EGRESSACL-MIB

All MIBs › EGRESSACL-MIB

Organization: D-Link Corp.

Last Updated: 2010-01-11

Category: Domain: Security, Technology: QoS

Description: Egress access control list MIB for configuring and monitoring outbound packet filtering rules on network interfaces.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EGRESSACL-MIB?

EGRESSACL-MIB is a D-Link proprietary MIB managing egress (outbound-traffic) Access Control Lists on D-Link managed switches, complementing the standard (ingress) ACLMGMT-MIB. Its objects cover total used/unused egress-ACL rule-entry counts, an Ethernet-ACL profile table (VLAN/VLAN-mask scoping, 802.1p/EtherType matching, MAC-address masking, profile name, row status, unused-rule count), and an IP-ACL profile table (VLAN scoping, IP-address masking). As a configuration MIB it lets an administrator confirm egress ACL rule-entry capacity and audit which match criteria a given egress profile applies. It is deployed on D-Link managed switches. Engineers can download the EGRESSACL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in EGRESSACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

D-Link managed switches

Monitoring Examples

An administrator checks swEgressACLTotalUnusedRuleEntries to confirm there's still capacity for a new egress-filtering rule before troubleshooting unexpected outbound traffic on a D-Link switch.

What Can Be Monitored

egress ACL rule-entry capacity usage and profile configuration

Imported Objects

From DLINK-ID-REC-MIB

dlink-common-mgmt

From IPV6-TC

Ipv6Address

From Q-BRIDGE-MIB

PortList
VlanIdOrNone

From RFC1213-MIB

DisplayString

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

Counter32
Counter64
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus

How to Use in IPNetwork Monitor

Example using swEgressACLCounterTotalCounter OID:

Select a D-Link managed switch (egress ACL) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type swEgressACLCounterTotalCounter into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of matched packets. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
swEgressAclMgmtMIB	1.3.6.1.4.1.171.12.89			The structure of Egress Access Control List information for the proprietary enterprise.
swEgressAclInfo	1.3.6.1.4.1.171.12.89.1
INT swEgressACLTotalUsedRuleEntries	1.3.6.1.4.1.171.12.89.1.1	INTEGER	read-only	The total number of used egress ACL rule entries.
INT swEgressACLTotalUnusedRuleEntries	1.3.6.1.4.1.171.12.89.1.2	INTEGER	read-only	The total number of unused egress ACL rule entries.
swEgressAclMaskMgmt	1.3.6.1.4.1.171.12.89.2
swEgressACLEthernetTable	1.3.6.1.4.1.171.12.89.2.1		not-accessible	This table contains egress ACL mask Ethernet information. The access profile will be created on the switch to define which part of each outgoing frame's layer 2 header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
swEgressACLEthernetEntry	1.3.6.1.4.1.171.12.89.2.1.1		not-accessible	A list of information about the egress ACL for Ethernet.
INT swEgressACLEthernetProfileID	1.3.6.1.4.1.171.12.89.2.1.1.1	INTEGER	not-accessible	The ID of the egress ACL mask entry unique to the mask list. The maximum value of this object depends on the device.
ROW swEgressACLEthernetRowStatus	1.3.6.1.4.1.171.12.89.2.1.1.2	RowStatus	read-create	This object indicates the status of this entry.
STR swEgressACLEthernetProfileName	1.3.6.1.4.1.171.12.89.2.1.1.3	DisplayString	read-create	The name of the egress ACL mask entry unique to the mask list.
INT swEgressACLEthernetUsevlan	1.3.6.1.4.1.171.12.89.2.1.1.4	INTEGER	read-create	Specifies that the switch will examine the VLAN part of each packet header.
OCT swEgressACLEthernetVlanMask	1.3.6.1.4.1.171.12.89.2.1.1.5	OCTET STRING	read-create	The mask used for the VLAN ID. Valid values are from 0x0000 to 0x0FFF. The default value is 0x0FFF
INT swEgressACLEthernetUse8021p	1.3.6.1.4.1.171.12.89.2.1.1.6	INTEGER	read-create	Specifies if the switch will examine the 802.1p priority value in the frame's header or not.
INT swEgressACLEthernetUseEthernetType	1.3.6.1.4.1.171.12.89.2.1.1.7	INTEGER	read-create	Specifies if the switch will examine the Ethernet type value in each frame's header or not.
INT swEgressACLEthernetMacAddrMaskState	1.3.6.1.4.1.171.12.89.2.1.1.8	INTEGER	read-create	This object indicates the status of the MAC address mask. other (1) - Neither source MAC address nor destination MAC address is masked. dst-mac-addr (2) - Destination MAC addresses within received frames are to be filtered when matched with the MAC address entry for the table. src-mac-addr (3) - Source MAC addresses within received frames are to be filtered when matched with the MAC address entry for the table. dst-src-mac-addr (4) - Source or destination MAC addresses within received frames are to be filtered when matched with the MAC address entry of the table.
MAC swEgressACLEthernetSrcMacAddrMask	1.3.6.1.4.1.171.12.89.2.1.1.9	MacAddress	read-create	This object specifies the MAC address mask for the source MAC address.
MAC swEgressACLEthernetDstMacAddrMask	1.3.6.1.4.1.171.12.89.2.1.1.10	MacAddress	read-create	This object specifies the MAC address mask for the destination MAC address.
INT swEgressACLEthernetUnusedRuleEntries	1.3.6.1.4.1.171.12.89.2.1.1.11	INTEGER	read-only	The number of unused rule entries of this Ethernet profile entry.
swEgressACLIpTable	1.3.6.1.4.1.171.12.89.2.2		not-accessible	This table contains the egress ACL mask for IP information. Access profiles will be created on the switch to define which part of the outgoing frame's IP layer packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
swEgressACLIpEntry	1.3.6.1.4.1.171.12.89.2.2.1		not-accessible	A list of information about the egress ACL of the IP layer.
INT swEgressACLIpProfileID	1.3.6.1.4.1.171.12.89.2.2.1.1	INTEGER	not-accessible	The ID of the egress ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
ROW swEgressACLIpRowStatus	1.3.6.1.4.1.171.12.89.2.2.1.2	RowStatus	read-create	This object indicates the status of this entry.
STR swEgressACLIpProfileName	1.3.6.1.4.1.171.12.89.2.2.1.3	DisplayString	read-create	The name of the egress ACL mask entry unique to the mask list.
INT swEgressACLIpUsevlan	1.3.6.1.4.1.171.12.89.2.2.1.4	INTEGER	read-create	This object indicates if the IP layer VLAN part is examined or not.
OCT swEgressACLIpVlanMask	1.3.6.1.4.1.171.12.89.2.2.1.5	OCTET STRING	read-create	The mask used for the VLAN ID. Valid values are from 0x0000 to 0x0FFF. The default value is 0x0FFF.
INT swEgressACLIpIpAddrMaskState	1.3.6.1.4.1.171.12.89.2.2.1.6	INTEGER	read-create	This object indicates the status of IP address mask. other (1) - Neither source IP address nor destination IP address is masked. dst-ip-addr (2) - Destination IP addresses within received frames are to be filtered when matched with the IP address entry of the table. src-ip-addr (3) - Source IP addresses within received frames are to be filtered when matched with the IP address entry of the table. dst-src-ip-addr (4) - Destination or source IP addresses within received frames are to be filtered when matched with the IP address entry of the table.
IP swEgressACLIpSrcIpAddrMask	1.3.6.1.4.1.171.12.89.2.2.1.7	IpAddress	read-create	This object specifies the IP address mask for the source IP address.
IP swEgressACLIpDstIpAddrMask	1.3.6.1.4.1.171.12.89.2.2.1.8	IpAddress	read-create	This object specifies the IP address mask for the destination IP address.
INT swEgressACLIpUseDSCP	1.3.6.1.4.1.171.12.89.2.2.1.9	INTEGER	read-create	This object indicates if the DSCP protocol in the packet header is to be examined or not.
INT swEgressACLIpUseProtoType	1.3.6.1.4.1.171.12.89.2.2.1.10	INTEGER	read-create	That object indicates which protocol will be examined.
INT swEgressACLIpIcmpOption	1.3.6.1.4.1.171.12.89.2.2.1.11	INTEGER	read-create	This object indicates which fields are defined for ICMP. none (1)- Both fields are null. type (2)- Type field identified. code (3)- Code field identified. type-code (4)- Both ICMP fields identified.
INT swEgressACLIpIgmpOption	1.3.6.1.4.1.171.12.89.2.2.1.12	INTEGER	read-create	Indicates if the IGMP options field is identified or not.
INT swEgressACLIpTcpOption	1.3.6.1.4.1.171.12.89.2.2.1.13	INTEGER	read-create	This object indicates the status of the filtered address of TCP. other (1) - Neither source port nor destination port is masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
INT swEgressACLIpUdpOption	1.3.6.1.4.1.171.12.89.2.2.1.14	INTEGER	read-create	This object indicates the status of the filtered address of UDP . other (1) - Neither source port nor destination port is masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
OCT swEgressACLIpTCPorUDPSrcPortMask	1.3.6.1.4.1.171.12.89.2.2.1.15	OCTET STRING	read-create	Specifies a TCP port mask for the source port if swEgressACLIpUseProtoType is TCP Specifies a UDP port mask for the source port if swEgressACLIpUseProtoType is UDP.
OCT swEgressACLIpTCPorUDPDstPortMask	1.3.6.1.4.1.171.12.89.2.2.1.16	OCTET STRING	read-create	Specifies a TCP port mask for the destination port if swEgressACLIpUseProtoType is TCP Specifies a UDP port mask for the destination port if swEgressACLIpUseProtoType is UDP.
INT swEgressACLIpTCPFlagBit	1.3.6.1.4.1.171.12.89.2.2.1.17	INTEGER	read-create	Specifies a TCP connection flag mask.
INT swEgressACLIpTCPFlagBitMask	1.3.6.1.4.1.171.12.89.2.2.1.18	INTEGER	read-create	A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L, is added in the range 1 through 6, for which this node performs transactions where 2^(L-1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, if you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}.
INT swEgressACLIpProtoIDOption	1.3.6.1.4.1.171.12.89.2.2.1.19	INTEGER	read-create	Specifies if the switch will examine each frame's protocol ID field or not.
INT swEgressACLIpProtoID	1.3.6.1.4.1.171.12.89.2.2.1.20	INTEGER	read-create	Specifies that the rule applies to the IP protocol ID behind the IP header.
OCT swEgressACLIpProtoIDMask	1.3.6.1.4.1.171.12.89.2.2.1.21	OCTET STRING	read-create	Specifies that the rule applies to the IP protocol ID and the mask options behind the IP header.
INT swEgressACLIpUnusedRuleEntries	1.3.6.1.4.1.171.12.89.2.2.1.22	INTEGER	read-only	The number of unused rule entries this IP profile entry.
swEgressACLIpv6MaskTable	1.3.6.1.4.1.171.12.89.2.3		not-accessible	This table contains IPv6 egress ACL mask information. An access profile will be created on the switch to define which parts of each outgoing frame's IPv6 part of the packet header will be examined by the switch. Masks entered will be combined with the values the switch finds in the specified frame header fields.
swEgressACLIpv6MaskEntry	1.3.6.1.4.1.171.12.89.2.3.1		not-accessible	A list of information about egress ACL for IPv6.
INT swEgressACLIpv6MaskProfileID	1.3.6.1.4.1.171.12.89.2.3.1.1	INTEGER	not-accessible	The ID of the egress ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
ROW swEgressACLIpv6MaskRowStatus	1.3.6.1.4.1.171.12.89.2.3.1.2	RowStatus	read-create	This object indicates the status of this entry.
STR swEgressACLIpv6MaskProfileName	1.3.6.1.4.1.171.12.89.2.3.1.3	DisplayString	read-create	The name of egress ACL mask entry unique to the mask list.
INT swEgressACLIpv6MaskClass	1.3.6.1.4.1.171.12.89.2.3.1.4	INTEGER	read-create	This object indicates if the class field in the IPv6 packet header is to be examined or not.
INT swEgressACLIpv6IpAddrMaskState	1.3.6.1.4.1.171.12.89.2.3.1.5	INTEGER	read-create	This object indicates the status of the IPv6 address mask. other (1) - Neither source IPv6 address nor destination IPv6 address is masked. dst-ipv6-addr (2) - Received frame destination IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table. src-ipv6-addr (3) - Received frame source IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table. dst-src-ipv6-addr (4) - Received frame destination IPv6 address or source IPv6 address is currently used to be filtered as it meets with the IPv6 address entry of the table.
ADR swEgressACLIpv6MaskSrcIpv6Mask	1.3.6.1.4.1.171.12.89.2.3.1.6	Ipv6Address	read-create	This object specifies the IPv6 address mask for the source IPv6 address.
ADR swEgressACLIpv6MaskDstIpv6Mask	1.3.6.1.4.1.171.12.89.2.3.1.7	Ipv6Address	read-create	This object specifies the IPv6 address mask for the destination IPv6 address.
INT swEgressACLIpv6MaskUseProtoType	1.3.6.1.4.1.171.12.89.2.3.1.8	INTEGER	read-create	That object indicates which protocol will be examined.
INT swEgressACLIpv6MaskIcmpOption	1.3.6.1.4.1.171.12.89.2.3.1.9	INTEGER	read-create	This object indicates which fields are defined for ICMP. none (1)- Both fields are null. type (2)- Type field identified. code (3)- Code field identified. type-code (4)- Both ICMP fields identified.
INT swEgressACLIpv6MaskTcpOption	1.3.6.1.4.1.171.12.89.2.3.1.10	INTEGER	read-create	This object indicates the status of the filtered address of TCP. other (1) - Neither source port nor destination port is masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
INT swEgressACLIpv6MaskUdpOption	1.3.6.1.4.1.171.12.89.2.3.1.11	INTEGER	read-create	This object indicates the status of the filtered address of UDP. other (1) - Neither source port nor destination port is masked. dst-addr (2) - Packets will be filtered if this destination port is identified in received frames. src-addr (3) - Packets will be filtered if this source port is identified in received frames. dst-src-addr (4) - Packets will be filtered if this destination or source port is identified in received frames.
OCT swEgressACLIpv6MaskTCPorUDPSrcPortMask	1.3.6.1.4.1.171.12.89.2.3.1.12	OCTET STRING	read-create	Specifies a TCP port mask for the source port if swEgressACLIpv6MaskUseProtoType is TCP Specifies a UDP port mask for the source port if swEgressACLIpv6MaskUseProtoType is UDP.
OCT swEgressACLIpv6MaskTCPorUDPDstPortMask	1.3.6.1.4.1.171.12.89.2.3.1.13	OCTET STRING	read-create	Specifies a TCP port mask for the destination port if swEgressACLIpv6MaskUseProtoType is TCP Specifies a UDP port mask for the destination port if swEgressACLIpv6MaskUseProtoType is UDP.
INT swEgressACLIpv6MaskUnusedRuleEntries	1.3.6.1.4.1.171.12.89.2.3.1.14	INTEGER	read-only	The number of unused rule entries of this IPv6 profile entry.
INT swEgressACLMaskDelAllState	1.3.6.1.4.1.171.12.89.2.4	INTEGER	read-write	Used to delete all egress ACL masks.
swEgressAclRuleMgmt	1.3.6.1.4.1.171.12.89.3
swEgressACLEtherRuleTable	1.3.6.1.4.1.171.12.89.3.1		not-accessible	This table contains Ethernet egress ACL information.
swEgressACLEtherRuleEntry	1.3.6.1.4.1.171.12.89.3.1.1		not-accessible	A list of information about the egress ACL rule of the layer 2 part of each packet.
INT swEgressACLEtherRuleProfileID	1.3.6.1.4.1.171.12.89.3.1.1.1	INTEGER	not-accessible	The ID of the egress ACL rule entry, which is unique to the mask list. The maximum value of this object depends on the device.
INT swEgressACLEtherRuleAccessID	1.3.6.1.4.1.171.12.89.3.1.1.2	INTEGER	not-accessible	The ID of the the egress ACL rule entry relates to the swEgressACLEtherRuleProfileID. When row creation is set to 0, this indicates the access ID will be assigned automatically. When set from 1 to 65535, an access ID will be created for the rule.
ROW swEgressACLEtherRuleRowStatus	1.3.6.1.4.1.171.12.89.3.1.1.3	RowStatus	read-create	This object indicates the status of this entry.
VLA swEgressACLEtherRuleMatchVID	1.3.6.1.4.1.171.12.89.3.1.1.4	VlanIdOrNone	read-create	Specifies that the access rule will apply only to packets with this VLAN ID. It is applied to the specified ports configured by swEgressACLEtherRulePortGroup. Note:A value of 0 indicates that this object is not active.
OCT swEgressACLEtherRuleMatchVlanMask	1.3.6.1.4.1.171.12.89.3.1.1.5	OCTET STRING	read-create	Specifies the per rule mask for the VLAN field as defined in swEgressACLEtherRuleVlan object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect.
MAC swEgressACLEtherRuleSrcMacAddress	1.3.6.1.4.1.171.12.89.3.1.1.6	MacAddress	read-create	Specifies that the access rule will apply to only packets with this source MAC address.
MAC swEgressACLEtherRuleMaskSrcMacAddress	1.3.6.1.4.1.171.12.89.3.1.1.7	MacAddress	read-create	Specifies the per rule mask for the source MAC addres field as defined in swEgressACLEtherRuleSrcMacAddress object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect.
MAC swEgressACLEtherRuleDstMacAddress	1.3.6.1.4.1.171.12.89.3.1.1.8	MacAddress	read-create	Specifies that the access rule will apply to packets with this destination MAC address.
MAC swEgressACLEtherRuleMaskDstMacAddress	1.3.6.1.4.1.171.12.89.3.1.1.9	MacAddress	read-create	Specifies the per rule mask for the destination MAC addres field as defined in swEgressACLEtherRuleDstMacAddress object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect.
INT swEgressACLEtherRule8021P	1.3.6.1.4.1.171.12.89.3.1.1.10	INTEGER	read-create	Specifies that the access rule will apply to packets with this 802.1p priority value. A value of -1 indicates that this object is not active.
OCT swEgressACLEtherRuleEtherType	1.3.6.1.4.1.171.12.89.3.1.1.11	OCTET STRING	read-create	Specifies that the access rule will apply to packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
VLA swEgressACLEtherRuleVID	1.3.6.1.4.1.171.12.89.3.1.1.12	VlanIdOrNone	read-create	Specifies the VLAN-based ACL rule. There are two conditions: 1. this rule will apply to all the ports; 2. packets must belong to this VLAN. This object and swEgressACLEtherRulePortGroup,swEgressACLEtherRulePort cannot be set together. When you set swEgressACLEtherRulePortGroup or swEgressACLEtherRulePort, the value of this object will change to 0 automatically. This object cannot be set to 0.
INT swEgressACLEtherRulePort	1.3.6.1.4.1.171.12.89.3.1.1.13	INTEGER	read-create	Specifies that the access rule will only apply to the port. This object and swEgressACLEtherRuleVID,swEgressACLEtherRulePortGroup can not be set together. When you set swEgressACLEtherRuleVID or swEgressACLEtherRulePortGroup, the value of this object will change to 0 automatically. This object can not be set to 0. A value of 0 indicates that this object is not active.
INT swEgressACLEtherRulePortGroup	1.3.6.1.4.1.171.12.89.3.1.1.14	INTEGER	read-create	Specifies that the access rule will only apply to port(s) which belong to this port group. This object and swEgressACLEtherRuleVID, swEgressACLEtherRulePort can not be set together.When you set swEgressACLEtherRuleVID or swEgressACLEtherRulePort the value of this object will change to 0 automatically. Note:The range of this object is (0..N). The value N means the max number. It is determined by the project itself.A value of 0 indicates that this object is not active.
INT swEgressACLEtherRulePermit	1.3.6.1.4.1.171.12.89.3.1.1.15	INTEGER	read-create	This object indicates if the result of the packet examination is 'permit' or 'deny'. The default is 'permit'. deny - Specifies that packets matching the access profile are not permitted to be forwarded by the switch and will be filtered. permit - Specifies that packets matching the access profile are permitted to be forwarded by the switch.
INT swEgressACLEtherRuleEnableReplacePriority	1.3.6.1.4.1.171.12.89.3.1.1.16	INTEGER	read-create	Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag field or not .
INT swEgressACLEtherRuleReplacePriority	1.3.6.1.4.1.171.12.89.3.1.1.17	INTEGER	read-create	Specifies that the priority will be changed in packets while the swEgressACLEtherRuleEnablePriority is enabled.A value of -1 indicates that this object is not active.
INT swEgressACLEtherRuleEnableReplaceDscp	1.3.6.1.4.1.171.12.89.3.1.1.18	INTEGER	read-create	Specifies if the switch will change priorities of packets that match the access profile DSCP field or not.
INT swEgressACLEtherRuleReplaceDscp	1.3.6.1.4.1.171.12.89.3.1.1.19	INTEGER	read-create	Specifies a value to be written to the DSCP field of an outgoing packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. A value of -1 indicates that this object is not active.
STR swEgressAclEtherRuleTimeRangeName	1.3.6.1.4.1.171.12.89.3.1.1.20	DisplayString	read-create	Specifies a name of a time-range associated with a specific egress ACL entry. The time-range name must first be created before being associated with the access rule. If this name is an empty string, the time-range profile will no longer be associated with the access rule. When a rule is de-associated with a time range, the access rule will be enabled all the time.
swEgressACLIpRuleTable	1.3.6.1.4.1.171.12.89.3.2		not-accessible
swEgressACLIpRuleEntry	1.3.6.1.4.1.171.12.89.3.2.1		not-accessible
INT swEgressACLIpRuleProfileID	1.3.6.1.4.1.171.12.89.3.2.1.1	INTEGER	not-accessible	The ID of the egress ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
INT swEgressACLIpRuleAccessID	1.3.6.1.4.1.171.12.89.3.2.1.2	INTEGER	not-accessible	The ID of the egress ACL rule entry relates to the swEgressACLEtherRuleProfileID. When row creation is set to 0, this indicates the access ID will be assigned automatically. When set from 1 to 65535, an access ID will be created for the rule.
ROW swEgressACLIpRuleRowStatus	1.3.6.1.4.1.171.12.89.3.2.1.3	RowStatus	read-create	This object indicates the status of this entry.
VLA swEgressACLIpRuleMatchVID	1.3.6.1.4.1.171.12.89.3.2.1.4	VlanIdOrNone	read-create	Specifies that the access rule will apply only to packets with this VLAN ID. It is applied to the specified ports configured by swEgressACLIpRulePortGroup. Note:A value of 0 indicates that this object is not active.
OCT swEgressACLIpMatchVlanMask	1.3.6.1.4.1.171.12.89.3.2.1.5	OCTET STRING	read-create	Specifies the per rule mask for the VLAN as defined in swEgressACLIpRuleVlan object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
IP swEgressACLIpRuleSrcIpaddress	1.3.6.1.4.1.171.12.89.3.2.1.6	IpAddress	read-create	Specifies an IP source address.
IP swEgressACLIpRuleMaskSrcIpaddress	1.3.6.1.4.1.171.12.89.3.2.1.7	IpAddress	read-create	Specifies the per rule mask for the source IP address as defined in swEgressACLIpRuleSrcIpaddress object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
IP swEgressACLIpRuleDstIpaddress	1.3.6.1.4.1.171.12.89.3.2.1.8	IpAddress	read-create	Specifies an IP destination address.
IP swEgressACLIpRuleMaskDstIpaddress	1.3.6.1.4.1.171.12.89.3.2.1.9	IpAddress	read-create	Specifies the per rule mask for the destination IP address as defined in swEgressACLIpRuleMaskDstIpaddress object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
INT swEgressACLIpRuleDscp	1.3.6.1.4.1.171.12.89.3.2.1.10	INTEGER	read-create	Specifies the value of DSCP. The value can be configured from 0 to 63. A value of -1 indicates that this object is not active.
INT swEgressACLIpRuleProtocol	1.3.6.1.4.1.171.12.89.3.2.1.11	INTEGER	read-create	Specifies the IP protocol.
INT swEgressACLIpRuleType	1.3.6.1.4.1.171.12.89.3.2.1.12	INTEGER	read-create	Specifies that the rule applies to the value of ICMP/IGMP type traffic. A value of -1 denotes that this object is not active.
INT swEgressACLIpRuleCode	1.3.6.1.4.1.171.12.89.3.2.1.13	INTEGER	read-create	Specifies that the rule applies to the value of ICMP code traffic. A value of -1 denotes that this object is not active.
INT swEgressACLIpRuleSrcPort	1.3.6.1.4.1.171.12.89.3.2.1.14	INTEGER	read-create	Specifies that the rule applies to the range of the TCP/UDP source ports. A value of -1 indicates that this object is not active.
OCT swEgressACLIpRuleMaskSrcPort	1.3.6.1.4.1.171.12.89.3.2.1.15	OCTET STRING	read-create	Specifies the per rule mask for the L4 source port as defined in swEgressACLIpRuleSrcPort object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
INT swEgressACLIpRuleDstPort	1.3.6.1.4.1.171.12.89.3.2.1.16	INTEGER	read-create	Specifies the TCP/UDP destination port range. A value of -1 indicates that this object is not active.
OCT swEgressACLIpRuleMaskDstPort	1.3.6.1.4.1.171.12.89.3.2.1.17	OCTET STRING	read-create	Specifies the per rule mask for the L4 destination port as defined in swEgressACLIpRuleDstPort object. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
INT swEgressACLIpRuleFlagBits	1.3.6.1.4.1.171.12.89.3.2.1.18	INTEGER	read-create	A value which indicates the set of TCP flags that this entity may potentially offer. The value is a sum of flag bits. This sum initially takes the value zero. Then, for each flag, L is added in the range 1 through 6, for which this node performs transactions, where 2^(L - 1) is added to the sum. Note that values should be calculated accordingly: Flag functionality 6 urg bit 5 ack bit 4 psh bit 3 rst bit 2 syn bit 1 fin bit For example, it you want to enable urg bit and ack bit, you should set value 48{2^(5-1) + 2^(6-1)}.
INT swEgressACLIpRuleProtoID	1.3.6.1.4.1.171.12.89.3.2.1.19	INTEGER	read-create	Specifies that the rule applies to the value of IP protocol ID traffic. A value of -1 indicates that this object is not active.
OCT swEgressACLIpRuleUserDefine	1.3.6.1.4.1.171.12.89.3.2.1.20	OCTET STRING	read-create	Specifies that the rule applies to the first four byte behind the IP header.
OCT swEgressACLIpRuleUserDefineMask	1.3.6.1.4.1.171.12.89.3.2.1.21	OCTET STRING	read-create	Specifies the per rule mask for the first four byte behind the IP header as defined in swEgressACLIpRuleUserDefine object.
VLA swEgressACLIpRuleVID	1.3.6.1.4.1.171.12.89.3.2.1.22	VlanIdOrNone	read-create	Specifies the VLAN-based rule. There are two conditions: 1. this rule will apply to all the ports; 2. packets must belong to this VLAN. This object and swEgressACLIpRulePortGroup,swEgressACLIpRulePort cannot be set together. When you set swEgressACLIpRulePortGroup or swEgressACLIpRulePort , the value of this object will change to 0 automatically. This object cannot be set 0.
INT swEgressACLIpRulePort	1.3.6.1.4.1.171.12.89.3.2.1.23	INTEGER	read-create	Specifies that the access rule will only apply to the port. This object and swEgressACLIpRuleVID,swEgressACLIpRulePortGroup can not be set together.When you set swEgressACLIpRuleVID or swEgressACLIpRulePortGroup, the value of this object will change to 0 automatically. This object can not be set to 0. A value of 0 indicates that this object is not active.
INT swEgressACLIpRulePortGroup	1.3.6.1.4.1.171.12.89.3.2.1.24	INTEGER	read-create	Specifies that the access rule will only apply to port(s)which belong to this port group. This object and swEgressACLIpRuleVID,swEgressACLIpRulePort can not be set together. When you set swEgressACLIpRuleVID or swEgressACLIpRulePort , the value of this object will change to 0 automatically. Note:The range of this object is (0..N).The value N means the max number.It is determined by the project itself. A value of 0 indicates that this object is not active.
INT swEgressACLIpRulePermit	1.3.6.1.4.1.171.12.89.3.2.1.25	INTEGER	read-create	This object indicates if the result of the packet examination is 'permit' or 'deny'. The default is 'permit'. deny - Specifies that packets matching the access profile are not permitted to be forwarded by the switch and will be filtered. permit - Specifies that packets matching the access profile are permitted to be forwarded by the switch.
INT swEgressACLIpRuleEnableReplacePriority	1.3.6.1.4.1.171.12.89.3.2.1.26	INTEGER	read-create	Specifies whether the packets that match the access profile will change the 802.1p priority tag field by the switch or not.
INT swEgressACLIpRuleReplacePriority	1.3.6.1.4.1.171.12.89.3.2.1.27	INTEGER	read-create	Specifies the priority will change in packets while the swEgressACLIpRuleEnablePriority is enabled.A value of -1 indicates that this object is not active.
INT swEgressACLIpRuleEnableReplaceDscp	1.3.6.1.4.1.171.12.89.3.2.1.28	INTEGER	read-create	Specifies if the switch will change priorities of packets that match the access profile DSCP field or not.
INT swEgressACLIpRuleReplaceDscp	1.3.6.1.4.1.171.12.89.3.2.1.29	INTEGER	read-create	Specifies a value to be written to the DSCP field of an outgoing packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. A value of -1 indicates that this object is not active.
STR swEgressAclIpRuleTimeRangeName	1.3.6.1.4.1.171.12.89.3.2.1.30	DisplayString	read-create	Specifies a name of a time-range associated with a specific egress ACL entry. The time-range name must first be created before being associated with the access rule. If this name is an empty string, the time-range profile will no longer be associated with the access rule. When a rule is de-associated with a time range, the access rule will be enabled all the time.
swEgressACLIpv6RuleTable	1.3.6.1.4.1.171.12.89.3.3		not-accessible	This table contains the IPv6 egress ACL rule information.
swEgressACLIpv6RuleEntry	1.3.6.1.4.1.171.12.89.3.3.1		not-accessible	A list of information about egress ACL rules regarding the IPv6 part of each packet.
INT swEgressACLIpv6RuleProfileID	1.3.6.1.4.1.171.12.89.3.3.1.1	INTEGER	not-accessible	The ID of the egress ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device.
INT swEgressACLIpv6RuleAccessID	1.3.6.1.4.1.171.12.89.3.3.1.2	INTEGER	not-accessible	The ID of the the egress ACL rule entry relates to the swEgressACLEtherRuleProfileID. When row creation is set to 0, this indicates the access ID will be assigned automatically. When set from 1 to 65535, an access ID will be created for the rule.
ROW swEgressACLIpv6RuleRowStatus	1.3.6.1.4.1.171.12.89.3.3.1.3	RowStatus	read-create	This object indicates the status of this entry.
INT swEgressACLIpv6RuleClass	1.3.6.1.4.1.171.12.89.3.3.1.4	INTEGER	read-create	Specifies that the rule applies to the IPv6 class field. A value of -1 indicates that this object is not active.
ADR swEgressACLIpv6RuleSrcIpv6Addr	1.3.6.1.4.1.171.12.89.3.3.1.5	Ipv6Address	read-create	Specifies that the rule applies to the source IPv6 address.
ADR swEgressACLIpv6RuleMaskSrcIpv6Addr	1.3.6.1.4.1.171.12.89.3.3.1.6	Ipv6Address	read-create	Specifies that the per rule mask of swEgressACLIpv6RuleSrcIpv6Addr. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
ADR swEgressACLIpv6RuleDstIpv6Addr	1.3.6.1.4.1.171.12.89.3.3.1.7	Ipv6Address	read-create	Specifies that the rule applies to the destination IPv6 address.
ADR swEgressACLIpv6RuleMaskDstIpv6Addr	1.3.6.1.4.1.171.12.89.3.3.1.8	Ipv6Address	read-create	Specifies that the rule applies to the destination IPv6 address.
INT swEgressACLIpv6RuleProtocol	1.3.6.1.4.1.171.12.89.3.3.1.9	INTEGER	read-create	Specifies the IPv6 protocol.
INT swEgressACLIpv6RuleType	1.3.6.1.4.1.171.12.89.3.3.1.10	INTEGER	read-create	Specifies that the rule applies to the value of ICMP type traffic. A value of -1 denotes that this object is not active.
INT swEgressACLIpv6RuleCode	1.3.6.1.4.1.171.12.89.3.3.1.11	INTEGER	read-create	Specifies that the rule applies to the value of ICMP code traffic. A value of -1 denotes that this object is not active.
INT swEgressACLIpv6RuleSrcPort	1.3.6.1.4.1.171.12.89.3.3.1.12	INTEGER	read-create	Specifies that the rule applies to the range of the TCP/UDP source ports. A value of -1 indicates that this object is not active.
OCT swEgressACLIpv6RuleMaskSrcPort	1.3.6.1.4.1.171.12.89.3.3.1.13	OCTET STRING	read-create	Specifies that the per rule mask of swEgressACLIpv6RuleSrcPort. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
INT swEgressACLIpv6RuleDstPort	1.3.6.1.4.1.171.12.89.3.3.1.14	INTEGER	read-create	Specifies the TCP/UDP destination port range. A value of -1 indicates that this object is not active.
OCT swEgressACLIpv6RuleMaskDstPort	1.3.6.1.4.1.171.12.89.3.3.1.15	OCTET STRING	read-create	Specifies the per rule mask of swEgressACLIpv6RuleDstPort. The value of this object when not in use is the corresponding mask in the profile mask. Once the value of this object is modified, the per rule mask will take effect. This object is writeable only once.
VLA swEgressACLIpv6RuleVID	1.3.6.1.4.1.171.12.89.3.3.1.16	VlanIdOrNone	read-create	Specifies this rule only applies to the specified VLAN. There are two conditions: 1.only the portlist that belongs to this VLAN will be included; 2.packets must belong to this VLAN. This object and swEgressACLIpv6RulePortGroup,swEgressACLIpv6RulePort cannot be set together. When you set swEgressACLIpv6RulePortGroup or swEgressACLIpv6RulePort, the value of this object will change to 0 automatically. The object cannot be set 0.
INT swEgressACLIpv6RulePort	1.3.6.1.4.1.171.12.89.3.3.1.17	INTEGER	read-create	Specifies that the access rule will only apply to the port. This object and swEgressACLIpv6RuleVID,swEgressACLIpv6RulePortGroup can not be set together.When you set swEgressACLIpv6RuleVID or swEgressACLIpv6RulePortGroup, the value of this object will change to 0 automatically. This object can not be set to 0. A value of 0 indicates that this object is not active.
INT swEgressACLIpv6RulePortGroup	1.3.6.1.4.1.171.12.89.3.3.1.18	INTEGER	read-create	Specifies that the access rule will apply only to port(s)which belong to this port group. This object and swEgressACLIpv6RuleVID,swEgressACLIpv6RulePort can not be set together. When you set swEgressACLIpv6RuleVID or swEgressACLIpv6RulePort, the value of this object will change to 0 automatically. Note:The range of this object is (0..N).The value N means the max number.It is determined by the project itself.A value of 0 indicates that this object is not active.
INT swEgressACLIpv6RulePermit	1.3.6.1.4.1.171.12.89.3.3.1.19	INTEGER	read-create	This object indicates if the result of the packet examination is 'permit' or 'deny'. The default is 'permit'. deny - Specifies that packets matching the access profile are not permitted to be forwarded by the switch and will be filtered. permit - Specifies that packets matching the access profile are permitted to be forwarded by the switch.
INT swEgressACLIpv6RuleEnableReplacePriority	1.3.6.1.4.1.171.12.89.3.3.1.20	INTEGER	read-create	Specifies if the switch will change priorities of packets that match the access profile 802.1p priority tag or not.
INT swEgressACLIpv6RuleReplacePriority	1.3.6.1.4.1.171.12.89.3.3.1.21	INTEGER	read-create	Specifies the priority will change in packets while the swEgressACLIpv6RuleReplacePriority is enabled.A value of -1 indicates that this object is not active.
INT swEgressACLIpv6RuleEnableReplaceDscp	1.3.6.1.4.1.171.12.89.3.3.1.22	INTEGER	read-create	Specifies if the switch will change priorities of packets that match the access profile DSCP field or not.
INT swEgressACLIpv6RuleReplaceDscp	1.3.6.1.4.1.171.12.89.3.3.1.23	INTEGER	read-create	Specifies a value to be written to the DSCP field of an outgoing packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. A value of -1 indicates that this object is not active.
STR swEgressAclIpv6RuleTimeRangeName	1.3.6.1.4.1.171.12.89.3.3.1.24	DisplayString	read-create	Specifies a name of a time-range associated with a specific egress ACL entry. The time-range name must first be created before being associated with the access rule. If this name is an empty string, the time-range profile will no longer be associated with the access rule. When a rule is de-associated with a time range, the access rule will be enabled all the time.
swEgressACLCounterTable	1.3.6.1.4.1.171.12.89.3.4		not-accessible	This table maintains counter information associated with a specific rule in the egress ACL rule table. Please refer to the swEgressACLEtherRuleTable, swEgressACLIpRuleTable, swEgressACLIpv6RuleTable for detailed ACL rule information.
swEgressACLCounterEntry	1.3.6.1.4.1.171.12.89.3.4.1		not-accessible	The entry maintains counter information associated with the egress ACL rule table.
INT swEgressACLCounterProfileID	1.3.6.1.4.1.171.12.89.3.4.1.1	INTEGER	not-accessible	The ID of the egress ACL mask entry, which is unique in the mask list.
INT swEgressACLCounterAccessID	1.3.6.1.4.1.171.12.89.3.4.1.2	INTEGER	not-accessible	The ID of the egress ACL rule entry as related to the swEgressACLCounterProfileID.
INT swEgressACLCounterState	1.3.6.1.4.1.171.12.89.3.4.1.3	INTEGER	read-write	Specifies whether the counter feature will be enabled or disabled. 1. This is optional. The default is 'disabled'. 2. If the rule is not bound with flow-meter, then all packets that match will be counted. If the rule is bound with flow-meter, then the 'counter' will be overridden.
C64 swEgressACLCounterTotalCounterEx	1.3.6.1.4.1.171.12.89.3.4.1.4	Counter64	read-only	The number of matched packets.
C64 swEgressACLCounterGreenCounter	1.3.6.1.4.1.171.12.89.3.4.1.5	Counter64	read-only	The number of matched green packets.
C64 swEgressACLCounterYellowCounter	1.3.6.1.4.1.171.12.89.3.4.1.6	Counter64	read-only	The number of matched yellow packets.
C64 swEgressACLCounterRedCounter	1.3.6.1.4.1.171.12.89.3.4.1.7	Counter64	read-only	The number of matched red packets.
swEgressAclMeteringMgmt	1.3.6.1.4.1.171.12.89.4
swEgressAclMeterTable	1.3.6.1.4.1.171.12.89.4.1		not-accessible	This table is used to configure the flow-based metering function. The access rule must first be created before the parameters of this function can be applied. Users may set the preferred bandwidth for this rule, in Kbps; once the bandwidth has been exceeded, overflow packets will be either dropped or set for a drop precedence, depending on user configuration.
swEgressAclMeterEntry	1.3.6.1.4.1.171.12.89.4.1.1		not-accessible	This entry displays parameters and configurations set for the flow metering function.
INT swEgressAclMeterProfileID	1.3.6.1.4.1.171.12.89.4.1.1.1	INTEGER	not-accessible	The ID of the ACL mask entry is unique in the mask list. The maximum value of this object depends on the device.
INT swEgressAclMeterAccessID	1.3.6.1.4.1.171.12.89.4.1.1.2	INTEGER	not-accessible	The ID of the egress ACL rule entry as related to the swEgressAclMeterProfileID.
ROW swEgressAclMeterRowStatus	1.3.6.1.4.1.171.12.89.4.1.1.3	RowStatus	read-create	This object indicates the status of this entry.
INT swEgressAclMeterMode	1.3.6.1.4.1.171.12.89.4.1.1.4	INTEGER	read-create	tr-tcm: two rate three color mode; sr-tcm: single rate three color mode;
INT swEgressAclMeterTrtcmCir	1.3.6.1.4.1.171.12.89.4.1.1.5	INTEGER	read-create	Specifies the 'committed information rate' of 'two rate three color mode'. The unit is Kbps.A value of -1 indicates that this object is not active.
INT swEgressAclMeterTrtcmCbs	1.3.6.1.4.1.171.12.89.4.1.1.6	INTEGER	read-create	Specifies the 'committed burst size' of 'two rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1Kbytes. 2. This parameter is an optional parameter. The default value is 4kbytes. Note:The set value range is 0..N. The value N is determined by project. A value of -1 indicates that this object is not active.
INT swEgressAclMeterTrtcmPir	1.3.6.1.4.1.171.12.89.4.1.1.7	INTEGER	read-create	Specifies the 'Peak Information Rate' of 'two rate three color mode'. The unit is Kbps.A value of -1 indicates that this object is not active.
INT swEgressAclMeterTrtcmPbs	1.3.6.1.4.1.171.12.89.4.1.1.8	INTEGER	read-create	Specifies the 'peak burst size' of 'two rate three color mode'. 1. The unit is Kbytes. That is to say, 1 means 1kbytes. 2. This parameter is an optional parameter. The default value is 4kbytes. Note:The set value range is 0..N.The value N is determined by project. A value of -1 indicates that this object is not active.
INT swEgressAclMeterTrtcmColorMode	1.3.6.1.4.1.171.12.89.4.1.1.9	INTEGER	read-create	Specifies the meter mode. The default is color-blind mode. The final color of the packet is determined by the initial color of the packet and the metering result.
INT swEgressAclMeterTrtcmConformState	1.3.6.1.4.1.171.12.89.4.1.1.10	INTEGER	read-create	Specifies the action state when packet is in 'green color'. permit: permit the packet. replace-dscp: change the DSCP value of packet.
INT swEgressAclMeterTrtcmConformReplaceDscp	1.3.6.1.4.1.171.12.89.4.1.1.11	INTEGER	read-create	Specifies the DSCP value of the packet when the packet is in 'green color'. A value of -1 indicates that this object is not active.
INT swEgressAclMeterTrtcmConformCounterState	1.3.6.1.4.1.171.12.89.4.1.1.12	INTEGER	read-create	Specifies the counter state when the packet is in 'green color'. 1. This is optional. The default is 'disabled'. 2. The resource may be limited so that the counter cannot be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
INT swEgressAclMeterTrtcmExceedState	1.3.6.1.4.1.171.12.89.4.1.1.13	INTEGER	read-create	Specifies the action state when packet is in 'yellow color'. permit: permit the packet. replace-dscp: change the DSCP value of the packet. drop: drop the packet.
INT swEgressAclMeterTrtcmExceedReplaceDscp	1.3.6.1.4.1.171.12.89.4.1.1.14	INTEGER	read-create	Specifies the DSCP value of packet when packet is in 'yellow color'. A value of -1 indicates that this object is not active.
INT swEgressAclMeterTrtcmExceedCounterState	1.3.6.1.4.1.171.12.89.4.1.1.15	INTEGER	read-create	Specifies the counter state when packet is in 'yellow color'. 1. This is optional. The default is 'disabled'. 2. The resource may be limited so that the counter cannot be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
INT swEgressAclMeterTrtcmViolateState	1.3.6.1.4.1.171.12.89.4.1.1.16	INTEGER	read-create	Specifies the action state when packet is in 'red color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet.
INT swEgressAclMeterTrtcmViolateReplaceDscp	1.3.6.1.4.1.171.12.89.4.1.1.17	INTEGER	read-create	Specifies the DSCP value of the packet when packet is in 'red color'. A value of -1 indicates that this object is not active.
INT swEgressAclMeterTrtcmViolateCounterState	1.3.6.1.4.1.171.12.89.4.1.1.18	INTEGER	read-create	Specifies the counter state when packet is in 'red color'. 1. This is optional. The default is 'disabled'. 2. The resource may be limited so that the counter cannot be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
INT swEgressAclMeterSrtcmCir	1.3.6.1.4.1.171.12.89.4.1.1.19	INTEGER	read-create	Specifies the 'committed information rate' of 'single rate three color mode'. The unit is Kbps. A value of -1 indicates that this object is not active
INT swEgressAclMeterSrtcmCbs	1.3.6.1.4.1.171.12.89.4.1.1.20	INTEGER	read-create	Specifies the 'committed burst size' of 'single rate three color mode'. The unit is Kbytes. That is to say, 1 means 1Kbytes. The set value range is 0..N.The value N is determined by project. A value of -1 indicates that this object is not active.
INT swEgressAclMeterSrtcmEbs	1.3.6.1.4.1.171.12.89.4.1.1.21	INTEGER	read-create	Specifies the 'Excess burst size' of 'single rate three color mode'. The unit is Kbytes. That is to say, 1 means 1kbytes. The set value range is 0..N.The value N is determined by project. A value of -1 indicates that this object is not active.
INT swEgressAclMeterSrtcmColorMode	1.3.6.1.4.1.171.12.89.4.1.1.22	INTEGER	read-create	Specifies the meter mode. The default is color-blind mode. The final color of packet is determined by the initial color of the packet and the metering result.
INT swEgressAclMeterSrtcmConformState	1.3.6.1.4.1.171.12.89.4.1.1.23	INTEGER	read-create	Specifies the action state when the packet is in 'green color'. permit: permit the packet. replace-dscp: change the DSCP value of packet.
INT swEgressAclMeterSrtcmConformReplaceDscp	1.3.6.1.4.1.171.12.89.4.1.1.24	INTEGER	read-create	Specifies the DSCP value of the packet when packet is in 'green color'. A value of -1 indicates that this object is not active.
INT swEgressAclMeterSrtcmConformCounterState	1.3.6.1.4.1.171.12.89.4.1.1.25	INTEGER	read-create	Specifies the counter state when the packet is in 'green color'. 1. This is optional. The default is 'disabled'. 2. The resource may be limited such that counter cannot be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
INT swEgressAclMeterSrtcmExceedState	1.3.6.1.4.1.171.12.89.4.1.1.26	INTEGER	read-create	Specifies the action state when the packet is in 'yellow color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet.
INT swEgressAclMeterSrtcmExceedReplaceDscp	1.3.6.1.4.1.171.12.89.4.1.1.27	INTEGER	read-create	Specifies the DSCP value of the packet when packet is in 'yellow color'. A value of -1 indicates that this object is not active.
INT swEgressAclMeterSrtcmExceedCounterState	1.3.6.1.4.1.171.12.89.4.1.1.28	INTEGER	read-create	Specifies the counter state when the packet is in 'yellow color'. 1. This is optional. The default is 'disabled'. 2. The resource may be limited such that counter cannot be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
INT swEgressAclMeterSrtcmViolateState	1.3.6.1.4.1.171.12.89.4.1.1.29	INTEGER	read-create	Specifies the action state when the packet is in 'red color'. permit: permit the packet. replace-dscp: change the DSCP value of packet. drop: drop the packet.
INT swEgressAclMeterSrtcmViolateReplaceDscp	1.3.6.1.4.1.171.12.89.4.1.1.30	INTEGER	read-create	Specifies the DSCP value of the packet when packet is in 'red color'. A value of -1 indicates that this object is not active.
INT swEgressAclMeterSrtcmViolateCounterState	1.3.6.1.4.1.171.12.89.4.1.1.31	INTEGER	read-create	Specifies the counter state when the packet is in 'red color'. 1. This is optional. The default is 'diabled'. 2. The resource may be limited so that the counter cannot be turned on. The limitation is project dependent. 3. counter will be cleared when the function is disabled.
swEgressAclRateTable	1.3.6.1.4.1.171.12.89.4.2		not-accessible	This table is used to configure the single rate two color metering function. The egress access rule must first be created before the parameters of this function can be applied. Users may set the preferred bandwidth for this rule, in Kbps; once the bandwidth has been exceeded, overflow packets will be either dropped or set for a drop precedence, depending on user configuration.
swEgressAclRateEntry	1.3.6.1.4.1.171.12.89.4.2.1		not-accessible	This entry displays parameters and configurations set for the single rate two color function.
INT swEgressAclRateProfileID	1.3.6.1.4.1.171.12.89.4.2.1.1	INTEGER	not-accessible	The ID of the egress ACL mask entry is unique in the mask list. The maximum value of this object depends on the device.
INT swEgressAclRateAccessID	1.3.6.1.4.1.171.12.89.4.2.1.2	INTEGER	not-accessible	The ID of the egress ACL rule entry as related to the swEgressAclRateProfileID.
ROW swEgressAclRateRowStatus	1.3.6.1.4.1.171.12.89.4.2.1.3	RowStatus	read-create	This object indicates the status of this entry.
INT swEgressAclRate	1.3.6.1.4.1.171.12.89.4.2.1.4	INTEGER	read-create	Specifies the committed bandwidth in Kbps for the flow. A value of -1 indicates that this object is not active. NOTE: Users must set the swEgressAclRateActionForRateExceed object to activate this entry.
INT swEgressAclBurstSize	1.3.6.1.4.1.171.12.89.4.2.1.5	INTEGER	read-create	This specifies the burst size for the single rate two color mode. The unit is Kbytes. That is to say, 1 means 1kbytes. The set value range is 0..N, the value N is determined by project. A value of -1 indicates that this object is not active. This parameter is an optional parameter. The default value is 4kbytes.
INT swEgressAclRateActionForRateExceed	1.3.6.1.4.1.171.12.89.4.2.1.6	INTEGER	read-create	Specifies the action to take for those packets exceeding the committed rate. drop-packet: drop the packet. replace-dscp: change the DSCP value of the packet. NOTE: Users must set the swEgressAclRate to activate this entry.
INT swEgressAclRateRemarkDscp	1.3.6.1.4.1.171.12.89.4.2.1.7	INTEGER	read-create	Mark the packet with a specified DSCP. It can be set when swEgressAclRateActionForRateExceed sets remark-dscp(3). A value of -1 indicates that this object is not active.
INT swEgressAclMeteringNumOfEntryInUse	1.3.6.1.4.1.171.12.89.4.3	INTEGER	read-only	Used to display total entries of the flow metering.

RFC description

Manages egress Access Control List configuration and statistics on network switches for outgoing traffic filtering.

Start monitoring D-Link managed switch (egress ACL) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EGRESSACL-MIB