MIBs Depot

DLINKSW-ACL-MIB

Registered at
1.3.6.1.4.1.171.14.28
Last updated
2015-11-26 00:00
Organization
D-Link Corp.
Revisions
2015-11-26 00:00, 2015-07-10 00:00, 2014-01-21 00:00, 2013-11-13 00:00, 2013-08-20 00:00, 2013-02-08 00:00
Namespace
dlink
Source file
DLINKSW-ACL-MIB
Digest
sha256:5c6221c37029af2ebf175cf245cdc1fcc0a4e796d31387da92825712a881faab

Description

The Structure of Access Control List Information for the proprietary enterprise.

Contact

D-Link Corporation Postal: No. 289, Sinhu 3rd Rd., Neihu District, Taipei City 114, Taiwan, R.O.C Tel: +886-2-66000123 E-mail: tsd@dlink.com.tw

Imports

FromSymbols
DLINK-ID-REC-MIBdlinkIndustrialCommon
IF-MIBInterfaceIndex, InterfaceIndexOrZero
INET-ADDRESS-MIBInetAddressIPv6, InetAddressPrefixLength
Q-BRIDGE-MIBVlanId, VlanIdOrNone
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter64, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
DLINK-ID-REC-MIB
DLINKSW-ACL-MIB
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
P-BRIDGE-MIB
Q-BRIDGE-MIB
RFC1158-MIB
RFC1271-MIB
RMON-MIB
RMON2-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC
TOKEN-RING-RMON-MIB

Textual conventions

NameOIDSyntaxAccessStatus
DlinkAclPortOperatorType
TEXTUAL-CONVENTION
The type of UDP/TCP port operator indicates how a packet's TCP/UDP source or destination port number is compared. none(1) - No comparison. eq (2)- equal gt (3)- greater than. lt (4)- less than. neq(5)- not equal range(6)- compares the port value between two numbers. mask(7)- check the bit corresponding to bit value 1, ignore the bit corresponding to bit value 0.
current
DlinkAclRuleType
TEXTUAL-CONVENTION
The action type when the packets match the access profile. permit(1)- Specifies that packets that match the access rule are permitted to be forwarded by the switch. deny(2) - Specifies that packets that match the access rule are not permitted to be forwarded by the switch and will be filtered. deny-cpu(3)- Specifies that packet that match the access rule are prevented to be copied to CPU and redirected to CPU. And the hardware forwarding behavior should not be affected.
current
TcpFlag
TEXTUAL-CONVENTION
The TCP flag fields. Each bit defined as follow: urgent(0) - urgent. acknowledge(1) - acknowledge. push(2) - push, reset(3) - reset. synchronize(4) - synchronize. finish (5) - finish.
current

Objects

NameOIDSyntaxAccessStatus
dAclMIBNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.0
dAclMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1
dAclGeneral
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1.1
dAclReSeqTable
OBJECT-TYPE
A table consists of a list of information about how re-sequencing the rules in access lists.
1.3.6.1.4.1.171.14.28.1.1.1not-accessiblecurrent
dAclReSeqEntry
OBJECT-TYPE
An entry appears in this table for controlling the re-sequence of an access-list.
1.3.6.1.4.1.171.14.28.1.1.1.1not-accessiblecurrent
dAclReSeqAccessListName
OBJECT-TYPE
Indicates the name of an access list.
1.3.6.1.4.1.171.14.28.1.1.1.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dAclReSeqStartingNumber
OBJECT-TYPE
Indicates the initial value of sequence number of the corresponding access list.
1.3.6.1.4.1.171.14.28.1.1.1.1.2Integer32 (1..65535)read-writecurrent
dAclReSeqIncrement
OBJECT-TYPE
Indicates the number that the sequence numbers step. If the increment value is 5 and the beginning sequence number is 20, the subsequent sequence numbers are 25, 30, 35, 40, and so on.
1.3.6.1.4.1.171.14.28.1.1.1.1.3Integer32 (1..32)read-writecurrent
dAclMac
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1.2
dAclMacAccessListNumber
OBJECT-TYPE
Indicates the number of entries present in the MAC access list table.
1.3.6.1.4.1.171.14.28.1.2.1Unsigned32read-onlycurrent
dAclMacAccessListTable
OBJECT-TYPE
The table contains information about MAC access list.
1.3.6.1.4.1.171.14.28.1.2.2not-accessiblecurrent
dAclMacAccessListEntry
OBJECT-TYPE
An entry defined in dAclMacAccessListTable. An entry is created/removed when an MAC access list is created/deleted.
1.3.6.1.4.1.171.14.28.1.2.2.1not-accessiblecurrent
dAclMacAccessListName
OBJECT-TYPE
The name of the MAC access list.
1.3.6.1.4.1.171.14.28.1.2.2.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dAclMacAccessListRowStatus
OBJECT-TYPE
This object allows the dynamic creation and deletion of a MAC access list.
1.3.6.1.4.1.171.14.28.1.2.2.1.2RowStatusread-createcurrent
dAclMacAccessListId
OBJECT-TYPE
The number of the MAC access list. If user specify value zero(0) for this node, agent will assign a number for it. After the table created, this node should not be changed.
1.3.6.1.4.1.171.14.28.1.2.2.1.3Integer32read-createcurrent
dAclMacAccessListCounterEnabled
OBJECT-TYPE
This object indicates the counter state of the access list is enabled('true') or disabled('false'). And the counter state just for the all interface that applied the access list in dAclMacAccessGroupTable.
1.3.6.1.4.1.171.14.28.1.2.2.1.4TruthValueread-createcurrent
dAclMacAccessListClearStatAction
OBJECT-TYPE
This object is used to clear statistics of the access list when set to 'clear'. No action is taken if this object is set to 'noOp'. The 'clear' action just for the all interface that applied the access list in dAclMacAccessGroupTable. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.28.1.2.2.1.5INTEGER {clear(1), noOp(2)}read-createcurrent
dAclMacAccessListRemark
OBJECT-TYPE
The description of the MAC access list.
1.3.6.1.4.1.171.14.28.1.2.2.1.6DisplayString (SIZE(0..255))read-createcurrent
dAclMacAccessRuleTable
OBJECT-TYPE
A table consists of a list of rules for the MAC access list.
1.3.6.1.4.1.171.14.28.1.2.3not-accessiblecurrent
dAclMacAccessRuleEntry
OBJECT-TYPE
An entry is defined dAclMacAccessRuleTable. The first instance identifier index value identifies the dAclMacAccessListEntry that a MAC access rule (dAclMacAccessRuleEntry) belongs to. An entry is removed from this table when its corresponding dAclMacAccessListEntry is deleted.
1.3.6.1.4.1.171.14.28.1.2.3.1not-accessiblecurrent
dAclMacAccessRuleSn
OBJECT-TYPE
Specifies the sequence number of this rule. The lower the number is, the higher the priority of the rule. The special value of 0 means the sequence number will be automatically determined by the agent.
1.3.6.1.4.1.171.14.28.1.2.3.1.1Integer32 (0..65535)not-accessiblecurrent
dAclMacAccessRuleRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.2.3.1.2RowStatusread-createcurrent
dAclMacAccessRuleAction
OBJECT-TYPE
This object indicates the result of the packet examination is to permit or deny or prevent to CPU.
1.3.6.1.4.1.171.14.28.1.2.3.1.3DlinkAclRuleTyperead-createcurrent
dAclMacAccessRuleSrcMacAddr
OBJECT-TYPE
Specifies a source MAC address.
1.3.6.1.4.1.171.14.28.1.2.3.1.4MacAddressread-createcurrent
dAclMacAccessRuleSrcMacWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of source MAC addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any source MAC address is specified. When the value of all '00'Hs indicates host source MAC address is specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.5MacAddressread-createcurrent
dAclMacAccessRuleDstMacAddr
OBJECT-TYPE
Specifies a destination MAC address.
1.3.6.1.4.1.171.14.28.1.2.3.1.6MacAddressread-createcurrent
dAclMacAccessRuleDstMacWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of destination MAC addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any destination MAC address is specified. When the value of all '00'Hs indicates host destination MAC address is specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.7MacAddressread-createcurrent
dAclMacAccessRulePacketType
OBJECT-TYPE
Specifies the Ethernet frame type. The value of none (1) means the frame type is not specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.8INTEGER {none(1), ethernet(2), llc(3)}read-createcurrent
dAclMacAccessRuleEthernetType
OBJECT-TYPE
Specifies the Ethernet type for an Ethernet II or SNAP packet. The special value of -1 means the Ethernet type value is not specified. It is only meaningful when the dAclMacAccessRulePacketType is 'ethernet'.
1.3.6.1.4.1.171.14.28.1.2.3.1.9Integer32 (-1 | 0..65535)read-createcurrent
dAclMacAccessRuleLlcDSAP
OBJECT-TYPE
Specifies the DSAP value for the LLC packet. If the value is -1, it means the DSAP number is not specified. It is only meaningful when the dAclMacAccessRulePacketType is 'llc'.
1.3.6.1.4.1.171.14.28.1.2.3.1.10Integer32 (-1 | 0..255)read-createobsolete
dAclMacAccessRuleLlcSSAP
OBJECT-TYPE
Specifies the SSAP value for the LLC packet. If the value is -1, it means the SSAP number is not specified. It is only meaningful when the dAclMacAccessRulePacketType is 'llc'.
1.3.6.1.4.1.171.14.28.1.2.3.1.11Integer32 (-1 | 0..255)read-createobsolete
dAclMacAccessRuleLlcCntl
OBJECT-TYPE
Specifies the control field for the LLC packet. If the value is -1, it means the SSAP number is not specified. It is only meaningful when the dAclMacAccessRulePacketType is 'llc'.
1.3.6.1.4.1.171.14.28.1.2.3.1.12Integer32 (-1 | 0..255)read-createobsolete
dAclMacAccessRuleDot1p
OBJECT-TYPE
Specifies the priority value. The value of -1 means the priority is not specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.13Integer32 (-1 | 0..7)read-createcurrent
dAclMacAccessRuleInnerDot1p
OBJECT-TYPE
Specifies the inner priority value. The value of -1 means the inner priority is not specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.14Integer32 (-1 | 0..7)read-createcurrent
dAclMacAccessRuleVlanID
OBJECT-TYPE
Specifies the VLAN ID. A value of zero indicates the VLAN ID is not specified. This node and dAclMacAccessRuleVlanRangeMin/dAclMacAccessRuleVlanRangeMax cannot be specified at same time in a row.
1.3.6.1.4.1.171.14.28.1.2.3.1.15VlanIdOrNoneread-createcurrent
dAclMacAccessRuleInnerVlanID
OBJECT-TYPE
Specifies the inner VLAN ID. A value of zero indicates the inner VLAN ID is not specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.16VlanIdOrNoneread-createcurrent
dAclMacAccessRuleTimeName
OBJECT-TYPE
Specifies the name of time-period profile associated with the access-list delineating its activation period. The value 'NULL' means that this rule is not bound with any Time mechanism.
1.3.6.1.4.1.171.14.28.1.2.3.1.17DisplayStringread-createcurrent
dAclMacAccessRuleEthernetTypeMask
OBJECT-TYPE
Specifies the mask for ethernet type defined by dAclMacAccessRuleEthernetType. Valid values are from 0x0000 to 0xFFFF. Default value is 0xFFFF. This node is valid only for the dAclMacAccessRuleEthernetType specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.18OCTET STRING (SIZE(2))read-createcurrent
dAclMacAccessRuleDot1pMask
OBJECT-TYPE
Specifies the mask for priority defined by dAclMacAccessRuleDot1p. Valid values are from 0x00 to 0x07. Default value is 0x07. This node is valid only for the dAclMacAccessRuleDot1p specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.19OCTET STRING (SIZE(1))read-createcurrent
dAclMacAccessRuleInnerDot1pMask
OBJECT-TYPE
Specifies the mask for inner priority defined by dAclMacAccessRuleInnerDot1p. Valid values are from 0x00 to 0x07. Default value is 0x07. This node is valid only for the dAclMacAccessRuleInnerDot1p specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.20OCTET STRING (SIZE(1))read-createcurrent
dAclMacAccessRuleVlanIDMask
OBJECT-TYPE
Specifies the mask for VLAN ID defined by dAclMacAccessRuleVlanID. Valid values are from 0x0000 to 0x0FFF. This node and dAclMacAccessRuleVlanRangeMin/dAclMacAccessRuleVlanRangeMax cannot be specified at same time in a row. Default value is 0x0FFF. This node is valid only for the dAclMacAccessRuleVlanID specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.21OCTET STRING (SIZE(2))read-createcurrent
dAclMacAccessRuleInnerVlanIDMask
OBJECT-TYPE
Specifies the mask for inner VLAN ID defined by dAclMacAccessRuleInnerVlanID. Valid values are from 0x0000 to 0x0FFF. Default value is 0x0FFF. This node is valid only for the dAclMacAccessRuleInnerVlanID specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.22OCTET STRING (SIZE(2))read-createcurrent
dAclMacAccessRuleVlanRangeMin
OBJECT-TYPE
Specifies the minimum outer VLAN ID of a VLAN range. A value of zero indicates the VLAN range is not specified. This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot be specified at same time in a row. This node is valid only for the dAclMacAccessRuleVlanRangeMax specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.23VlanIdOrNoneread-createcurrent
dAclMacAccessRuleVlanRangeMax
OBJECT-TYPE
Specifies the maximum outer VLAN ID of a VLAN range. A value of zero indicates the VLAN range is not specified. This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot be specified at same time in a row. This node is valid only for the dAclMacAccessRuleVlanRangeMin specified.
1.3.6.1.4.1.171.14.28.1.2.3.1.24VlanIdOrNoneread-createcurrent
dAclMacAccessGroupTable
OBJECT-TYPE
The table represents a list of MAC access group configuration.
1.3.6.1.4.1.171.14.28.1.2.4not-accessiblecurrent
dAclMacAccessGroupEntry
OBJECT-TYPE
An entry in dAclMacAccessGroupTable contains interface specific MAC access list association.
1.3.6.1.4.1.171.14.28.1.2.4.1not-accessiblecurrent
dAclMacAccessGroupIfIndex
OBJECT-TYPE
Indicates the ifIndex of the interface. Only physical port is valid interface.
1.3.6.1.4.1.171.14.28.1.2.4.1.1InterfaceIndexnot-accessiblecurrent
dAclMacAccessGroupApplyDirection
OBJECT-TYPE
Indicates whether this access list is to be attached to ingress or egress direction.
1.3.6.1.4.1.171.14.28.1.2.4.1.2INTEGER {inbound(1), outbound(2)}not-accessiblecurrent
dAclMacAccessGroupRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.2.4.1.3RowStatusread-createcurrent
dAclMacAccessGroupAclName
OBJECT-TYPE
The name of the MAC access list to be applied.
1.3.6.1.4.1.171.14.28.1.2.4.1.4DisplayString (SIZE(1..32))read-createcurrent
dAclMacAccessGroupAclId
OBJECT-TYPE
The ID of the MAC access list to be applied. User maybe specify access list ID(by this object) or name (by dAclMacAccessGroupAclName) to be applied. If both access list ID and name are specified, the access list name specified by dAclMacAccessGroupAclName will be take.
1.3.6.1.4.1.171.14.28.1.2.4.1.5Integer32read-createcurrent
dAclIp
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1.3
dAclIpAccessListNumber
OBJECT-TYPE
Indicates the number of entries present in the IP access list table.
1.3.6.1.4.1.171.14.28.1.3.1Unsigned32read-onlycurrent
dAclIpAccessListTable
OBJECT-TYPE
The table contains IP access list configuration.
1.3.6.1.4.1.171.14.28.1.3.2not-accessiblecurrent
dAclIpAccessListEntry
OBJECT-TYPE
An entry defined in dAclIpAccessListTable. An entry is created/removed when an IP access list is created/deleted.
1.3.6.1.4.1.171.14.28.1.3.2.1not-accessiblecurrent
dAclIpAccessListName
OBJECT-TYPE
The name of the IP access list.
1.3.6.1.4.1.171.14.28.1.3.2.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dAclIpAccessListRowStatus
OBJECT-TYPE
This object allows the dynamic creation and deletion of an IP access list.
1.3.6.1.4.1.171.14.28.1.3.2.1.2RowStatusread-createcurrent
dAclIpAccessExtended
OBJECT-TYPE
This object indicates the IP access list is extended ('true') or standard ('false'). A standard ip access list means only IP address related i.e. source or destination IP address is specified for the filter. For an extended IP access list, more fields can be chosen for the filter.
1.3.6.1.4.1.171.14.28.1.3.2.1.3TruthValueread-createcurrent
dAclIpAccessListId
OBJECT-TYPE
The number of the IP access list. If user specify value zero(0) for this node, agent will assign a number for it. After the table created, this node should not be changed.
1.3.6.1.4.1.171.14.28.1.3.2.1.4Integer32read-createcurrent
dAclIpAccessListCounterEnabled
OBJECT-TYPE
This object indicates the counter state of the access list is enabled('true') or disabled('false'). And the counter just for the all interface that applied the access list in dAclIpAccessGroupTable.
1.3.6.1.4.1.171.14.28.1.3.2.1.5TruthValueread-createcurrent
dAclIpAccessListClearStatAction
OBJECT-TYPE
This object is used to clear statistics of the access list when set to 'clear'. No action is taken if this object is set to 'noOp'. The 'clear' action just for the all interface that applied the access list in dAclIpAccessGroupTable. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.28.1.3.2.1.6INTEGER {clear(1), noOp(2)}read-createcurrent
dAclIpAccessListRemark
OBJECT-TYPE
The description of the IP access list.
1.3.6.1.4.1.171.14.28.1.3.2.1.7DisplayString (SIZE(0..255))read-createcurrent
dAclIpAccessRuleTable
OBJECT-TYPE
The table contains a list of IP access rules for IP access lists.
1.3.6.1.4.1.171.14.28.1.3.3not-accessiblecurrent
dAclIpAccessRuleEntry
OBJECT-TYPE
An entry is defined dAclIpAccessRuleTable. The first instance identifier index value identifies the dAclIpAccessListEntry that an IP access rule (dAclIpAccessRuleEntry) belongs to. An entry is removed from this table when its corresponding dAclIpAccessRuleEntry is deleted.
1.3.6.1.4.1.171.14.28.1.3.3.1not-accessiblecurrent
dAclIpAccessRuleSn
OBJECT-TYPE
Specifies the sequence number of this rule. The lower the number is, the higher the priority of the rule. The special value of 0 means the sequence number will be automatically determined by the agent.
1.3.6.1.4.1.171.14.28.1.3.3.1.1Integer32 (0..65535)not-accessiblecurrent
dAclIpAccessRuleRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.3.3.1.2RowStatusread-createcurrent
dAclIpAccessRuleAction
OBJECT-TYPE
This object indicates the result of the packet examination is to permit or deny or prevent to CPU.
1.3.6.1.4.1.171.14.28.1.3.3.1.3DlinkAclRuleTyperead-createcurrent
dAclIpAccessRuleProtocol
OBJECT-TYPE
Specifies the IP protocol.
1.3.6.1.4.1.171.14.28.1.3.3.1.4INTEGER {none(0), userDefine(1), tcp(2), udp(3), icmp(4), gre(5), esp(6), eigrp(7), igmp(8), ospf(9), pim(10), vrrp(11), ipinip(12), pcp(13)}read-createcurrent
dAclIpAccessRuleUserDefProtocol
OBJECT-TYPE
Specifies the user defined protocol ID when the dAclIpAccessRuleProtocol is 'userDefine (1)'. The value of -1 means the user defined protocol ID is not specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.5Integer32 (-1 | 0..255)read-createcurrent
dAclIpAccessRuleSrcAddr
OBJECT-TYPE
Specifies a source IP address.
1.3.6.1.4.1.171.14.28.1.3.3.1.6IpAddressread-createcurrent
dAclIpAccessRuleSrcWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of source IP addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any IP source address is specified. When the value of all '00'Hs indicates host IP source address is specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.7IpAddressread-createcurrent
dAclIpAccessRuleDstAddr
OBJECT-TYPE
Specifies a destination IP address.
1.3.6.1.4.1.171.14.28.1.3.3.1.8IpAddressread-createcurrent
dAclIpAccessRuleDstWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of destination IP addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any IP destination address is specified. When the value of all '00'Hs indicates host IP destination address is specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.9IpAddressread-createcurrent
dAclIpAccessRuleSrcOperator
OBJECT-TYPE
This object indicates how a packet's source TCP/UDP port number is compared. When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses the dAclIpAccessRuleSrcPort as an operand which is the only one needed. When the value of this object is range(6) needs 2 operands. One is dAclIpAccessRuleSrcPort, which is the starting port number of the range, and the other operand is dAclIpAccessRuleSrcPortRange, which is the ending port number of the range. When the value of this object is mask(7) needs 2 operands. One is dAclIpAccessRuleSrcPort, the other operand is dAclIpAccRuleSrcPortMask. This object is used for TCP/UDP protocol only, hence when the object 'dAclIpAccessRuleProtocol' is set to other than TCP/UDP, the object has to be 'none(1)'.
1.3.6.1.4.1.171.14.28.1.3.3.1.10DlinkAclPortOperatorTyperead-createcurrent
dAclIpAccessRuleSrcPort
OBJECT-TYPE
This object indicates the source port number of TCP/UDP protocol. If the value is -1, it means the value is not specified. If the dAclIpAccessRuleSrcOperator object in the same row is range(6), this object will be the starting port number of the port range. This object only can be configured dAclIpAccessRuleSrcOperator in the same row is not 'none(1)'.
1.3.6.1.4.1.171.14.28.1.3.3.1.11Integer32 (-1..65535)read-createcurrent
dAclIpAccessRuleSrcPortRange
OBJECT-TYPE
The source port number of the TCP/UDP protocol. If the dAclIpAccessRuleSrcOperator object in the same row is range(6), this object will be the ending port number of the port range. The value of -1 means the ending port number is not specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.12Integer32 (-1..65535)read-createcurrent
dAclIpAccessRuleDstOperator
OBJECT-TYPE
This object indicates how a packet's TCP/UDP destination port number is compared. When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses the dAclIpAccessRuleSrcPort as an operand which is the only one needed. When the value of this object is range(6) needs 2 operands. One is dAclIpAccessRuleSrcPort, which is the starting port number of the range, and the other operand is dAclIpAccessRuleDstPortRange, which is the ending port number of the range. When the value of this object is mask(7) needs 2 operands. One is dAclIpAccessRuleDstPort, the other operand is dAclIpAccRuleDstPortMask. This object is used for TCP/UDP protocol only, hence when the object 'dAclIpAccessRuleProtocol' is set to other than TCP/UDP, the object has to be 'none(1)'.
1.3.6.1.4.1.171.14.28.1.3.3.1.13DlinkAclPortOperatorTyperead-createcurrent
dAclIpAccessRuleDstPort
OBJECT-TYPE
This object indicates the destination port number of TCP/UDP protocol. If the value is -1, it means the value is not specified. If the dAclIpAccessRuleDstOperator object in the same row is range(6), this object will be the starting port number of the port range. This object only can be configured dAclIpAccessRuleDstOperator in the same row is not 'none(1)'.
1.3.6.1.4.1.171.14.28.1.3.3.1.14Integer32 (-1..65535)read-createcurrent
dAclIpAccessRuleDstPortRange
OBJECT-TYPE
The destination port number of the TCP/UDP protocol. If the dAclIpAccessRuleDstOperator object in the same row is range(6), this object will be the ending port number of the port range. The value of -1 means the ending port number is not specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.15Integer32 (-1..65535)read-createcurrent
dAclIpAccessRuleQosPrecedence
OBJECT-TYPE
Specifies the value of precedence. The value of -1 means the value is not specified or not applicable. dAclIpAccessRuleQosPrecedence and dAclIpAccessRuleQosDscp cannot be specified at same time in a row.
1.3.6.1.4.1.171.14.28.1.3.3.1.16Integer32 (-1 | 0..7)read-createcurrent
dAclIpAccessRuleQosTos
OBJECT-TYPE
Specifies the value of type of service. The value of -1 means the value is not specified or not applicable. dAclIpAccessRuleQosTos and dAclIpAccessRuleQosDscp cannot be specified at same time in a row.
1.3.6.1.4.1.171.14.28.1.3.3.1.17Integer32 (-1 | 0..15)read-createcurrent
dAclIpAccessRuleQosDscp
OBJECT-TYPE
Specifies the value of DSCP code. The value of -1 means the value is not specified or not applicable. Neither dAclIpAccessRuleQosPrecedence nor dAclIpAccessRuleQosTos cannot be specified with dAclIpAccessRuleQosDscp at same time in a row.
1.3.6.1.4.1.171.14.28.1.3.3.1.18Integer32 (-1 | 0..63)read-createcurrent
dAclIpAccessRuleIcmpType
OBJECT-TYPE
This object indicates the type of ICMP protocol. If the value is -1, it means the value is not specified. This object is used for ICMP protocol only, hence when the object 'dAclIpAccessRuleProtocol' is set to other than ICMP, the object has to be -1.
1.3.6.1.4.1.171.14.28.1.3.3.1.19Integer32 (-1 | 0..255)read-createcurrent
dAclIpAccessRuleIcmpCode
OBJECT-TYPE
This object indicates the code of ICMP protocol. If the value is -1, it means the value is not specified. This object is used for ICMP protocol only, hence when the object 'dAclIpAccessRuleProtocol' is set to other than ICMP, the object has to be -1.
1.3.6.1.4.1.171.14.28.1.3.3.1.20Integer32 (-1 | 0..255)read-createcurrent
dAclIpAccessRuleTimeName
OBJECT-TYPE
Specifies the name of time-period profile associated with the access-list delineating its activation period. The value 'NULL' means that this rule is not bound with any Time mechanism.
1.3.6.1.4.1.171.14.28.1.3.3.1.21DisplayStringread-createcurrent
dAclIpAccRuleTcpFlag
OBJECT-TYPE
Specifies the TCP flag fields. This node is available only for TCP protocol. The default value for this node is empty set, which means no TCP flag values are set.
1.3.6.1.4.1.171.14.28.1.3.3.1.22TcpFlagread-createcurrent
dAclIpAccRuleFragments
OBJECT-TYPE
This object indicates the Packet fragment filtering status is enabled('true') or disabled('false').
1.3.6.1.4.1.171.14.28.1.3.3.1.23TruthValueread-createcurrent
dAclIpAccRuleUserDefProtocolMask
OBJECT-TYPE
Specifies the mask for protocol ID defined by dAclIpAccessRuleUserDefProtocol. Valid values are from 0x00 to 0xFF. Default value is 0xFF. This node is valid only for the dAclIpAccessRuleUserDefProtocol specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.24OCTET STRING (SIZE(1))read-createcurrent
dAclIpAccRuleSrcPortMask
OBJECT-TYPE
Specifies the mask for L4 source port defined by dAclIpAccessRuleSrcPort. Valid values are from 0x0 to 0xFFFF. Default value is 0xFFFF. This object only can be configured dAclIpAccessRuleSrcOperator in the same row is 'mask(7)'. This node is valid only for the dAclIpAccessRuleSrcPort specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.25OCTET STRING (SIZE(2))read-createcurrent
dAclIpAccRuleDstPortMask
OBJECT-TYPE
Specifies the mask for L4 destination port defined by dAclIpAccessRuleDstPort. Valid values are from 0x0 to 0xFFFF. Default value is 0xFFFF. This object only can be configured dAclIpAccessRuleDstOperator in the same row is 'mask(7)'. This node is valid only for the dAclIpAccessRuleDstPort specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.26OCTET STRING (SIZE(2))read-createcurrent
dAclIpAccRuleQosPrecedenceMask
OBJECT-TYPE
Specifies the mask for ip precedence defined by dAclIpAccessRuleQosPrecedence. Valid values are from 0x0 to 0x7. Default value is 0x7. This node is valid only for the dAclIpAccessRuleQosPrecedence specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.27OCTET STRING (SIZE(1))read-createcurrent
dAclIpAccRuleQosTosMask
OBJECT-TYPE
Specifies the mask for type of service defined by dAclIpAccessRuleQosTos. Valid values are from 0x0 to 0xF. Default value is 0xF. This node is valid only for the dAclIpAccessRuleQosTos specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.28OCTET STRING (SIZE(1))read-createcurrent
dAclIpAccRuleQosDscpMask
OBJECT-TYPE
Specifies the mask for DSCP code defined by dAclIpAccessRuleQosDscp. Valid values are from 0x0 to 0x3F. Default value is 0x3F. This node is valid only for the dAclIpAccessRuleQosDscp specified.
1.3.6.1.4.1.171.14.28.1.3.3.1.29OCTET STRING (SIZE(1))read-createcurrent
dAclIpAccessGroupTable
OBJECT-TYPE
The table represents a list of IP access group configuration.
1.3.6.1.4.1.171.14.28.1.3.4not-accessiblecurrent
dAclIpAccessGroupEntry
OBJECT-TYPE
An entry in dAclIpAccessGroupTable contains interface specific IP access list association.
1.3.6.1.4.1.171.14.28.1.3.4.1not-accessiblecurrent
dAclIpAccessGroupIfIndex
OBJECT-TYPE
Indicates the ifIndex of the interface. Only physical port is valid interface.
1.3.6.1.4.1.171.14.28.1.3.4.1.1InterfaceIndexnot-accessiblecurrent
dAclIpAccessGroupApplyDirection
OBJECT-TYPE
Indicates whether this access list is to be attached to ingress or egress direction.
1.3.6.1.4.1.171.14.28.1.3.4.1.2INTEGER {inbound(1), outbound(2)}not-accessiblecurrent
dAclIpAccessGroupStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.3.4.1.3RowStatusread-createcurrent
dAclIpAccessGroupAclName
OBJECT-TYPE
The name of the IP access list to be applied.
1.3.6.1.4.1.171.14.28.1.3.4.1.4DisplayString (SIZE(1..32))read-createcurrent
dAclIpAccessGroupAclId
OBJECT-TYPE
The ID of the IP access list to be applied. User maybe specify access list ID(by this object) or name (by dAclIpAccessGroupAclName) to be applied. If both access list ID and name are specified, the access list name specified by dAclIpAccessGroupAclName will be take.
1.3.6.1.4.1.171.14.28.1.3.4.1.5Integer32read-createcurrent
dAclIPv6
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1.4
dAclIPv6AccessListNumber
OBJECT-TYPE
Indicates the number of entries present in the IPv6 access list table.
1.3.6.1.4.1.171.14.28.1.4.1Unsigned32read-onlycurrent
dAclIPv6AccessListTable
OBJECT-TYPE
The table contains IPv6 access list configuration.
1.3.6.1.4.1.171.14.28.1.4.2not-accessiblecurrent
dAclIPv6AccessListEntry
OBJECT-TYPE
An entry defined in dAclIPv6AccessListTable. An entry is created/removed when an IPv6 access list is created/deleted.
1.3.6.1.4.1.171.14.28.1.4.2.1not-accessiblecurrent
dAclIPv6AccessListName
OBJECT-TYPE
The name of the IPv6 access list.
1.3.6.1.4.1.171.14.28.1.4.2.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dAclIPv6AccessListRowStatus
OBJECT-TYPE
This object allows the dynamic creation and deletion of an IPv6 access list.
1.3.6.1.4.1.171.14.28.1.4.2.1.2RowStatusread-createcurrent
dAclIPv6AccessExtended
OBJECT-TYPE
This object indicates the IPv6 access list is extended ('true') or standard ('false'). A standard ip access list means only IPv6 address related i.e. source or destination IPv6 address is specified for the filter. For an extended IPv6 access list, more fields can be chosen for the filter.
1.3.6.1.4.1.171.14.28.1.4.2.1.3TruthValueread-createcurrent
dAclIPv6AccessListId
OBJECT-TYPE
The number of the IPv6 access list.
1.3.6.1.4.1.171.14.28.1.4.2.1.4Integer32read-createcurrent
dAclIPv6AccessListCounterEnabled
OBJECT-TYPE
This object indicates the counter state of the access list is enabled('true') or disabled('false'). And the counter just for the all interface that applied the access list in dAclIPv6AccessGroupTable.
1.3.6.1.4.1.171.14.28.1.4.2.1.5TruthValueread-createcurrent
dAclIPv6AccessListClearStatAction
OBJECT-TYPE
This object is used to clear statistics of the access list when set to 'clear'. No action is taken if this object is set to 'noOp'. The 'clear' action just for the all interface that applied the access list in dAclIPv6AccessGroupTable. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.28.1.4.2.1.6INTEGER {clear(1), noOp(2)}read-createcurrent
dAclIPv6AccessListRemark
OBJECT-TYPE
The description of the IPv6 access list.
1.3.6.1.4.1.171.14.28.1.4.2.1.7DisplayString (SIZE(0..255))read-createcurrent
dAclIPv6AccessRuleTable
OBJECT-TYPE
The table contains a list of IPv6 access rules for IPv6 access lists.
1.3.6.1.4.1.171.14.28.1.4.3not-accessiblecurrent
dAclIPv6AccessRuleEntry
OBJECT-TYPE
An entry is defined dAclIPv6AccessRuleTable. The first instance identifier index value identifies the dAclIPv6AccessListEntry that an IPv6 access rule (dAclIPv6AccessRuleEntry) belongs to. An entry is removed from this table when its corresponding dAclIPv6AccessRuleEntry is deleted.
1.3.6.1.4.1.171.14.28.1.4.3.1not-accessiblecurrent
dAclIPv6AccessRuleSn
OBJECT-TYPE
Specifies the sequence number of this rule. The lower the number is, the higher the priority of the rule. The special value of 0 means the sequence number will be automatically determined by the agent.
1.3.6.1.4.1.171.14.28.1.4.3.1.1Integer32 (0..65535)not-accessiblecurrent
dAclIPv6AccessRuleRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.4.3.1.2RowStatusread-createcurrent
dAclIPv6AccessRuleAction
OBJECT-TYPE
This object indicates the result of the packet examination is to permit or deny or prevent to CPU.
1.3.6.1.4.1.171.14.28.1.4.3.1.3DlinkAclRuleTyperead-createcurrent
dAclIPv6AccessRuleProtocol
OBJECT-TYPE
Specifies the IP protocol.
1.3.6.1.4.1.171.14.28.1.4.3.1.4INTEGER {none(0), userDefine(1), tcp(2), udp(3), icmp(4), esp(5), pcp(6), sctp(7)}read-createcurrent
dAclIPv6AccessRuleUserDefProtocol
OBJECT-TYPE
Specifies the user defined protocol ID when the dAclIPv6AccessRuleProtocol is 'userDefine (1)'. The value of -1 means the user defined protocol ID is not specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.5Integer32 (-1 | 0..255)read-createcurrent
dAclIPv6AccessRuleSrcAddr
OBJECT-TYPE
Specifies a source IPv6 address.
1.3.6.1.4.1.171.14.28.1.4.3.1.6InetAddressIPv6read-createcurrent
dAclIPv6AccessRuleSrcPrefixLen
OBJECT-TYPE
Specifies the length in bits of source IPv6 address will be matched. In other words, the value of 0 indicates any source IPv6 address is specified. When the value of 128 indicates host IPv6 source address is specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.7InetAddressPrefixLengthread-createcurrent
dAclIPv6AccessRuleDstAddr
OBJECT-TYPE
Specifies a destination IPv6 address.
1.3.6.1.4.1.171.14.28.1.4.3.1.8InetAddressIPv6read-createcurrent
dAclIPv6AccessRuleDstPrefixLen
OBJECT-TYPE
Specifies the length in bits of destination IPv6 address will be matched. In other words, the value of 0 indicates any destination IPv6 address is specified. When the value of 128 indicates host IPv6 destination address is specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.9InetAddressPrefixLengthread-createcurrent
dAclIPv6AccessRuleSrcOperator
OBJECT-TYPE
This object indicates how a packet's TCP/UDP source port number is compared. When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses the dAclIPv6AccessRuleSrcPort as an operand which is the only one needed. When the value of this object is range(6) needs 2 operands. One is dAclIPv6AccessRuleSrcPort, which is the starting port number of the range, and the other operand is dAclIPv6AccessRuleSrcPortRange, which is the ending port number of the range. When the value of this object is mask(7) needs 2 operands. One is dAclIPv6AccessRuleSrcPort, the other operand is dAclIPv6AccessRuleSrcPortMask. This object is used for TCP/UDP protocol only, hence when the object 'dAclIPv6AccessRuleProtocol' is set to other than TCP/UDP, the object has to be 'none(1)'.
1.3.6.1.4.1.171.14.28.1.4.3.1.10DlinkAclPortOperatorTyperead-createcurrent
dAclIPv6AccessRuleSrcPort
OBJECT-TYPE
This object indicates the source port number of TCP/UDP protocol. If the value is -1, it means the value is not specified. If the dAclIPv6AccessRuleSrcOperator object in the same row is range(6), this object will be the starting port number of the port range. This object only can be configured dAclIPv6AccessRuleSrcOperator in the same row is not 'none(1)'.
1.3.6.1.4.1.171.14.28.1.4.3.1.11Integer32 (-1..65535)read-createcurrent
dAclIPv6AccessRuleSrcPortRange
OBJECT-TYPE
The source port number of the TCP/UDP protocol. If the dAclIPv6AccessRuleSrcOperator object in the same row is range(6), this object will be the ending port number of the port range. The value of -1 means the ending port number is not specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.12Integer32 (-1..65535)read-createcurrent
dAclIPv6AccessRuleDstOperator
OBJECT-TYPE
This object indicates how a packet's TCP/UDP destination port number is compared. When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses the dAclIPv6AccessRuleDstPort as an operand which is the only one needed. When the value of this object is range(6) needs 2 operands. One is dAclIPv6AccessRuleDstPort, which is the starting port number of the range, and the other operand is dAclIPv6AccessRuleDstPortRange, which is the ending port number of the range. When the value of this object is mask(7) needs 2 operands. One is dAclIPv6AccessRuleDstPort, the other operand is dAclIPv6AccessRuleDstPortMask. This object is used for TCP/UDP protocol only, hence when the object 'dAclIPv6AccessRuleProtocol' is set to other than TCP/UDP, the object has to be 'none(1)'.
1.3.6.1.4.1.171.14.28.1.4.3.1.13DlinkAclPortOperatorTyperead-createcurrent
dAclIPv6AccessRuleDstPort
OBJECT-TYPE
This object indicates the destination port number of TCP/UDP protocol. If the value is -1, it means the value is not specified. If the dAclIPv6AccessRuleDstOperator object in the same row is range(6), this object will be the starting port number of the port range. This object only can be configured dAclIPv6AccessRuleDstOperator in the same row is not 'none(1)'.
1.3.6.1.4.1.171.14.28.1.4.3.1.14Integer32 (-1..65535)read-createcurrent
dAclIPv6AccessRuleDstPortRange
OBJECT-TYPE
The destination port number of the TCP/UDP protocol. If the dAclIPv6AccessRuleDstOperator object in the same row is range(6), this object will be the ending port number of the port range. The value of -1 means the ending port number is not specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.15Integer32 (-1..65535)read-createcurrent
dAclIPv6AccessRuleDscp
OBJECT-TYPE
Specifies the matching DSCP code value in IPv6 header. The value of -1 means the DSCP value is not specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.16Integer32 (-1 | 0..63)read-createcurrent
dAclIPv6AccessRuleIcmpType
OBJECT-TYPE
This object indicates the type of ICMP protocol. The value of -1 means the ICMP type is not specified. This object is used for ICMP protocol only, hence when the object 'dAclIPv6AccessRuleProtocol' is set to other than ICMP, the object has to be -1.
1.3.6.1.4.1.171.14.28.1.4.3.1.17Integer32 (-1 | 0..255)read-createcurrent
dAclIPv6AccessRuleIcmpCode
OBJECT-TYPE
This object indicates the code of ICMP protocol. If the value is -1, it means the value is not specified. This object is used for ICMP protocol only, hence when the object 'dAclIPv6AccessRuleProtocol' is set to other than ICMP, the object has to be -1.
1.3.6.1.4.1.171.14.28.1.4.3.1.18Integer32 (-1 | 0..255)read-createcurrent
dAclIPv6AccessRuleTimeName
OBJECT-TYPE
Specifies the name of time-period profile associated with the access-list delineating its activation period. The value 'NULL' means that this rule is not bound with any Time mechanism.
1.3.6.1.4.1.171.14.28.1.4.3.1.19DisplayStringread-createcurrent
dAclIPv6AccRuleTcpFlag
OBJECT-TYPE
Specifies the TCP flag fields. And this node is available only for TCP protocol. The default value for this node is empty set, which means no TCP flag values are set.
1.3.6.1.4.1.171.14.28.1.4.3.1.20TcpFlagread-createcurrent
dAclIPv6AccRuleFragments
OBJECT-TYPE
This object indicates the Packet fragment filtering status is enabled('true') or disabled('false').
1.3.6.1.4.1.171.14.28.1.4.3.1.21TruthValueread-createcurrent
dAclIPv6AccRuleFlowLabel
OBJECT-TYPE
This object indicates the Flow label value. The value of -1 means the flow-label value is not specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.22Integer32 (-1 | 0..1048575)read-createcurrent
dAclIPv6AccRuleTrafficClass
OBJECT-TYPE
Specifies the matching traffic class value in IPv6 header. The value of -1 means the traffic class value is not specified. This node and dAclIPv6AccessRuleDscp cannot be specified at same time in a row.
1.3.6.1.4.1.171.14.28.1.4.3.1.23Integer32 (-1 | 0..255)read-createcurrent
dAclIPv6AccRuleUserDefProtocolMask
OBJECT-TYPE
Specifies the mask for protocol ID defined by dAclIPv6AccessRuleUserDefProtocol. Valid values are from 0x00 to 0xFF. Default value is 0xFF. This node is valid only for the dAclIPv6AccessRuleUserDefProtocol specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.24OCTET STRING (SIZE(1))read-createcurrent
dAclIPv6AccRuleSrcPortMask
OBJECT-TYPE
Specifies the mask for L4 source port defined by dAclIPv6AccessRuleSrcPort. Valid values are from 0x0 to 0xFFFF. Default value is 0xFFFF. This object only can be configured dAclIPv6AccessRuleSrcOperator in the same row is 'mask(7)'. This node is valid only for the dAclIPv6AccessRuleSrcPort specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.25OCTET STRING (SIZE(2))read-createcurrent
dAclIPv6AccRuleDstPortMask
OBJECT-TYPE
Specifies the mask for L4 destination port defined by dAclIPv6AccessRuleDstPort. Valid values are from 0x0 to 0xFFFF. Default value is 0xFFFF. This object only can be configured dAclIPv6AccessRuleDstOperator in the same row is 'mask(7)'. This node is valid only for the dAclIPv6AccessRuleDstPort specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.26OCTET STRING (SIZE(2))read-createcurrent
dAclIPv6AccRuleDscpMask
OBJECT-TYPE
Specifies the mask for DSCP code defined by dAclIPv6AccessRuleDscp. Valid values are from 0x0 to 0x3F. Default value is 0x3F. This node is valid only for the dAclIPv6AccessRuleDscp specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.27OCTET STRING (SIZE(1))read-createcurrent
dAclIPv6AccRuleFlowLabelMask
OBJECT-TYPE
Specifies the mask for Flow label value defined by dAclIPv6AccRuleFlowLabel. Valid values are from 0x0 to 0xFFFFF. Default value is 0xFFFFF. This node is valid only for the dAclIPv6AccRuleFlowLabel specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.28OCTET STRING (SIZE(3))read-createcurrent
dAclIPv6AccRuleTrafficClassMask
OBJECT-TYPE
Specifies the mask for traffic class defined by dAclIPv6AccRuleTrafficClass. Valid values are from 0x0 to 0xFF. Default value is 0xFF. This node is valid only for the dAclIPv6AccRuleTrafficClass specified.
1.3.6.1.4.1.171.14.28.1.4.3.1.29OCTET STRING (SIZE(1))read-createcurrent
dAclIPv6AccessGroupTable
OBJECT-TYPE
The table represents a list of IPv6 access group configuration.
1.3.6.1.4.1.171.14.28.1.4.4not-accessiblecurrent
dAclIPv6AccessGroupEntry
OBJECT-TYPE
An entry in dAclIPv6AccessGroupTable contains interface specific IPv6 access list association.
1.3.6.1.4.1.171.14.28.1.4.4.1not-accessiblecurrent
dAclIPv6AccessGroupIfIndex
OBJECT-TYPE
Indicates the ifIndex of the interface. Only physical port is valid interface.
1.3.6.1.4.1.171.14.28.1.4.4.1.1InterfaceIndexnot-accessiblecurrent
dAclIpv6AccessGroupApplyDirection
OBJECT-TYPE
Indicates whether this ACL access list is to be attached to ingress or egress direction.
1.3.6.1.4.1.171.14.28.1.4.4.1.2INTEGER {inbound(1), outbound(2)}not-accessiblecurrent
dAclIPv6AccessGroupStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.4.4.1.3RowStatusread-createcurrent
dAclIPv6AccessGroupAclName
OBJECT-TYPE
The name of the IPv6 access list to be applied.
1.3.6.1.4.1.171.14.28.1.4.4.1.4DisplayString (SIZE(1..32))read-createcurrent
dAclIPv6AccessGroupAclId
OBJECT-TYPE
The ID of the IPv6 access list to be applied. User maybe specify access list ID(by this object) or name (by dAclIPv6AccessGroupAclName) to be applied. If both access list ID and name are specified, the access list name specified by dAclIPv6AccessGroupAclName will be take.
1.3.6.1.4.1.171.14.28.1.4.4.1.5Integer32read-createcurrent
dAclExpert
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1.5
dAclExpertAccessListNumber
OBJECT-TYPE
Indicates the number of entries present in the extended expert access list table.
1.3.6.1.4.1.171.14.28.1.5.1Unsigned32read-onlycurrent
dAclExpertAccessListTable
OBJECT-TYPE
The table contains information about extended expert access list.
1.3.6.1.4.1.171.14.28.1.5.2not-accessiblecurrent
dAclExpertAccessListEntry
OBJECT-TYPE
An entry defined in dAclExpertAccessListTable. An entry is created/removed when an extended expert access list is created/deleted.
1.3.6.1.4.1.171.14.28.1.5.2.1not-accessiblecurrent
dAclExpertAccessListName
OBJECT-TYPE
The name of the extended expert access list.
1.3.6.1.4.1.171.14.28.1.5.2.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dAclExpertAccessListRowStatus
OBJECT-TYPE
This object allows the dynamic creation and deletion of an extended expert access list.
1.3.6.1.4.1.171.14.28.1.5.2.1.2RowStatusread-createcurrent
dAclExpertAccessListId
OBJECT-TYPE
The number of the extended expert access list.
1.3.6.1.4.1.171.14.28.1.5.2.1.3Integer32read-createcurrent
dAclExpertAccessListCounterEnabled
OBJECT-TYPE
This object indicates the counter state of the access list is enabled('true') or disabled('false'). And the counter just for the all interface that applied the access list in dAclExpertAccessGroupTable.
1.3.6.1.4.1.171.14.28.1.5.2.1.4TruthValueread-createcurrent
dAclExpertAccessListClearStatAction
OBJECT-TYPE
This object is used to clear statistics of the access list when set to 'clear'. No action is taken if this object is set to 'noOp'. The 'clear' action just for the all interface that applied the access list in dAclExpertAccessGroupTable. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.28.1.5.2.1.5INTEGER {clear(1), noOp(2)}read-createcurrent
dAclExpertAccessListRemark
OBJECT-TYPE
The description of the Expert access list.
1.3.6.1.4.1.171.14.28.1.5.2.1.6DisplayString (SIZE(0..255))read-createcurrent
dAclExpertAccessRuleTable
OBJECT-TYPE
A table consists of a list of rules for the extended expert access list.
1.3.6.1.4.1.171.14.28.1.5.3not-accessiblecurrent
dAclExpertAccessRuleEntry
OBJECT-TYPE
An entry is defined ddAclExpertAccessRuleTable. The first instance identifier index value identifies the dAclExpertAccessListEntry that a extended expert access rule (dAclExpertAccessRuleEntry) belongs to. An entry is removed from this table when its corresponding dAclExpertAccessListEntry is deleted.
1.3.6.1.4.1.171.14.28.1.5.3.1not-accessiblecurrent
dAclExpertAccRuleSn
OBJECT-TYPE
Specifies the sequence number of this rule. The lower the number is, the higher the priority of the rule. The special value of 0 means the sequence number will be automatically determined by the agent.
1.3.6.1.4.1.171.14.28.1.5.3.1.1Integer32 (0..65535)not-accessiblecurrent
dAclExpertAccRuleRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.5.3.1.2RowStatusread-createcurrent
dAclExpertAccRuleAction
OBJECT-TYPE
This object indicates the result of the packet examination is to permit or deny or prevent to CPU.
1.3.6.1.4.1.171.14.28.1.5.3.1.3DlinkAclRuleTyperead-createcurrent
dAclExpertAccRuleProtocol
OBJECT-TYPE
Specifies the IP protocol.
1.3.6.1.4.1.171.14.28.1.5.3.1.4INTEGER {none(0), userDefine(1), tcp(2), udp(3), icmp(4), gre(5), esp(6), eigrp(7), igmp(8), ospf(9), pim(10), vrrp(11), ipinip(12), pcp(13)}read-createcurrent
dAclExpertAccRuleUserDefProtocol
OBJECT-TYPE
Specifies the user defined protocol ID when the dAclExpertAccRuleProtocol is 'userDefine (1)'. The value of -1 means the user defined protocol ID is not specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.5Integer32 (-1 | 0..255)read-createcurrent
dAclExpertAccRuleSrcIpAddr
OBJECT-TYPE
Specifies a source IP address.
1.3.6.1.4.1.171.14.28.1.5.3.1.6IpAddressread-createcurrent
dAclExpertAccRuleSrcIpWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of source IP addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any IP source address is specified. When the value of all '00'Hs indicates host IP source address is specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.7IpAddressread-createcurrent
dAclExpertAccRuleSrcMacAddr
OBJECT-TYPE
Specifies a source MAC address.
1.3.6.1.4.1.171.14.28.1.5.3.1.8MacAddressread-createcurrent
dAclExpertAccRuleSrcMacWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of source MAC addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any source MAC address is specified. When the value of all '00'Hs indicates host source MAC address is specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.9MacAddressread-createcurrent
dAclExpertAccRuleSrcOperator
OBJECT-TYPE
This object indicates how a packet's source TCP/UDP port number is compared. When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses the dAclExpertAccsRuleSrcPort as an operand which is the only one needed. When the value of this object is range(6) needs 2 operands. One is dAclExpertAccsRuleSrcPort, which is the starting port number of the range, and the other operand is dAclExpertAccsRuleSrcPortRange, which is the ending port number of the range. When the value of this object is mask(7) needs 2 operands. One is dAclExpertAccsRuleSrcPort, the other operand is dAclExpertAccsRuleSrcPortMask. This object is used for TCP/UDP protocol only, hence when the object 'dAclExpertAccRuleProtocol' is set to other than TCP/UDP, the object has to be 'none(1)'.
1.3.6.1.4.1.171.14.28.1.5.3.1.10DlinkAclPortOperatorTyperead-createcurrent
dAclExpertAccRuleSrcPort
OBJECT-TYPE
This object indicates the source port number of TCP/UDP protocol. If the value is -1, it means the value is not specified. If the dAclExpertAccsRuleSrcOperator object in the same row is range(6), this object will be the starting port number of the port range. This object only can be configured dAclExpertAccsRuleSrcOperator in the same row is not 'none(1)'.
1.3.6.1.4.1.171.14.28.1.5.3.1.11Integer32 (-1..65535)read-createcurrent
dAclExpertAccRuleSrcPortRange
OBJECT-TYPE
The source port number of the TCP/UDP protocol. If the dAclExpertAccsRuleSrcOperator object in the same row is range(6), this object will be the ending port number of the port range. The value of -1 means the ending port number is not specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.12Integer32 (-1..65535)read-createcurrent
dAclExpertAccRuleDstIpAddr
OBJECT-TYPE
Specifies a destination IP address.
1.3.6.1.4.1.171.14.28.1.5.3.1.13IpAddressread-createcurrent
dAclExpertAccRuleDstIpWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of destination IP addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any IP destination address is specified. When the value of all '00'Hs indicates host IP destination address is specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.14IpAddressread-createcurrent
dAclExpertAccRuleDstMacAddr
OBJECT-TYPE
Specifies a destination MAC address.
1.3.6.1.4.1.171.14.28.1.5.3.1.15MacAddressread-createcurrent
dAclExpertAccRuleDstMacWildcard
OBJECT-TYPE
This object is a wildcard bitmap to specify a group of destination MAC addresses. The bit value 1 indicates the corresponding bit will be ignored. The bit value 0 indicates the corresponding bit will be checked. In other words, when the value of all 'ff'Hs indicates any destination MAC address is specified. When the value of all '00'Hs indicates host destination MAC address is specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.16MacAddressread-createcurrent
dAclExpertAccRuleDstOperator
OBJECT-TYPE
This object indicates how a packet's TCP/UDP destination port number is compared. When the value of this object is eq(2),gt(3),lt(4) or neq(5) uses the dAclExpertAccsRuleDstPort as an operand which is the only one needed. When the value of this object is range(6) needs 2 operands. One is dAclExpertAccsRuleDstPort, which is the starting port number of the range, and the other operand is dAclExpertAccsRuleDstPortRange, which is the ending port number of the range. When the value of this object is mask(7) needs 2 operands. One is dAclExpertAccsRuleDstPort, the other operand is dAclExpertAccsRuleDstPortMask. This object is used for TCP/UDP protocol only, hence when the object 'dAclExpertAccRuleProtocol' is set to other than TCP/UDP, the object has to be 'none(1)'.
1.3.6.1.4.1.171.14.28.1.5.3.1.17DlinkAclPortOperatorTyperead-createcurrent
dAclExpertAccRuleDstPort
OBJECT-TYPE
This object indicates the destination port number of TCP/UDP protocol. If the value is -1, it means the value is not specified. If the dAclExpertAccsRuleDstOperator object in the same row is range(6), this object will be the starting port number of the port range. This object only can be configured dAclExpertAccsRuleDstOperator in the same row is not 'none(1)'.
1.3.6.1.4.1.171.14.28.1.5.3.1.18Integer32 (-1..65535)read-createcurrent
dAclExpertAccRuleDstPortRange
OBJECT-TYPE
The destination port number of the TCP/UDP protocol. If the dAclExpertAccsRuleDstOperator object in the same row is range(6), this object will be the ending port number of the port range. The value of -1 means the ending port number is not specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.19Integer32 (-1..65535)read-createcurrent
dAclExpertAccRuleVlanID
OBJECT-TYPE
Specifies the VLAN ID. A value of zero indicates the VLAN ID is not specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.20VlanIdOrNoneread-createcurrent
dAclExpertAccRuleInnerVlanID
OBJECT-TYPE
Specifies the inner VLAN ID. A value of zero indicates the inner VLAN ID is not specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.21VlanIdOrNoneread-createcurrent
dAclExpertAccRuleQosPrecedence
OBJECT-TYPE
Specifies the value of precedence. The value of -1 means the value is not specified or not applicable. dAclExpertAccRuleQosPrecedence and dAclExpertAccRuleQosDscp cannot be specified at same time in a row.
1.3.6.1.4.1.171.14.28.1.5.3.1.22Integer32 (-1 | 0..7)read-createcurrent
dAclExpertAccRuleQosTos
OBJECT-TYPE
Specifies the value of type of service. The value of -1 means the value is not specified or not applicable. dAclExpertAccRuleQosTos and dAclExpertAccRuleQosDscp cannot be specified at same time in a row.
1.3.6.1.4.1.171.14.28.1.5.3.1.23Integer32 (-1 | 0..15)read-createcurrent
dAclExpertAccRuleQosDscp
OBJECT-TYPE
Specifies the value of DSCP code. The value of -1 means the value is not specified or not applicable. Neither dAclExpertAccRuleQosPrecedence nor dAclExpertAccRuleQosTos can be specified with dAclExpertAccRuleQosDscp at same time in a row.
1.3.6.1.4.1.171.14.28.1.5.3.1.24Integer32 (-1 | 0..63)read-createcurrent
dAclExpertAccRuleIcmpType
OBJECT-TYPE
This object indicates the type of ICMP protocol. If the value is -1, it means the value is not specified. This object is used for ICMP protocol only, hence when the object 'dAclExpertAccRuleProtocol' is set to other than ICMP, the object has to be -1.
1.3.6.1.4.1.171.14.28.1.5.3.1.25Integer32 (-1 | 0..255)read-createcurrent
dAclExpertAccRuleIcmpCode
OBJECT-TYPE
This object indicates the code of ICMP protocol. If the value is -1, it means the value is not specified. This object is used for ICMP protocol only, hence when the object 'dAclExpertAccRuleProtocol' is set to other than ICMP, the object has to be -1.
1.3.6.1.4.1.171.14.28.1.5.3.1.26Integer32 (-1 | 0..255)read-createcurrent
dAclExpertAccRuleTimeName
OBJECT-TYPE
Specifies the name of time-period profile associated with the access-list delineating its activation period. The value 'NULL' means that this rule is not bound with any Time mechanism.
1.3.6.1.4.1.171.14.28.1.5.3.1.27DisplayStringread-createcurrent
dAclExpertAccRuleTcpFlag
OBJECT-TYPE
Specifies the TCP flag fields. This node is available only for TCP protocol. The default value for this node is empty set, which means no TCP flag values are set.
1.3.6.1.4.1.171.14.28.1.5.3.1.28TcpFlagread-createcurrent
dAclExpertAccRuleFragments
OBJECT-TYPE
This object indicates the Packet fragment filtering status is enabled('true') or disabled('false').
1.3.6.1.4.1.171.14.28.1.5.3.1.29TruthValueread-createcurrent
dAclExpertAccRuleOuterCos
OBJECT-TYPE
Specifies the value of inner priority. The value of -1 means the value is not specified or not applicable.
1.3.6.1.4.1.171.14.28.1.5.3.1.30Integer32 (-1 | 0..7)read-createcurrent
dAclExpertAccRuleInnerCos
OBJECT-TYPE
Specifies the value of inner priority, the node is availabe just for the node dAclExpertAccRuleOuterCos be specified. The value of -1 means the value is not specified or not applicable.
1.3.6.1.4.1.171.14.28.1.5.3.1.31Integer32 (-1 | 0..7)read-createcurrent
dAclExpertAccRuleUserDefProtocolMask
OBJECT-TYPE
Specifies the mask for protocol ID defined by dAclExpertAccRuleUserDefProtocol. Valid values are from 0x00 to 0xFF. Default value is 0xFF. This node is valid only for the dAclExpertAccRuleUserDefProtocol specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.32OCTET STRING (SIZE(1))read-createcurrent
dAclExpertAccRuleSrcPortMask
OBJECT-TYPE
Specifies the mask for L4 source port defined by dAclExpertAccRuleSrcPort. Valid values are from 0x0 to 0xFFFF. Default value is 0xFFFF. This object only can be configured dAclExpertAccRuleSrcOperator in the same row is 'mask(7)'.
1.3.6.1.4.1.171.14.28.1.5.3.1.33OCTET STRING (SIZE(2))read-createcurrent
dAclExpertAccRuleDstPortMask
OBJECT-TYPE
Specifies the mask for L4 destination port defined by dAclExpertAccRuleDstPort. Valid values are from 0x0 to 0xFFFF. Default value is 0xFFFF. This object only can be configured dAclExpertAccRuleDstOperator in the same row is 'mask(7)'.
1.3.6.1.4.1.171.14.28.1.5.3.1.34OCTET STRING (SIZE(2))read-createcurrent
dAclExpertAccRuleVlanIDMask
OBJECT-TYPE
Specifies the mask for VLAN ID defined by dAclExpertAccRuleVlanID. Valid values are from 0x0000 to 0x0FFF. This node and dAclExpertAccRuleVlanRangeMin/dAclExpertAccRuleVlanRangeMax cannot be specified at same time in a row. Default value is 0x0FFF. This node is valid only for the dAclExpertAccRuleVlanID specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.35OCTET STRING (SIZE(2))read-createcurrent
dAclExpertAccRuleInnerVlanIDMask
OBJECT-TYPE
Specifies the mask for inner VLAN ID defined by dAclExpertAccRuleInnerVlanID. Valid values are from 0x0000 to 0x0FFF. Default value is 0x0FFF. This node is valid only for the dAclExpertAccRuleInnerVlanID specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.36OCTET STRING (SIZE(2))read-createcurrent
dAclExpertAccRuleQosPrecedenceMask
OBJECT-TYPE
Specifies the mask for ip precedence defined by dAclExpertAccRuleQosPrecedence. Valid values are from 0x0 to 0x7. Default value is 0x7. This node is valid only for the dAclExpertAccRuleQosPrecedence specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.37OCTET STRING (SIZE(1))read-createcurrent
dAclExpertAccRuleQosTosMask
OBJECT-TYPE
Specifies the mask for type of service defined by dAclExpertAccRuleQosTos. Valid values are from 0x0 to 0xF. Default value is 0xF. This node is valid only for the dAclExpertAccRuleQosTos specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.38OCTET STRING (SIZE(1))read-createcurrent
dAclExpertAccRuleQosDscpMask
OBJECT-TYPE
Specifies the mask for DSCP code defined by dAclExpertAccRuleQosDscp. Valid values are from 0x0 to 0x3F. Default value is 0x3F. This node is valid only for the dAclExpertAccRuleQosDscp specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.39OCTET STRING (SIZE(1))read-createcurrent
dAclExpertAccRuleOuterCosMask
OBJECT-TYPE
Specifies the mask for priority defined by dAclExpertAccRuleOuterCos. Valid values are from 0x00 to 0x07. Default value is 0x07. This node is valid only for the dAclExpertAccRuleOuterCos specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.40OCTET STRING (SIZE(1))read-createcurrent
dAclExpertAccRuleInnerCosMask
OBJECT-TYPE
Specifies the mask for inner priority defined by dAclExpertAccRuleInnerCos. Valid values are from 0x00 to 0x07. Default value is 0x07. This node is valid only for the dAclExpertAccRuleInnerCos specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.41OCTET STRING (SIZE(1))read-createcurrent
dAclExpertAccRuleVlanRangeMin
OBJECT-TYPE
Specifies the minimum outer VLAN ID of a VLAN range. A value of zero indicates the VLAN range is not specified. This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot be specified at same time in a row. This node is valid only for the dAclExpertAccRuleVlanRangeMax specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.42VlanIdOrNoneread-createcurrent
dAclExpertAccRuleVlanRangeMax
OBJECT-TYPE
Specifies the maximum outer VLAN ID of a VLAN range. A value of zero indicates the VLAN range is not specified. This node and dAclMacAccessRuleVlanID/dAclMacAccessRuleVlanIDMask cannot be specified at same time in a row. This node is valid only for the dAclExpertAccRuleVlanRangeMin specified.
1.3.6.1.4.1.171.14.28.1.5.3.1.43VlanIdOrNoneread-createcurrent
dAclExpertAccessGroupTable
OBJECT-TYPE
The table represents a list of extended expert access group configuration.
1.3.6.1.4.1.171.14.28.1.5.4not-accessiblecurrent
dAclExpertAccessGroupEntry
OBJECT-TYPE
An entry in dAclExpertAccessGroupTable contains interface specific extended expert access list association.
1.3.6.1.4.1.171.14.28.1.5.4.1not-accessiblecurrent
dAclExpertAccessGroupIfIndex
OBJECT-TYPE
Indicates the ifIndex of the interface. Only physical port is valid interface.
1.3.6.1.4.1.171.14.28.1.5.4.1.1InterfaceIndexnot-accessiblecurrent
dAclExpertAccessGroupApplyDirection
OBJECT-TYPE
Indicates whether this ACL access list is to be attached to ingress or egress direction.
1.3.6.1.4.1.171.14.28.1.5.4.1.2INTEGER {inbound(1), outbound(2)}not-accessiblecurrent
dAclExpertAccessGroupRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.5.4.1.3RowStatusread-createcurrent
dAclExpertAccessGroupAclName
OBJECT-TYPE
The name of the Expert access list to be applied.
1.3.6.1.4.1.171.14.28.1.5.4.1.4DisplayString (SIZE(1..32))read-createcurrent
dAclExpertAccessGroupAclId
OBJECT-TYPE
The ID of the Expert access list to be applied. User maybe specify access list ID(by this object) or name (by dAclExpertAccessGroupAclName) to be applied. If both access list ID and name are specified, the access list name specified by dAclExpertAccessGroupAclName will be take.
1.3.6.1.4.1.171.14.28.1.5.4.1.5Integer32read-createcurrent
dAclVlan
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1.6
dAclVlanSubMapTable
OBJECT-TYPE
The table contains a list of sub-map configuration. The first instance identifier index value (dAclVlanAccMapName) identifies the entry(dAclVlanSubMapEntry) belongs to. A VLAN access map can contain multiple sub-maps, the packet that matches a sub-map (that is packet permitted by the associated access-list) will take the action specified for the same entry. No further check against the next sub-maps is done. If the packet does not match a sub-map, then the next sub-map will be checked. The checking sequence is determined by the value of dAclVlanAccSubMapSeq for a same VLAN acess map.
1.3.6.1.4.1.171.14.28.1.6.1not-accessiblecurrent
dAclVlanSubMapEntry
OBJECT-TYPE
An entry is defined dAclVlanSubMapTable.
1.3.6.1.4.1.171.14.28.1.6.1.1not-accessiblecurrent
dAclVlanAccMapName
OBJECT-TYPE
This object is used to specify the name of an VLAN acess map.
1.3.6.1.4.1.171.14.28.1.6.1.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dAclVlanAccSubMapSeq
OBJECT-TYPE
Indicates the sequence number of a VLAN access rule. The value range is 1 to 65535. The value of 0 indicates the number is not specified and sequence number will be automatically assigned.
1.3.6.1.4.1.171.14.28.1.6.1.1.2Integer32 (0 | 1..65535)not-accessiblecurrent
dAclVlanAccSubMapRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.6.1.1.3RowStatusread-createcurrent
dAclVlanAccSubMapMatchAclName
OBJECT-TYPE
This object indicates the name of MAC/IP/IPv6 ACL which will be associated.
1.3.6.1.4.1.171.14.28.1.6.1.1.4DisplayString (SIZE(1..32))read-createcurrent
dAclVlanAccessSubMapAction
OBJECT-TYPE
This object indicates the action when the packet that matches a sub-map (that is packet permitted by the associated access-list).
1.3.6.1.4.1.171.14.28.1.6.1.1.5INTEGER {none(1), forward(2), drop(3), redirect(4)}read-createcurrent
dAclVlanAccSubMapRedirectIfIndex
OBJECT-TYPE
This object indicates ifIndex of the interface the packet will be redirected. When the dAclVlanAccessAction in the same row is set to other than 'redirect', the object has to be zero, which indicates the redirected interface is not specified or not applicable.
1.3.6.1.4.1.171.14.28.1.6.1.1.6InterfaceIndexOrZeroread-createcurrent
dAclVlanAccSubMapMatchAclId
OBJECT-TYPE
This object indicates the ID of MAC/IP/IPv6 ACL access list which will be associated. User may specify access list ID(by this object) or name (by dAclVlanAccSubMapMatchAclName) to be applied. If both access list ID and name are specified, the access list name specified by dAclVlanAccSubMapMatchAclName will be take.
1.3.6.1.4.1.171.14.28.1.6.1.1.7Integer32read-createcurrent
dAclVlanFilterTable
OBJECT-TYPE
The table represents a list of VLAN access map configuration.
1.3.6.1.4.1.171.14.28.1.6.2not-accessiblecurrent
dAclVlanFilterEntry
OBJECT-TYPE
An entry in dAclVlanFilterTable contains vlan-specific VLAN access map association.
1.3.6.1.4.1.171.14.28.1.6.2.1not-accessiblecurrent
dAclVlanFilterVlanId
OBJECT-TYPE
Indicates the VLAN ID of the entry.
1.3.6.1.4.1.171.14.28.1.6.2.1.1VlanIdnot-accessiblecurrent
dAclVlanFilterRowStatus
OBJECT-TYPE
The row status variable, used according to installation and removal conventions for conceptual rows.
1.3.6.1.4.1.171.14.28.1.6.2.1.2RowStatusread-createcurrent
dAclVlanFilterVlanAccMapName
OBJECT-TYPE
The name of the access list to be applied for the VLAN. NULL value indicates the access list is not specified.
1.3.6.1.4.1.171.14.28.1.6.2.1.3DisplayString (SIZE(1..32))read-createcurrent
dAclVlanAccessMapTable
OBJECT-TYPE
The table contains a list of VLAN access map configuration.
1.3.6.1.4.1.171.14.28.1.6.3not-accessiblecurrent
dAclVlanAccessMapEntry
OBJECT-TYPE
An entry is defined dAclVlanAccessMapTable.
1.3.6.1.4.1.171.14.28.1.6.3.1not-accessiblecurrent
dAclVlanAccessMapCounterEnabled
OBJECT-TYPE
This object indicates the counter state of the VLAN access map is enabled('true') or disabled('false'). The counter state setting just for the all VLAN interface that applied the access map in dAclVlanFilterTable.
1.3.6.1.4.1.171.14.28.1.6.3.1.1TruthValueread-writecurrent
dAclVlanAccessMapClearStatAction
OBJECT-TYPE
This object is used to clear statistics of the VLAN access map when set to 'clear'. No action is taken if this object is set to 'noOp'. The 'clear' action just for the all entry that applied the VLAN access map in dAclVlanFilterTable. When read, the value 'noOp' is returned.
1.3.6.1.4.1.171.14.28.1.6.3.1.2INTEGER {clear(1), noOp(2)}read-createcurrent
dAclCounter
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.1.7
dAclAccessGroupCounterTable
OBJECT-TYPE
This table maintains counter information associated with a specific access list rule in the access rule table. Please refer to the dAclMacAccessRuleTable, dAclIpAccessRuleTable, dAclIPv6AccessRuleTable and dAclExpertAccessRuleTable for detailed ACL rule information.
1.3.6.1.4.1.171.14.28.1.7.1not-accessiblecurrent
dAclAccessGroupCounterEntry
OBJECT-TYPE
An entry is defined dAclAccessGroupCounterTable.
1.3.6.1.4.1.171.14.28.1.7.1.1not-accessiblecurrent
dAclAccessGroupCounterAccListId
OBJECT-TYPE
The ID of an access list which access group counter enabled. the access list was defined by the tables: dAclMacAccessListTable, dAclIpAccessListTable, dAclIPv6AccessListTable, dAclExpertAccessListTable.
1.3.6.1.4.1.171.14.28.1.7.1.1.1Integer32not-accessiblecurrent
dAclAccessGroupCounterAccRuleSn
OBJECT-TYPE
Specifies the sequence number of this rule entry as related to the dAclAccessGroupCounterAccListId.
1.3.6.1.4.1.171.14.28.1.7.1.1.2Integer32 (1..65535)not-accessiblecurrent
dAclAccessGroupCounterIngressStat
OBJECT-TYPE
This object indicates the total number of matched packets for the access rule applied on inbound of all interface in dAclMacAccessGroupTable, dAclIpAccessGroupTable, dAclIPv6AccessGroupTable, or dAclExpertAccessGroupTable.
1.3.6.1.4.1.171.14.28.1.7.1.1.3Counter64read-onlycurrent
dAclAccessGroupCounterEgressStat
OBJECT-TYPE
This object indicates the total number of matched packets for the access rule applied on outbound of all interface in dAclMacAccessGroupTable, dAclIpAccessGroupTable, dAclIPv6AccessGroupTable, or dAclExpertAccessGroupTable.
1.3.6.1.4.1.171.14.28.1.7.1.1.4Counter64read-onlycurrent
dAclVlanFilterCounterTable
OBJECT-TYPE
This table maintains counter information associated with a specific access sub map in the dAclVlanSubMapTable.
1.3.6.1.4.1.171.14.28.1.7.2not-accessiblecurrent
dAclVlanFilterCounterEntry
OBJECT-TYPE
An entry is defined dAclVlanFilterCounterTable.
1.3.6.1.4.1.171.14.28.1.7.2.1not-accessiblecurrent
dAclVlanFilterCounterAccMapName
OBJECT-TYPE
The name of a VLAN access map which counter enabled. the VLAN access map was defined by the dAclVlanSubMapTable.
1.3.6.1.4.1.171.14.28.1.7.2.1.1DisplayString (SIZE(1..32))not-accessiblecurrent
dAclVlanFilterCounterSubMapSeq
OBJECT-TYPE
Indicates the sequence number of a VLAN access sub map. the vlan sub map sequence number was defined by the dAclVlanSubMapTable.
1.3.6.1.4.1.171.14.28.1.7.2.1.2Integer32 (1..65535)not-accessiblecurrent
dAclVlanFilterCounterStatistics
OBJECT-TYPE
This object indicates the total number of matched packets for the sub map that applied on all VLAN interface in dAclVlanFilterTable.
1.3.6.1.4.1.171.14.28.1.7.2.1.3Counter64read-onlycurrent
dAclMIBConformance
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.2
dAclCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.2.1
dAclGroups
OBJECT-IDENTITY
1.3.6.1.4.1.171.14.28.2.2

Conformance

NameOIDStatus
dAclCompliance
MODULE-COMPLIANCE
The compliance statement for entities which implement the DLINKSW-ACL-MIB.
1.3.6.1.4.1.171.14.28.2.1.1current
dAclGenGroup
OBJECT-GROUP
A collection of objects providing general access list configuration.
1.3.6.1.4.1.171.14.28.2.2.1current
dAclMacGroup
OBJECT-GROUP
A collection of objects providing MAC access list configuration.
1.3.6.1.4.1.171.14.28.2.2.2current
dAclIpGroup
OBJECT-GROUP
A collection of objects providing IP access list configuration.
1.3.6.1.4.1.171.14.28.2.2.3current
dAclIPv6Group
OBJECT-GROUP
A collection of objects providing IPv6 access list configuration.
1.3.6.1.4.1.171.14.28.2.2.4current
dAclExpertGroup
OBJECT-GROUP
A collection of objects providing extended expert access list configuration.
1.3.6.1.4.1.171.14.28.2.2.5current
dAclVlanFilterGroup
OBJECT-GROUP
A collection of objects providing VLAN access map configuration.
1.3.6.1.4.1.171.14.28.2.2.6current
dAclCounterGroup
OBJECT-GROUP
A collection of objects providing ACL counter information.
1.3.6.1.4.1.171.14.28.2.2.7current