All MIBs › ACLMGMT-MIB
Organization: D-Link Corp.
Last Updated: 2008-04-18
Category: VPN and Security
Description: Manages Access Control List (ACL) configuration and rule sets on network devices for traffic filtering and security policy enforcement.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ACLMGMT-MIB?
ACLMGMT-MIB is a D-Link proprietary MIB managing Access Control List (ACL) configuration on D-Link managed switches. Its objects cover a CPU-interface-filter enable state, total used/unused ACL rule-entry counts, an Ethernet-ACL profile table (VLAN scoping, MAC-address masking, 802.1p/EtherType matching, owner, unused-rule count, profile name), and an IP-ACL profile table (VLAN scoping, IP-address masking, DSCP/protocol-type/ICMP matching). As a configuration MIB it lets an administrator confirm ACL rule-entry capacity usage and audit which match criteria a given profile applies. It is deployed on D-Link managed switches. Engineers can download the ACLMGMT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in ACLMGMT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- D-Link managed switches
Monitoring Examples
An administrator checks swACLTotalUnusedRuleEntries to confirm there's still capacity available before adding a new ACL profile to a D-Link switch that's already carrying many rules.
What Can Be Monitored
- ACL rule-entry capacity usage and profile configuration
This MIB depends on
Related MIBs
Imported Objects
From DLINK-ID-REC-MIB
| dlink-common-mgmt |
From RFC1213-MIB
| DisplayString |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| MacAddress | |
| RowStatus |
How to Use in IPNetwork Monitor
Example using swACLCounterTotalCounter OID:
Select a D-Link managed switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type swACLCounterTotalCounter into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of matched packets. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| INT swACLCounterAccessID | 1.3.6.1.4.1.171.12.9.3.8.1.2 | INTEGER | read-only | The ID of the ACL rule entry as related to the swACLCounterProfileID. |
| swACLCounterEntry | 1.3.6.1.4.1.171.12.9.3.8.1 | not-accessible | The entry maintains counter information associated with the ACL rule table. | |
| C64 swACLCounterGreenCounter | 1.3.6.1.4.1.171.12.9.3.8.1.5 | Counter64 | read-only | The number of matched green packets. |
| INT swACLCounterProfileID | 1.3.6.1.4.1.171.12.9.3.8.1.1 | INTEGER | read-only | The ID of the ACL mask entry, which is unique in the mask list. |
| C64 swACLCounterRedCounter | 1.3.6.1.4.1.171.12.9.3.8.1.7 | Counter64 | read-only | The number of matched red packets. |
| INT swACLCounterState | 1.3.6.1.4.1.171.12.9.3.8.1.3 | INTEGER | read-write | Specifies whether the counter feature will be enabled/disabled. 1. This is optional. The default is disable. 2. If the rule is not bound with flow_meter, then all packets that match will be counted. If the rule is bound with flow_meter, then the 'counter' will be overridden. |
| swACLCounterTable | 1.3.6.1.4.1.171.12.9.3.8 | not-accessible | This table maintains counter information associated with a specific rule in the ACL rule table. Please refer to the swACLEtherRuleTable, swACLIpRuleTable, swACLIpv6RuleTable and swACLPktContRuleTable for detailed ACL rule information. | |
| C64 swACLCounterTotalCounterEx | 1.3.6.1.4.1.171.12.9.3.8.1.4 | Counter64 | read-only | The number of matched packets. |
| C64 swACLCounterYellowCounter | 1.3.6.1.4.1.171.12.9.3.8.1.6 | Counter64 | read-only | The number of matched yellow packets. |
| swAclCtrl | 1.3.6.1.4.1.171.12.9.1 | |||
| MAC swACLEthernetDstMacAddrMask | 1.3.6.1.4.1.171.12.9.2.1.1.5 | MacAddress | read-create | This object specifies the MAC address mask for the destination MAC address. |
| swACLEthernetEntry | 1.3.6.1.4.1.171.12.9.2.1.1 | not-accessible | A list of information about the ACL for Ethernet. | |
| INT swACLEthernetMacAddrMaskState | 1.3.6.1.4.1.171.12.9.2.1.1.3 | INTEGER | read-create | This object indicates the status of the MAC address mask. other (1) - Neither source MAC address nor destination MAC address are masked. dst-mac-addr (2) - Destination MAC addresses within received frames are to be filtered when matched with the MAC address entry for the table. src-mac-addr (3) - Source MAC addresses within received frames are to be filtered when matched with the MAC address entry for the table. dst-src-mac-addr (4) - Source or destination MAC addresses within received frames are to be filtered when matched with the MAC address entry of the table. |
| INT swACLEthernetOwner | 1.3.6.1.4.1.171.12.9.2.1.1.9 | INTEGER | read-only | The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands. |
| INT swACLEthernetProfileID | 1.3.6.1.4.1.171.12.9.2.1.1.1 | INTEGER | read-only | The ID of the ACL mask entry unique to the mask list. The maximum value of this object depends on the device. |
| STR swACLEthernetProfileName | 1.3.6.1.4.1.171.12.9.2.1.1.11 | DisplayString | read-create | The name of the ACL mask entry unique to the mask list. |
| ROW swACLEthernetRowStatus | 1.3.6.1.4.1.171.12.9.2.1.1.8 | RowStatus | read-create | This object indicates the status of this entry. |
| MAC swACLEthernetSrcMacAddrMask | 1.3.6.1.4.1.171.12.9.2.1.1.4 | MacAddress | read-create | This object specifies the MAC address mask for the source MAC address. |
| swACLEthernetTable | 1.3.6.1.4.1.171.12.9.2.1 | not-accessible | This table contains ACL mask Ethernet information. The access profile will be created on the switch to define which part of each incoming frame's layer 2 header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swACLEthernetUnusedRuleEntries | 1.3.6.1.4.1.171.12.9.2.1.1.10 | INTEGER | read-only | The number of unused rule entries of this Ethernet profile entry. |
| INT swACLEthernetUse8021p | 1.3.6.1.4.1.171.12.9.2.1.1.6 | INTEGER | read-create | Specifies if the switch will examine the 802.1p priority value in the frame's header or not. |
| INT swACLEthernetUseEthernetType | 1.3.6.1.4.1.171.12.9.2.1.1.7 | INTEGER | read-create | Specifies if the switch will examine the Ethernet type value in each frame's header or not. |
| INT swACLEthernetUsevlan | 1.3.6.1.4.1.171.12.9.2.1.1.2 | INTEGER | read-create | Specifies that the switch will examine the VLAN part of each packet header. |
| INT swACLEtherRule8021P | 1.3.6.1.4.1.171.12.9.3.1.1.6 | INTEGER | read-create | Specifies that the access rule will apply only to packets with this 802.1p priority value. A value of -1 indicates that this node is not actively used. |
| INT swACLEtherRuleAccessID | 1.3.6.1.4.1.171.12.9.3.1.1.2 | INTEGER | read-only | The ID of the the ACL rule entry relates to the swACLEtherRuleProfileID. When row creation is set to 0, assignment of an Access ID for ports is automatic and the swACLEtherRulePort creates Rule entries for the swACLEtherRulePort accordingly. When set from 1 to 65535, an access ID will be created for the swACLEtherRulePort. The swACLEtherRulePort must be set to one port only otherwise the row creation will fail. |
| MAC swACLEtherRuleDstMacAddress | 1.3.6.1.4.1.171.12.9.3.1.1.5 | MacAddress | read-create | Specifies that the access rule will apply to only packets with this destination MAC address. |
| INT swACLEtherRuleEnablePriority | 1.3.6.1.4.1.171.12.9.3.1.1.8 | INTEGER | read-create | Specifies that the access rule will apply only to packets with priority value. |
| INT swACLEtherRuleEnableReplaceDscp | 1.3.6.1.4.1.171.12.9.3.1.1.11 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile DSCP field or not. Replace DSCP and replace ToS precedence can not both be supported. |
| INT swACLEtherRuleEnableReplaceTosPrecedence | 1.3.6.1.4.1.171.12.9.3.1.1.18 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile ToS precedence field or not. Replace DSCP and replace ToS precedence can not both be supported. |
| swACLEtherRuleEntry | 1.3.6.1.4.1.171.12.9.3.1.1 | not-accessible | A list of information about the ACL rule of the layer 2 part of each packet. | |
| OCT swACLEtherRuleEtherType | 1.3.6.1.4.1.171.12.9.3.1.1.7 | OCTET STRING | read-create | Specifies that the access rule will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header. |
| INT swACLEtherRuleOwner | 1.3.6.1.4.1.171.12.9.3.1.1.16 | INTEGER | read-only | The owner of the ACL rule entry. Only owners can modify this entry. |
| INT swACLEtherRulePermit | 1.3.6.1.4.1.171.12.9.3.1.1.13 | INTEGER | read-create | This object indicates if the result of the packet examination is 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swACLEtherRulePort | 1.3.6.1.4.1.171.12.9.3.1.1.14 | PortList | read-create | Specifies that the access rule will only apply to port(s). This object and swACLEtherRuleVID can not be set together. |
| INT swACLEtherRulePriority | 1.3.6.1.4.1.171.12.9.3.1.1.9 | INTEGER | read-create | Specifies that the priority will be changed in packets while the swACLEtherRuleEnablePriority is enabled . |
| INT swACLEtherRuleProfileID | 1.3.6.1.4.1.171.12.9.3.1.1.1 | INTEGER | read-only | The ID of the ACL rule entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| INT swACLEtherRuleRepDscp | 1.3.6.1.4.1.171.12.9.3.1.1.12 | INTEGER | read-create | Specifies a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. |
| INT swACLEtherRuleReplacePriority | 1.3.6.1.4.1.171.12.9.3.1.1.10 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag field or not . |
| INT swACLEtherRuleRepTosPrecedence | 1.3.6.1.4.1.171.12.9.3.1.1.19 | INTEGER | read-create | Specifies a value to be written to the ToS precedence field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the ToS precedence field of the packet. |
| ROW swACLEtherRuleRowStatus | 1.3.6.1.4.1.171.12.9.3.1.1.15 | RowStatus | read-create | This object indicates the status of this entry. |
| INT swACLEtherRuleRxRate | 1.3.6.1.4.1.171.12.9.3.1.1.17 | INTEGER | read-create | Specifies the rx rate, 0 denotes no_limit. The maximum value of this object depends on the device. |
| MAC swACLEtherRuleSrcMacAddress | 1.3.6.1.4.1.171.12.9.3.1.1.4 | MacAddress | read-create | Specifies that the access rule will apply to only packets with this source MAC address. |
| swACLEtherRuleTable | 1.3.6.1.4.1.171.12.9.3.1 | not-accessible | This table contains Ethernet ACL information. | |
| INT swACLEtherRuleVID | 1.3.6.1.4.1.171.12.9.3.1.1.20 | INTEGER | read-create | Specifies this rule only applies to the specified VLAN. There are two conditions: 1.only the portlist that belongs to this VLAN will be included; 2.packets must belong to this VLAN. This object and swACLEtherRulePort can not be set together. When you set swACLEtherRulePort, the value of this object will automatically change to 0. And this object can not be set to 0. |
| STR swACLEtherRuleVlan | 1.3.6.1.4.1.171.12.9.3.1.1.3 | SnmpAdminString | read-create | Specifies that the access rule will apply to this VLAN only. |
| IP swACLIpDstIpAddrMask | 1.3.6.1.4.1.171.12.9.2.2.1.5 | IpAddress | read-create | This object specifies the IP address mask for the destination IP address. |
| swACLIpEntry | 1.3.6.1.4.1.171.12.9.2.2.1 | not-accessible | A list of information about the ACL of the IP Layer. | |
| INT swACLIpIcmpOption | 1.3.6.1.4.1.171.12.9.2.2.1.8 | INTEGER | read-create | This object indicates which fields are defined for ICMP. none (1)- Both fields are null. type (2)- Type field identified. code (3)- Code field identified. type-code (4)- Both ICMP fields identified. |
| INT swACLIpIgmpOption | 1.3.6.1.4.1.171.12.9.2.2.1.9 | INTEGER | read-create | Indicates if the IGMP options field is identified or not. |
| INT swACLIpIpAddrMaskState | 1.3.6.1.4.1.171.12.9.2.2.1.3 | INTEGER | read-create | This object indicates the status of IP address mask. other (1) - Neither source IP address nor destination IP address are masked. dst-ip-addr (2) - Destination IP addresses within received frames are to be filtered when matched with the IP address entry of the table. src-ip-addr (3) - Source IP addresses within received frames are to be filtered when matched with the IP address entry of the table. dst-src-ip-addr (4) - Destination or source IP addresses within received frames are to be filtered when matched with the IP address entry of the table. |
| INT swACLIpOwner | 1.3.6.1.4.1.171.12.9.2.2.1.20 | INTEGER | read-only | The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands. |
| INT swACLIpProfileID | 1.3.6.1.4.1.171.12.9.2.2.1.1 | INTEGER | read-only | The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| STR swACLIpProfileName | 1.3.6.1.4.1.171.12.9.2.2.1.23 | DisplayString | read-create | The name of the ACL mask entry unique to the mask list. |
| INT swACLIpProtoID | 1.3.6.1.4.1.171.12.9.2.2.1.17 | INTEGER | read-create | Specifies that the rule applies to the IP protocol ID behind the IP header. |
| OCT swACLIpProtoIDMask | 1.3.6.1.4.1.171.12.9.2.2.1.18 | OCTET STRING | read-create | Specifies that the rule applies to the IP protocol ID and the mask options behind the IP header. |
| INT swACLIpProtoIDOption | 1.3.6.1.4.1.171.12.9.2.2.1.16 | INTEGER | read-create | Specifies if the switch will examine each frame's protocol ID field or not. |
| ROW swACLIpRowStatus | 1.3.6.1.4.1.171.12.9.2.2.1.19 | RowStatus | read-create | This object indicates the status of this entry. |
| INT swACLIpRuleAccessID | 1.3.6.1.4.1.171.12.9.3.2.1.2 | INTEGER | read-only | The ID of the ACL rule entry relates to swACLIPRuleProfileID. Row creation set to 0 indicates automatic assignment of the Access ID for the ports in the swACLIpRulePort to create Rule entries for swACLIpRulePort accordingly. Set to 1-65535 causes creation of an access ID for the swACLIpRulePort. The swACLIpRulePort must be set to one port only otherwise the row creation will fail. |
| INT swACLIpRuleCode | 1.3.6.1.4.1.171.12.9.3.2.1.9 | INTEGER | read-create | Specifies that the rule applies to the value of ICMP code traffic. A value of -1 denotes that this object is not active. |
| INT swACLIpRuleDscp | 1.3.6.1.4.1.171.12.9.3.2.1.6 | INTEGER | read-create | Specifies the value of DSCP. The value can be configured from 0 to 63. A value of -1 indicates that this node is not actively used. |
| IP swACLIpRuleDstIpaddress | 1.3.6.1.4.1.171.12.9.3.2.1.5 | IpAddress | read-create | Specifies an IP destination address. |
| INT swACLIpRuleDstPort | 1.3.6.1.4.1.171.12.9.3.2.1.11 | INTEGER | read-create | Specifies the TCP/UDP destination port range. A value of -1 indicates that this node is not actively used. |
| INT swACLIpRuleEnablePriority | 1.3.6.1.4.1.171.12.9.3.2.1.15 | INTEGER | read-create | Specifies that the access rule will apply only to packets with this priority value. |
| INT swACLIpRuleEnableReplaceDscp | 1.3.6.1.4.1.171.12.9.3.2.1.18 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile DSCP field or not. Replace DSCP and replace ToS precedence can not both be supported. |
| INT swACLIpRuleEnableReplaceTosPrecedence | 1.3.6.1.4.1.171.12.9.3.2.1.26 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile ToS precedence field or not. Replace DSCP and replace ToS precedence can not both be supported. |
| swACLIpRuleEntry | 1.3.6.1.4.1.171.12.9.3.2.1 | not-accessible | ||
| INT swACLIpRuleFlagBits | 1.3.6.1.4.1.171.12.9.3.2.1.12 | INTEGER | read-create | A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L is added in the range 1 through 6, for which this node performs transactions, where 2^(L - 1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, it you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}. |
| INT swACLIpRuleOwner | 1.3.6.1.4.1.171.12.9.3.2.1.23 | INTEGER | read-only | The owner of the ACL rule entry. Only owners can modify this entry. |
| INT swACLIpRulePermit | 1.3.6.1.4.1.171.12.9.3.2.1.20 | INTEGER | read-create | This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swACLIpRulePort | 1.3.6.1.4.1.171.12.9.3.2.1.21 | PortList | read-create | Specifies that the access rule will only apply to port(s). This object and swACLIpRuleVID can not be set together. |
| INT swACLIpRulePriority | 1.3.6.1.4.1.171.12.9.3.2.1.16 | INTEGER | read-create | Specifies the priority will change in packets while the swACLIpRuleEnablePriority is enabled. |
| INT swACLIpRuleProfileID | 1.3.6.1.4.1.171.12.9.3.2.1.1 | INTEGER | read-only | The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| INT swACLIpRuleProtocol | 1.3.6.1.4.1.171.12.9.3.2.1.7 | INTEGER | read-write | Specifies the IP protocol. For some older chips, this object can not be set. When getting this object, it always returns the type which has been configured in swACLIpEntry. For some newer chips, this object can only set the type which has been configured in swACLIpEntry. The default value is none (1). |
| INT swACLIpRuleProtoID | 1.3.6.1.4.1.171.12.9.3.2.1.13 | INTEGER | read-create | Specifies that the rule applies to the value of IP protocol ID traffic. A value of -1 indicates that this node is not actively used. |
| INT swACLIpRuleRepDscp | 1.3.6.1.4.1.171.12.9.3.2.1.19 | INTEGER | read-create | Specifies a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. |
| INT swACLIpRuleReplacePriority | 1.3.6.1.4.1.171.12.9.3.2.1.17 | INTEGER | read-create | Specifies whether the packets that match the access profile will change the 802.1p priority tag field by the switch or not. |
| INT swACLIpRuleRepTosPrecedence | 1.3.6.1.4.1.171.12.9.3.2.1.27 | INTEGER | read-create | Specifies a value to be written to the ToS precedence field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the ToS precedence field of the packet. |
| ROW swACLIpRuleRowStatus | 1.3.6.1.4.1.171.12.9.3.2.1.22 | RowStatus | read-create | This object indicates the status of this entry. |
| INT swACLIpRuleRxRate | 1.3.6.1.4.1.171.12.9.3.2.1.24 | INTEGER | read-create | Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device. |
| IP swACLIpRuleSrcIpaddress | 1.3.6.1.4.1.171.12.9.3.2.1.4 | IpAddress | read-create | Specifies an IP source address. |
| INT swACLIpRuleSrcPort | 1.3.6.1.4.1.171.12.9.3.2.1.10 | INTEGER | read-create | Specifies that the rule applies to the range of the TCP/UDP source ports. A value of -1 indicates that this node is not actively used. |
| swACLIpRuleTable | 1.3.6.1.4.1.171.12.9.3.2 | not-accessible | ||
| INT swACLIpRuleType | 1.3.6.1.4.1.171.12.9.3.2.1.8 | INTEGER | read-create | Specifies that the rule applies to the value of ICMP type traffic. A value of -1 denotes that this object is not active. |
| OCT swACLIpRuleUserMask | 1.3.6.1.4.1.171.12.9.3.2.1.14 | OCTET STRING | read-create | Specifies that the rule applies to the IP protocol ID and the range of options behind the IP header. |
| INT swACLIpRuleVID | 1.3.6.1.4.1.171.12.9.3.2.1.28 | INTEGER | read-create | Specifies this rule only applies to the specified VLAN. There are two conditions: 1.only the portlist that belongs to this VLAN will be included; 2.packets must belong to this VLAN. This object and swACLIpRulePort can not be set together. When you set swACLIpRulePort, the value of this object will automatically change to 0. And this object can not be set 0. |
| STR swACLIpRuleVlan | 1.3.6.1.4.1.171.12.9.3.2.1.3 | SnmpAdminString | read-create | Specifies that the access rule will only apply to this VLAN. |
| IP swACLIpSrcIpAddrMask | 1.3.6.1.4.1.171.12.9.2.2.1.4 | IpAddress | read-create | This object specifies the IP address mask for the source IP address. |
| swACLIpTable | 1.3.6.1.4.1.171.12.9.2.2 | not-accessible | This table contains the ACL mask for IP information. Access profiles will be created on the switch to define which part of the incoming frame's IP layer packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swACLIpTCPFlagBit | 1.3.6.1.4.1.171.12.9.2.2.1.14 | INTEGER | read-create | Specifies a TCP connection flag mask. |
| INT swACLIpTCPFlagBitMask | 1.3.6.1.4.1.171.12.9.2.2.1.15 | INTEGER | read-create | A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L, is added in the range 1 through 6, for which this node performs transactions where 2^(L-1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, if you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}. |
| INT swACLIpTcpOption | 1.3.6.1.4.1.171.12.9.2.2.1.10 | INTEGER | read-create | This object indicates the status of the filtered address of TCP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames. |
| OCT swACLIpTCPorUDPDstPortMask | 1.3.6.1.4.1.171.12.9.2.2.1.13 | OCTET STRING | read-create | Specifies a TCP port mask for the destination port if swACLIpUseProtoType is TCP Specifies a UDP port mask for the destination port if swACLIpUseProtoType is UDP. |
| OCT swACLIpTCPorUDPSrcPortMask | 1.3.6.1.4.1.171.12.9.2.2.1.12 | OCTET STRING | read-create | Specifies a TCP port mask for the source port if swACLIpUseProtoType is TCP Specifies a UDP port mask for the source port if swACLIpUseProtoType is UDP. |
| INT swACLIpUdpOption | 1.3.6.1.4.1.171.12.9.2.2.1.11 | INTEGER | read-create | This object indicates the status of the filtered address of UDP . other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames. |
| INT swACLIpUnusedRuleEntries | 1.3.6.1.4.1.171.12.9.2.2.1.22 | INTEGER | read-only | The number of unused rule entries this IP profile entry. |
| INT swACLIpUseDSCP | 1.3.6.1.4.1.171.12.9.2.2.1.6 | INTEGER | read-create | This object indicates if the DSCP protocol in the packet header is to be examined or not. |
| INT swACLIpUseProtoType | 1.3.6.1.4.1.171.12.9.2.2.1.7 | INTEGER | read-create | That object indicates which protocol will be examined. |
| INT swACLIpUsevlan | 1.3.6.1.4.1.171.12.9.2.2.1.2 | INTEGER | read-create | This object indicates if the IP layer VLAN part is examined or not. |
| INT swACLIpv6IpAddrMaskState | 1.3.6.1.4.1.171.12.9.2.4.1.4 | INTEGER | read-create | This object indicates the status of the IPv6 address mask. other (1) - Neither source IPv6 address nor destination IPv6 address are masked. dst-ipv6-addr (2) - Received frame destination IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table. src-ipv6-addr (3) - Received frame source IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table. dst-src-ipv6-addr (4) - Received frame destination IPv6 address or source IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table. |
| INT swACLIpv6MaskClass | 1.3.6.1.4.1.171.12.9.2.4.1.2 | INTEGER | read-create | Specifies that the rule applies to the IPv6 class field and the mask options. |
| ADR swACLIpv6MaskDstIpv6Mask | 1.3.6.1.4.1.171.12.9.2.4.1.6 | Ipv6Address | read-create | Specifies that the rule applies to the Destination IPv6 address and the mask options. This should be a 16 byte octet string. |
| swACLIpv6MaskEntry | 1.3.6.1.4.1.171.12.9.2.4.1 | not-accessible | A list of information about user-defined ACLs. | |
| INT swACLIpv6MaskFlowlabel | 1.3.6.1.4.1.171.12.9.2.4.1.3 | INTEGER | read-create | Specifies that the rule applies to the IPv6 flowlabel field and the mask options. |
| INT swACLIpv6MaskOwner | 1.3.6.1.4.1.171.12.9.2.4.1.8 | INTEGER | read-only | The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands. |
| INT swACLIpv6MaskProfileID | 1.3.6.1.4.1.171.12.9.2.4.1.1 | INTEGER | read-only | The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| STR swACLIpv6MaskProfileName | 1.3.6.1.4.1.171.12.9.2.4.1.10 | DisplayString | read-create | The name of the ACL mask entry unique to the mask list. |
| ROW swACLIpv6MaskRowStatus | 1.3.6.1.4.1.171.12.9.2.4.1.7 | RowStatus | read-create | This object indicates the status of this entry. |
| ADR swACLIpv6MaskSrcIpv6Mask | 1.3.6.1.4.1.171.12.9.2.4.1.5 | Ipv6Address | read-create | Specifies that the rule applies to the Source IPv6 address and the mask options. This should be a 16 byte octet string. |
| swACLIpv6MaskTable | 1.3.6.1.4.1.171.12.9.2.4 | not-accessible | This table contains user-defined ACL mask information. An access profile will be created on the switch to define which parts of each incoming frame's IPv6 part of the packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swACLIpv6MaskTcpOption | 1.3.6.1.4.1.171.12.9.2.4.1.12 | INTEGER | read-create | This object indicates the status of the filtered address of TCP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames. |
| OCT swACLIpv6MaskTCPorUDPDstPortMask | 1.3.6.1.4.1.171.12.9.2.4.1.15 | OCTET STRING | read-create | Specifies a TCP port mask for the destination port if swACLIpv6MaskUseProtoType is TCP Specifies a UDP port mask for the destination port if swACLIpv6MaskUseProtoType is UDP. |
| OCT swACLIpv6MaskTCPorUDPSrcPortMask | 1.3.6.1.4.1.171.12.9.2.4.1.14 | OCTET STRING | read-create | Specifies a TCP port mask for the source port if swACLIpv6MaskUseProtoType is TCP Specifies a UDP port mask for the source port if swACLIpv6MaskUseProtoType is UDP. |
| INT swACLIpv6MaskUdpOption | 1.3.6.1.4.1.171.12.9.2.4.1.13 | INTEGER | read-create | This object indicates the status of the filtered address of UDP. other (1) - Neither source port nor destination port is masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames. |
| INT swACLIpv6MaskUnusedRuleEntries | 1.3.6.1.4.1.171.12.9.2.4.1.9 | INTEGER | read-only | The number of unused rule entries of this IP profile entry. |
| INT swACLIpv6MaskUseProtoType | 1.3.6.1.4.1.171.12.9.2.4.1.11 | INTEGER | read-create | That object indicates which protocol will be examined. |
| INT swACLIpv6RuleAccessID | 1.3.6.1.4.1.171.12.9.3.4.1.2 | INTEGER | read-only | The ID of the ACL rule entry relates to swACLIpv6RuleProfileID. When row creation is set to 0, this indicates the access ID will be assigned automatically for the ports in the swACLIpv6RulePort to create rule entries for swACLIpv6RulePort accordingly. Set to 1-65535 indicates creation of an access ID for the swACLIpv6RulePort. The swACLIpv6RulePort must be set to one port only, otherwise the row creation will fail. |
| INT swACLIpv6RuleClass | 1.3.6.1.4.1.171.12.9.3.4.1.3 | INTEGER | read-create | Specifies that the rule applies to the IPv6 class field. |
| ADR swACLIpv6RuleDstIpv6Addr | 1.3.6.1.4.1.171.12.9.3.4.1.6 | Ipv6Address | read-create | Specifies that the rule applies to the destination IPv6 address. This should be a 16 byte octet string. |
| INT swACLIpv6RuleDstPort | 1.3.6.1.4.1.171.12.9.3.4.1.22 | INTEGER | read-create | Specifies the TCP/UDP destination ports range. |
| INT swACLIpv6RuleEnablePriority | 1.3.6.1.4.1.171.12.9.3.4.1.7 | INTEGER | read-create | Specifies that the access rule will apply only to packets with priority value. |
| INT swACLIpv6RuleEnableReplaceDscp | 1.3.6.1.4.1.171.12.9.3.4.1.15 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile DSCP field or not. Replace DSCP and replace ToS precedence can not both be supported. |
| INT swACLIpv6RuleEnableReplaceTosPrecedence | 1.3.6.1.4.1.171.12.9.3.4.1.17 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile ToS precedence field or not. Replace DSCP and replace ToS precedence can not both be supported. |
| swACLIpv6RuleEntry | 1.3.6.1.4.1.171.12.9.3.4.1 | not-accessible | A list of information about ACL rules regarding the IPv6 part of each packet. | |
| OCT swACLIpv6RuleFlowlabel | 1.3.6.1.4.1.171.12.9.3.4.1.4 | OCTET STRING | read-create | Specifies that the rule applies to the IPv6 flow label field. |
| INT swACLIpv6RuleOwner | 1.3.6.1.4.1.171.12.9.3.4.1.13 | INTEGER | read-only | The owner of the ACL rule entry. Only owners can modify this entry. |
| INT swACLIpv6RulePermit | 1.3.6.1.4.1.171.12.9.3.4.1.10 | INTEGER | read-create | This object indicates if the result of packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. mirror - Specifies the packets that match the access profile are copied to the mirror port. Note: The ACL mirror function will work after mirror has been enabled and the mirror port has been configured. |
| POR swACLIpv6RulePort | 1.3.6.1.4.1.171.12.9.3.4.1.11 | PortList | read-create | Specifies that the access rule will apply only to port(s). This object and swACLIpv6RuleVID can not be set together. |
| INT swACLIpv6RulePriority | 1.3.6.1.4.1.171.12.9.3.4.1.8 | INTEGER | read-create | Specifies the priority will change in packets while the swACLIpv6RuleReplacePriority is enabled. |
| INT swACLIpv6RuleProfileID | 1.3.6.1.4.1.171.12.9.3.4.1.1 | INTEGER | read-only | The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| INT swACLIpv6RuleProtocol | 1.3.6.1.4.1.171.12.9.3.4.1.20 | INTEGER | read-create | Specifies the IPv6 protocol. For some older chips, this object can not be set. When getting this object, it always returns the type which has been configured in swACLIpv6Entry. For some newer chips, this object can only set the type which has been configured in swACLIpv6Entry. The default value is none (1). |
| INT swACLIpv6RuleRepDscp | 1.3.6.1.4.1.171.12.9.3.4.1.16 | INTEGER | read-create | Specifies a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. |
| INT swACLIpv6RuleReplacePriority | 1.3.6.1.4.1.171.12.9.3.4.1.9 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag or not. |
| INT swACLIpv6RuleRepTosPrecedence | 1.3.6.1.4.1.171.12.9.3.4.1.18 | INTEGER | read-create | Specifies a value to be written to the ToS precedence field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the ToS precedence field of the packet. |
| ROW swACLIpv6RuleRowStatus | 1.3.6.1.4.1.171.12.9.3.4.1.12 | RowStatus | read-create | This object indicates the status of this entry. |
| INT swACLIpv6RuleRxRate | 1.3.6.1.4.1.171.12.9.3.4.1.14 | INTEGER | read-create | Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device. |
| ADR swACLIpv6RuleSrcIpv6Addr | 1.3.6.1.4.1.171.12.9.3.4.1.5 | Ipv6Address | read-create | Specifies that the rule applies to the source IPv6 address. This should be a 16 byte octet string. |
| INT swACLIpv6RuleSrcPort | 1.3.6.1.4.1.171.12.9.3.4.1.21 | INTEGER | read-create | Specifies that the rule applies to the range of the TCP/UDP source ports. |
| swACLIpv6RuleTable | 1.3.6.1.4.1.171.12.9.3.4 | not-accessible | This table contains the IPv6 ACL rule information. | |
| INT swACLIpv6RuleVID | 1.3.6.1.4.1.171.12.9.3.4.1.19 | INTEGER | read-create | Specifies this rule only applies to the specified VLAN. There are two conditions: 1.only the portlist that belongs to this VLAN will be included; 2.packets must belong to this VLAN. This object and swACLIpv6RulePort can not be set together. When you set swACLIpv6RulePort, the value of this object will automatically change to 0. And this object can not be set 0. |
| INT swACLMaskDelAllState | 1.3.6.1.4.1.171.12.9.2.5 | INTEGER | read-write | Used to delete all ACL masks. |
| swAclMaskMgmt | 1.3.6.1.4.1.171.12.9.2 | |||
| INT swAclMeterAccessID | 1.3.6.1.4.1.171.12.9.6.1.1.2 | INTEGER | read-only | The ID of the ACL rule entry as related to the swAclMeterProfileID. |
| INT swAclMeterActionForRateExceed | 1.3.6.1.4.1.171.12.9.6.1.1.4 | INTEGER | read-create | Specifies the action to take for those packets exceeding the committed rate. NOTE: Users must also set the swAclMeterRate to activate this entry. |
| INT swAclMeterBurstSize | 1.3.6.1.4.1.171.12.9.6.1.1.6 | INTEGER | read-create | This specifies the burst size for the single rate two color mode. The unit is Kbytes. That is to say, 1 means 1kbytes. The set value range is 0..n, the value n is determined by project, the value of 0 means to delete this flow_meter setting. |
| swAclMeterEntry | 1.3.6.1.4.1.171.12.9.6.1.1 | not-accessible | This entry displays parameters and configurations set for the flow metering function. | |
| swAclMeteringMgmt | 1.3.6.1.4.1.171.12.9.6 | |||
| INT swAclMeteringNumOfEntryInUse | 1.3.6.1.4.1.171.12.9.6.2 | INTEGER | read-only | Used to display total entries of the flow metering. |
| INT swAclMeterMode | 1.3.6.1.4.1.171.12.9.6.1.1.7 | INTEGER | read-create | tr-tcm: two rate three color mode; sr-tcm: single rate three color mode. |
| INT swAclMeterProfileID | 1.3.6.1.4.1.171.12.9.6.1.1.1 | INTEGER | read-only | The ID of the ACL mask entry is unique in the mask list. The maximum value of this object depends on the device. |
| INT swAclMeterRate | 1.3.6.1.4.1.171.12.9.6.1.1.3 | INTEGER | read-create | Specifies the committed bandwidth in Kbps for the flow. NOTE: 1. Specifying 0 will disable this flow meter setting. 2. Users must set the swAclMeterActionForRateExceed object to activate this entry. |
| INT swAclMeterRemarkDscp | 1.3.6.1.4.1.171.12.9.6.1.1.5 | INTEGER | read-create | Mark the packet with a specified DSCP. It can be set when swAclMeterActionForRateExceed sets remark-dscp (3). |
| ROW swAclMeterRowStatus | 1.3.6.1.4.1.171.12.9.6.1.1.35 | RowStatus | read-create | This object indicates the status of this entry. |
| INT swAclMeterSrtcmCbs | 1.3.6.1.4.1.171.12.9.6.1.1.23 | INTEGER | read-create | Specifies the 'committed burst size' of 'single rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1Kbytes. 2. The max set value is 16*1024. |
| INT swAclMeterSrtcmCir | 1.3.6.1.4.1.171.12.9.6.1.1.22 | INTEGER | read-create | Specifies the 'committed information rate' of 'single rate three color mode'. The unit is Kbps. |
| INT swAclMeterSrtcmColorMode | 1.3.6.1.4.1.171.12.9.6.1.1.25 | INTEGER | read-create | Specifies the meter mode. The default is color-blind mode. The final color of packet is determined by the initial color of the packet and the metering result. |
| INT swAclMeterSrtcmConformCounterState | 1.3.6.1.4.1.171.12.9.6.1.1.28 | INTEGER | read-create | Specifies the counter state when the packet is in 'green color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited such that counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled. |
| INT swAclMeterSrtcmConformReplaceDscp | 1.3.6.1.4.1.171.12.9.6.1.1.27 | INTEGER | read-create | Specifies the DSCP value of the packet when packet is in 'green color'. |
| INT swAclMeterSrtcmConformState | 1.3.6.1.4.1.171.12.9.6.1.1.26 | INTEGER | read-create | Specifies the action state when the packet is in 'green color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. |
| INT swAclMeterSrtcmEbs | 1.3.6.1.4.1.171.12.9.6.1.1.24 | INTEGER | read-create | Specifies the 'Excess burst size' of 'single rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1kbytes. 2. The max set value is 16*1024. |
| INT swAclMeterSrtcmExceedCounterState | 1.3.6.1.4.1.171.12.9.6.1.1.31 | INTEGER | read-create | Specifies the counter state when the packet is in 'yellow color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited such that counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled. |
| INT swAclMeterSrtcmExceedReplaceDscp | 1.3.6.1.4.1.171.12.9.6.1.1.30 | INTEGER | read-create | Specifies the DSCP value of the packet when packet is in 'yellow color'. |
| INT swAclMeterSrtcmExceedState | 1.3.6.1.4.1.171.12.9.6.1.1.29 | INTEGER | read-create | Specifies the action state when the packet is in 'yellow color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet. |
| INT swAclMeterSrtcmViolateCounterState | 1.3.6.1.4.1.171.12.9.6.1.1.34 | INTEGER | read-create | Specifies the counter state when the packet is in 'red color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled. |
| INT swAclMeterSrtcmViolateReplaceDscp | 1.3.6.1.4.1.171.12.9.6.1.1.33 | INTEGER | read-create | Specifies the DSCP value of the packet when packet is in 'red color'. |
| INT swAclMeterSrtcmViolateState | 1.3.6.1.4.1.171.12.9.6.1.1.32 | INTEGER | read-create | Specifies the action state when the packet is in 'red color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet. |
| swAclMeterTable | 1.3.6.1.4.1.171.12.9.6.1 | not-accessible | This table is used to configure the flow-based metering function. The access rule must first be created before the parameters of this function can be applied. Users may set the preferred bandwidth for this rule, in Kbps; once the bandwidth has been exceeded, overflow packets will be either dropped or set for a drop precedence, depending on user configuration. | |
| INT swAclMeterTrtcmCbs | 1.3.6.1.4.1.171.12.9.6.1.1.9 | INTEGER | read-create | Specifies the 'committed burst size' of 'two rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1Kbytes. 2. This parameter is an optional parameter. The default value is 4*1024. 3. The max set value is 16*1024. |
| INT swAclMeterTrtcmCir | 1.3.6.1.4.1.171.12.9.6.1.1.8 | INTEGER | read-create | Specifies the 'committed information rate' of 'two rate three color mode'. The unit is Kbps. |
| INT swAclMeterTrtcmColorMode | 1.3.6.1.4.1.171.12.9.6.1.1.12 | INTEGER | read-create | Specifies the meter mode. The default is color-blind mode. The final color of the packet is determined by the initial color of the packet and the metering result. |
| INT swAclMeterTrtcmConformCounterState | 1.3.6.1.4.1.171.12.9.6.1.1.15 | INTEGER | read-create | Specifies the counter state when the packet is in 'green color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled. |
| INT swAclMeterTrtcmConformReplaceDscp | 1.3.6.1.4.1.171.12.9.6.1.1.14 | INTEGER | read-create | Specifies the DSCP value of the packet when the packet is in 'green color'. |
| INT swAclMeterTrtcmConformState | 1.3.6.1.4.1.171.12.9.6.1.1.13 | INTEGER | read-create | Specifies the action state when packet is in 'green color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. |
| INT swAclMeterTrtcmExceedCounterState | 1.3.6.1.4.1.171.12.9.6.1.1.18 | INTEGER | read-create | Specifies the counter state when packet is in 'yellow color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled. |
| INT swAclMeterTrtcmExceedReplaceDscp | 1.3.6.1.4.1.171.12.9.6.1.1.17 | INTEGER | read-create | Specifies the DSCP value of packet when packet is in 'yellow color'. |
| INT swAclMeterTrtcmExceedState | 1.3.6.1.4.1.171.12.9.6.1.1.16 | INTEGER | read-create | Specifies the action state when packet is in 'yellow color'. permit: permit the packet. replace-dscp: change the DSCP value of the packet. drop: drop the packet. |
| INT swAclMeterTrtcmPbs | 1.3.6.1.4.1.171.12.9.6.1.1.11 | INTEGER | read-create | Specifies the 'peak burst size' of 'two rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1kbytes. 2. This parameter is an optional parameter. The default value is 4*1024. 3. The max set value is 16*1024. |
| INT swAclMeterTrtcmPir | 1.3.6.1.4.1.171.12.9.6.1.1.10 | INTEGER | read-create | Specifies the 'Peak Information Rate' of 'two rate three color mode'. The unit is Kbps. |
| INT swAclMeterTrtcmViolateCounterState | 1.3.6.1.4.1.171.12.9.6.1.1.21 | INTEGER | read-create | Specifies the counter state when packet is in 'red color'. 1. This is optional. The default is 'disable'. 2. The resource may be limited so that the counter can not be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled. |
| INT swAclMeterTrtcmViolateReplaceDscp | 1.3.6.1.4.1.171.12.9.6.1.1.20 | INTEGER | read-create | Specifies the DSCP value of the packet when packet is in 'red color'. |
| INT swAclMeterTrtcmViolateState | 1.3.6.1.4.1.171.12.9.6.1.1.19 | INTEGER | read-create | Specifies the action state when packet is in 'red color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet. |
| swAclMgmtMIB | 1.3.6.1.4.1.171.12.9 | The structure of Access Control List information for the proprietary enterprise. | ||
| swACLPktContMaskEntry | 1.3.6.1.4.1.171.12.9.2.3.1 | not-accessible | A list of information about user-defined ACLs. | |
| OCT swACLPktContMaskOffset0to15 | 1.3.6.1.4.1.171.12.9.2.3.1.2 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset0to15) and the mask options. |
| OCT swACLPktContMaskOffset16to31 | 1.3.6.1.4.1.171.12.9.2.3.1.3 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset16to31) and the mask options. |
| OCT swACLPktContMaskOffset32to47 | 1.3.6.1.4.1.171.12.9.2.3.1.4 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset32to47) and the mask options. |
| OCT swACLPktContMaskOffset48to63 | 1.3.6.1.4.1.171.12.9.2.3.1.5 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset48to63) and the mask options. |
| OCT swACLPktContMaskOffset64to79 | 1.3.6.1.4.1.171.12.9.2.3.1.6 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset64to79) and the mask options. |
| OCT swACLPktContMaskOffsetChunk1Mask | 1.3.6.1.4.1.171.12.9.2.8.1.4 | OCTET STRING | read-create | Specifies the frame content mask of chunk1. |
| INT swACLPktContMaskOffsetChunk1OffsetValue | 1.3.6.1.4.1.171.12.9.2.8.1.3 | INTEGER | read-create | Specifies the frame content offset of chunk1. |
| INT swACLPktContMaskOffsetChunk1State | 1.3.6.1.4.1.171.12.9.2.8.1.2 | INTEGER | read-create | Specifies the state of chunk1. |
| OCT swACLPktContMaskOffsetChunk2Mask | 1.3.6.1.4.1.171.12.9.2.8.1.7 | OCTET STRING | read-create | Specifies the frame content mask of chunk2. |
| INT swACLPktContMaskOffsetChunk2OffsetValue | 1.3.6.1.4.1.171.12.9.2.8.1.6 | INTEGER | read-create | Specifies the frame content offset of chunk2. |
| INT swACLPktContMaskOffsetChunk2State | 1.3.6.1.4.1.171.12.9.2.8.1.5 | INTEGER | read-create | Specifies the state of chunk2. |
| OCT swACLPktContMaskOffsetChunk3Mask | 1.3.6.1.4.1.171.12.9.2.8.1.10 | OCTET STRING | read-create | Specifies the frame content mask of chunk3. |
| INT swACLPktContMaskOffsetChunk3OffsetValue | 1.3.6.1.4.1.171.12.9.2.8.1.9 | INTEGER | read-create | Specifies the frame content offset of chunk3. |
| INT swACLPktContMaskOffsetChunk3State | 1.3.6.1.4.1.171.12.9.2.8.1.8 | INTEGER | read-create | Specifies the state of chunk3. |
| OCT swACLPktContMaskOffsetChunk4Mask | 1.3.6.1.4.1.171.12.9.2.8.1.13 | OCTET STRING | read-create | Specifies the frame content mask of chunk4. |
| INT swACLPktContMaskOffsetChunk4OffsetValue | 1.3.6.1.4.1.171.12.9.2.8.1.12 | INTEGER | read-create | Specifies the frame content offset of chunk4. |
| INT swACLPktContMaskOffsetChunk4State | 1.3.6.1.4.1.171.12.9.2.8.1.11 | INTEGER | read-create | Specifies the state of chunk4. |
| swACLPktContMaskOptionEntry | 1.3.6.1.4.1.171.12.9.2.8.1 | not-accessible | A list of information about the user-defined ACL. | |
| INT swACLPktContMaskOptionOwner | 1.3.6.1.4.1.171.12.9.2.8.1.15 | INTEGER | read-only | The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands. |
| INT swACLPktContMaskOptionProfileID | 1.3.6.1.4.1.171.12.9.2.8.1.1 | INTEGER | read-only | The ID of the ACL mask entry, unique to the mask list. The maximum value of this object depends on the device. |
| STR swACLPktContMaskOptionProfileName | 1.3.6.1.4.1.171.12.9.2.8.1.17 | DisplayString | read-create | The name of the ACL mask entry unique to the mask list. |
| ROW swACLPktContMaskOptionRowStatus | 1.3.6.1.4.1.171.12.9.2.8.1.14 | RowStatus | read-create | This object indicates the status of this entry. |
| swACLPktContMaskOptionTable | 1.3.6.1.4.1.171.12.9.2.8 | not-accessible | This table contains the ACL mask for user-defined option information. An access profile will be created on the switch to define which part of each incoming frame's user-defined part of the packet header will be examined by switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swACLPktContMaskOptionUnusedRuleEntries | 1.3.6.1.4.1.171.12.9.2.8.1.16 | INTEGER | read-only | The number of unused rule entries of this IP profile entry. |
| INT swACLPktContMaskOwner | 1.3.6.1.4.1.171.12.9.2.3.1.8 | INTEGER | read-only | The owner of the ACL mask entry. The type of ACL entry created. ACL type entries can only be modified when being configured through the same type command. For example, IP-MAC Binding entries can only be modified or deleted through the IP-MAC Binding configurations or commands. |
| INT swACLPktContMaskProfileID | 1.3.6.1.4.1.171.12.9.2.3.1.1 | INTEGER | read-only | The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| STR swACLPktContMaskProfileName | 1.3.6.1.4.1.171.12.9.2.3.1.10 | DisplayString | read-create | The name of the ACL mask entry unique to the mask list. |
| ROW swACLPktContMaskRowStatus | 1.3.6.1.4.1.171.12.9.2.3.1.7 | RowStatus | read-create | This object indicates the status of this entry. |
| swACLPktContMaskTable | 1.3.6.1.4.1.171.12.9.2.3 | not-accessible | This table contains the ACL mask for user-defined information. An access profile will be created on the switch to define which part of each incoming frame's user-defined part of the packet header will be examined by switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swACLPktContMaskUnusedRuleEntries | 1.3.6.1.4.1.171.12.9.2.3.1.9 | INTEGER | read-only | The number of unused rule entries of this IP profile entry. |
| INT swACLPktContRuleVarOffsetAccessID | 1.3.6.1.4.1.171.12.9.3.9.1.2 | INTEGER | read-only | The ID of ACL rule entry related to swACLPktContRuleVarOffsetProfileID. |
| OCT swACLPktContRuleVarOffsetData1 | 1.3.6.1.4.1.171.12.9.3.9.1.10 | OCTET STRING | read-create | Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex1 and swACLPktContRuleVarOffsetMask1. |
| OCT swACLPktContRuleVarOffsetData2 | 1.3.6.1.4.1.171.12.9.3.9.1.13 | OCTET STRING | read-create | Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex2 and swACLPktContRuleVarOffsetMask2. |
| OCT swACLPktContRuleVarOffsetData3 | 1.3.6.1.4.1.171.12.9.3.9.1.16 | OCTET STRING | read-create | Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex3 and swACLPktContRuleVarOffsetMask3. |
| OCT swACLPktContRuleVarOffsetData4 | 1.3.6.1.4.1.171.12.9.3.9.1.19 | OCTET STRING | read-create | Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex4 and swACLPktContRuleVarOffsetMask4. |
| OCT swACLPktContRuleVarOffsetData5 | 1.3.6.1.4.1.171.12.9.3.9.1.22 | OCTET STRING | read-create | Specifies the data for this rule. This rule relates to swACLPktContRuleVarOffsetOffsetIndex5 and swACLPktContRuleVarOffsetMask5. |
| INT swACLPktContRuleVarOffsetEnablePriority | 1.3.6.1.4.1.171.12.9.3.9.1.23 | INTEGER | read-create | Specifies that the access rule will apply only to packets with this priority value. |
| swACLPktContRuleVarOffsetEntry | 1.3.6.1.4.1.171.12.9.3.9.1 | not-accessible | A list which contains information on the ACL rules for user-defined parts of a packet. | |
| OCT swACLPktContRuleVarOffsetMask1 | 1.3.6.1.4.1.171.12.9.3.9.1.9 | OCTET STRING | read-only | Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex1 and swACLPktContRuleVarOffsetData1. |
| OCT swACLPktContRuleVarOffsetMask2 | 1.3.6.1.4.1.171.12.9.3.9.1.12 | OCTET STRING | read-only | Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex2 and swACLPktContRuleVarOffsetData2. |
| OCT swACLPktContRuleVarOffsetMask3 | 1.3.6.1.4.1.171.12.9.3.9.1.15 | OCTET STRING | read-only | Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex3 and swACLPktContRuleVarOffsetData3. |
| OCT swACLPktContRuleVarOffsetMask4 | 1.3.6.1.4.1.171.12.9.3.9.1.18 | OCTET STRING | read-only | Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex4 and swACLPktContRuleVarOffsetData4. |
| OCT swACLPktContRuleVarOffsetMask5 | 1.3.6.1.4.1.171.12.9.3.9.1.21 | OCTET STRING | read-only | Display the mask for this rule. This mask corresponds to swACLPktContRuleVarOffsetOffsetIndex5 and swACLPktContRuleVarOffsetData5. |
| INT swACLPktContRuleVarOffsetOffsetIndex1 | 1.3.6.1.4.1.171.12.9.3.9.1.8 | INTEGER | read-create | Specifies the first offset will apply in getting the mask for this rule. |
| INT swACLPktContRuleVarOffsetOffsetIndex2 | 1.3.6.1.4.1.171.12.9.3.9.1.11 | INTEGER | read-create | Specifies the second offset will apply in getting the mask for this rule. |
| INT swACLPktContRuleVarOffsetOffsetIndex3 | 1.3.6.1.4.1.171.12.9.3.9.1.14 | INTEGER | read-create | Specifies the third offset will apply in getting the mask for this rule. |
| INT swACLPktContRuleVarOffsetOffsetIndex4 | 1.3.6.1.4.1.171.12.9.3.9.1.17 | INTEGER | read-create | Specifies the fourth offset will apply in getting the mask for this rule. |
| INT swACLPktContRuleVarOffsetOffsetIndex5 | 1.3.6.1.4.1.171.12.9.3.9.1.20 | INTEGER | read-create | Specifies the fifth offset will apply in getting the mask for this rule. |
| INT swACLPktContRuleVarOffsetPermit | 1.3.6.1.4.1.171.12.9.3.9.1.29 | INTEGER | read-create | This object indicates the result of the packet examination is to permit or deny. The default is permit. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that do not match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swACLPktContRuleVarOffsetPort | 1.3.6.1.4.1.171.12.9.3.9.1.30 | PortList | read-create | Specifies that the access rule will apply only to port(s). |
| INT swACLPktContRuleVarOffsetPriority | 1.3.6.1.4.1.171.12.9.3.9.1.24 | INTEGER | read-create | Specifies the priority will change to the packets. |
| INT swACLPktContRuleVarOffsetProfileID | 1.3.6.1.4.1.171.12.9.3.9.1.1 | INTEGER | read-only | The ID of ACL mask entry, which is unique to the mask list. |
| INT swACLPktContRuleVarOffsetReplacePriority | 1.3.6.1.4.1.171.12.9.3.9.1.25 | INTEGER | read-create | Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag or not . |
| INT swACLPktContRuleVarOffsetReplacePriorityWith | 1.3.6.1.4.1.171.12.9.3.9.1.34 | INTEGER | read-create | The value of this node will be used to replace the 802.1p priority tag of the packet that matched the access profile. |
| ROW swACLPktContRuleVarOffsetRowStatus | 1.3.6.1.4.1.171.12.9.3.9.1.33 | RowStatus | read-create | This object indicates the status of this entry. |
| INT swACLPktContRuleVarOffsetRxRate | 1.3.6.1.4.1.171.12.9.3.9.1.28 | INTEGER | read-write | Specifies that the access rule will apply an RX rate. 0 denotes no limit. |
| swACLPktContRuleVarOffsetTable | 1.3.6.1.4.1.171.12.9.3.9 | not-accessible | This table is used to configure ACL user defined packet content rules for devices that support limited selection of packet content. | |
| swAclRuleMgmt | 1.3.6.1.4.1.171.12.9.3 | |||
| INT swACLTotalUnusedRuleEntries | 1.3.6.1.4.1.171.12.9.1.3 | INTEGER | read-only | The total number of unused ACL rule entries. |
| INT swACLTotalUsedRuleEntries | 1.3.6.1.4.1.171.12.9.1.2 | INTEGER | read-only | The total number of used ACL rule entries. |
| MAC swCpuAclEthernetDstMacAddrMask | 1.3.6.1.4.1.171.12.9.4.1.1.5 | MacAddress | read-create | This object specifies the MAC address mask for the destination MAC address. |
| swCpuAclEthernetEntry | 1.3.6.1.4.1.171.12.9.4.1.1 | not-accessible | A list of information about Ethernet ACL masks. | |
| INT swCpuAclEthernetMacAddrMaskState | 1.3.6.1.4.1.171.12.9.4.1.1.3 | INTEGER | read-create | This object indicates the status of the MAC address mask. other (1) - Neither source MAC addresses nor destination MAC addresses are masked. dst-mac-addr (2) - Destination MAC addresses within received frames are to be filtered when matched with the MAC address entry of the table. src-mac-addr (3) - Source MAC address within received frames are to be filtered when matched with the MAC address entry of the table. dst-src-mac-addr (4) - Source or destination MAC addresses within received frames are to be filtered when matched with the MAC address entry of this table. |
| INT swCpuAclEthernetProfileID | 1.3.6.1.4.1.171.12.9.4.1.1.1 | INTEGER | read-only | The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| ROW swCpuAclEthernetRowStatus | 1.3.6.1.4.1.171.12.9.4.1.1.8 | RowStatus | read-create | This object indicates the status of this entry. |
| MAC swCpuAclEthernetSrcMacAddrMask | 1.3.6.1.4.1.171.12.9.4.1.1.4 | MacAddress | read-create | This object specifies the MAC address mask for the source MAC address. |
| swCpuAclEthernetTable | 1.3.6.1.4.1.171.12.9.4.1 | not-accessible | This table contains software ACL mask Ethernet information. Access profiles will be created on the switch to define which part of each incoming frame's layer 2 header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swCpuAclEthernetUse8021p | 1.3.6.1.4.1.171.12.9.4.1.1.6 | INTEGER | read-create | Specifies if the switch will examine the 802.1p priority value in the frame's header or not. |
| INT swCpuAclEthernetUseEthernetType | 1.3.6.1.4.1.171.12.9.4.1.1.7 | INTEGER | read-create | Specifies if the switch will examine the Ethernet type value in each frame's header or not. |
| INT swCpuAclEthernetUsevlan | 1.3.6.1.4.1.171.12.9.4.1.1.2 | INTEGER | read-create | Specifies that the switch will examine the VLAN part of each packet header. |
| INT swCpuAclEtherRule8021P | 1.3.6.1.4.1.171.12.9.5.1.1.6 | INTEGER | read-create | Specifies that the access rule will only apply to packets with this 802.1p priority value. A value of -1 indicates that this node is not actively used. |
| INT swCpuAclEtherRuleAccessID | 1.3.6.1.4.1.171.12.9.5.1.1.2 | INTEGER | read-only | The ID of the software ACL rule entry as it relates to swCpuAclEtherRuleProfileID. |
| MAC swCpuAclEtherRuleDstMacAddress | 1.3.6.1.4.1.171.12.9.5.1.1.5 | MacAddress | read-create | Specifies that the access rule will only apply to the packets with this destination MAC address. |
| swCpuAclEtherRuleEntry | 1.3.6.1.4.1.171.12.9.5.1.1 | not-accessible | A list of information about the software ACL rule of the layer 2 part of each packet. | |
| OCT swCpuAclEtherRuleEtherType | 1.3.6.1.4.1.171.12.9.5.1.1.7 | OCTET STRING | read-create | Specifies that the access rule will only apply to packets with this 802.1Q Ethernet type value in the packet header. |
| INT swCpuAclEtherRulePermit | 1.3.6.1.4.1.171.12.9.5.1.1.8 | INTEGER | read-create | This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swCpuAclEtherRulePort | 1.3.6.1.4.1.171.12.9.5.1.1.10 | PortList | read-create | Specifies that the access rule will only apply to port(s). |
| INT swCpuAclEtherRuleProfileID | 1.3.6.1.4.1.171.12.9.5.1.1.1 | INTEGER | read-only | The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| ROW swCpuAclEtherRuleRowStatus | 1.3.6.1.4.1.171.12.9.5.1.1.9 | RowStatus | read-create | This object indicates the status of this entry. |
| MAC swCpuAclEtherRuleSrcMacAddress | 1.3.6.1.4.1.171.12.9.5.1.1.4 | MacAddress | read-create | Specifies that the access rule will only apply to the packets with this source MAC address. |
| swCpuAclEtherRuleTable | 1.3.6.1.4.1.171.12.9.5.1 | not-accessible | This table contains Ethernet software ACL rule information. | |
| STR swCpuAclEtherRuleVlan | 1.3.6.1.4.1.171.12.9.5.1.1.3 | SnmpAdminString | read-create | Specifies that the access rule will only apply to this VLAN. |
| IP swCpuAclIpDstIpAddrMask | 1.3.6.1.4.1.171.12.9.4.2.1.5 | IpAddress | read-create | This object specifies the IP address mask for the destination IP address. |
| swCpuAclIpEntry | 1.3.6.1.4.1.171.12.9.4.2.1 | not-accessible | A list of information about the software ACL of the IP Layer. | |
| INT swCpuAclIpIcmpOption | 1.3.6.1.4.1.171.12.9.4.2.1.8 | INTEGER | read-create | This object indicates which fields are identified for ICMP. none (1)- Both fields are null. type (2)- Type field identified. code (3)- Code field identified. type-code (4)- Both ICMP fields identified. |
| INT swCpuAclIpIgmpOption | 1.3.6.1.4.1.171.12.9.4.2.1.9 | INTEGER | read-create | This object indicates if the IGMP options field is identified or not. |
| INT swCpuAclIpIpAddrMaskState | 1.3.6.1.4.1.171.12.9.4.2.1.3 | INTEGER | read-create | This object indicates the status of IP address mask. other (1) - Neither source IP addresses nor destination IP address are masked. dst-ip-addr (2) - Destination IP addresses within received frames are to be filtered when matched with the IP address entry of this table. src-ip-addr (3) - Source IP addresses within received frames are to be filtered when matched with the IP address entry of this table. dst-src-ip-addr (4) - Destination or source IP addresses within received frames are to be filtered when matched with the IP address entry of the table. |
| INT swCpuAclIpProfileID | 1.3.6.1.4.1.171.12.9.4.2.1.1 | INTEGER | read-only | The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| INT swCpuAclIpProtoID | 1.3.6.1.4.1.171.12.9.4.2.1.17 | INTEGER | read-create | |
| OCT swCpuAclIpProtoIDMask | 1.3.6.1.4.1.171.12.9.4.2.1.18 | OCTET STRING | read-create | Specifies that the rule applies to the IP protocol ID and the mask options behind the IP header. |
| INT swCpuAclIpProtoIDOption | 1.3.6.1.4.1.171.12.9.4.2.1.16 | INTEGER | read-create | Specifies if the switch will examine each frame's Protocol ID field or not. |
| ROW swCpuAclIpRowStatus | 1.3.6.1.4.1.171.12.9.4.2.1.19 | RowStatus | read-create | This object indicates the status of this entry. |
| INT swCpuAclIpRuleAccessID | 1.3.6.1.4.1.171.12.9.5.2.1.2 | INTEGER | read-only | The ID of the software ACL for the IPv4 rule entry. |
| INT swCpuAclIpRuleCode | 1.3.6.1.4.1.171.12.9.5.2.1.9 | INTEGER | read-create | Specifies the rule applies to the value of ICMP code traffic. A value of -1 indicates that this node is not actively used. |
| INT swCpuAclIpRuleDscp | 1.3.6.1.4.1.171.12.9.5.2.1.6 | INTEGER | read-create | Specifies the value of DSCP, the value can be configured from 0 to 63. A value of -1 indicates that this node is not actively used. |
| IP swCpuAclIpRuleDstIpaddress | 1.3.6.1.4.1.171.12.9.5.2.1.5 | IpAddress | read-create | Specifies an IP destination address. |
| INT swCpuAclIpRuleDstPort | 1.3.6.1.4.1.171.12.9.5.2.1.11 | INTEGER | read-create | Specifies the range of TCP/UDP destination ports. A value of -1 indicates that this node is not actively used. |
| swCpuAclIpRuleEntry | 1.3.6.1.4.1.171.12.9.5.2.1 | not-accessible | A list of information about this software ACL rule. | |
| INT swCpuAclIpRuleFlagBits | 1.3.6.1.4.1.171.12.9.5.2.1.12 | INTEGER | read-create | A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L is added in the range 1 through 6, for which this node performs transactions where, 2^(L - 1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, it you want to enable urg bit and ack bit, you should set the value 48{2^(5-1) + 2^(6-1)}. |
| INT swCpuAclIpRulePermit | 1.3.6.1.4.1.171.12.9.5.2.1.15 | INTEGER | read-create | This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swCpuAclIpRulePort | 1.3.6.1.4.1.171.12.9.5.2.1.17 | PortList | read-create | Specifies that the access rule will only apply to port(s). |
| INT swCpuAclIpRuleProfileID | 1.3.6.1.4.1.171.12.9.5.2.1.1 | INTEGER | read-only | The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| INT swCpuAclIpRuleProtocol | 1.3.6.1.4.1.171.12.9.5.2.1.7 | INTEGER | read-only | Specifies the IP protocol which has been configured in swCpuAclIpEntry. |
| INT swCpuAclIpRuleProtoID | 1.3.6.1.4.1.171.12.9.5.2.1.13 | INTEGER | read-create | Specifies the rule applies to the value of IP protocol ID traffic. A value of -1 indicates that this node is not actively used. |
| ROW swCpuAclIpRuleRowStatus | 1.3.6.1.4.1.171.12.9.5.2.1.16 | RowStatus | read-create | This object indicates the status of this entry. |
| IP swCpuAclIpRuleSrcIpaddress | 1.3.6.1.4.1.171.12.9.5.2.1.4 | IpAddress | read-create | Specifies an IP source address. |
| INT swCpuAclIpRuleSrcPort | 1.3.6.1.4.1.171.12.9.5.2.1.10 | INTEGER | read-create | Specifies the rule applies to the range of TCP/UDP source ports. A value of -1 indicates that this node is not actively used. |
| swCpuAclIpRuleTable | 1.3.6.1.4.1.171.12.9.5.2 | not-accessible | This table contains IPv4 software ACL rule information. | |
| INT swCpuAclIpRuleType | 1.3.6.1.4.1.171.12.9.5.2.1.8 | INTEGER | read-create | Specifies the rule applies to the value of ICMP type traffic. A value of -1 indicates that this node is not actively used. |
| OCT swCpuAclIpRuleUserMask | 1.3.6.1.4.1.171.12.9.5.2.1.14 | OCTET STRING | read-create | Specifies that the rule applies to the IP protocol ID and the range of options behind the IP header. |
| STR swCpuAclIpRuleVlan | 1.3.6.1.4.1.171.12.9.5.2.1.3 | SnmpAdminString | read-create | Specifies that the access rule will apply only to this VLAN. |
| IP swCpuAclIpSrcIpAddrMask | 1.3.6.1.4.1.171.12.9.4.2.1.4 | IpAddress | read-create | This object specifies the IP address mask for the source IP address. |
| swCpuAclIpTable | 1.3.6.1.4.1.171.12.9.4.2 | not-accessible | This table contains software ACL mask IP information. Access profiles will be created on the switch to define which parts of each incoming frame's IP layer 2 header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swCpuAclIpTCPFlagBit | 1.3.6.1.4.1.171.12.9.4.2.1.14 | INTEGER | read-create | Specifies a TCP connection flag mask. |
| INT swCpuAclIpTCPFlagBitMask | 1.3.6.1.4.1.171.12.9.4.2.1.15 | INTEGER | read-create | A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L is added in the range 1 through 6, for which this node performs transactions where 2^(L - 1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, if you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}. |
| INT swCpuAclIpTcpOption | 1.3.6.1.4.1.171.12.9.4.2.1.10 | INTEGER | read-create | This object indicates the status of filtered addresses of TCP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered is this destination or source port is identified in received frames. |
| OCT swCpuAclIpTCPorUDPDstPortMask | 1.3.6.1.4.1.171.12.9.4.2.1.13 | OCTET STRING | read-create | Specifies a TCP port mask for the destination port if swCpuAclIpUseProtoType is TCP. Specifies a UDP port mask for the destination port if swCpuAclIpUseProtoType is UDP. |
| OCT swCpuAclIpTCPorUDPSrcPortMask | 1.3.6.1.4.1.171.12.9.4.2.1.12 | OCTET STRING | read-create | Specifies a TCP port mask for the source port if swCpuAclIpUseProtoType is TCP. Specifies a UDP port mask for the source port if swCpuAclIpUseProtoType is UDP. |
| INT swCpuAclIpUdpOption | 1.3.6.1.4.1.171.12.9.4.2.1.11 | INTEGER | read-create | This object indicates the status of filtered addresses of UDP. other (1) - Neither source port nor destination port are masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames. |
| INT swCpuAclIpUseDSCP | 1.3.6.1.4.1.171.12.9.4.2.1.6 | INTEGER | read-create | This object indicates if the DSCP protocol in the packet header is to be examined or not. |
| INT swCpuAclIpUseProtoType | 1.3.6.1.4.1.171.12.9.4.2.1.7 | INTEGER | read-create | This object indicates which protocol will be examined. |
| INT swCpuAclIpUsevlan | 1.3.6.1.4.1.171.12.9.4.2.1.2 | INTEGER | read-create | This object indicates if the IP layer VLAN part is examined or not. |
| INT swCpuAclIpv6IpAddrMaskState | 1.3.6.1.4.1.171.12.9.4.4.1.4 | INTEGER | read-create | This object indicates the status of IPv6 address mask. other (1) - Neither source IPv6 address nor destination IPv6 address are masked. dst-ipv6-addr (2) - Packets will be filtered if this destination IPv6 address is identified as a match in received frames. src-ipv6-addr (3) - Packets will be filtered if this source IPv6 address is identified as a match in received frames. dst-src-ipv6-addr (4) - Packets will be filtered if this destination or source IPv6 address is identified as a match in received frames. |
| INT swCpuAclIpv6MaskClass | 1.3.6.1.4.1.171.12.9.4.4.1.2 | INTEGER | read-create | Specifies that the rule applies to the IPv6 class field and the mask options. |
| ADR swCpuAclIpv6MaskDstIpv6Mask | 1.3.6.1.4.1.171.12.9.4.4.1.6 | Ipv6Address | read-create | Specifies that the rule applies to the destination IPv6 address and the mask options. This should be a 16 byte octet string. |
| swCpuAclIpv6MaskEntry | 1.3.6.1.4.1.171.12.9.4.4.1 | not-accessible | A list of information about user-defined software ACLs. | |
| INT swCpuAclIpv6MaskFlowlabel | 1.3.6.1.4.1.171.12.9.4.4.1.3 | INTEGER | read-create | Specifies that the rule applies to the IPv6 flowlabel field and the mask options. |
| INT swCpuAclIpv6MaskProfileID | 1.3.6.1.4.1.171.12.9.4.4.1.1 | INTEGER | read-only | The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| ROW swCpuAclIpv6MaskRowStatus | 1.3.6.1.4.1.171.12.9.4.4.1.7 | RowStatus | read-create | This object indicates the status of this entry. |
| ADR swCpuAclIpv6MaskSrcIpv6Mask | 1.3.6.1.4.1.171.12.9.4.4.1.5 | Ipv6Address | read-create | Specifies that the rule applies to the source IPv6 address and the mask options. This should be a 16 byte octet string. |
| swCpuAclIpv6MaskTable | 1.3.6.1.4.1.171.12.9.4.4 | not-accessible | This table contains IPv6 software ACL mask information. An access profile will be created on the switch to define which part of each incoming frame's IPv6 part of the packet header will be examined by switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swCpuAclIpv6RuleAccessID | 1.3.6.1.4.1.171.12.9.5.4.1.2 | INTEGER | read-only | The ID of the ACL rule entry in relation to swCpuAclIpv6RuleProfileID. |
| INT swCpuAclIpv6RuleClass | 1.3.6.1.4.1.171.12.9.5.4.1.3 | INTEGER | read-create | Specifies that the rule applies to the IPv6 class field. |
| ADR swCpuAclIpv6RuleDstIpv6Addr | 1.3.6.1.4.1.171.12.9.5.4.1.6 | Ipv6Address | read-create | Specifies that the rule applies to the destination IPv6 address. This should be a 16 byte octet string. |
| swCpuAclIpv6RuleEntry | 1.3.6.1.4.1.171.12.9.5.4.1 | not-accessible | A list of information about the ACL rule of the user-defined part of each packet. | |
| OCT swCpuAclIpv6RuleFlowlabel | 1.3.6.1.4.1.171.12.9.5.4.1.4 | OCTET STRING | read-create | Specifies that the rule applies to the IPv6 flowlabel field. |
| INT swCpuAclIpv6RulePermit | 1.3.6.1.4.1.171.12.9.5.4.1.7 | INTEGER | read-create | This object indicates if the result of the examination is to 'permit' or 'deny'. The default is 'permit' (1). permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swCpuAclIpv6RulePort | 1.3.6.1.4.1.171.12.9.5.4.1.9 | PortList | read-create | Specifies that the access rule will apply only to port(s). |
| INT swCpuAclIpv6RuleProfileID | 1.3.6.1.4.1.171.12.9.5.4.1.1 | INTEGER | read-only | The ID of the ACL mask entry. This is unique in the mask list. The maximum value of this object depends on the device. |
| ROW swCpuAclIpv6RuleRowStatus | 1.3.6.1.4.1.171.12.9.5.4.1.8 | RowStatus | read-create | This object indicates the status of this entry. |
| ADR swCpuAclIpv6RuleSrcIpv6Addr | 1.3.6.1.4.1.171.12.9.5.4.1.5 | Ipv6Address | read-create | Specifies that the rule applies to the source IPv6 address. This should be a 16 byte octet string. |
| swCpuAclIpv6RuleTable | 1.3.6.1.4.1.171.12.9.5.4 | not-accessible | This table contains user-defined ACL rule information. | |
| INT swCpuACLMaskDelAllState | 1.3.6.1.4.1.171.12.9.4.5 | INTEGER | read-write | Used to delete all software ACL masks. |
| swCpuAclMaskMgmt | 1.3.6.1.4.1.171.12.9.4 | |||
| swCpuAclPktContMaskEntry | 1.3.6.1.4.1.171.12.9.4.3.1 | not-accessible | A list of information about user-defined software ACLs. | |
| OCT swCpuAclPktContMaskOffset0to15 | 1.3.6.1.4.1.171.12.9.4.3.1.2 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset0to15) and the mask options. |
| OCT swCpuAclPktContMaskOffset16to31 | 1.3.6.1.4.1.171.12.9.4.3.1.3 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset16to31) and the mask options. |
| OCT swCpuAclPktContMaskOffset32to47 | 1.3.6.1.4.1.171.12.9.4.3.1.4 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset32to47) and the mask options. |
| OCT swCpuAclPktContMaskOffset48to63 | 1.3.6.1.4.1.171.12.9.4.3.1.5 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset48to63) and the mask options. |
| OCT swCpuAclPktContMaskOffset64to79 | 1.3.6.1.4.1.171.12.9.4.3.1.6 | OCTET STRING | read-create | Specifies that the rule applies to the packet content (Offset64to79) and the mask options. |
| INT swCpuAclPktContMaskProfileID | 1.3.6.1.4.1.171.12.9.4.3.1.1 | INTEGER | read-only | The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| ROW swCpuAclPktContMaskRowStatus | 1.3.6.1.4.1.171.12.9.4.3.1.7 | RowStatus | read-create | This object indicates the status of this entry. |
| swCpuAclPktContMaskTable | 1.3.6.1.4.1.171.12.9.4.3 | not-accessible | This table contains user-defined software ACL information. Access profiles will be created on the switch to define which part of each incoming frame's user-defined part of the packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields. | |
| INT swCpuAclPktContRuleAccessID | 1.3.6.1.4.1.171.12.9.5.3.1.2 | INTEGER | read-only | The ID of the software ACL rule entry related to swCpuAclPktContRuleProfileID. |
| swCpuAclPktContRuleEntry | 1.3.6.1.4.1.171.12.9.5.3.1 | not-accessible | A list of information about the software ACL rule of the user-defined part of each packet. | |
| OCT swCpuAclPktContRuleOffset0to15 | 1.3.6.1.4.1.171.12.9.5.3.1.3 | OCTET STRING | read-create | Specifies that the rule applies to the user-defined packet. |
| OCT swCpuAclPktContRuleOffset16to31 | 1.3.6.1.4.1.171.12.9.5.3.1.4 | OCTET STRING | read-create | Specifies that the rule applies to the user-defined packet. |
| OCT swCpuAclPktContRuleOffset32to47 | 1.3.6.1.4.1.171.12.9.5.3.1.5 | OCTET STRING | read-create | Specifies that the rule applies to the user-defined packet. |
| OCT swCpuAclPktContRuleOffset48to63 | 1.3.6.1.4.1.171.12.9.5.3.1.6 | OCTET STRING | read-create | Specifies that the rule applies to the user-defined packet. |
| OCT swCpuAclPktContRuleOffset64to79 | 1.3.6.1.4.1.171.12.9.5.3.1.7 | OCTET STRING | read-create | Specifies that the rule applies to the user-defined packet. |
| INT swCpuAclPktContRulePermit | 1.3.6.1.4.1.171.12.9.5.3.1.8 | INTEGER | read-create | This object indicates if the result of the packet examination is to 'permit' or 'deny'. The default is 'permit'. permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swCpuAclPktContRulePort | 1.3.6.1.4.1.171.12.9.5.3.1.10 | PortList | read-create | Specifies that the access rule will only apply to port(s). |
| INT swCpuAclPktContRuleProfileID | 1.3.6.1.4.1.171.12.9.5.3.1.1 | INTEGER | read-only | The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. |
| ROW swCpuAclPktContRuleRowStatus | 1.3.6.1.4.1.171.12.9.5.3.1.9 | RowStatus | read-create | This object indicates the status of this entry. |
| swCpuAclPktContRuleTable | 1.3.6.1.4.1.171.12.9.5.3 | not-accessible | This table contains user-defined software ACL rule information. | |
| swCpuAclRuleMgmt | 1.3.6.1.4.1.171.12.9.5 | |||
| INT swCpuInterfacefilterState | 1.3.6.1.4.1.171.12.9.1.1 | INTEGER | read-write | Enable or disable CPU Interface Filtering (also called Software ACL). The default is disabled. If enabled, the filtering entries in the swAclRuleMgmt tables will be set to active if its RuleSwAclState is enabled. If disabled, the software ACL function will be disabled. |
| swIBPACLEthernetEntry | 1.3.6.1.4.1.171.12.9.2.6.1 | not-accessible | A list of information about the Ethernet ACL. | |
| INT swIBPACLEthernetProfileID | 1.3.6.1.4.1.171.12.9.2.6.1.1 | INTEGER | read-only | The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device. |
| swIBPACLEthernetTable | 1.3.6.1.4.1.171.12.9.2.6 | not-accessible | This table contains IP-MAC-Binding ACL mask Ethernet information. Access profiles will be created on the switch by row creation and to define which parts of each incoming frame's layer 2 header part the switch will examine. Masks can be entered that will be combined with the values the switch finds in the specified frame header fields. | |
| INT swIBPACLEthernetUseEthernetType | 1.3.6.1.4.1.171.12.9.2.6.1.2 | INTEGER | read-only | Specifies if the switch will examine the Ethernet type value in each frame's header or not. |
| INT swIBPACLEtherRuleAccessID | 1.3.6.1.4.1.171.12.9.3.5.1.2 | INTEGER | read-only | The ID of the ACL rule entry in relation to swACLEtherRuleProfileID. When row creation is set to 0, this indicates automatically assigning an Access for the ports in the swACLEtherRulePort to create rule entries for swACLEtherRulePort accordingly. Set to 1-65535 indicates to create the exact access ID for the swACLEtherRulePort and the swACLEtherRulePort must set one port only, otherwise the row creation will fail. |
| swIBPACLEtherRuleEntry | 1.3.6.1.4.1.171.12.9.3.5.1 | not-accessible | A list of information about the ACL rule of the layer 2 part of each packet. | |
| OCT swIBPACLEtherRuleEtherType | 1.3.6.1.4.1.171.12.9.3.5.1.3 | OCTET STRING | read-only | Specifies that the access rule will apply only to packets with this 802.1Q Ethernet type value in the packet header. |
| INT swIBPACLEtherRulePermit | 1.3.6.1.4.1.171.12.9.3.5.1.4 | INTEGER | read-only | This object indicates if the result of the examination is 'permit' or 'deny'. The default is 'permit' (1). permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swIBPACLEtherRulePort | 1.3.6.1.4.1.171.12.9.3.5.1.5 | PortList | read-only | Specifies that the access rule will only apply to port(s). |
| INT swIBPACLEtherRuleProfileID | 1.3.6.1.4.1.171.12.9.3.5.1.1 | INTEGER | read-only | The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device. |
| swIBPACLEtherRuleTable | 1.3.6.1.4.1.171.12.9.3.5 | not-accessible | This table contains IP-MAC-Binding Ethernet ACL Rule information. | |
| swIBPACLIpEntry | 1.3.6.1.4.1.171.12.9.2.7.1 | not-accessible | A list of information about the IP layer of the ACL. | |
| INT swIBPACLIpProfileID | 1.3.6.1.4.1.171.12.9.2.7.1.1 | INTEGER | read-only | The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device. |
| INT swIBPACLIpRuleAccessID | 1.3.6.1.4.1.171.12.9.3.6.1.2 | INTEGER | read-only | The ID of the ACL rule entry in relation to swACLIPRuleProfileID. When the row creation is set to 0, this indicates assigning an access ID automatically for the ports in the swACLIpRulePort to create rule entries for swACLIpRulePort accordingly. Set to 1-65535 indicates to create the exact access ID for the swACLIpRulePort and the swACLIpRulePort must be set for one port only, otherwise the row creation will fail. |
| swIBPACLIpRuleEntry | 1.3.6.1.4.1.171.12.9.3.6.1 | not-accessible | ||
| INT swIBPACLIpRulePermit | 1.3.6.1.4.1.171.12.9.3.6.1.5 | INTEGER | read-only | This object indicates if the result of the examination is 'permit' or 'deny'; the default is 'permit' (1) permit - Specifies that packets that match the access profile are permitted to be forwarded by the switch. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the switch and will be filtered. |
| POR swIBPACLIpRulePort | 1.3.6.1.4.1.171.12.9.3.6.1.6 | PortList | read-only | Specifies that the access rule will only apply to port(s). |
| INT swIBPACLIpRuleProfileID | 1.3.6.1.4.1.171.12.9.3.6.1.1 | INTEGER | read-only | The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device. |
| IP swIBPACLIpRuleSrcIpaddress | 1.3.6.1.4.1.171.12.9.3.6.1.4 | IpAddress | read-only | Specifies an IP source address. |
| MAC swIBPACLIpRuleSrcMacAddress | 1.3.6.1.4.1.171.12.9.3.6.1.3 | MacAddress | read-only | Specifies that the access rule will apply to only packets with this source MAC address. |
| swIBPACLIpRuleTable | 1.3.6.1.4.1.171.12.9.3.6 | not-accessible | ||
| IP swIBPACLIpSrcIpAddrMask | 1.3.6.1.4.1.171.12.9.2.7.1.3 | IpAddress | read-only | This object specifies IP address masks for the source IP address. |
| MAC swIBPACLIpSrcMacAddrMask | 1.3.6.1.4.1.171.12.9.2.7.1.2 | MacAddress | read-only | This object specifies the MAC address mask for the source MAC address. |
| swIBPACLIpTable | 1.3.6.1.4.1.171.12.9.2.7 | not-accessible | This table contains IP-MAC-Binding IP ACL mask information. Access profiles will be created on the switch by row creation and to define which parts of each incoming frame's IP layer part of the header the switch will examine. Masks can be entered that will be combined with the values the switch finds in the specified frame header fields. |
RFC description
Access Control List (ACL) configuration and management for network switches with Ethernet and IPv6 rule support.
Start monitoring D-Link managed switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.