL rule entry as it relates to swCpuAclEtherRuleProfileID.
1.3.6.1.4.1.171.12.9.5.1.1.2INTEGER (1..65535)read-onlycurrent
swCpuAclEtherRuleVlan
OBJECT-TYPE
Specifies that the access rule will only apply to this VLAN.
1.3.6.1.4.1.171.12.9.5.1.1.3SnmpAdminString (SIZE(1..32))read-createcurrent
swCpuAclEtherRuleSrcMacAddress
OBJECT-TYPE
Specifies that the access rule will only apply to the packets with this source MAC address.
1.3.6.1.4.1.171.12.9.5.1.1.4MacAddressread-createcurrent
swCpuAclEtherRuleDstMacAddress
OBJECT-TYPE
Specifies that the access rule will only apply to the packets with this destination MAC address.
1.3.6.1.4.1.171.12.9.5.1.1.5MacAddressread-createcurrent
swCpuAclEtherRule8021P
OBJECT-TYPE
Specifies that the access rule will only apply to packets with this 802.1p priority value. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.5.1.1.6INTEGER (-1..7)read-createcurrent
swCpuAclEtherRuleEtherType
OBJECT-TYPE
Specifies that the access rule will only apply to packets with this 802.1Q Ethernet type value in the packet header.
1.3.6.1.4.1.171.12.9.5.1.1.7OCTET STRING (SIZE(2))read-createcurrent
swCpuAclEtherRulePermit
OBJECT-TYPE
This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.5.1.1.8INTEGER {deny(1), permit(2)}read-createcurrent
swCpuAclEtherRuleRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.5.1.1.9RowStatusread-createcurrent
swCpuAclEtherRulePort
OBJECT-TYPE
Specifies that the access rule will only apply to port(s).
1.3.6.1.4.1.171.12.9.5.1.1.10PortListread-createcurrent
swCpuAclIpRuleTable
OBJECT-TYPE
This table contains IPv4 software ACL rule information.
1.3.6.1.4.1.171.12.9.5.2not-accessiblecurrent
swCpuAclIpRuleEntry
OBJECT-TYPE
A list of information about this software ACL rule.
1.3.6.1.4.1.171.12.9.5.2.1not-accessiblecurrent
swCpuAclIpRuleProfileID
OBJECT-TYPE
The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.5.2.1.1INTEGERread-onlycurrent
swCpuAclIpRuleAccessID
OBJECT-TYPE
The ID of the software ACL for the IPv4 rule entry.
1.3.6.1.4.1.171.12.9.5.2.1.2INTEGER (1..65535)read-onlycurrent
swCpuAclIpRuleVlan
OBJECT-TYPE
Specifies that the access rule will apply only to this VLAN.
1.3.6.1.4.1.171.12.9.5.2.1.3SnmpAdminString (SIZE(1..32))read-createcurrent
swCpuAclIpRuleSrcIpaddress
OBJECT-TYPE
Specifies an IP source address.
1.3.6.1.4.1.171.12.9.5.2.1.4IpAddressread-createcurrent
swCpuAclIpRuleDstIpaddress
OBJECT-TYPE
Specifies an IP destination address.
1.3.6.1.4.1.171.12.9.5.2.1.5IpAddressread-createcurrent
swCpuAclIpRuleDscp
OBJECT-TYPE
Specifies the value of DSCP, the value can be configured from 0 to 63. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.5.2.1.6INTEGER (-1..63)read-createcurrent
swCpuAclIpRuleProtocol
OBJECT-TYPE
Specifies the IP protocol which has been configured in swCpuAclIpEntry.
1.3.6.1.4.1.171.12.9.5.2.1.7INTEGER {none(1), icmp(2), igmp(3), tcp(4), udp(5), protocolId(6)}read-onlycurrent
swCpuAclIpRuleType
OBJECT-TYPE
Specifies the rule applies to the value of ICMP type traffic. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.5.2.1.8INTEGER (-1..255)read-createcurrent
swCpuAclIpRuleCode
OBJECT-TYPE
Specifies the rule applies to the value of ICMP code traffic. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.5.2.1.9INTEGER (-1..255)read-createcurrent
swCpuAclIpRuleSrcPort
OBJECT-TYPE
Specifies the rule applies to the range of TCP/UDP source ports. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.5.2.1.10INTEGER (-1..65535)read-createcurrent
swCpuAclIpRuleDstPort
OBJECT-TYPE
Specifies the range of TCP/UDP destination ports. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.5.2.1.11INTEGER (-1..65535)read-createcurrent
swCpuAclIpRuleFlagBits
OBJECT-TYPE
A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L is added in the range 1 through 6, for which this node performs transactions where, 2^(L - 1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, it you want to enable urg bit and ack bit, you should set the value 48{2^(5-1) + 2^(6-1)}.
1.3.6.1.4.1.171.12.9.5.2.1.12INTEGER (0..63)read-createcurrent
swCpuAclIpRuleProtoID
OBJECT-TYPE
Specifies the rule applies to the value of IP protocol ID traffic. A value of -1 indicates that this node is not actively used.
1.3.6.1.4.1.171.12.9.5.2.1.13INTEGER (-1..255)read-createcurrent
swCpuAclIpRuleUserMask
OBJECT-TYPE
Specifies that the rule applies to the IP protocol ID and the range of options behind the IP header.
1.3.6.1.4.1.171.12.9.5.2.1.14OCTET STRING (SIZE(20))read-createcurrent
swCpuAclIpRulePermit
OBJECT-TYPE
This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.5.2.1.15INTEGER {deny(1), permit(2)}read-createcurrent
swCpuAclIpRuleRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.5.2.1.16RowStatusread-createcurrent
swCpuAclIpRulePort
OBJECT-TYPE
Specifies that the access rule will only apply to port(s).
1.3.6.1.4.1.171.12.9.5.2.1.17PortListread-createcurrent
swCpuAclPktContRuleTable
OBJECT-TYPE
This table contains user-defined software ACL rule information.
1.3.6.1.4.1.171.12.9.5.3not-accessiblecurrent
swCpuAclPktContRuleEntry
OBJECT-TYPE
A list of information about the software ACL rule of the user-defined part of each packet.
1.3.6.1.4.1.171.12.9.5.3.1not-accessiblecurrent
swCpuAclPktContRuleProfileID
OBJECT-TYPE
The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.5.3.1.1INTEGERread-onlycurrent
swCpuAclPktContRuleAccessID
OBJECT-TYPE
The ID of the software ACL rule entry related to swCpuAclPktContRuleProfileID.
1.3.6.1.4.1.171.12.9.5.3.1.2INTEGER (1..65535)read-onlycurrent
swCpuAclPktContRuleOffset0to15
OBJECT-TYPE
Specifies that the rule applies to the user-defined packet.
1.3.6.1.4.1.171.12.9.5.3.1.3OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContRuleOffset16to31
OBJECT-TYPE
Specifies that the rule applies to the user-defined packet.
1.3.6.1.4.1.171.12.9.5.3.1.4OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContRuleOffset32to47
OBJECT-TYPE
Specifies that the rule applies to the user-defined packet.
1.3.6.1.4.1.171.12.9.5.3.1.5OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContRuleOffset48to63
OBJECT-TYPE
Specifies that the rule applies to the user-defined packet.
1.3.6.1.4.1.171.12.9.5.3.1.6OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContRuleOffset64to79
OBJECT-TYPE
Specifies that the rule applies to the user-defined packet.
1.3.6.1.4.1.171.12.9.5.3.1.7OCTET STRING (SIZE(16))read-createcurrent
swCpuAclPktContRulePermit
OBJECT-TYPE
This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.5.3.1.8INTEGER {deny(1), permit(2)}read-createcurrent
swCpuAclPktContRuleRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.5.3.1.9RowStatusread-createcurrent
swCpuAclPktContRulePort
OBJECT-TYPE
Specifies that the access rule will only apply to port(s).
1.3.6.1.4.1.171.12.9.5.3.1.10PortListread-createcurrent
swCpuAclIpv6RuleTable
OBJECT-TYPE
This table contains user-defined ACL rule information.
1.3.6.1.4.1.171.12.9.5.4not-accessiblecurrent
swCpuAclIpv6RuleEntry
OBJECT-TYPE
A list of information about the ACL rule of the user-defined part of each packet.
1.3.6.1.4.1.171.12.9.5.4.1not-accessiblecurrent
swCpuAclIpv6RuleProfileID
OBJECT-TYPE
The ID of the ACL mask entry. This is unique in the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.5.4.1.1INTEGERread-onlycurrent
swCpuAclIpv6RuleAccessID
OBJECT-TYPE
The ID of the ACL rule entry in relation to swCpuAclIpv6RuleProfileID.
1.3.6.1.4.1.171.12.9.5.4.1.2INTEGER (1..65535)read-onlycurrent
swCpuAclIpv6RuleClass
OBJECT-TYPE
Specifies that the rule applies to the IPv6 class field.
1.3.6.1.4.1.171.12.9.5.4.1.3INTEGER (0..255)read-createcurrent
swCpuAclIpv6RuleFlowlabel
OBJECT-TYPE
Specifies that the rule applies to the IPv6 flowlabel field.
1.3.6.1.4.1.171.12.9.5.4.1.4OCTET STRING (SIZE(4))read-createcurrent
swCpuAclIpv6RuleSrcIpv6Addr
OBJECT-TYPE
Specifies that the rule applies to the source IPv6 address. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.5.4.1.5Ipv6Addressread-createcurrent
swCpuAclIpv6RuleDstIpv6Addr
OBJECT-TYPE
Specifies that the rule applies to the destination IPv6 address. This should be a 16 byte octet string.
1.3.6.1.4.1.171.12.9.5.4.1.6Ipv6Addressread-createcurrent
swCpuAclIpv6RulePermit
OBJECT-TYPE
This object indicates if the result of the examination is to 'permit' or 'deny'. The default is 'permit' (1). permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered.
1.3.6.1.4.1.171.12.9.5.4.1.7INTEGER {deny(1), permit(2)}read-createcurrent
swCpuAclIpv6RuleRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.5.4.1.8RowStatusread-createcurrent
swCpuAclIpv6RulePort
OBJECT-TYPE
Specifies that the access rule will apply only to port(s).
1.3.6.1.4.1.171.12.9.5.4.1.9PortListread-createcurrent
swAclMeteringMgmt
OBJECT-IDENTITY
1.3.6.1.4.1.171.12.9.6
swAclMeterTable
OBJECT-TYPE
This table is used to configure the flow-based metering function. The access rule must first be created before the parameters of this function can be applied. Users may set the preferred bandwidth for this rule, in Kbps; once the bandwidth has been exceeded, overflow packets will be either dropped or set for a drop precedence, depending on user configuration.
1.3.6.1.4.1.171.12.9.6.1not-accessiblecurrent
swAclMeterEntry
OBJECT-TYPE
This entry displays parameters and configurations set for the flow metering function.
1.3.6.1.4.1.171.12.9.6.1.1not-accessiblecurrent
swAclMeterProfileID
OBJECT-TYPE
The ID of the ACL mask entry is unique in the mask list. The maximum value of this object depends on the device.
1.3.6.1.4.1.171.12.9.6.1.1.1INTEGERread-onlycurrent
swAclMeterAccessID
OBJECT-TYPE
The ID of the ACL rule entry as related to the swAclMeterProfileID.
1.3.6.1.4.1.171.12.9.6.1.1.2INTEGER (1..65535)read-onlycurrent
swAclMeterRate
OBJECT-TYPE
Specifies the committed bandwidth in Kbps for the flow. NOTE: 1. Specifying 0 will disable this flow meter setting. 2. Users must set the swAclMeterActionForRateExceed object to activate this entry.
1.3.6.1.4.1.171.12.9.6.1.1.3INTEGERread-createcurrent
swAclMeterActionForRateExceed
OBJECT-TYPE
Specifies the action to take for those packets exceeding the committed rate. NOTE: Users must also set the swAclMeterRate to activate this entry.
1.3.6.1.4.1.171.12.9.6.1.1.4INTEGER {other(1), drop-packet(2), set-drop-precedence(3), remark-dscp(4)}read-createcurrent
swAclMeterRemarkDscp
OBJECT-TYPE
Mark the packet with a specified DSCP. It can be set when swAclMeterActionForRateExceed sets remark-dscp (3).
1.3.6.1.4.1.171.12.9.6.1.1.5INTEGER (0..63)read-createcurrent
swAclMeterBurstSize
OBJECT-TYPE
This specifies the burst size for the single rate two color mode. The unit is Kbytes. That is to say, 1 means 1kbytes. The set value range is 0..n, the value n is determined by project, the value of 0 means to delete this flow_meter setting.
1.3.6.1.4.1.171.12.9.6.1.1.6INTEGERread-createcurrent
swAclMeterMode
OBJECT-TYPE
tr-tcm: two rate three color mode; sr-tcm: single rate three color mode.
1.3.6.1.4.1.171.12.9.6.1.1.7INTEGER {other(1), tr-tcm(2), sr-tcm(3)}read-createcurrent
swAclMeterTrtcmCir
OBJECT-TYPE
Specifies the 'committed information rate' of 'two rate three color mode'. The unit is Kbps.
1.3.6.1.4.1.171.12.9.6.1.1.8INTEGER (1..156249)read-createcurrent
swAclMeterTrtcmCbs
OBJECT-TYPE
Specifies the 'committed burst size' of 'two rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1Kbytes. 2. This parameter is an optional parameter. The default value is 4*1024. 3. The max set value is 16*1024.
1.3.6.1.4.1.171.12.9.6.1.1.9INTEGER (1..16384)read-createcurrent
swAclMeterTrtcmPir
OBJECT-TYPE
Specifies the 'Peak Information Rate' of 'two rate three color mode'. The unit is Kbps.
1.3.6.1.4.1.171.12.9.6.1.1.10INTEGER (1..156249)read-createcurrent
swAclMeterTrtcmPbs
OBJECT-TYPE
Specifies the 'peak burst size' of 'two rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1kbytes. 2. This parameter is an optional parameter. The default value is 4*1024. 3. The max set value is 16*1024.
1.3.6.1.4.1.171.12.9.6.1.1.11INTEGER (1..16384)read-createcurrent
swAclMeterTrtcmColorMode
OBJECT-TYPE
Specifies the meter mode. The default is color-blind mode. The final color of the packet is determined by the initial color of the packet and the metering result.
1.3.6.1.4.1.171.12.9.6.1.1.12INTEGER {color-blind(1), color-aware(2)}read-createcurrent
swAclMeterTrtcmConformState
OBJECT-TYPE
Specifies the action state when packet is in 'green color'. permit: permit the packet. replace-dscp: change the DSCP value of packet.
1.3.6.1.4.1.171.12.9.6.1.1.13INTEGER {other(1), permit(2), replace-dscp(3)}read-createcurrent
swAclMeterTrtcmConformReplaceDscp
OBJECT-TYPE
Specifies the DSCP value of the packet when the packet is in 'green color'.
1.3.6.1.4.1.171.12.9.6.1.1.14INTEGER (0..63)read-createcurrent
swAclMeterTrtcmConformCounterState
OBJECT-TYPE
Specifies the counter state when the packet is in 'green color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
1.3.6.1.4.1.171.12.9.6.1.1.15INTEGER {enabled(1), disabled(2)}read-createcurrent
swAclMeterTrtcmExceedState
OBJECT-TYPE
Specifies the action state when packet is in 'yellow color'. permit: permit the packet. replace-dscp: change the DSCP value of the packet. drop: drop the packet.
1.3.6.1.4.1.171.12.9.6.1.1.16INTEGER {other(1), permit(2), replace-dscp(3), drop(4)}read-createcurrent
swAclMeterTrtcmExceedReplaceDscp
OBJECT-TYPE
Specifies the DSCP value of packet when packet is in 'yellow color'.
1.3.6.1.4.1.171.12.9.6.1.1.17INTEGER (0..63)read-createcurrent
swAclMeterTrtcmExceedCounterState
OBJECT-TYPE
Specifies the counter state when packet is in 'yellow color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
1.3.6.1.4.1.171.12.9.6.1.1.18INTEGER {enabled(1), disabled(2)}read-createcurrent
swAclMeterTrtcmViolateState
OBJECT-TYPE
Specifies the action state when packet is in 'red color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet.
1.3.6.1.4.1.171.12.9.6.1.1.19INTEGER {other(1), permit(2), replace-dscp(3), drop(4)}read-createcurrent
swAclMeterTrtcmViolateReplaceDscp
OBJECT-TYPE
Specifies the DSCP value of the packet when packet is in 'red color'.
1.3.6.1.4.1.171.12.9.6.1.1.20INTEGER (0..63)read-createcurrent
swAclMeterTrtcmViolateCounterState
OBJECT-TYPE
Specifies the counter state when packet is in 'red color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
1.3.6.1.4.1.171.12.9.6.1.1.21INTEGER {enabled(1), disabled(2)}read-createcurrent
swAclMeterSrtcmCir
OBJECT-TYPE
Specifies the 'committed information rate' of 'single rate three color mode'. The unit is Kbps.
1.3.6.1.4.1.171.12.9.6.1.1.22INTEGER (1..156249)read-createcurrent
swAclMeterSrtcmCbs
OBJECT-TYPE
Specifies the 'committed burst size' of 'single rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1Kbytes. 2. The max set value is 16*1024.
1.3.6.1.4.1.171.12.9.6.1.1.23INTEGER (1..16384)read-createcurrent
swAclMeterSrtcmEbs
OBJECT-TYPE
Specifies the 'Excess burst size' of 'single rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1kbytes. 2. The max set value is 16*1024.
1.3.6.1.4.1.171.12.9.6.1.1.24INTEGER (1..16384)read-createcurrent
swAclMeterSrtcmColorMode
OBJECT-TYPE
Specifies the meter mode. The default is color-blind mode. The final color of packet is determined by the initial color of the packet and the metering result.
1.3.6.1.4.1.171.12.9.6.1.1.25INTEGER {color-blind(1), color-aware(2)}read-createcurrent
swAclMeterSrtcmConformState
OBJECT-TYPE
Specifies the action state when the packet is in 'green color'. permit: permit the packet. replace-dscp: change the DSCP value of packet.
1.3.6.1.4.1.171.12.9.6.1.1.26INTEGER {other(1), permit(2), replace-dscp(3)}read-createcurrent
swAclMeterSrtcmConformReplaceDscp
OBJECT-TYPE
Specifies the DSCP value of the packet when packet is in 'green color'.
1.3.6.1.4.1.171.12.9.6.1.1.27INTEGER (0..63)read-createcurrent
swAclMeterSrtcmConformCounterState
OBJECT-TYPE
Specifies the counter state when the packet is in 'green color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited such that counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
1.3.6.1.4.1.171.12.9.6.1.1.28INTEGER {enabled(1), disabled(2)}read-createcurrent
swAclMeterSrtcmExceedState
OBJECT-TYPE
Specifies the action state when the packet is in 'yellow color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet.
1.3.6.1.4.1.171.12.9.6.1.1.29INTEGER {other(1), permit(2), replace-dscp(3), drop(4)}read-createcurrent
swAclMeterSrtcmExceedReplaceDscp
OBJECT-TYPE
Specifies the DSCP value of the packet when packet is in 'yellow color'.
1.3.6.1.4.1.171.12.9.6.1.1.30INTEGER (0..63)read-createcurrent
swAclMeterSrtcmExceedCounterState
OBJECT-TYPE
Specifies the counter state when the packet is in 'yellow color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited such that counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
1.3.6.1.4.1.171.12.9.6.1.1.31INTEGER {enabled(1), disabled(2)}read-createcurrent
swAclMeterSrtcmViolateState
OBJECT-TYPE
Specifies the action state when the packet is in 'red color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet.
1.3.6.1.4.1.171.12.9.6.1.1.32INTEGER {other(1), permit(2), replace-dscp(3), drop(4)}read-createcurrent
swAclMeterSrtcmViolateReplaceDscp
OBJECT-TYPE
Specifies the DSCP value of the packet when packet is in 'red color'.
1.3.6.1.4.1.171.12.9.6.1.1.33INTEGER (0..63)read-createcurrent
swAclMeterSrtcmViolateCounterState
OBJECT-TYPE
Specifies the counter state when the packet is in 'red color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
1.3.6.1.4.1.171.12.9.6.1.1.34INTEGER {enabled(1), disabled(2)}read-createcurrent
swAclMeterRowStatus
OBJECT-TYPE
This object indicates the status of this entry.
1.3.6.1.4.1.171.12.9.6.1.1.35RowStatusread-createcurrent
swAclMeteringNumOfEntryInUse
OBJECT-TYPE
Used to display total entries of the flow metering.
1.3.6.1.4.1.171.12.9.6.2INTEGERread-onlycurrent