MIBs Depot

HUAWEI-ACL-MIB

Registered at
1.3.6.1.4.1.2011.5.1
Last updated
2017-08-17 12:00
Organization
Huawei Technologies Co.,Ltd.
Revisions
2017-08-17 12:00, 2017-07-03 12:00, 2017-06-06 12:00, 2016-12-26 12:00, 2016-05-06 12:00, 2016-02-24 12:00, 2015-12-17 21:00, 2015-11-27 21:00, 2015-02-27 21:00, 2015-02-07 21:00, 2014-10-28 21:00, 2014-06-20 09:48, 2014-04-09 09:48, 2014-03-26 09:26, 2014-01-17 13:38, 2013-11-28 21:00, 2013-10-28 19:00, 2013-09-05 00:00, 2014-08-05 16:06, 2016-08-26 00:00
Namespace
huawei
Source file
HUAWEI-ACL-MIB
Digest
sha256:57741dbe6bcbd311e98bddf259572afc185ef92a94577e431d3335262bd2a54b

Description

The HUAWEI-ACL-MIB contains objects to configure ACL module, including ACL group, rule and acl accelerate, and query the current ACL configuration and status. This MIB module objects indicate hwAclNumGroupTable, hwAclBasicRuleTable, hwAclAdvanceRuleTable, hwAclIfRuleTable, hwAclEthernetFrameRuleTable, hwAclIpv6BasicRuleTable, hwAclIpv6AdvanceRuleTable, hwAclIpv6IfRuleTable, hwAclCompileEnableFlag, hwAclCompileNumGroupTable, hwAclIpv6NumGroupTable and acl trap. To filter data packets, a series of rules need to be configured on the device. These rules are defined by ACL (Access Control List), which are a series of sequential rules consisting of rule permit or deny statements. The rules are described by source address, destination address and port number of data packets. ACL classifies data packets through these device interface applied rules, by which the device decides which packets can be received and which should be rejected.

Contact

Huawei Industrial Base Bantian, Longgang Shenzhen 518129 People's Republic of China Website: http://www.huawei.com Email: support@huawei.com

Imports

FromSymbols
HUAWEI-MIBhuaweiMgmt
IPV6-TCIpv6Address
P-BRIDGE-MIBEnabledStatus
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Counter64, Gauge32, Integer32, IpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

BRIDGE-MIB
HUAWEI-ACL-MIB
HUAWEI-MIB
IANAifType-MIB
IF-MIB
IPV6-TC
P-BRIDGE-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
hwAclMibObjects
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.1
hwAclNumGroupTable
OBJECT-TYPE
This table is used to query information about an ACL rule group, including the ACL configuration order, step length, and description.
1.3.6.1.4.1.2011.5.1.1.2not-accessiblecurrent
hwAclNumGroupEntry
OBJECT-TYPE
An entry containing characters of an acl group
1.3.6.1.4.1.2011.5.1.1.2.1not-accessiblecurrent
hwAclNumGroupAclNum
OBJECT-TYPE
The index of acl group, identifying an ACL. The object specifies the range of an ACL number. The basic ACL is represented by the number in the range 2000 through 2999. The advanced ACL is represented by the number in the range 3000 through 3999. The interface-based ACL is represented by the number in the range 1000 to 1999. The User Defined ACL is represented by the number in the range 5000 through 5999. The User ACL is represented by the number in the range 6000 through 9999. The Mpls ACL is represented by the number in the range 10000 through 10999. The name ACL is represented by the number in the range 42768 through 76535.
1.3.6.1.4.1.2011.5.1.1.2.1.1Integer32read-onlycurrent
hwAclNumGroupMatchOrder
OBJECT-TYPE
The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL rules are matched following the 'Depth-first' principle.
1.3.6.1.4.1.2011.5.1.1.2.1.2INTEGER {config(1), auto(2)}read-createcurrent
hwAclNumGroupSubitemNum
OBJECT-TYPE
The total number of the rules in the acl group.
1.3.6.1.4.1.2011.5.1.1.2.1.3Counter32read-onlycurrent
hwAclNumGroupStep
OBJECT-TYPE
The object indicates the step value of number acl. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs are the multiples of 5 beginning with 5. The ACL IDs change along with the step. When the step is 5, the ACL IDs are 5, 10, and 15 and so on. However, when the step is set to 2, the IDs turn to 2, 4, and 6 and so on.
1.3.6.1.4.1.2011.5.1.1.2.1.4Integer32 (1..20)read-createcurrent
hwAclNumGroupDescription
OBJECT-TYPE
This object indicates the description of a rule group. The description length cannot exceed 127 characters.
1.3.6.1.4.1.2011.5.1.1.2.1.5OCTET STRING (SIZE(0..127))read-createcurrent
hwAclNumGroupCountClear
OBJECT-TYPE
The value of this object identifies whether to clear up the count of rule groups. The value can be: cleared(1) notUsed(2) This field is effective only when you perform the Set operation to this object.
1.3.6.1.4.1.2011.5.1.1.2.1.6INTEGER {cleared(1), notUsed(2)}read-createcurrent
hwAclNumGroupRowStatus
OBJECT-TYPE
RowStatus, Now support three value:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.2.1.7RowStatusread-createcurrent
hwAclNumGroupAclName
OBJECT-TYPE
The object indicates the name of an acl group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character.
1.3.6.1.4.1.2011.5.1.1.2.1.8OCTET STRING (SIZE(0..64))read-createcurrent
hwAclNumGroupAclType
OBJECT-TYPE
The type of ACL group.
1.3.6.1.4.1.2011.5.1.1.2.1.9INTEGER {basic(1), advanced(2), link(3), user(4), interface(5), mpls(6), mac(7), ucl(8)}read-onlycurrent
hwAclBasicRuleTable
OBJECT-TYPE
Configure the rule for basic acl group.
1.3.6.1.4.1.2011.5.1.1.4not-accessiblecurrent
hwAclBasicRuleEntry
OBJECT-TYPE
Each entry is a rule of basic acl.
1.3.6.1.4.1.2011.5.1.1.4.1not-accessiblecurrent
hwAclBasicAclNum
OBJECT-TYPE
The index of basic acl group, the index range is (1..99 | 2000..2999 | 42768..76535 ).
1.3.6.1.4.1.2011.5.1.1.4.1.1Integer32read-onlycurrent
hwAclBasicSubitem
OBJECT-TYPE
The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.4.1.2Unsigned32read-onlycurrent
hwAclBasicAct
OBJECT-TYPE
The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.4.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclBasicSrcIp
OBJECT-TYPE
The object indicates the source IP-address of a basic acl rule.
1.3.6.1.4.1.2011.5.1.1.4.1.4IpAddressread-createcurrent
hwAclBasicSrcWild
OBJECT-TYPE
The value of this object identifies the wildcard mask of the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255.
1.3.6.1.4.1.2011.5.1.1.4.1.5IpAddressread-createcurrent
hwAclBasicTimeRangeIndex
OBJECT-TYPE
The value of this object identifies the index of a time range of an ACL rule. The value ranges from 0 to 256. The value 0 is invalid, indicating that no time range is specified for the rule.
1.3.6.1.4.1.2011.5.1.1.4.1.6Integer32 (0..256)read-createcurrent
hwAclBasicFragments
OBJECT-TYPE
The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is a fragment 2: nonFragment, indicating that the packet is not a fragment 3: nonSubseq, indicating that the packet is not a subsequent fragment 4: fragmentSpeFirst, indicating that the packet is the first fragment 255: none, invalid value This object cannot be modified once a rule is created.
1.3.6.1.4.1.2011.5.1.1.4.1.7INTEGER {fragmentSubseq(0), fragment(1), nonFragment(2), nonSubseq(3), fragmentSpeFirst(4), none(255)}read-createcurrent
hwAclBasicLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets.
1.3.6.1.4.1.2011.5.1.1.4.1.8TruthValueread-createcurrent
hwAclBasicEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.4.1.9TruthValueread-onlycurrent
hwAclBasicCount
OBJECT-TYPE
The object indicates the statistics of matched packets by the rule.
1.3.6.1.4.1.2011.5.1.1.4.1.10Counter64read-onlycurrent
hwAclBasicVrfName
OBJECT-TYPE
This object indicates an VPN instance. The length of a VPN instance name cannot exceed 31 characters.
1.3.6.1.4.1.2011.5.1.1.4.1.11OCTET STRING (SIZE(0..31))read-createcurrent
hwAclBasicRowStatus
OBJECT-TYPE
RowStatus, Now support three value:CreateAndGo,Active and Destroy.
1.3.6.1.4.1.2011.5.1.1.4.1.12RowStatusread-createcurrent
hwAclBasicDescription
OBJECT-TYPE
The object indicates the description of this basic rule. The object describes the usage of an ACL with a word or a sentence.
1.3.6.1.4.1.2011.5.1.1.4.1.13OCTET STRING (SIZE(0..127))read-createcurrent
hwAclBasicVrfAny
OBJECT-TYPE
The object indicates whether or not matching any VPN-instance.
1.3.6.1.4.1.2011.5.1.1.4.1.14TruthValueread-createcurrent
hwAclAdvancedRuleTable
OBJECT-TYPE
Configure the rule for advanced acl group.
1.3.6.1.4.1.2011.5.1.1.5not-accessiblecurrent
hwAclAdvancedRuleEntry
OBJECT-TYPE
Each entry contains a rule of advanced acl group.
1.3.6.1.4.1.2011.5.1.1.5.1not-accessiblecurrent
hwAclAdvancedAclNum
OBJECT-TYPE
The index of advanced acl table, the index range is (100..199 | 3000..3999 | 42768..76535).
1.3.6.1.4.1.2011.5.1.1.5.1.1Integer32read-onlycurrent
hwAclAdvancedSubitem
OBJECT-TYPE
The object specifies the number of an advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.5.1.2Unsigned32read-onlycurrent
hwAclAdvancedAct
OBJECT-TYPE
The object indicates the action of an advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.5.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclAdvancedProtocol
OBJECT-TYPE
The value of this object identifies the number of the protocol over IP. The value ranges from 0 to 255. The value 0 indicates the IP protocol.
1.3.6.1.4.1.2011.5.1.1.5.1.4Integer32 (0..255)read-createcurrent
hwAclAdvancedSrcIp
OBJECT-TYPE
The value of this object identifies the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255.
1.3.6.1.4.1.2011.5.1.1.5.1.5IpAddressread-createcurrent
hwAclAdvancedSrcWild
OBJECT-TYPE
The value of this object identifies the wildcard mask of the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255.
1.3.6.1.4.1.2011.5.1.1.5.1.6IpAddressread-createcurrent
hwAclAdvancedSrcOp
OBJECT-TYPE
The object indicates the source Port operation symbol of an advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.5.1.7INTEGER {invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)}read-createcurrent
hwAclAdvancedSrcPort1
OBJECT-TYPE
This object indicates the end source port number.
1.3.6.1.4.1.2011.5.1.1.5.1.8Integer32 (0..65535)read-createcurrent
hwAclAdvancedSrcPort2
OBJECT-TYPE
This object indicates the start source port number.
1.3.6.1.4.1.2011.5.1.1.5.1.9Integer32 (0..65535)read-createcurrent
hwAclAdvancedDestIp
OBJECT-TYPE
This object indicates the destination IP address. The value ranges from 0.0.0.0 to 255.255.255.255.
1.3.6.1.4.1.2011.5.1.1.5.1.10IpAddressread-createcurrent
hwAclAdvancedDestWild
OBJECT-TYPE
This object indicates the mask of the destination IP address. The value ranges from 0.0.0.0 to 255.255.255.255.
1.3.6.1.4.1.2011.5.1.1.5.1.11IpAddressread-createcurrent
hwAclAdvancedDestOp
OBJECT-TYPE
The object indicates the destination Port operation symbol of an advanced acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.5.1.12INTEGER {invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)}read-createcurrent
hwAclAdvancedDestPort1
OBJECT-TYPE
This object indicates the end destination port number.
1.3.6.1.4.1.2011.5.1.1.5.1.13Integer32 (0..65535)read-createcurrent
hwAclAdvancedDestPort2
OBJECT-TYPE
This object indicates the start destination port number.
1.3.6.1.4.1.2011.5.1.1.5.1.14Integer32 (0..65535)read-createcurrent
hwAclAdvancedPrecedence
OBJECT-TYPE
The value of this object identifies the precedence sub-field. It is the higher three bits of the ToS field in an IP header. The value ranges from 0 to 7.
1.3.6.1.4.1.2011.5.1.1.5.1.15Integer32 (0..7 | 255)read-createcurrent
hwAclAdvancedTos
OBJECT-TYPE
The value of this object identifies the ToS sub-field. This field covers four bits after the higher three bits of the ToS field in an IP header. The value ranges from 0 to 15.
1.3.6.1.4.1.2011.5.1.1.5.1.16Integer32 (0..15 | 255)read-createcurrent
hwAclAdvancedDscp
OBJECT-TYPE
The value of this object identifies the higher six bits of the ToS field in an IP header. The value ranges from 0 to 63.
1.3.6.1.4.1.2011.5.1.1.5.1.17Integer32 (0..63 | 255)read-createcurrent
hwAclAdvancedEstablish
OBJECT-TYPE
The object indicates whether or not establishing.
1.3.6.1.4.1.2011.5.1.1.5.1.18TruthValueread-createcurrent
hwAclAdvancedTimeRangeIndex
OBJECT-TYPE
The object indicates the time range of an advanced acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule has no time range.The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.5.1.19Integer32 (0..256)read-createcurrent
hwAclAdvancedIcmpType
OBJECT-TYPE
The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535.
1.3.6.1.4.1.2011.5.1.1.5.1.20Integer32 (0..255 | 65535)read-createcurrent
hwAclAdvancedIcmpCode
OBJECT-TYPE
The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535.
1.3.6.1.4.1.2011.5.1.1.5.1.21Integer32 (0..255 | 65535)read-createcurrent
hwAclAdvancedFragments
OBJECT-TYPE
The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is a fragment 2: nonFragment, indicating that the packet is not a fragment 3: nonSubseq, indicating that the packet is not a subsequent fragment 4: fragmentSpeFirst, indicating that the packet is the first fragment 255: none, invalid value This object cannot be modified once a rule is created.
1.3.6.1.4.1.2011.5.1.1.5.1.22INTEGER {fragmentSubseq(0), fragment(1), nonFragment(2), nonSubseq(3), fragmentSpeFirst(4), none(255)}read-createcurrent
hwAclAdvancedLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets
1.3.6.1.4.1.2011.5.1.1.5.1.23TruthValueread-createcurrent
hwAclAdvancedEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.5.1.24TruthValueread-onlycurrent
hwAclAdvancedCount
OBJECT-TYPE
The object indicates the statistics of matched packets by the rule.
1.3.6.1.4.1.2011.5.1.1.5.1.25Counter64read-onlycurrent
hwAclAdvancedVrfName
OBJECT-TYPE
The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs.
1.3.6.1.4.1.2011.5.1.1.5.1.26OCTET STRING (SIZE(0..31))read-createcurrent
hwAclAdvancedRowStatus
OBJECT-TYPE
RowStatus, Now support three state:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.5.1.27RowStatusread-createcurrent
hwAclAdvancedTcpSyncFlag
OBJECT-TYPE
The object indicates the code of TCP Sync flag(0~63), The invalid value is -1.
1.3.6.1.4.1.2011.5.1.1.5.1.28Integer32 (-1 | 0..63)read-createcurrent
hwAclAdvancedDescription
OBJECT-TYPE
The object indicates the description of this advanced rule. The object describes the usage of an ACL with a word or a sentence.
1.3.6.1.4.1.2011.5.1.1.5.1.29OCTET STRING (SIZE(0..127))read-createcurrent
hwAclAdvancedSrcPoolName
OBJECT-TYPE
The object indicates the source pool name.
1.3.6.1.4.1.2011.5.1.1.5.1.30OCTET STRING (SIZE(0..32))read-createcurrent
hwAclAdvancedDestPoolName
OBJECT-TYPE
The object indicates the destination pool name.
1.3.6.1.4.1.2011.5.1.1.5.1.31OCTET STRING (SIZE(0..32))read-createcurrent
hwAclAdvancedProtocolNew
OBJECT-TYPE
The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IP protocol is 65535.
1.3.6.1.4.1.2011.5.1.1.5.1.32Integer32 (0..255 | 65535)read-createcurrent
hwAclAdvancedVni
OBJECT-TYPE
The object indicates the ID of VXLAN, The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.5.1.33Integer32 (0..16777215)read-createcurrent
hwAclAdvancedIgmpType
OBJECT-TYPE
The object indicates the type of igmp, The invalid value is 65535.
1.3.6.1.4.1.2011.5.1.1.5.1.34Integer32 (0..255 | 65535)read-createcurrent
hwAclAdvancedTtlOp
OBJECT-TYPE
The object indicates the ttl operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.5.1.35INTEGER {invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)}read-createcurrent
hwAclAdvancedTtlExpire
OBJECT-TYPE
The object indicates the begin ttl value. The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.5.1.36Integer32 (0..255)read-createcurrent
hwAclAdvancedTtlExpireEnd
OBJECT-TYPE
The object indicates the end ttl value. The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.5.1.37Integer32 (0..255)read-createcurrent
hwAclAdvancedPktLenOp
OBJECT-TYPE
The object indicates the packet length operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.5.1.38INTEGER {invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)}read-createcurrent
hwAclAdvancedPktLenBegin
OBJECT-TYPE
The object indicates the begin packet length value.
1.3.6.1.4.1.2011.5.1.1.5.1.39Integer32 (0..65535)read-createcurrent
hwAclAdvancedPktLenEnd
OBJECT-TYPE
The object indicates the end packet length value.
1.3.6.1.4.1.2011.5.1.1.5.1.40Integer32 (0..65535)read-createcurrent
hwAclAdvancedTcpFlagMask
OBJECT-TYPE
The object indicates the mask of tcp-flag. The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.5.1.41Integer32 (0..63)read-createcurrent
hwAclAdvancedSrcPortPoolName
OBJECT-TYPE
The object indicates the source port pool name.
1.3.6.1.4.1.2011.5.1.1.5.1.42OCTET STRING (SIZE(0..32))read-createcurrent
hwAclAdvancedDestPortPoolName
OBJECT-TYPE
The object indicates the destination port pool name.
1.3.6.1.4.1.2011.5.1.1.5.1.43OCTET STRING (SIZE(0..32))read-createcurrent
hwAclAdvancedIcmpTypeEnd
OBJECT-TYPE
The value of this object identifies the ICMP message type. The value ranges from 0 to 255. The value 65535 is invalid. This object is used together with hwAclAdvancedIcmpType to indicate the value range of the ICMP message type.
1.3.6.1.4.1.2011.5.1.1.5.1.44Integer32 (0..255 | 65535)read-createcurrent
hwAclAdvancedVrfAny
OBJECT-TYPE
The object indicates whether or not matching any VPN-instance.
1.3.6.1.4.1.2011.5.1.1.5.1.45TruthValueread-createcurrent
hwAclIfRuleTable
OBJECT-TYPE
Configure the rule for interface-based acl group.
1.3.6.1.4.1.2011.5.1.1.6not-accessiblecurrent
hwAclIfRuleEntry
OBJECT-TYPE
Each entry contains a rule of interface-based acl group.
1.3.6.1.4.1.2011.5.1.1.6.1not-accessiblecurrent
hwAclIfAclNum
OBJECT-TYPE
The index of interface-based acl group, the index range is (1000..1999 | 42768..76535).
1.3.6.1.4.1.2011.5.1.1.6.1.1Integer32read-onlycurrent
hwAclIfSubitem
OBJECT-TYPE
The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.6.1.2Unsigned32read-onlycurrent
hwAclIfAct
OBJECT-TYPE
The object indicates the action of an interface-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.6.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclIfIndex
OBJECT-TYPE
The object indicates the index of an interface. It specifies the interface information of the packets.The invalid interface index is 0.
1.3.6.1.4.1.2011.5.1.1.6.1.4Integer32read-createcurrent
hwAclIfAny
OBJECT-TYPE
The object indicates whether or not matching any interface.
1.3.6.1.4.1.2011.5.1.1.6.1.5TruthValueread-createcurrent
hwAclIfTimeRangeIndex
OBJECT-TYPE
The value of this object identifies the index of the time range during which an ACL rule can be applied. When the current time is in the time range, the rule is valid. The value 0 is invalid, indicating that no time range is specified for the rule. The value ranges from 0 to 256.
1.3.6.1.4.1.2011.5.1.1.6.1.6Integer32 (0..256)read-createcurrent
hwAclIfLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets.
1.3.6.1.4.1.2011.5.1.1.6.1.7TruthValueread-createcurrent
hwAclIfEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.6.1.8TruthValueread-onlycurrent
hwAclIfCount
OBJECT-TYPE
The object indicates the statistics of matched packets by the rule.
1.3.6.1.4.1.2011.5.1.1.6.1.9Counter64read-onlycurrent
hwAclIfRowStatus
OBJECT-TYPE
RowStatus,Now support three state:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.6.1.11RowStatusread-createcurrent
hwAclIfDescription
OBJECT-TYPE
The object indicates the description of this if rule. The object describes the usage of an ACL with a word or a sentence.
1.3.6.1.4.1.2011.5.1.1.6.1.12OCTET STRING (SIZE(0..127))read-createcurrent
hwAclUserRuleTable
OBJECT-TYPE
Configure the rule for user acl group.
1.3.6.1.4.1.2011.5.1.1.7not-accessiblecurrent
hwAclUserRuleEntry
OBJECT-TYPE
Each entry contains a rule of user acl group.
1.3.6.1.4.1.2011.5.1.1.7.1not-accessiblecurrent
hwAclUserAclNum
OBJECT-TYPE
The index of user acl table, the index range is (6000..9999).
1.3.6.1.4.1.2011.5.1.1.7.1.1Integer32read-onlycurrent
hwAclUserSubitem
OBJECT-TYPE
The object specifies the number of an User ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle
1.3.6.1.4.1.2011.5.1.1.7.1.2Unsigned32read-onlycurrent
hwAclUserAct
OBJECT-TYPE
The object indicates the action of an User acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.7.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclUserProtocol
OBJECT-TYPE
The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IP protocol is 0.
1.3.6.1.4.1.2011.5.1.1.7.1.4Integer32 (0..255)read-createcurrent
hwAclUserSrcIp
OBJECT-TYPE
The object indicates the source IP-address of an User acl rule.
1.3.6.1.4.1.2011.5.1.1.7.1.5IpAddressread-createcurrent
hwAclUserSrcWild
OBJECT-TYPE
The object indicates the source IP-address wild of an User acl rule.
1.3.6.1.4.1.2011.5.1.1.7.1.6IpAddressread-createcurrent
hwAclUserSrcOp
OBJECT-TYPE
The object indicates the source Port operation symbol of an User acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.7.1.7INTEGER {invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)}read-createcurrent
hwAclUserSrcPort1
OBJECT-TYPE
The object indicates the fourth layer sourec port 1. It specifies the source port information of UDP or TCP packets.
1.3.6.1.4.1.2011.5.1.1.7.1.8Integer32 (0..65535)read-createcurrent
hwAclUserSrcPort2
OBJECT-TYPE
The object indicates the fourth layer source port2.
1.3.6.1.4.1.2011.5.1.1.7.1.9Integer32 (0..65535)read-createcurrent
hwAclUserDestIp
OBJECT-TYPE
The object indicates the destination IP-address of an User acl rule.
1.3.6.1.4.1.2011.5.1.1.7.1.10IpAddressread-createcurrent
hwAclUserDestWild
OBJECT-TYPE
The object indicates the destination IP-address wild of an User acl rule.
1.3.6.1.4.1.2011.5.1.1.7.1.11IpAddressread-createcurrent
hwAclUserDestOp
OBJECT-TYPE
The object indicates the destination Port operation symbol of an User acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.7.1.12INTEGER {invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)}read-createcurrent
hwAclUserDestPort1
OBJECT-TYPE
The object indicates the fourth layer destination port1.
1.3.6.1.4.1.2011.5.1.1.7.1.13Integer32 (0..65535)read-createcurrent
hwAclUserDestPort2
OBJECT-TYPE
The object indicates the fourth layer destination port2.
1.3.6.1.4.1.2011.5.1.1.7.1.14Integer32 (0..65535)read-createcurrent
hwAclUserPrecedence
OBJECT-TYPE
The object indicates the value of IP-packet's precedence, It filters packets according to precedence field.The invalid value is 255.
1.3.6.1.4.1.2011.5.1.1.7.1.15Integer32 (0..7 | 255)read-createcurrent
hwAclUserTos
OBJECT-TYPE
The object indicates the value of IP-packet's TOS, It filters packets according to type of service.The invalid value is 255.
1.3.6.1.4.1.2011.5.1.1.7.1.16Integer32 (0..15 | 255)read-createcurrent
hwAclUserDscp
OBJECT-TYPE
The object indicates the value of frame.The invalid value is 255.
1.3.6.1.4.1.2011.5.1.1.7.1.17Integer32 (0..63 | 255)read-createcurrent
hwAclUserEstablish
OBJECT-TYPE
The object indicates whether or not establishing.
1.3.6.1.4.1.2011.5.1.1.7.1.18TruthValueread-createcurrent
hwAclUserTimeRangeIndex
OBJECT-TYPE
The object indicates the time range of an User acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule has no time range.The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.7.1.19Integer32 (0..256)read-createcurrent
hwAclUserIcmpType
OBJECT-TYPE
The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535.
1.3.6.1.4.1.2011.5.1.1.7.1.20Integer32 (0..255 | 65535)read-createcurrent
hwAclUserIcmpCode
OBJECT-TYPE
The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535.
1.3.6.1.4.1.2011.5.1.1.7.1.21Integer32 (0..255 | 65535)read-createcurrent
hwAclUserFragments
OBJECT-TYPE
The object indicates whether or not matching fragmented packet, It specifies that this rule is only valid for the non-first fragment packets.
1.3.6.1.4.1.2011.5.1.1.7.1.22TruthValueread-createcurrent
hwAclUserLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets
1.3.6.1.4.1.2011.5.1.1.7.1.23TruthValueread-createcurrent
hwAclUserEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.7.1.24TruthValueread-onlycurrent
hwAclUserCount
OBJECT-TYPE
The object indicates the statistics of matched packets by the rule.
1.3.6.1.4.1.2011.5.1.1.7.1.25Counter32read-onlycurrent
hwAclUserVrfName
OBJECT-TYPE
The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs.
1.3.6.1.4.1.2011.5.1.1.7.1.26OCTET STRING (SIZE(0..32))read-createcurrent
hwAclUserSrcUserGroupName
OBJECT-TYPE
The object indicates the source user group name of this rule. if modetype source is user, null sting means any user
1.3.6.1.4.1.2011.5.1.1.7.1.27OCTET STRING (SIZE(0..32))read-createcurrent
hwAclUserDestUserGroupName
OBJECT-TYPE
The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user
1.3.6.1.4.1.2011.5.1.1.7.1.28OCTET STRING (SIZE(0..32))read-createcurrent
hwAclUserSrcModeType
OBJECT-TYPE
The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet, 1 NetAny match rule from any ip subnet, 2 UserAny match rule from any user group, 3 Net match rule from an ip subnet, 4 User match rule from a user group
1.3.6.1.4.1.2011.5.1.1.7.1.29Integer32 (0..4)read-createcurrent
hwAclUserDestModeType
OBJECT-TYPE
The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet or any doamin name, 1 NetAny match rule from any ip subnet, 2 UserAny match rule from any user group, 3 Net match rule from an ip subnet, 4 User match rule from a user group, 5 domain match rule from a domain name, 6 domainAny match rule from any doamin name
1.3.6.1.4.1.2011.5.1.1.7.1.30Integer32 (0..6)read-createcurrent
hwAclUserRowStatus
OBJECT-TYPE
RowStatus, Now support three state:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.7.1.31RowStatusread-createcurrent
hwAclUserTcpSyncFlag
OBJECT-TYPE
The object indicates the code of TCP Sync flag(0~63), The invalid value is -1.
1.3.6.1.4.1.2011.5.1.1.7.1.32Integer32 (-1 | 0..63)read-createcurrent
hwAclUserSrcUserGroupNum
OBJECT-TYPE
The object indicates the source user group num of this rule. if modetype source is user, null sting means any user
1.3.6.1.4.1.2011.5.1.1.7.1.33Integer32 (0..64000 | 65535)read-createcurrent
hwAclUserDestUserGroupNum
OBJECT-TYPE
The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user
1.3.6.1.4.1.2011.5.1.1.7.1.34Integer32 (0..64000 | 65535)read-createcurrent
hwAclUserDestDomainName
OBJECT-TYPE
The object indicates the destination domain name of this rule. if modetype destination is domain, null sting means any domain.
1.3.6.1.4.1.2011.5.1.1.7.1.35OCTET STRING (SIZE(3..127))read-onlycurrent
hwAclCompileEnableFlag
OBJECT-TYPE
The object indicates whether acl compiler is enabled. when acl compiler is enabled, and ACL accelerate function is enabled, then matching packets by rule is efficient.
1.3.6.1.4.1.2011.5.1.1.10TruthValueread-writecurrent
hwAclCompileNumGroupTable
OBJECT-TYPE
The ACL compiler table extending the Acl-number-group table
1.3.6.1.4.1.2011.5.1.1.11not-accessiblecurrent
hwAclCompileNumGroupEntry
OBJECT-TYPE
The entry of Acl-number-group compiler extended table
1.3.6.1.4.1.2011.5.1.1.11.1not-accessiblecurrent
hwAclCompileNumGroupStatus
OBJECT-TYPE
The object indicates the status of Acl-number-group compiler. 'notCompile' means acl accelerate function is disabled, 'compiled' means acl accelerate function is enabled, 'changeAfterCompile' means acl is changed after compiled.
1.3.6.1.4.1.2011.5.1.1.11.1.1INTEGER {notCompile(1), compiled(2), changeAfterCompile(3)}read-writecurrent
hwAclIpv6BasicRuleTable
OBJECT-TYPE
Configure the rule for ipv6 basic acl group.
1.3.6.1.4.1.2011.5.1.1.12not-accessiblecurrent
hwAclIpv6BasicRuleEntry
OBJECT-TYPE
Each entry is a rule of ipv6 basic acl.
1.3.6.1.4.1.2011.5.1.1.12.1not-accessiblecurrent
hwAclIpv6BasicAclNum
OBJECT-TYPE
The index of ipv6 basic acl group, the index range is (2000..2999 | 42768..75535).
1.3.6.1.4.1.2011.5.1.1.12.1.1Integer32read-onlycurrent
hwAclIpv6BasicSubitem
OBJECT-TYPE
The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned automatically; otherwise, this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.12.1.2Unsigned32read-onlycurrent
hwAclIpv6BasicAct
OBJECT-TYPE
The object indicates the action of a ipv6 basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.12.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclIpv6BasicSrcIp
OBJECT-TYPE
The object indicates the source IPv6-address of a ipv6 basic acl rule.
1.3.6.1.4.1.2011.5.1.1.12.1.4Ipv6Addressread-createcurrent
hwAclIpv6BasicSrcPrefix
OBJECT-TYPE
The value of this object identifies the mask length of the source IPv6 address. The value ranges from 0 to 128.
1.3.6.1.4.1.2011.5.1.1.12.1.5Integer32 (0..128)read-createcurrent
hwAclIpv6BasicTimeRangeIndex
OBJECT-TYPE
The value of this object identifies the index of the time range during which an ACL6 rule can be applied.The value ranges from 0 to 256.The value 0 is invalid, indicating that no time range is specified for the rule.
1.3.6.1.4.1.2011.5.1.1.12.1.6Integer32 (0..256)read-createcurrent
hwAclIpv6BasicFragment
OBJECT-TYPE
The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once a rule is created.
1.3.6.1.4.1.2011.5.1.1.12.1.7INTEGER {fragmentSubseq(0), fragment(1), none(255)}read-createcurrent
hwAclIpv6BasicLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets.
1.3.6.1.4.1.2011.5.1.1.12.1.8TruthValueread-createcurrent
hwAclIpv6BasicEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.12.1.9EnabledStatusread-onlycurrent
hwAclIpv6BasicCount
OBJECT-TYPE
This object indicates the number of matched packets by a rule. A maximum of 64 bits are supported.
1.3.6.1.4.1.2011.5.1.1.12.1.10Counter64read-onlycurrent
hwAclIpv6BasicVrfName
OBJECT-TYPE
This object indicates a VPN instance. The length of a VPN instance name cannot exceed 31 characters.
1.3.6.1.4.1.2011.5.1.1.12.1.11OCTET STRING (SIZE(0..31))read-createcurrent
hwAclIpv6BasicRowStatus
OBJECT-TYPE
RowStatus, Now support three value: CreateAndGo, Active and Destroy.
1.3.6.1.4.1.2011.5.1.1.12.1.12RowStatusread-createcurrent
hwAclIpv6BasicDescription
OBJECT-TYPE
The object indicates the description of this IPv6 basic rule. The object describes the usage of an IPv6 ACL with a word or a sentence.
1.3.6.1.4.1.2011.5.1.1.12.1.13OCTET STRING (SIZE(0..127))read-createcurrent
hwAclIpv6BasicSrcMask
OBJECT-TYPE
The object indicates the source IPv6-address mask of a ipv6 basic acl rule. Its mode is positive.
1.3.6.1.4.1.2011.5.1.1.12.1.14Ipv6Addressread-createcurrent
hwAclIpv6BasicVrfAny
OBJECT-TYPE
The object indicates whether or not matching any VPN-instance.
1.3.6.1.4.1.2011.5.1.1.12.1.15TruthValueread-createcurrent
hwAclIpv6AdvancedRuleTable
OBJECT-TYPE
Configure the rule for ipv6 advanced acl group.
1.3.6.1.4.1.2011.5.1.1.13not-accessiblecurrent
hwAclIpv6AdvancedRuleEntry
OBJECT-TYPE
Each entry contains a rule of ipv6 advanced acl group.
1.3.6.1.4.1.2011.5.1.1.13.1not-accessiblecurrent
hwAclIpv6AdvancedAclNum
OBJECT-TYPE
The index of ipv6 advanced acl table, the index range is (3000..3999 | 42768..75535).
1.3.6.1.4.1.2011.5.1.1.13.1.1Integer32read-onlycurrent
hwAclIpv6AdvancedSubitem
OBJECT-TYPE
The object specifies the number of an ipv6 advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned automatically;otherwise,this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.13.1.2Unsigned32read-onlycurrent
hwAclIpv6AdvancedAct
OBJECT-TYPE
The object indicates the action of an ipv6 advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.13.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclIpv6AdvancedProtocol
OBJECT-TYPE
The value of this object identifies the number of the protocol over IPv6. The value ranges from 0 to 255. The value 0 indicates the IPv6 protocol.
1.3.6.1.4.1.2011.5.1.1.13.1.4Integer32 (0..255)read-createcurrent
hwAclIpv6AdvancedSrcIp
OBJECT-TYPE
The object indicates the source IPv6-address of an ipv6 advanced acl rule.
1.3.6.1.4.1.2011.5.1.1.13.1.5Ipv6Addressread-createcurrent
hwAclIpv6AdvancedSrcPrefix
OBJECT-TYPE
The value of this object identifies the mask length of the source IPv6 address. The value ranges from 0 to 128.
1.3.6.1.4.1.2011.5.1.1.13.1.6Integer32 (0..128)read-createcurrent
hwAclIpv6AdvancedSrcOp
OBJECT-TYPE
The object indicates the source Port operation symbol of an ipv6 advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.13.1.7INTEGER {lt(1), eq(2), gt(3), neq(4), range(5), invalid(255)}read-createcurrent
hwAclIpv6AdvancedSrcPort1
OBJECT-TYPE
This object indicates the end source port number.
1.3.6.1.4.1.2011.5.1.1.13.1.8Integer32 (0..65535)read-createcurrent
hwAclIpv6AdvancedSrcPort2
OBJECT-TYPE
This object indicates the start source port number.
1.3.6.1.4.1.2011.5.1.1.13.1.9Integer32 (0..65535)read-createcurrent
hwAclIpv6AdvancedDestIp
OBJECT-TYPE
The object indicates the destination IPv6-address of an ipv6 advanced acl rule.
1.3.6.1.4.1.2011.5.1.1.13.1.10Ipv6Addressread-createcurrent
hwAclIpv6AdvancedDestPrefix
OBJECT-TYPE
The value of this object identifies the mask length of the destination IPv6 address. The value ranges from 0 to 128.
1.3.6.1.4.1.2011.5.1.1.13.1.11Integer32 (0..128)read-createcurrent
hwAclIpv6AdvancedDestOp
OBJECT-TYPE
The object indicates the destination Port operation symbol of an ipv6 advanced acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.13.1.12INTEGER {lt(1), eq(2), gt(3), neq(4), range(5), invalid(255)}read-createcurrent
hwAclIpv6AdvancedDestPort1
OBJECT-TYPE
This object indicates the largest destination port number.
1.3.6.1.4.1.2011.5.1.1.13.1.13Integer32 (0..65535)read-createcurrent
hwAclIpv6AdvancedDestPort2
OBJECT-TYPE
This object indicates the smallest destination port number.
1.3.6.1.4.1.2011.5.1.1.13.1.14Integer32 (0..65535)read-createcurrent
hwAclIpv6AdvancedPrecedence
OBJECT-TYPE
The value of this object identifies the precedence sub-field. It is the higher three bits of the ToS field in an IPv6 header. The value ranges from 0 to 7.
1.3.6.1.4.1.2011.5.1.1.13.1.15Integer32 (0..7 | 255)read-createcurrent
hwAclIpv6AdvancedTos
OBJECT-TYPE
The value of this object identifies the ToS sub-field. This field covers four bits after the higher three bits of the ToS field in an IPv6 header. The value ranges from 0 to 15.
1.3.6.1.4.1.2011.5.1.1.13.1.16Integer32 (0..15 | 255)read-createcurrent
hwAclIpv6AdvancedDscp
OBJECT-TYPE
The value of this object identifies the higher seven bits of the ToS field in an IPv6 header. The value ranges from 0 to 63.
1.3.6.1.4.1.2011.5.1.1.13.1.17Integer32 (0..63 | 255)read-createcurrent
hwAclIpv6AdvancedEstablish
OBJECT-TYPE
The object indicates whether or not establishing.
1.3.6.1.4.1.2011.5.1.1.13.1.18TruthValueread-createcurrent
hwAclIpv6AdvancedTimeRangeIndex
OBJECT-TYPE
The value of this object identifies the index of the time range during which an ACL6 rule can be applied. The value ranges from 0 to 256. The value 0 indicates that no time range is specified for the rule.
1.3.6.1.4.1.2011.5.1.1.13.1.19Integer32 (0..256)read-createcurrent
hwAclIpv6AdvancedIcmpType
OBJECT-TYPE
The value of this object identifies the ICMPv6 message type. The value ranges from 0 to 255. The value 65535 is invalid.
1.3.6.1.4.1.2011.5.1.1.13.1.20Integer32 (0..255 | 65535)read-createcurrent
hwAclIpv6AdvancedIcmpCode
OBJECT-TYPE
The value of this obejct identifies the code of an ICMPv6 message. The value ranges from 0 to 255. The value 65535 is invalid.
1.3.6.1.4.1.2011.5.1.1.13.1.21Integer32 (0..255 | 65535)read-createcurrent
hwAclIpv6AdvancedFragment
OBJECT-TYPE
The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once a rule is created.
1.3.6.1.4.1.2011.5.1.1.13.1.22INTEGER {fragmentSubseq(0), fragment(1), none(255)}read-createcurrent
hwAclIpv6AdvancedLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets
1.3.6.1.4.1.2011.5.1.1.13.1.23TruthValueread-createcurrent
hwAclIpv6AdvancedEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.13.1.24EnabledStatusread-onlycurrent
hwAclIpv6AdvancedCount
OBJECT-TYPE
This object indicates the number of packets matched by a rule. A maximum of 64 bits are supported.
1.3.6.1.4.1.2011.5.1.1.13.1.25Counter64read-onlycurrent
hwAclIpv6AdvancedVrfName
OBJECT-TYPE
This object indicates a VPN instance. The length of a VPN instance name cannot exceed 31 characters.
1.3.6.1.4.1.2011.5.1.1.13.1.26OCTET STRING (SIZE(0..31))read-createcurrent
hwAclIpv6AdvancedRowStatus
OBJECT-TYPE
RowStatus, Now support three state:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.13.1.27RowStatusread-createcurrent
hwAclIpv6AdvancedDescription
OBJECT-TYPE
The object indicates the description of this IPv6 advanced rule. The object describes the usage of an IPv6 ACL with a word or a sentence.
1.3.6.1.4.1.2011.5.1.1.13.1.28OCTET STRING (SIZE(0..127))read-createcurrent
hwAclIpv6AdvancedSrcMask
OBJECT-TYPE
The object indicates the source IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive.
1.3.6.1.4.1.2011.5.1.1.13.1.29Ipv6Addressread-createcurrent
hwAclIpv6AdvancedDestMask
OBJECT-TYPE
The object indicates the destination IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive.
1.3.6.1.4.1.2011.5.1.1.13.1.30Ipv6Addressread-createcurrent
hwAclIpv6AdvancedProtocolNew
OBJECT-TYPE
The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IPv6 protocol is 65535.
1.3.6.1.4.1.2011.5.1.1.13.1.31Integer32 (0..255 | 65535)read-createcurrent
hwAclIpv6AdvancedIcmpTypeEnd
OBJECT-TYPE
The value of this object identifies the ICMPv6 message type. The value ranges from 0 to 255. The value 65535 is invalid. This object is used together with hwAclIpv6AdvancedIcmpType to indicate the value range of the ICMPv6 type.
1.3.6.1.4.1.2011.5.1.1.13.1.32Integer32 (0..255 | 65535)read-createcurrent
hwAclIpv6AdvancedVrfAny
OBJECT-TYPE
The object indicates whether or not matching any VPN-instance.
1.3.6.1.4.1.2011.5.1.1.13.1.33TruthValueread-createcurrent
hwAclIpv6AdvancedSrcPoolName
OBJECT-TYPE
The object indicates the source Ipv6 pool name.
1.3.6.1.4.1.2011.5.1.1.13.1.34OCTET STRING (SIZE(0..32))read-createcurrent
hwAclIpv6AdvancedVni
OBJECT-TYPE
The object indicates the ID of VXLAN, The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.13.1.35Integer32 (0..16777215)read-createcurrent
hwAclEthernetFrameRuleTable
OBJECT-TYPE
Configure the rule for ethernet-frame-based acl group.
1.3.6.1.4.1.2011.5.1.1.14not-accessiblecurrent
hwAclEthernetFrameRuleEntry
OBJECT-TYPE
Each entry contains a rule of ethernet-frame-based acl group.
1.3.6.1.4.1.2011.5.1.1.14.1not-accessiblecurrent
hwAclEthernetFrameAclNum
OBJECT-TYPE
The index of ethernet-frame-based acl group, the index range is (4000..4999 | 42768..76535).
1.3.6.1.4.1.2011.5.1.1.14.1.1Integer32read-onlycurrent
hwAclEthernetFrameSubitem
OBJECT-TYPE
The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.14.1.2Unsigned32read-onlycurrent
hwAclEthernetFrameAct
OBJECT-TYPE
The object indicates the action of an ethernet-frame-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.14.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclEthernetFrameType
OBJECT-TYPE
The value of this object identifies the protocol type of an Ethernet frame. The value ranges from 0 to 65535.
1.3.6.1.4.1.2011.5.1.1.14.1.4Integer32read-createcurrent
hwAclEthernetFrameTypeMask
OBJECT-TYPE
The value of this object identifies the mask of the protocol type of an Ethernet frame. The value ranges from 0 to 65535.
1.3.6.1.4.1.2011.5.1.1.14.1.5Integer32read-createcurrent
hwAclEthernetFrameSrcMac
OBJECT-TYPE
The object indicates the source mac address of rule.
1.3.6.1.4.1.2011.5.1.1.14.1.6MacAddressread-createcurrent
hwAclEthernetFrameSrcMacMask
OBJECT-TYPE
The object indicates the source mac mask of rule.
1.3.6.1.4.1.2011.5.1.1.14.1.7MacAddressread-createcurrent
hwAclEthernetFrameDstMac
OBJECT-TYPE
The object indicates the destination mac address of rule.
1.3.6.1.4.1.2011.5.1.1.14.1.8MacAddressread-createcurrent
hwAclEthernetFrameDstMacMask
OBJECT-TYPE
The object indicates the destination mac mask of rule.
1.3.6.1.4.1.2011.5.1.1.14.1.9MacAddressread-createcurrent
hwAclEthernetFrameTimeRangeIndex
OBJECT-TYPE
The object indicates the time range of a ethernet frame acl rule. When the current time is in time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0.
1.3.6.1.4.1.2011.5.1.1.14.1.10Integer32 (0..256)read-createcurrent
hwAclEthernetFrameLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, source/destination mac addr, protocol of ethernet frame, and number of packets.
1.3.6.1.4.1.2011.5.1.1.14.1.11TruthValueread-createcurrent
hwAclEthernetFrameEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.14.1.12EnabledStatusread-onlycurrent
hwAclEthernetFrameCount
OBJECT-TYPE
This object indicates the number of matched packets by a rule. A maximum of 64 bits are supported.
1.3.6.1.4.1.2011.5.1.1.14.1.13Counter64read-onlycurrent
hwAclEthernetFrameRowStatus
OBJECT-TYPE
RowStatus,Now support three state:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.14.1.14RowStatusread-createcurrent
hwAclEthernetFrameEncapType
OBJECT-TYPE
The object indicates the encapsulation type of rule.
1.3.6.1.4.1.2011.5.1.1.14.1.15INTEGER {ether2(1), ieee802dot3(2), snap(3), none(255)}read-createcurrent
hwAclEthernetFrameDoubleTag
OBJECT-TYPE
The object indicates two tags of rule. False value do not care the number of tags.
1.3.6.1.4.1.2011.5.1.1.14.1.16TruthValueread-createcurrent
hwAclEthernetFrameVlanId
OBJECT-TYPE
The object indicates the vlan ID of rule. The invalid vlan ID is 0.
1.3.6.1.4.1.2011.5.1.1.14.1.17Integer32 (0..4094)read-createcurrent
hwAclEthernetFrameVlanIdMask
OBJECT-TYPE
The object indicates the vlan ID mask of rule.
1.3.6.1.4.1.2011.5.1.1.14.1.18Integer32 (0..4095)read-createcurrent
hwAclEthernetFrameCVlanId
OBJECT-TYPE
The object indicates the ce-vlan ID of rule. The invalid vlan ID is 0.
1.3.6.1.4.1.2011.5.1.1.14.1.19Integer32 (0..4094)read-createcurrent
hwAclEthernetFrameCVlanIdMask
OBJECT-TYPE
The object indicates the ce-vlan ID mask of rule.
1.3.6.1.4.1.2011.5.1.1.14.1.20Integer32 (0..4095)read-createcurrent
hwAclEthernetFrameRule8021p
OBJECT-TYPE
The object indicates the 8021p value of S-tag.
1.3.6.1.4.1.2011.5.1.1.14.1.21Integer32 (0..7 | 255)read-createcurrent
hwAclEthernetFrameRuleCVlan8021p
OBJECT-TYPE
The object indicates the 8021p value of C-tag.
1.3.6.1.4.1.2011.5.1.1.14.1.22Integer32 (0..7 | 255)read-createcurrent
hwAclEthernetFrameDescription
OBJECT-TYPE
The object indicates the description of this ethernetframe rule. The object describes the usage of an ACL with a word or a sentence.
1.3.6.1.4.1.2011.5.1.1.14.1.23OCTET STRING (SIZE(0..127))read-createcurrent
hwAclAppliedTable
OBJECT-TYPE
Configure the applied ACL.
1.3.6.1.4.1.2011.5.1.1.15not-accessiblecurrent
hwAclAppliedEntry
OBJECT-TYPE
Each entry contains a applied ACL.
1.3.6.1.4.1.2011.5.1.1.15.1not-accessiblecurrent
hwAclAppliedOperation
OBJECT-TYPE
The actions taken when packets conforming or exceeding the configured.
1.3.6.1.4.1.2011.5.1.1.15.1.1INTEGER {filter(1), limit(2), mirror(3), redirectCpu(4), redirectInterface(5), redirectIpNextHop(6), redirectIpv6NextHop(7), remark8021p(8), remarkDscp(9), remarkIpPrecedence(10), remarkLocalPrecedence(11), remarkVlanId(12), remarkCVlanId(13), remarkDestMac(14), statistic(15)}not-accessiblecurrent
hwAclAppliedScopeType
OBJECT-TYPE
The scope that ACL apply on.
1.3.6.1.4.1.2011.5.1.1.15.1.2INTEGER {global(1), vlan(2), interface(3)}not-accessiblecurrent
hwAclAppliedScopeIndex
OBJECT-TYPE
When the scope is global, this field is invalid; When the scope is vlan, this field is vlan ID; When the scope is interface, this field is interface index.
1.3.6.1.4.1.2011.5.1.1.15.1.3Integer32not-accessiblecurrent
hwAclAppliedDirection
OBJECT-TYPE
The direction acl apply on.
1.3.6.1.4.1.2011.5.1.1.15.1.4INTEGER {inbound(1), outbound(2)}not-accessiblecurrent
hwAclAppliedAclNum
OBJECT-TYPE
The index of ACL group. Basic ACL in range 2000~2999; Advance ACL in range 3000~3999; Link ACL in range 4000~4999;
1.3.6.1.4.1.2011.5.1.1.15.1.5Integer32 (2000..4999)not-accessiblecurrent
hwAclAppliedSubitem
OBJECT-TYPE
The object specifies the number of an ACL rule.
1.3.6.1.4.1.2011.5.1.1.15.1.6Integer32not-accessiblecurrent
hwAclAppliedAclNum2
OBJECT-TYPE
The index of ACL group. 65535 means this field is valid.
1.3.6.1.4.1.2011.5.1.1.15.1.7Integer32 (2000..3999 | 65535)not-accessiblecurrent
hwAclAppliedSubitem2
OBJECT-TYPE
The object specifies the number of an ACL rule.
1.3.6.1.4.1.2011.5.1.1.15.1.8Integer32not-accessiblecurrent
hwAclAppliedStatMode
OBJECT-TYPE
The object specifies the mode of statistics. When action is statistic, this field is valid.
1.3.6.1.4.1.2011.5.1.1.15.1.9INTEGER {byPackets(1), byBytes(2)}read-createcurrent
hwAclAppliedStatCount
OBJECT-TYPE
The object indicates the statistics of matched packets by the policy. When action is statistic or limit, this field is valid.
1.3.6.1.4.1.2011.5.1.1.15.1.10Counter64read-onlycurrent
hwAclAppliedLimitCir
OBJECT-TYPE
Committed information rate. Unit: kbps.
1.3.6.1.4.1.2011.5.1.1.15.1.11Integer32 (0 | 64..10000000)read-createcurrent
hwAclAppliedLimitPir
OBJECT-TYPE
Peak information rate. Unit: kbps. 0 is the default value.
1.3.6.1.4.1.2011.5.1.1.15.1.12Integer32 (0 | 64..10000000)read-createcurrent
hwAclAppliedLimitCbs
OBJECT-TYPE
Committed burst size. Unit: byte. 0 is the default value.
1.3.6.1.4.1.2011.5.1.1.15.1.13Integer32 (0 | 4096..16773120)read-createcurrent
hwAclAppliedLimitPbs
OBJECT-TYPE
Peak burst size. Unit: byte. 0 is the default value.
1.3.6.1.4.1.2011.5.1.1.15.1.14Integer32 (0 | 4096..16773120)read-createcurrent
hwAclAppliedLimitGreenAction
OBJECT-TYPE
Green action.
1.3.6.1.4.1.2011.5.1.1.15.1.15INTEGER {pass(1), drop(2), passRemarkDscp(3), passRemark8021p(4)}read-createcurrent
hwAclAppliedLimitGreenValue
OBJECT-TYPE
The value is to remark When green action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7.
1.3.6.1.4.1.2011.5.1.1.15.1.16Integer32 (0..63)read-createcurrent
hwAclAppliedLimitYellowAction
OBJECT-TYPE
Yellow action.
1.3.6.1.4.1.2011.5.1.1.15.1.17INTEGER {pass(1), drop(2), passRemarkDscp(3), passRemark8021p(4)}read-createcurrent
hwAclAppliedLimitYellowValue
OBJECT-TYPE
The value is to remark When yellow action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7.
1.3.6.1.4.1.2011.5.1.1.15.1.18Integer32 (0..63)read-createcurrent
hwAclAppliedLimitRedAction
OBJECT-TYPE
Red action.
1.3.6.1.4.1.2011.5.1.1.15.1.19INTEGER {pass(1), drop(2), passRemarkDscp(3), passRemark8021p(4)}read-createcurrent
hwAclAppliedLimitRedValue
OBJECT-TYPE
The value is to remark When red action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7.
1.3.6.1.4.1.2011.5.1.1.15.1.20Integer32 (0..63)read-createcurrent
hwAclAppliedMirrObservedPort
OBJECT-TYPE
The mirror observe port number.
1.3.6.1.4.1.2011.5.1.1.15.1.21Integer32read-createcurrent
hwAclAppliedMirrRspanVlan
OBJECT-TYPE
The object specifies the RSPAN vlan. 0 means mirror to local port.
1.3.6.1.4.1.2011.5.1.1.15.1.22Integer32 (0..4094)read-createcurrent
hwAclAppliedRedirectIfIndex
OBJECT-TYPE
The redirect output interface.
1.3.6.1.4.1.2011.5.1.1.15.1.23Integer32read-createcurrent
hwAclAppliedRedirectIpAddr
OBJECT-TYPE
The redirect IP next hop address.
1.3.6.1.4.1.2011.5.1.1.15.1.24IpAddressread-createcurrent
hwAclAppliedRedirectIpv6Addr
OBJECT-TYPE
The redirect IPv6 next hop address.
1.3.6.1.4.1.2011.5.1.1.15.1.25Ipv6Addressread-createcurrent
hwAclAppliedRemarkVlan
OBJECT-TYPE
The remarked vlan ID.
1.3.6.1.4.1.2011.5.1.1.15.1.26Integer32 (0..4094)read-createcurrent
hwAclAppliedRemarkCVlan
OBJECT-TYPE
The remarked ce-vlan ID.
1.3.6.1.4.1.2011.5.1.1.15.1.27Integer32 (0..4094)read-createcurrent
hwAclAppliedRemark8021p
OBJECT-TYPE
The remarked 8021p value.
1.3.6.1.4.1.2011.5.1.1.15.1.28Integer32 (0..7)read-createcurrent
hwAclAppliedRemarkDscp
OBJECT-TYPE
The remarked DSCP value.
1.3.6.1.4.1.2011.5.1.1.15.1.29Integer32 (0..63)read-createcurrent
hwAclAppliedRemarkIpPre
OBJECT-TYPE
The remarked IP precedence value.
1.3.6.1.4.1.2011.5.1.1.15.1.30Integer32 (0..7)read-createcurrent
hwAclAppliedRemarkLocalPre
OBJECT-TYPE
The remarked local precedence value.
1.3.6.1.4.1.2011.5.1.1.15.1.31Integer32 (0..7)read-createcurrent
hwAclAppliedRemarkMacAddr
OBJECT-TYPE
The remarked MAC address.
1.3.6.1.4.1.2011.5.1.1.15.1.32MacAddressread-createcurrent
hwAclAppliedIsIPv6Acl
OBJECT-TYPE
The object indicates whether is IPv6 ACL.
1.3.6.1.4.1.2011.5.1.1.15.1.33TruthValuenot-accessiblecurrent
hwAclAppliedRowStatus
OBJECT-TYPE
RowStatus,Now support three state:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.15.1.51RowStatusread-createcurrent
hwAclIpv6NumGroupTable
OBJECT-TYPE
This table is used to query information about an ACL rule group, including the ACL configuration order, step length, and description.
1.3.6.1.4.1.2011.5.1.1.16not-accessiblecurrent
hwAclIpv6NumGroupEntry
OBJECT-TYPE
An entry containing characters of an IPv6 ACL group.
1.3.6.1.4.1.2011.5.1.1.16.1not-accessiblecurrent
hwAclIpv6NumGroupAclNum
OBJECT-TYPE
The value of this object identifies a table index, representing the number of an IPv6 ACL rule group. The value range is as follows: Interface-based ACL6: 1000 to 1999 Basic ACL6: 2000 to 2999 Advanced ACL6: 3000 to 3999 Named ACL6: 42768 to 75535
1.3.6.1.4.1.2011.5.1.1.16.1.1Integer32read-onlycurrent
hwAclIpv6NumGroupMatchOrder
OBJECT-TYPE
The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL6 rules are matched following the 'Depth-first' principle.
1.3.6.1.4.1.2011.5.1.1.16.1.2INTEGER {config(1), auto(2), default(3)}read-createcurrent
hwAclIpv6NumGroupSubitemNum
OBJECT-TYPE
The total number of the rules in the ACL6 group.
1.3.6.1.4.1.2011.5.1.1.16.1.3Counter32read-onlycurrent
hwAclIpv6NumGroupCountClear
OBJECT-TYPE
This object indicates whether to clear the statistics of an ACL6 rule group. cleared(1): clear notUsed(2): not clear This object is valid only when the Set operation is performed for this object.
1.3.6.1.4.1.2011.5.1.1.16.1.4INTEGER {cleared(1), notUsed(2)}read-createcurrent
hwAclIpv6NumGroupAclName
OBJECT-TYPE
The object indicates the name of an acl6 group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character.
1.3.6.1.4.1.2011.5.1.1.16.1.5OCTET STRING (SIZE(0..64))read-createcurrent
hwAclIpv6NumGroupDescription
OBJECT-TYPE
This object indicates the description of an ACL6 rule group. The description length cannot exceed 127 characters.
1.3.6.1.4.1.2011.5.1.1.16.1.6OCTET STRING (SIZE(0..127))read-createcurrent
hwAclIpv6NumGroupAclType
OBJECT-TYPE
The type of IPv6 ACL group.
1.3.6.1.4.1.2011.5.1.1.16.1.7INTEGER {basic(1), advanced(2), interface(3)}read-createcurrent
hwAclIpv6NumGroupRowStatus
OBJECT-TYPE
RowStatus, Now support three value:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.16.1.51RowStatusread-createcurrent
hwAclIpv6NumGroupStep
OBJECT-TYPE
The object indicates the step value of number IPv6 ACL. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs are the multiples of 5 beginning with 5. The IPv6 ACL IDs change along with the step. When the step is 5, the IPv6 ACL IDs are 5, 10, and 15 and so on. However, when the step is set to 2, the IDs turn to 2, 4, and 6 and so on.
1.3.6.1.4.1.2011.5.1.1.16.1.52Integer32 (1..20)read-createcurrent
hwAclIpv6IfRuleTable
OBJECT-TYPE
Configure the rule for interface-based acl6 group.
1.3.6.1.4.1.2011.5.1.1.17not-accessiblecurrent
hwAclIpv6IfRuleEntry
OBJECT-TYPE
Each entry contains a rule of interface-based acl6 group.
1.3.6.1.4.1.2011.5.1.1.17.1not-accessiblecurrent
hwAclIpv6IfAclNum
OBJECT-TYPE
The index of interface-based acl6 group, the index range is (1000..1999 | 42768..75535).
1.3.6.1.4.1.2011.5.1.1.17.1.1Integer32read-onlycurrent
hwAclIpv6IfSubitem
OBJECT-TYPE
The object specifies the number of an ACL6 rule. If the number specified has been assigned to an ACL6 rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL6. It will be placed at the end of the ACL6 when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL6 rule must be given 0, but it will be assigned automatically;otherwise, this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.17.1.2Unsigned32read-onlycurrent
hwAclIpv6IfAct
OBJECT-TYPE
The object indicates the action of an interface-based acl6 rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.17.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclIpv6IfIndex
OBJECT-TYPE
The object indicates the index of an interface. It specifies the interface information of the packets. The invalid interface index is 0.
1.3.6.1.4.1.2011.5.1.1.17.1.4Integer32read-createcurrent
hwAclIpv6IfAny
OBJECT-TYPE
The object indicates whether or not matching any interface.
1.3.6.1.4.1.2011.5.1.1.17.1.5TruthValueread-createcurrent
hwAclIpv6IfTimeRangeIndex
OBJECT-TYPE
The value of this object identifies the index of the time range during which an ACL rule can be applied. When the current time is in the time range, the rule is valid. The value 0 is invalid, indicating that no time range is specified for the rule.The value ranges from 0 to 256.
1.3.6.1.4.1.2011.5.1.1.17.1.6Integer32 (0..256)read-createcurrent
hwAclIpv6IfLog
OBJECT-TYPE
The object indicates whether to log the matched packets. The log contents include sequence number of ACL6 rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets.
1.3.6.1.4.1.2011.5.1.1.17.1.7TruthValueread-createcurrent
hwAclIpv6IfEnable
OBJECT-TYPE
The object indicates whether the rule is valid or invalid.
1.3.6.1.4.1.2011.5.1.1.17.1.8TruthValueread-onlycurrent
hwAclIpv6IfCount
OBJECT-TYPE
The object indicates the statistics of matched packets by basic rule.
1.3.6.1.4.1.2011.5.1.1.17.1.9Counter64read-onlycurrent
hwAclIpv6IfRowStatus
OBJECT-TYPE
RowStatus,Now support three state:CreateAndGo,Active,Destroy.
1.3.6.1.4.1.2011.5.1.1.17.1.11RowStatusread-createcurrent
hwAclMplsRuleTable
OBJECT-TYPE
Configure the rule for mpls acl group.
1.3.6.1.4.1.2011.5.1.1.18not-accessiblecurrent
hwAclMplsRuleEntry
OBJECT-TYPE
Each entry is a rule of mpls acl.
1.3.6.1.4.1.2011.5.1.1.18.1not-accessiblecurrent
hwAclMplsAclNum
OBJECT-TYPE
The index of mpls acl group, the index range is (10000..10999 | 42768..76535).
1.3.6.1.4.1.2011.5.1.1.18.1.1Integer32read-onlycurrent
hwAclMplsSubitem
OBJECT-TYPE
The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created.
1.3.6.1.4.1.2011.5.1.1.18.1.2Unsigned32read-onlycurrent
hwAclMplsAct
OBJECT-TYPE
The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.
1.3.6.1.4.1.2011.5.1.1.18.1.3INTEGER {permit(1), deny(2)}read-createcurrent
hwAclMplsExp1
OBJECT-TYPE
The value of this object identifies the EXP value in the first label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.
1.3.6.1.4.1.2011.5.1.1.18.1.4Integer32 (0..7 | 255)read-createcurrent
hwAclMplsExp2
OBJECT-TYPE
The value of this object identifies the EXP value in the second label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.
1.3.6.1.4.1.2011.5.1.1.18.1.5Integer32 (0..7 | 255)read-createcurrent
hwAclMplsExp3
OBJECT-TYPE
The value of this object identifies the EXP value in the third label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.
1.3.6.1.4.1.2011.5.1.1.18.1.6Integer32 (0..7 | 255)read-createcurrent
hwAclMplsExp4
OBJECT-TYPE
The value of this object identifies the EXP value in the fourth label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.
1.3.6.1.4.1.2011.5.1.1.18.1.7Integer32 (0..7 | 255)read-createcurrent
hwAclMplsLabel1
OBJECT-TYPE
The value of this object identifies the Label value in the first label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.
1.3.6.1.4.1.2011.5.1.1.18.1.8Integer32 (-1 | 0..1048575)read-createcurrent
hwAclMplsLabel2
OBJECT-TYPE
The value of this object identifies the Label value in the second label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.
1.3.6.1.4.1.2011.5.1.1.18.1.9Integer32 (-1 | 0..1048575)read-createcurrent
hwAclMplsLabel3
OBJECT-TYPE
The value of this object identifies the Label value in the third label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.
1.3.6.1.4.1.2011.5.1.1.18.1.10Integer32 (-1 | 0..1048575)read-createcurrent
hwAclMplsLabel4
OBJECT-TYPE
The value of this object identifies the Label value in the fourth label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.
1.3.6.1.4.1.2011.5.1.1.18.1.11Integer32 (-1 | 0..1048575)read-createcurrent
hwAclMplsTTLOP1
OBJECT-TYPE
The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this operation of the ttl is invalid.
1.3.6.1.4.1.2011.5.1.1.18.1.12INTEGER {invalid(0), lt(1), eq(2), gt(3), range(5), any(255)}read-createcurrent
hwAclMplsTTL1Begin
OBJECT-TYPE
The object indicates the begin value of a mpls ttl.
1.3.6.1.4.1.2011.5.1.1.18.1.13Integer32 (0..255)read-createcurrent
hwAclMplsTTL1End
OBJECT-TYPE
The object indicates the end value of a mpls ttl.
1.3.6.1.4.1.2011.5.1.1.18.1.14Integer32 (0..255)read-createcurrent
hwAclMplsTTLOP2
OBJECT-TYPE
The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this operation of the ttl is invalid.
1.3.6.1.4.1.2011.5.1.1.18.1.15INTEGER {invalid(0), lt(1), eq(2), gt(3), range(5), any(255)}read-createcurrent
hwAclMplsTTL2Begin
OBJECT-TYPE
The object indicates the begin value of a mpls ttl.
1.3.6.1.4.1.2011.5.1.1.18.1.16Integer32 (0..255)read-createcurrent
hwAclMplsTTL2End
OBJECT-TYPE
The object indicates the end value of a mpls ttl.
1.3.6.1.4.1.2011.5.1.1.18.1.17Integer32 (0..255)read-createcurrent
hwAclMplsTTLOP3
OBJECT-TYPE
The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this operation of the ttl is invalid.
1.3.6.1.4.1.2011.5.1.1.18.1.18INTEGER {invalid(0), lt(1), eq(2), gt(3), range(5), any(255)}read-createcurrent
hwAclMplsTTL3Begin
OBJECT-TYPE
The object indicates the begin value of a mpls ttl.
1.3.6.1.4.1.2011.5.1.1.18.1.19Integer32 (0..255)read-createcurrent
hwAclMplsTTL3End
OBJECT-TYPE
The object indicates the end value of a mpls ttl.
1.3.6.1.4.1.2011.5.1.1.18.1.20Integer32 (0..255)read-createcurrent
hwAclMplsRowStatus
OBJECT-TYPE
RowStatus, Now support three value:CreateAndGo,Active and Destroy.
1.3.6.1.4.1.2011.5.1.1.18.1.21RowStatusread-createcurrent
hwAclMplsCount
OBJECT-TYPE
The object indicates the statistics of matched packets by the rule.
1.3.6.1.4.1.2011.5.1.1.18.1.22Counter64read-onlycurrent
hwAclDomainNameConfigTable
OBJECT-TYPE
Configure the domain name.
1.3.6.1.4.1.2011.5.1.1.19not-accessiblecurrent
hwAclDomainNameConfigEntry
OBJECT-TYPE
Each entry is a domain name.
1.3.6.1.4.1.2011.5.1.1.19.1not-accessiblecurrent
hwAclDomainID
OBJECT-TYPE
The index of DomianName table, the index range is (0..31).
1.3.6.1.4.1.2011.5.1.1.19.1.1Integer32not-accessiblecurrent
hwAclDomainName
OBJECT-TYPE
The domian name.
1.3.6.1.4.1.2011.5.1.1.19.1.2OCTET STRING (SIZE(3..127))read-writecurrent
hwAclDomainNameConfigRowStatus
OBJECT-TYPE
Row status,Two actions are used: createAndGo(4), destroy(6).
1.3.6.1.4.1.2011.5.1.1.19.1.3RowStatusread-createcurrent
hwAclIPPoolTable
OBJECT-TYPE
Configure the IP pool name.
1.3.6.1.4.1.2011.5.1.1.20not-accessiblecurrent
hwAclIPPoolEntry
OBJECT-TYPE
Each entry is a IP pool name.
1.3.6.1.4.1.2011.5.1.1.20.1not-accessiblecurrent
hwAclIPPoolIndex
OBJECT-TYPE
The index of ACL IP pool table.
1.3.6.1.4.1.2011.5.1.1.20.1.1Integer32read-onlycurrent
hwAclIPPoolName
OBJECT-TYPE
The IP pool name.
1.3.6.1.4.1.2011.5.1.1.20.1.2OCTET STRING (SIZE(0..32))read-createcurrent
hwAclIPPoolRowStatus
OBJECT-TYPE
Row status.
1.3.6.1.4.1.2011.5.1.1.20.1.3RowStatusread-createcurrent
hwAclIPPoolApplyBGPPeer
OBJECT-TYPE
The object indicates whether or not BGP peers are applied.
1.3.6.1.4.1.2011.5.1.1.20.1.4TruthValueread-createcurrent
hwAclIPPoolIPTable
OBJECT-TYPE
Configure the IP address of IP pool.
1.3.6.1.4.1.2011.5.1.1.21not-accessiblecurrent
hwAclIPPoolIPEntry
OBJECT-TYPE
Each entry is a IP address of IP pool.
1.3.6.1.4.1.2011.5.1.1.21.1not-accessiblecurrent
hwAclIPPoolIPPoolIndex
OBJECT-TYPE
This object indicates the level 1 index, that is, the index of an IP address pool used by an ACL.
1.3.6.1.4.1.2011.5.1.1.21.1.1Integer32read-onlycurrent
hwAclIPPoolIPIndex
OBJECT-TYPE
This object indicates the level 2 index, that is, the index of an IPv4 address in an IP address pool used by an ACL.
1.3.6.1.4.1.2011.5.1.1.21.1.2Integer32read-onlycurrent
hwAclIPPoolIPIpAdd
OBJECT-TYPE
The object indicates the IP-address.
1.3.6.1.4.1.2011.5.1.1.21.1.3IpAddressread-createcurrent
hwAclIPPoolIPIpWild
OBJECT-TYPE
The object indicates the IP-address wild.
1.3.6.1.4.1.2011.5.1.1.21.1.4IpAddressread-createcurrent
hwAclIPPoolIPRowStatus
OBJECT-TYPE
Row status.
1.3.6.1.4.1.2011.5.1.1.21.1.5RowStatusread-createcurrent
hwAclPortPoolTable
OBJECT-TYPE
Configure the port pool name.
1.3.6.1.4.1.2011.5.1.1.22not-accessiblecurrent
hwAclPortPoolEntry
OBJECT-TYPE
Each entry is a port pool name.
1.3.6.1.4.1.2011.5.1.1.22.1not-accessiblecurrent
hwAclPortPoolIndex
OBJECT-TYPE
The index of ACL port pool table.
1.3.6.1.4.1.2011.5.1.1.22.1.1Integer32read-onlycurrent
hwAclPortPoolName
OBJECT-TYPE
The Port pool name.
1.3.6.1.4.1.2011.5.1.1.22.1.2OCTET STRING (SIZE(0..32))read-createcurrent
hwAclPortPoolRowStatus
OBJECT-TYPE
Row status.
1.3.6.1.4.1.2011.5.1.1.22.1.3RowStatusread-createcurrent
hwAclPortPoolPortTable
OBJECT-TYPE
Configure the port range of port pool.
1.3.6.1.4.1.2011.5.1.1.23not-accessiblecurrent
hwAclPortPoolPortEntry
OBJECT-TYPE
Each entry is a port range of port pool.
1.3.6.1.4.1.2011.5.1.1.23.1not-accessiblecurrent
hwAclPortPoolPortPoolIndex
OBJECT-TYPE
This object indicates the level 1 index, that is, the index of an ACL port pool.
1.3.6.1.4.1.2011.5.1.1.23.1.1Integer32read-onlycurrent
hwAclPortPoolPortIndex
OBJECT-TYPE
This object indicates the level 2 index, that is, the index of a port number in the ACL port pool.
1.3.6.1.4.1.2011.5.1.1.23.1.2Integer32read-onlycurrent
hwAclPortPoolPortOp
OBJECT-TYPE
The object indicates the Port operation. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid.
1.3.6.1.4.1.2011.5.1.1.23.1.3INTEGER {invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)}read-createcurrent
hwAclPortPoolPortNumBegin
OBJECT-TYPE
The object indicates the begin port number.
1.3.6.1.4.1.2011.5.1.1.23.1.4Integer32 (0..65535)read-createcurrent
hwAclPortPoolPortNumEnd
OBJECT-TYPE
The object indicates the end port number.
1.3.6.1.4.1.2011.5.1.1.23.1.5Integer32 (0..65535)read-createcurrent
hwAclPortPoolPortRowStatus
OBJECT-TYPE
Row status.
1.3.6.1.4.1.2011.5.1.1.23.1.6RowStatusread-createcurrent
hwAclIPPool6Table
OBJECT-TYPE
Configure the IPv6 pool name.
1.3.6.1.4.1.2011.5.1.1.24not-accessiblecurrent
hwAclIPPool6Entry
OBJECT-TYPE
Each entry is a IPv6 pool name.
1.3.6.1.4.1.2011.5.1.1.24.1not-accessiblecurrent
hwAclIPPool6Index
OBJECT-TYPE
The index of ACL IPv6 pool table.
1.3.6.1.4.1.2011.5.1.1.24.1.1Integer32read-onlycurrent
hwAclIPPool6Name
OBJECT-TYPE
The IPv6 pool name.
1.3.6.1.4.1.2011.5.1.1.24.1.2OCTET STRING (SIZE(0..32))read-createcurrent
hwAclIPPool6ApplyBGPIPv6Peer
OBJECT-TYPE
The object indicates whether or not BGP IPv6 peers are applied.
1.3.6.1.4.1.2011.5.1.1.24.1.3TruthValueread-createcurrent
hwAclIPPool6RowStatus
OBJECT-TYPE
Row status.
1.3.6.1.4.1.2011.5.1.1.24.1.4RowStatusread-createcurrent
hwAclMibTrap
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.2
hwAclTrapOid
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.2.1
hwAclTrapsDefine
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.2.2
hwAclTraps
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.2.2.1
hwAclResourceTrapsTable
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.2.2.1.1
hwAclResSlotStr
OBJECT-TYPE
The infomation of slot.
1.3.6.1.4.1.2011.5.1.2.2.1.1.1OCTET STRINGaccessible-for-notifycurrent
hwAclResStage
OBJECT-TYPE
The stage where trap infomation exists.
1.3.6.1.4.1.2011.5.1.2.2.1.1.2OCTET STRINGaccessible-for-notifycurrent
hwAclResLimit
OBJECT-TYPE
The usage of rule resource.
1.3.6.1.4.1.2011.5.1.2.2.1.1.3Integer32accessible-for-notifycurrent
hwAclResourceTrapsEntry
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.2.2.1.1.4
hwAclResourceTrapsGroups
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.2.2.1.1.5
hwAclMibConformance
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.3
hwAclMibCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.3.1
hwAclMibGroups
OBJECT-IDENTITY
1.3.6.1.4.1.2011.5.1.3.2

Notifications

NameOIDStatus
hwAclResThresholdExceedClearTrap
NOTIFICATION-TYPE
Acl resource lack clear trap
1.3.6.1.4.1.2011.5.1.2.2.1.1.4.1current
hwAclResThresholdExceedTrap
NOTIFICATION-TYPE
Acl resource lack trap
1.3.6.1.4.1.2011.5.1.2.2.1.1.4.2current
hwAclResTotalCountExceedClearTrap
NOTIFICATION-TYPE
Acl resource full clear trap
1.3.6.1.4.1.2011.5.1.2.2.1.1.4.3current
hwAclResTotalCountExceedTrap
NOTIFICATION-TYPE
Acl resource full trap
1.3.6.1.4.1.2011.5.1.2.2.1.1.4.4current

Conformance

NameOIDStatus
hwAclResourceTrapsGroup
NOTIFICATION-GROUP
Group for all acl resource traps.
1.3.6.1.4.1.2011.5.1.2.2.1.1.5.1current
hwAclMibCompliance
MODULE-COMPLIANCE
The compliance statement for entities which implement the Huawei acl MIB.
1.3.6.1.4.1.2011.5.1.3.1.1current
hwAclGroup
OBJECT-GROUP
A collection of objects providing mandatory acl information.
1.3.6.1.4.1.2011.5.1.3.2.1current