HH3C-ACL-MIB

All MIBs › HH3C-ACL-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2004-09-21

Category: Domain: Security, Vendor: H3C/HH3C

Description: Manages Access Control List (ACL) rules, groups, and statistics on H3C network devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HH3C-ACL-MIB?

HH3C-ACL-MIB is an H3C enterprise MIB for managing Access Control List (ACL) rules, groups, and statistics on H3C switches and routers. Based on its name and short description it exposes ACL rule/group configuration objects and match/hit counters used to filter and track traffic. In monitoring terms it would primarily be used to verify configuration state and traffic-filtering statistics rather than hardware health, since ACLs are a software security feature rather than a physical component. It is vendor-specific to H3C and complements, rather than replaces, the IETF standard interface and traffic-filtering objects typically used alongside it. It is deployed on H3C Comware switches/routers in enterprise networks where administrators need to verify ACL policy enforcement and audit matched security-rule traffic. No concrete object names were provided in the source data for this module, so specifics beyond the stated purpose cannot be confirmed, though administrators can still perform an HH3C-ACL-MIB download to inspect the definitions directly.

IPNetwork Monitor allows you to monitor SNMP objects defined in HH3C-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C switches and routers

Monitoring Examples

No sample objects were provided for this module, so a concrete polling scenario naming real table/object names cannot be constructed. Based on the module's stated purpose, an admin would typically poll ACL rule and group tables for match/hit counters to confirm a security policy is being enforced as expected; this should be treated as inferred rather than verified against the actual MIB structure.

What Can Be Monitored

ACL rule configuration state
ACL group membership
ACL rule match/hit counters

Imported Objects

From HH3C-OID-MIB

hh3cCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hh3cAclBasicCount OID:

Select an H3C Comware switch/router (Access Control Lists) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hh3cAclBasicCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The count of matched by basic rule. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hh3cAcl	1.3.6.1.4.1.25506.2.8			Description
hh3cAclMibObjects	1.3.6.1.4.1.25506.2.8.1
INT hh3cAclMode	1.3.6.1.4.1.25506.2.8.1.1	INTEGER	read-write	Access-list mode.
hh3cAclNumGroupTable	1.3.6.1.4.1.25506.2.8.1.2		not-accessible	Configure the match-order of number-acl group.
hh3cAclNumGroupEntry	1.3.6.1.4.1.25506.2.8.1.2.1		not-accessible	Define the index of hh3cAclNumGroupTable.
I32 hh3cAclNumGroupAclNum	1.3.6.1.4.1.25506.2.8.1.2.1.1	Integer32	not-accessible	The index of number-acl group Interface type:1000..1999 Basic type:2000..2999 Advance type:3000..3999 Link type:4000..4999 User type:5000..5999
INT hh3cAclNumGroupMatchOrder	1.3.6.1.4.1.25506.2.8.1.2.1.2	INTEGER	read-create	The match-order of number-acl group.
I32 hh3cAclNumGroupSubitemNum	1.3.6.1.4.1.25506.2.8.1.2.1.3	Integer32	read-only	The number of number-acl group's node.
OCT hh3cAclNumGroupDescription	1.3.6.1.4.1.25506.2.8.1.2.1.4	OCTET STRING	read-write	The description of this acl group.
INT hh3cAclNumGroupCountClear	1.3.6.1.4.1.25506.2.8.1.2.1.5	INTEGER	read-create	Reset the value of rules' counter, which belong to this group.
ROW hh3cAclNumGroupRowStatus	1.3.6.1.4.1.25506.2.8.1.2.1.6	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hh3cAclNameGroupTable	1.3.6.1.4.1.25506.2.8.1.3		not-accessible	Create acl-group that identified by name.
hh3cAclNameGroupEntry	1.3.6.1.4.1.25506.2.8.1.3.1		not-accessible	Define the index of hh3cAclNameGroupTable.
I32 hh3cAclNameGroupIndex	1.3.6.1.4.1.25506.2.8.1.3.1.1	Integer32	not-accessible	The index of name-acl group.
OCT hh3cAclNameGroupCreateName	1.3.6.1.4.1.25506.2.8.1.3.1.2	OCTET STRING	read-create	The name of name-acl group.
INT hh3cAclNameGroupTypes	1.3.6.1.4.1.25506.2.8.1.3.1.3	INTEGER	read-create	The type of name-acl group.
INT hh3cAclNameGroupMatchOrder	1.3.6.1.4.1.25506.2.8.1.3.1.4	INTEGER	read-create	The match-order of name-acl group.
I32 hh3cAclNameGroupSubitemNum	1.3.6.1.4.1.25506.2.8.1.3.1.5	Integer32	read-only	The number of name-acl group's node.
ROW hh3cAclNameGroupRowStatus	1.3.6.1.4.1.25506.2.8.1.3.1.6	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hh3cAclBasicRuleTable	1.3.6.1.4.1.25506.2.8.1.4		not-accessible	Configure the rule for basic acl group.
hh3cAclBasicRuleEntry	1.3.6.1.4.1.25506.2.8.1.4.1		not-accessible	Define the index of hh3cAclBasicRuleTable.
I32 hh3cAclBasicAclNum	1.3.6.1.4.1.25506.2.8.1.4.1.1	Integer32	not-accessible	The index of basic acl group.
I32 hh3cAclBasicSubitem	1.3.6.1.4.1.25506.2.8.1.4.1.2	Integer32	not-accessible	The subindex of basic acl group.
INT hh3cAclBasicAct	1.3.6.1.4.1.25506.2.8.1.4.1.3	INTEGER	read-create	The action of basic acl rule.
IP hh3cAclBasicSrcIp	1.3.6.1.4.1.25506.2.8.1.4.1.4	IpAddress	read-create	Source IP-address of basic acl rule.
IP hh3cAclBasicSrcWild	1.3.6.1.4.1.25506.2.8.1.4.1.5	IpAddress	read-create	Source IP-address wild of basic acl rule.
OCT hh3cAclBasicTimeRangeName	1.3.6.1.4.1.25506.2.8.1.4.1.6	OCTET STRING	read-create	The Time-range of basic acl rule.
T/F hh3cAclBasicFragments	1.3.6.1.4.1.25506.2.8.1.4.1.7	TruthValue	read-create	The flag of matching fragmented packet.
T/F hh3cAclBasicLog	1.3.6.1.4.1.25506.2.8.1.4.1.8	TruthValue	read-create	The flag of log.
T/F hh3cAclBasicEnable	1.3.6.1.4.1.25506.2.8.1.4.1.9	TruthValue	read-only	The rule is active or not. true : active false : inactive
C32 hh3cAclBasicCountEx	1.3.6.1.4.1.25506.2.8.1.4.1.10	Counter32	read-only	The count of matched by basic rule.
INT hh3cAclBasicCountClear	1.3.6.1.4.1.25506.2.8.1.4.1.11	INTEGER	read-create	Reset the value of counter.
ROW hh3cAclBasicRowStatus	1.3.6.1.4.1.25506.2.8.1.4.1.12	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hh3cAclAdvancedRuleTable	1.3.6.1.4.1.25506.2.8.1.5		not-accessible	Configure the rule for advanced acl group.
hh3cAclAdvancedRuleEntry	1.3.6.1.4.1.25506.2.8.1.5.1		not-accessible	Define the index of hh3cAclAdvancedRuleTable.
I32 hh3cAclAdvancedAclNum	1.3.6.1.4.1.25506.2.8.1.5.1.1	Integer32	not-accessible	The index of advanced acl group.
I32 hh3cAclAdvancedSubitem	1.3.6.1.4.1.25506.2.8.1.5.1.2	Integer32	not-accessible	The subindex of advanced acl group.
INT hh3cAclAdvancedAct	1.3.6.1.4.1.25506.2.8.1.5.1.3	INTEGER	read-create	The action of Advance acl rule.
I32 hh3cAclAdvancedProtocol	1.3.6.1.4.1.25506.2.8.1.5.1.4	Integer32	read-create	The protocol-type of advanced acl group. Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
IP hh3cAclAdvancedSrcIp	1.3.6.1.4.1.25506.2.8.1.5.1.5	IpAddress	read-create	Source IP-address of advanced acl group.
IP hh3cAclAdvancedSrcWild	1.3.6.1.4.1.25506.2.8.1.5.1.6	IpAddress	read-create	Source IP-address wild of advanced acl group.
INT hh3cAclAdvancedSrcOp	1.3.6.1.4.1.25506.2.8.1.5.1.7	INTEGER	read-create	The source IP-address's operator of advanced acl group.
I32 hh3cAclAdvancedSrcPort1	1.3.6.1.4.1.25506.2.8.1.5.1.8	Integer32	read-create	The fourth layer source port1.
I32 hh3cAclAdvancedSrcPort2	1.3.6.1.4.1.25506.2.8.1.5.1.9	Integer32	read-create	The fourth layer source port2.
IP hh3cAclAdvancedDestIp	1.3.6.1.4.1.25506.2.8.1.5.1.10	IpAddress	read-create	Destination IP-address of advanced acl group.
IP hh3cAclAdvancedDestWild	1.3.6.1.4.1.25506.2.8.1.5.1.11	IpAddress	read-create	Destination IP-address wild of advanced acl group.
INT hh3cAclAdvancedDestOp	1.3.6.1.4.1.25506.2.8.1.5.1.12	INTEGER	read-create	The destination IP-address's operator of advanced acl group.
I32 hh3cAclAdvancedDestPort1	1.3.6.1.4.1.25506.2.8.1.5.1.13	Integer32	read-create	The fourth layer destination port1.
I32 hh3cAclAdvancedDestPort2	1.3.6.1.4.1.25506.2.8.1.5.1.14	Integer32	read-create	The fourth layer destination port2.
I32 hh3cAclAdvancedPrecedence	1.3.6.1.4.1.25506.2.8.1.5.1.15	Integer32	read-create	The value of IP-packet's precedence. Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7)
I32 hh3cAclAdvancedTos	1.3.6.1.4.1.25506.2.8.1.5.1.16	Integer32	read-create	The value of IP-packet's TOS. Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0)
I32 hh3cAclAdvancedDscp	1.3.6.1.4.1.25506.2.8.1.5.1.17	Integer32	read-create	The value of DSCP. Value of DSCP af11 Specify Assured Forwarding 11 service(10) af12 Specify Assured Forwarding 12 service(12) af13 Specify Assured Forwarding 13 service(14) af21 Specify Assured Forwarding 21 service(18) af22 Specify Assured Forwarding 22 service(20) af23 Specify Assured Forwarding 23 service(22) af31 Specify Assured Forwarding 31 service(26) af32 Specify Assured Forwarding 32 service(28) af33 Specify Assured Forwarding 33 service(30) af41 Specify Assured Forwarding 41 service(34) af42 Specify Assured Forwarding 42 service(36) af43 Specify Assured Forwarding 43 service(38) be Specify Best Effort service(0) cs1 Specify Class Selector 1 service(8) cs2 Specify Class Selector 2 service(16) cs3 Specify Class Selector 3 service(24) cs4 Specify Class Selector 4 service(32) cs5 Specify Class Selector 5 service(40) cs6 Specify Class Selector 6 service(48) cs7 Specify Class Selector 7 service(56) ef Specify Expedited Forwarding service(46)
T/F hh3cAclAdvancedEstablish	1.3.6.1.4.1.25506.2.8.1.5.1.18	TruthValue	read-create	Establish flag.
OCT hh3cAclAdvancedTimeRangeName	1.3.6.1.4.1.25506.2.8.1.5.1.19	OCTET STRING	read-create	The Time-range of advanced acl rule.
I32 hh3cAclAdvancedIcmpType	1.3.6.1.4.1.25506.2.8.1.5.1.20	Integer32	read-create	The type of ICMP packet. INTEGER ICMP type echo Type=8, Code=0 echo-reply Type=0, Code=0 fragmentneed-DFset Type=3, Code=4 host-redirect Type=5, Code=1 host-tos-redirect Type=5, Code=3 host-unreachable Type=3, Code=1 information-reply Type=16, Code=0 information-request Type=15, Code=0 net-redirect Type=5, Code=0 net-tos-redirect Type=5, Code=2 net-unreachable Type=3, Code=0 parameter-problem Type=12, Code=0 port-unreachable Type=3, Code=3 protocol-unreachable Type=3, Code=2 reassembly-timeout Type=11, Code=1 source-quench Type=4, Code=0 source-route-failed Type=3, Code=5 timestamp-reply Type=14, Code=0 timestamp-request Type=13, Code=0 ttl-exceeded Type=11, Code=0
I32 hh3cAclAdvancedIcmpCode	1.3.6.1.4.1.25506.2.8.1.5.1.21	Integer32	read-create	The code of ICMP packet.
T/F hh3cAclAdvancedFragments	1.3.6.1.4.1.25506.2.8.1.5.1.22	TruthValue	read-create	The flag of matching fragmented packet.
T/F hh3cAclAdvancedLog	1.3.6.1.4.1.25506.2.8.1.5.1.23	TruthValue	read-create	The flag of log.
T/F hh3cAclAdvancedEnable	1.3.6.1.4.1.25506.2.8.1.5.1.24	TruthValue	read-only	The rule is active or not. true : active false : inactive
C32 hh3cAclAdvancedCount	1.3.6.1.4.1.25506.2.8.1.5.1.25	Counter32	read-only	The count of matched by advanced rule.
INT hh3cAclAdvancedCountClear	1.3.6.1.4.1.25506.2.8.1.5.1.26	INTEGER	read-create	Reset the value of counter.
ROW hh3cAclAdvancedRowStatus	1.3.6.1.4.1.25506.2.8.1.5.1.27	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hh3cAclIfRuleTable	1.3.6.1.4.1.25506.2.8.1.6		not-accessible	Configure the rule for interface-based acl group.
hh3cAclIfRuleEntry	1.3.6.1.4.1.25506.2.8.1.6.1		not-accessible	Define the index of hh3cAclIfRuleTable.
I32 hh3cAclIfAclNum	1.3.6.1.4.1.25506.2.8.1.6.1.1	Integer32	not-accessible	The index of interface-based acl group.
I32 hh3cAclIfSubitem	1.3.6.1.4.1.25506.2.8.1.6.1.2	Integer32	not-accessible	The subindex of interface-based acl group.
INT hh3cAclIfAct	1.3.6.1.4.1.25506.2.8.1.6.1.3	INTEGER	read-create	The action of interface-based acl group.
I32 hh3cAclIfIndex	1.3.6.1.4.1.25506.2.8.1.6.1.4	Integer32	read-create	The index of interface.
T/F hh3cAclIfAny	1.3.6.1.4.1.25506.2.8.1.6.1.5	TruthValue	read-create	The flag of matching any interface.
OCT hh3cAclIfTimeRangeName	1.3.6.1.4.1.25506.2.8.1.6.1.6	OCTET STRING	read-create	The Time-range of interface-based acl rule.
T/F hh3cAclIfLog	1.3.6.1.4.1.25506.2.8.1.6.1.7	TruthValue	read-create	The flag of log.
T/F hh3cAclIfEnable	1.3.6.1.4.1.25506.2.8.1.6.1.8	TruthValue	read-only	The rule is active or not. true : active false : inactive
C32 hh3cAclIfCount	1.3.6.1.4.1.25506.2.8.1.6.1.9	Counter32	read-only	The count of matched by basic rule.
INT hh3cAclIfCountClear	1.3.6.1.4.1.25506.2.8.1.6.1.10	INTEGER	read-create	Reset the value of the rule's counter.
ROW hh3cAclIfRowStatus	1.3.6.1.4.1.25506.2.8.1.6.1.11	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hh3cAclLinkTable	1.3.6.1.4.1.25506.2.8.1.7		not-accessible	Create link acl.
hh3cAclLinkEntry	1.3.6.1.4.1.25506.2.8.1.7.1		not-accessible	The entry of the link acl table.
I32 hh3cAclLinkAclNum	1.3.6.1.4.1.25506.2.8.1.7.1.1	Integer32	not-accessible	The index of link-based acl group.
I32 hh3cAclLinkSubitem	1.3.6.1.4.1.25506.2.8.1.7.1.2	Integer32	not-accessible	The subindex of link-based acl group.
INT hh3cAclLinkAct	1.3.6.1.4.1.25506.2.8.1.7.1.3	INTEGER	read-create	The action of link-based acl group.
INT hh3cAclLinkProtocol	1.3.6.1.4.1.25506.2.8.1.7.1.4	INTEGER	read-create	The layer 2 protocol-type of link acl rule.
INT hh3cAclLinkFormatType	1.3.6.1.4.1.25506.2.8.1.7.1.5	INTEGER	read-create	Format type of link acl rule.
INT hh3cAclLinkVlanTag	1.3.6.1.4.1.25506.2.8.1.7.1.6	INTEGER	read-create	The flag of vlan tag of link acl rule.
I32 hh3cAclLinkVlanPri	1.3.6.1.4.1.25506.2.8.1.7.1.7	Integer32	read-create	Vlan priority of link acl rule.
I32 hh3cAclLinkSrcVlanId	1.3.6.1.4.1.25506.2.8.1.7.1.8	Integer32	read-create	Source vlan ID of link acl rule.
MAC hh3cAclLinkSrcMac	1.3.6.1.4.1.25506.2.8.1.7.1.9	MacAddress	read-create	Source mac of link acl rule.
MAC hh3cAclLinkSrcMacWild	1.3.6.1.4.1.25506.2.8.1.7.1.10	MacAddress	read-create	Source mac wildzard of link acl rule.
I32 hh3cAclLinkSrcIfIndex	1.3.6.1.4.1.25506.2.8.1.7.1.11	Integer32	read-create	Source IfIndex of link acl rule.
T/F hh3cAclLinkSrcAny	1.3.6.1.4.1.25506.2.8.1.7.1.12	TruthValue	read-create	The flag of matching any source.
I32 hh3cAclLinkDestVlanId	1.3.6.1.4.1.25506.2.8.1.7.1.13	Integer32	read-create	Destination vlan ID of link acl rule.
MAC hh3cAclLinkDestMac	1.3.6.1.4.1.25506.2.8.1.7.1.14	MacAddress	read-create	Destination mac of link acl rule.
MAC hh3cAclLinkDestMacWild	1.3.6.1.4.1.25506.2.8.1.7.1.15	MacAddress	read-create	Destination mac wildzard of link acl rule.
I32 hh3cAclLinkDestIfIndex	1.3.6.1.4.1.25506.2.8.1.7.1.16	Integer32	read-create	Destination IfIndex of link acl rule.
T/F hh3cAclLinkDestAny	1.3.6.1.4.1.25506.2.8.1.7.1.17	TruthValue	read-create	The flag of matching any destination.
OCT hh3cAclLinkTimeRangeName	1.3.6.1.4.1.25506.2.8.1.7.1.18	OCTET STRING	read-create	The Time-range of link-based acl rule.
T/F hh3cAclLinkEnable	1.3.6.1.4.1.25506.2.8.1.7.1.19	TruthValue	read-only	The rule is active or not. true : active false : inactive
ROW hh3cAclLinkRowStatus	1.3.6.1.4.1.25506.2.8.1.7.1.20	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
OCT hh3cAclLinkTypeCode	1.3.6.1.4.1.25506.2.8.1.7.1.21	OCTET STRING	read-create	The type of layer 2 protocol.0x0000...0xffff.
OCT hh3cAclLinkTypeMask	1.3.6.1.4.1.25506.2.8.1.7.1.22	OCTET STRING	read-create	The mask of layer 2 protocol.0x0000...0xffff.
OCT hh3cAclLinkLsapCode	1.3.6.1.4.1.25506.2.8.1.7.1.23	OCTET STRING	read-create	The type of LSAP.0x0000...0xffff.
OCT hh3cAclLinkLsapMask	1.3.6.1.4.1.25506.2.8.1.7.1.24	OCTET STRING	read-create	The mask of LSAP.0x0000...0xffff.
INT hh3cAclLinkL2LabelRangeOp	1.3.6.1.4.1.25506.2.8.1.7.1.25	INTEGER	read-create	Operation symbol of the MPLS label. If the symbol is range(5), the objects hh3cAclLinkL2LabelRangeBegin and hh3cAclLinkL2LabelRangeEnd should have different values indicating a range. Otherwise, only hh3cAclLinkL2LabelRangeBegin counts, object hh3cAclLinkL2LabelRangeEnd is ignored. invalid(0) -- unavailable lt(1) -- less than eq(2) -- equal gt(3) -- great than neq(4) -- not equal range(5) -- a range with two ends included
I32 hh3cAclLinkL2LabelRangeBegin	1.3.6.1.4.1.25506.2.8.1.7.1.26	Integer32	read-create	The beginning of VPLS VC label.
I32 hh3cAclLinkL2LabelRangeEnd	1.3.6.1.4.1.25506.2.8.1.7.1.27	Integer32	read-create	The end of VPLS VC label.
I32 hh3cAclLinkMplsExp	1.3.6.1.4.1.25506.2.8.1.7.1.28	Integer32	read-create	The value of MPLS-packet's Exp.
hh3cAclUserTable	1.3.6.1.4.1.25506.2.8.1.8		not-accessible	Create user acl.
hh3cAclUserEntry	1.3.6.1.4.1.25506.2.8.1.8.1		not-accessible	The entry of user acl table.
I32 hh3cAclUserAclNum	1.3.6.1.4.1.25506.2.8.1.8.1.1	Integer32	not-accessible	The number of the user acl.
I32 hh3cAclUserSubitem	1.3.6.1.4.1.25506.2.8.1.8.1.2	Integer32	not-accessible	The subitem of the user acl.
INT hh3cAclUserAct	1.3.6.1.4.1.25506.2.8.1.8.1.3	INTEGER	read-create	The action of the user acl.
INT hh3cAclUserFormatType	1.3.6.1.4.1.25506.2.8.1.8.1.4	INTEGER	read-create	Format type.
INT hh3cAclUserVlanTag	1.3.6.1.4.1.25506.2.8.1.8.1.5	INTEGER	read-create	Vlan tag exits or not.
OCT hh3cAclUserRuleStr	1.3.6.1.4.1.25506.2.8.1.8.1.6	OCTET STRING	read-create	Rule string.
OCT hh3cAclUserRuleMask	1.3.6.1.4.1.25506.2.8.1.8.1.7	OCTET STRING	read-create	Rule mask.
OCT hh3cAclUserTimeRangeName	1.3.6.1.4.1.25506.2.8.1.8.1.8	OCTET STRING	read-create	The Time-range of the user defined acl.
T/F hh3cAclUserEnable	1.3.6.1.4.1.25506.2.8.1.8.1.9	TruthValue	read-only	The rule is active or not. true : active false : inactive
ROW hh3cAclUserRowStatus	1.3.6.1.4.1.25506.2.8.1.8.1.10	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hh3cAclActiveTable	1.3.6.1.4.1.25506.2.8.1.9		not-accessible	Active acl.
hh3cAclActiveEntry	1.3.6.1.4.1.25506.2.8.1.9.1		not-accessible	The entry of active acl table.
I32 hh3cAclActiveAclIndex	1.3.6.1.4.1.25506.2.8.1.9.1.1	Integer32	not-accessible	Acl index.
I32 hh3cAclActiveIfIndex	1.3.6.1.4.1.25506.2.8.1.9.1.2	Integer32	not-accessible	IfIndex.
I32 hh3cAclActiveVlanID	1.3.6.1.4.1.25506.2.8.1.9.1.3	Integer32	not-accessible	The lower 16 bits is Vlan ID, the higher 16 bits, if not zero, it describes the slot ID of the L3plus board.
INT hh3cAclActiveDirection	1.3.6.1.4.1.25506.2.8.1.9.1.4	INTEGER	not-accessible	Direction.
I32 hh3cAclActiveUserAclNum	1.3.6.1.4.1.25506.2.8.1.9.1.5	Integer32	read-create	The number of the user acl.
I32 hh3cAclActiveUserAclSubitem	1.3.6.1.4.1.25506.2.8.1.9.1.6	Integer32	read-create	The subitem of the user acl.
I32 hh3cAclActiveIpAclNum	1.3.6.1.4.1.25506.2.8.1.9.1.7	Integer32	read-create	The number of the IP acl.
I32 hh3cAclActiveIpAclSubitem	1.3.6.1.4.1.25506.2.8.1.9.1.8	Integer32	read-create	The subitem of the IP acl.
I32 hh3cAclActiveLinkAclNum	1.3.6.1.4.1.25506.2.8.1.9.1.9	Integer32	read-create	The num of the link acl.
I32 hh3cAclActiveLinkAclSubitem	1.3.6.1.4.1.25506.2.8.1.9.1.10	Integer32	read-create	The subitem of the link acl.
T/F hh3cAclActiveRuntime	1.3.6.1.4.1.25506.2.8.1.9.1.11	TruthValue	read-only	Is run or not.
ROW hh3cAclActiveRowStatus	1.3.6.1.4.1.25506.2.8.1.9.1.12	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hh3cAclIDSTable	1.3.6.1.4.1.25506.2.8.1.10		not-accessible	Configure the rule for IDS.
hh3cAclIDSEntry	1.3.6.1.4.1.25506.2.8.1.10.1		not-accessible	The entry of acl ids table.
OCT hh3cAclIDSName	1.3.6.1.4.1.25506.2.8.1.10.1.1	OCTET STRING	not-accessible	The name index of the IDS table.
MAC hh3cAclIDSSrcMac	1.3.6.1.4.1.25506.2.8.1.10.1.2	MacAddress	read-create	Source mac of IDS acl rule.
MAC hh3cAclIDSDestMac	1.3.6.1.4.1.25506.2.8.1.10.1.3	MacAddress	read-create	Destination mac of IDS acl rule.
IP hh3cAclIDSSrcIp	1.3.6.1.4.1.25506.2.8.1.10.1.4	IpAddress	read-create	Source IP-address of IDS acl rule.
IP hh3cAclIDSSrcWild	1.3.6.1.4.1.25506.2.8.1.10.1.5	IpAddress	read-create	Source IP-address wild of IDS acl rule.
IP hh3cAclIDSDestIp	1.3.6.1.4.1.25506.2.8.1.10.1.6	IpAddress	read-create	Destination IP-address of IDS acl rule.
IP hh3cAclIDSDestWild	1.3.6.1.4.1.25506.2.8.1.10.1.7	IpAddress	read-create	Destination IP-address wild of IDS acl rule.
I32 hh3cAclIDSSrcPort	1.3.6.1.4.1.25506.2.8.1.10.1.8	Integer32	read-create	The fourth layer source port.
I32 hh3cAclIDSDestPort	1.3.6.1.4.1.25506.2.8.1.10.1.9	Integer32	read-create	The fourth layer destination port.
I32 hh3cAclIDSProtocol	1.3.6.1.4.1.25506.2.8.1.10.1.10	Integer32	read-create	The protocol-type of advanced acl group. Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
U32 hh3cAclIDSDenyTime	1.3.6.1.4.1.25506.2.8.1.10.1.11	Unsigned32	read-create	The maximum number of seconds which deny for this acl rule.
INT hh3cAclIDSAct	1.3.6.1.4.1.25506.2.8.1.10.1.12	INTEGER	read-create	The action of IDS acl rule.
ROW hh3cAclIDSRowStatus	1.3.6.1.4.1.25506.2.8.1.10.1.13	RowStatus	read-create	RowStatus, now supports three states: CreateAndGo, Active, and Destroy.
hh3cAclMib2Objects	1.3.6.1.4.1.25506.2.8.2
hh3cAclMib2GlobalGroup	1.3.6.1.4.1.25506.2.8.2.1
hh3cAclMib2NodesGroup	1.3.6.1.4.1.25506.2.8.2.1.1
INT hh3cAclMib2Mode	1.3.6.1.4.1.25506.2.8.2.1.1.1	INTEGER	read-write	The applying mode of ACL.
I32 hh3cAclMib2Version	1.3.6.1.4.1.25506.2.8.2.1.1.2	Integer32	read-only	The version of this file. The output value has the format of 'xx'or 'xxx'. For example: 10 means 1.0; 125 means 12.5.
BIT hh3cAclMib2ObjectsCapabilities	1.3.6.1.4.1.25506.2.8.2.1.1.3	Bits	read-only	The objects of hh3cAclMib2Objects.
hh3cAclMib2CapabilityTable	1.3.6.1.4.1.25506.2.8.2.1.2		not-accessible	The capability of mib2.
hh3cAclMib2CapabilityEntry	1.3.6.1.4.1.25506.2.8.2.1.2.1		not-accessible	The information of Capability of mib2.
INT hh3cAclMib2EntityType	1.3.6.1.4.1.25506.2.8.2.1.2.1.1	INTEGER	not-accessible	The type of entity . system: The entity is systemic level. interface: The entity is interface level.
I32 hh3cAclMib2EntityIndex	1.3.6.1.4.1.25506.2.8.2.1.2.1.2	Integer32	not-accessible	The index of entity. If hh3cAclMib2EntityType is system, the value of this object is 0. If hh3cAclMib2EntityType is interface, the value of this object is equal to 'ifIndex'.
INT hh3cAclMib2ModuleIndex	1.3.6.1.4.1.25506.2.8.2.1.2.1.3	INTEGER	not-accessible	The module index of ACL.
I32 hh3cAclMib2CharacteristicsIndex	1.3.6.1.4.1.25506.2.8.2.1.2.1.4	Integer32	not-accessible	The characteristics index of mib2. See DESCRIPTION of hh3cAclMib2CharacteristicsValue to get detail information about the value of this object.
OCT hh3cAclMib2CharacteristicsDesc	1.3.6.1.4.1.25506.2.8.2.1.2.1.5	OCTET STRING	read-only	The description of characteristics.
U32 hh3cAclMib2CharacteristicsValue	1.3.6.1.4.1.25506.2.8.2.1.2.1.6	Unsigned32	read-only	The value of capability of this object. TypeOfRuleStringValue : notSupport(0) and the length of RuleString. TypeOfCodeValue : OnlyOneNotSupport(0), MoreThanOneNotSupport(1) If hh3cAclMib2CharacteristicsValue is 'moreThanOneNotSupport', hh3cAclMib2CharacteristicsDesc must be used to depict which protocols are not supported. The output value of hh3cAclMib2CharacteristicsDesc has the format of 'a,b'. For example, 'ip,rarp'. layer3 Module: Index Characteristics value 1 SourceIPAddress notSupport(0) 2 DestinationIPAddress notSupport(0) 3 SourcePort notSupport(0) 4 DestinationPort notSupport(0) 5 IPPrecedence notSupport(0) 6 TOS notSupport(0) 7 DSCP notSupport(0) 8 TCPFlag notSupport(0) 9 FragmentFlag notSupport(0) 10 Log notSupport(0) 11 RuleMatchCounter notSupport(0) 12 ResetRuleMatchCounter notSupport(0) 13 VPN notSupport(0) 15 protocol notSupport(0) 16 AddressFlag notSupport(0) layer2 Module: Index Characteristics value 1 ProtocolType TypeOfCodeValue 2 SourceMAC notSupport(0) 3 DestinationMAC notSupport(0) 4 LSAPType TypeOfCodeValue 5 CoS notSupport(0) UserDefined Module: Index Characteristics value 1 UserDefaultOffset TypeOfRuleStringValue 2 UserL2RuleOffset TypeOfRuleStringValue 3 UserMplsOffset TypeOfRuleStringValue 4 UserIPv4Offset TypeOfRuleStringValue 5 UserIPv6Offset TypeOfRuleStringValue 6 UserL4Offset TypeOfRuleStringValue 7 UserL5Offset TypeOfRuleStringValue
hh3cAclNumberGroupTable	1.3.6.1.4.1.25506.2.8.2.1.3		not-accessible	A table of the number acl group information.
hh3cAclNumberGroupEntry	1.3.6.1.4.1.25506.2.8.2.1.3.1		not-accessible	Number acl group information entry.
INT hh3cAclNumberGroupType	1.3.6.1.4.1.25506.2.8.2.1.3.1.1	INTEGER	not-accessible	The type of number group. Basic ACL and Advanced ACL support ipv4 and ipv6. The range of Basic ACL is from 2000 to 2999. The range of Advanced ACL is from 3000 to 3999. Simple ACL supports ipv6 only. The range of Simple ACL is from 10000 to 42767. MAC ACL and User ACL support ipv4 only. The range of MAC ACL is from 4000 to 4999. The range of User ACL is from 5000 to 5999.
I32 hh3cAclNumberGroupIndex	1.3.6.1.4.1.25506.2.8.2.1.3.1.2	Integer32	not-accessible	The group index of number acl. Basic type:2000..2999 Advanced type:3000..3999 MAC type:4000..4999 User type:5000..5999 Simple type:10000..42767
ROW hh3cAclNumberGroupRowStatus	1.3.6.1.4.1.25506.2.8.2.1.3.1.3	RowStatus	read-create	RowStatus.
INT hh3cAclNumberGroupMatchOrder	1.3.6.1.4.1.25506.2.8.2.1.3.1.4	INTEGER	read-create	The match-order of number acl group.
I32 hh3cAclNumberGroupStep	1.3.6.1.4.1.25506.2.8.2.1.3.1.5	Integer32	read-create	The step of rule index.
OCT hh3cAclNumberGroupDescription	1.3.6.1.4.1.25506.2.8.2.1.3.1.6	OCTET STRING	read-create	Description of this acl group.
NUM hh3cAclNumberGroupCountClear	1.3.6.1.4.1.25506.2.8.2.1.3.1.7	CounterClear	read-write	Reset the value of counters of this group.
C32 hh3cAclNumberGroupRuleCounter	1.3.6.1.4.1.25506.2.8.2.1.3.1.8	Counter32	read-only	The rule count of number acl group.
hh3cAclIPAclGroup	1.3.6.1.4.1.25506.2.8.2.2
hh3cAclIPAclBasicTable	1.3.6.1.4.1.25506.2.8.2.2.2		not-accessible	A table of basic rule group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hh3cAclIPAclBasicEntry	1.3.6.1.4.1.25506.2.8.2.2.2.1		not-accessible	Basic rule group information.
I32 hh3cAclIPAclBasicRuleIndex	1.3.6.1.4.1.25506.2.8.2.2.2.1.1	Integer32	not-accessible	The rule index of basic acl group.
ROW hh3cAclIPAclBasicRowStatus	1.3.6.1.4.1.25506.2.8.2.2.2.1.2	RowStatus	read-create	RowStatus.
RUL hh3cAclIPAclBasicAct	1.3.6.1.4.1.25506.2.8.2.2.2.1.3	RuleAction	read-create	The action of basic acl rule.
IPt hh3cAclIPAclBasicSrcAddrType	1.3.6.1.4.1.25506.2.8.2.2.2.1.4	InetAddressType	read-create	The IP addresses type of IP pool.
IP hh3cAclIPAclBasicSrcAddr	1.3.6.1.4.1.25506.2.8.2.2.2.1.5	InetAddress	read-create	The value of a local IP address is available for this association. The type of this address is determined by the value of hh3cAclIPAclBasicSrcAddrType.
ADR hh3cAclIPAclBasicSrcPrefix	1.3.6.1.4.1.25506.2.8.2.2.2.1.6	InetAddressPrefixLength	read-create	Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
T/F hh3cAclIPAclBasicSrcAny	1.3.6.1.4.1.25506.2.8.2.2.2.1.7	TruthValue	read-create	The flag of matching any IP address.
IP hh3cAclIPAclBasicSrcWild	1.3.6.1.4.1.25506.2.8.2.2.2.1.8	IpAddress	read-create	Source IPv4 address wild. Only IPv4 Basic Rule support this object. Default value is '0.0.0.0'.
OCT hh3cAclIPAclBasicTimeRangeName	1.3.6.1.4.1.25506.2.8.2.2.2.1.9	OCTET STRING	read-create	The Time-range of basic acl rule. Default value is null.
FRA hh3cAclIPAclBasicFragmentFlag	1.3.6.1.4.1.25506.2.8.2.2.2.1.10	FragmentFlag	read-create	The flag of matching fragmented packets.
T/F hh3cAclIPAclBasicLog	1.3.6.1.4.1.25506.2.8.2.2.2.1.11	TruthValue	read-create	The packet will be logged when it matches the rule.
U32 hh3cAclIPAclBasicCount	1.3.6.1.4.1.25506.2.8.2.2.2.1.12	Unsigned32	read-only	The count of matched by the rule.
NUM hh3cAclIPAclBasicCountClear	1.3.6.1.4.1.25506.2.8.2.2.2.1.13	CounterClear	read-write	Reset the value of counter.
T/F hh3cAclIPAclBasicEnable	1.3.6.1.4.1.25506.2.8.2.2.2.1.14	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hh3cAclIPAclBasicVpnInstanceName	1.3.6.1.4.1.25506.2.8.2.2.2.1.15	OCTET STRING	read-create	The VPN name, which the rule will be applied. Default value is null.
OCT hh3cAclIPAclBasicComment	1.3.6.1.4.1.25506.2.8.2.2.2.1.16	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
hh3cAclIPAclAdvancedTable	1.3.6.1.4.1.25506.2.8.2.2.3		not-accessible	A table of advanced and simple acl group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hh3cAclIPAclAdvancedEntry	1.3.6.1.4.1.25506.2.8.2.2.3.1		not-accessible	Advanced acl group information.
I32 hh3cAclIPAclAdvancedRuleIndex	1.3.6.1.4.1.25506.2.8.2.2.3.1.1	Integer32	not-accessible	The rule index of advanced acl group. As a Simple ACL group, the value of this object must be 0. As an Advanced ACL group, the value of this object is ranging from 0 to 65534.
ROW hh3cAclIPAclAdvancedRowStatus	1.3.6.1.4.1.25506.2.8.2.2.3.1.2	RowStatus	read-create	RowStatus.
RUL hh3cAclIPAclAdvancedAct	1.3.6.1.4.1.25506.2.8.2.2.3.1.3	RuleAction	read-create	The action of advanced acl rule.
INT hh3cAclIPAclAdvancedProtocol	1.3.6.1.4.1.25506.2.8.2.2.3.1.4	INTEGER	read-create	The protocol-type of advanced acl group. Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) icmpv6 Internet Control Message Protocol6(58) igmp Internet Group Management Protocol(2) ip Any IPv4 protocol ipv6 Any IPv6 protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17) ipv6-ah IPv6 Authentication Header(51) ipv6-esp IPv6 Encapsulating Security Payload(50)
ADR hh3cAclIPAclAdvancedAddrFlag	1.3.6.1.4.1.25506.2.8.2.2.3.1.5	AddressFlag	read-create	Address flag to select address.
IPt hh3cAclIPAclAdvancedSrcAddrType	1.3.6.1.4.1.25506.2.8.2.2.3.1.6	InetAddressType	read-create	The IP addresses type of IP pool.
IP hh3cAclIPAclAdvancedSrcAddr	1.3.6.1.4.1.25506.2.8.2.2.3.1.7	InetAddress	read-create	The value of a local IP address available for this association. The type of this address is determined by the value of hh3cAclIPAclAdvancedSrcAddrType.
ADR hh3cAclIPAclAdvancedSrcPrefix	1.3.6.1.4.1.25506.2.8.2.2.3.1.8	InetAddressPrefixLength	read-create	Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
T/F hh3cAclIPAclAdvancedSrcAny	1.3.6.1.4.1.25506.2.8.2.2.3.1.9	TruthValue	read-create	The flag of matching any IP address.
IP hh3cAclIPAclAdvancedSrcWild	1.3.6.1.4.1.25506.2.8.2.2.3.1.10	IpAddress	read-create	Source IPv4 address wild. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'.
POR hh3cAclIPAclAdvancedSrcOp	1.3.6.1.4.1.25506.2.8.2.2.3.1.11	PortOp	read-create	Source port operation symbol of advanced acl group.
I32 hh3cAclIPAclAdvancedSrcPort1	1.3.6.1.4.1.25506.2.8.2.2.3.1.12	Integer32	read-create	The fourth layer source port1.
I32 hh3cAclIPAclAdvancedSrcPort2	1.3.6.1.4.1.25506.2.8.2.2.3.1.13	Integer32	read-create	The fourth layer source port2.
IPt hh3cAclIPAclAdvancedDestAddrType	1.3.6.1.4.1.25506.2.8.2.2.3.1.14	InetAddressType	read-create	The IP addresses type of IP pool.
IP hh3cAclIPAclAdvancedDestAddr	1.3.6.1.4.1.25506.2.8.2.2.3.1.15	InetAddress	read-create	The value of a local IP address available for this association. The type of this address is determined by the value of hh3cAclIPAclAdvancedDestAddrType.
ADR hh3cAclIPAclAdvancedDestPrefix	1.3.6.1.4.1.25506.2.8.2.2.3.1.16	InetAddressPrefixLength	read-create	Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
T/F hh3cAclIPAclAdvancedDestAny	1.3.6.1.4.1.25506.2.8.2.2.3.1.17	TruthValue	read-create	The flag of matching any IP address.
IP hh3cAclIPAclAdvancedDestWild	1.3.6.1.4.1.25506.2.8.2.2.3.1.18	IpAddress	read-create	Destination IPv4 address wild. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'.
POR hh3cAclIPAclAdvancedDestOp	1.3.6.1.4.1.25506.2.8.2.2.3.1.19	PortOp	read-create	Destination port operation symbol of advanced acl group.
I32 hh3cAclIPAclAdvancedDestPort1	1.3.6.1.4.1.25506.2.8.2.2.3.1.20	Integer32	read-create	The fourth layer destination port1.
I32 hh3cAclIPAclAdvancedDestPort2	1.3.6.1.4.1.25506.2.8.2.2.3.1.21	Integer32	read-create	The fourth layer destination port2.
I32 hh3cAclIPAclAdvancedIcmpType	1.3.6.1.4.1.25506.2.8.2.2.3.1.22	Integer32	read-create	The type of ICMP packet.
I32 hh3cAclIPAclAdvancedIcmpCode	1.3.6.1.4.1.25506.2.8.2.2.3.1.23	Integer32	read-create	The code of ICMP packet.
I32 hh3cAclIPAclAdvancedPrecedence	1.3.6.1.4.1.25506.2.8.2.2.3.1.24	Integer32	read-create	The value of IP-packet's precedence. Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7)
I32 hh3cAclIPAclAdvancedTos	1.3.6.1.4.1.25506.2.8.2.2.3.1.25	Integer32	read-create	The value of IP-packet's TOS. Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0)
DSC hh3cAclIPAclAdvancedDscp	1.3.6.1.4.1.25506.2.8.2.2.3.1.26	DSCPValue	read-create	The value of DSCP of IP packet.
OCT hh3cAclIPAclAdvancedTimeRangeName	1.3.6.1.4.1.25506.2.8.2.2.3.1.27	OCTET STRING	read-create	The Time-range of advanced acl rule. Default value is null.
TCP hh3cAclIPAclAdvancedTCPFlag	1.3.6.1.4.1.25506.2.8.2.2.3.1.28	TCPFlag	read-create	The packet type of TCP protocol.
FRA hh3cAclIPAclAdvancedFragmentFlag	1.3.6.1.4.1.25506.2.8.2.2.3.1.29	FragmentFlag	read-create	The flag of matching fragmented packet, and now support two value: 0 or 2 .
T/F hh3cAclIPAclAdvancedLog	1.3.6.1.4.1.25506.2.8.2.2.3.1.30	TruthValue	read-create	Log matched packets.
U32 hh3cAclIPAclAdvancedCount	1.3.6.1.4.1.25506.2.8.2.2.3.1.31	Unsigned32	read-only	The count of matched by the rule.
NUM hh3cAclIPAclAdvancedCountClear	1.3.6.1.4.1.25506.2.8.2.2.3.1.32	CounterClear	read-write	Reset the value of counter.
T/F hh3cAclIPAclAdvancedEnable	1.3.6.1.4.1.25506.2.8.2.2.3.1.33	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hh3cAclIPAclAdvancedVpnInstanceName	1.3.6.1.4.1.25506.2.8.2.2.3.1.34	OCTET STRING	read-create	The VPN name that the rule will be applied. Default value is null.
OCT hh3cAclIPAclAdvancedComment	1.3.6.1.4.1.25506.2.8.2.2.3.1.35	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
T/F hh3cAclIPAclAdvancedReflective	1.3.6.1.4.1.25506.2.8.2.2.3.1.36	TruthValue	read-create	The flag of reflective.
hh3cAclMACAclGroup	1.3.6.1.4.1.25506.2.8.2.3
hh3cAclMACTable	1.3.6.1.4.1.25506.2.8.2.3.1		not-accessible	A table of MAC acl group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hh3cAclMACEntry	1.3.6.1.4.1.25506.2.8.2.3.1.1		not-accessible	MAC acl group information.
I32 hh3cAclMACRuleIndex	1.3.6.1.4.1.25506.2.8.2.3.1.1.1	Integer32	not-accessible	The rule index of MAC-based acl group.
ROW hh3cAclMACRowStatus	1.3.6.1.4.1.25506.2.8.2.3.1.1.2	RowStatus	read-create	RowStatus.
RUL hh3cAclMACAct	1.3.6.1.4.1.25506.2.8.2.3.1.1.3	RuleAction	read-create	The action of MAC acl rule.
OCT hh3cAclMACTypeCode	1.3.6.1.4.1.25506.2.8.2.3.1.1.4	OCTET STRING	read-create	The type of protocol.
OCT hh3cAclMACTypeMask	1.3.6.1.4.1.25506.2.8.2.3.1.1.5	OCTET STRING	read-create	The mask of protocol.
MAC hh3cAclMACSrcMac	1.3.6.1.4.1.25506.2.8.2.3.1.1.6	MacAddress	read-create	Source MAC of MAC acl rule. Default value is '00:00:00:00:00:00'.
MAC hh3cAclMACSrcMacWild	1.3.6.1.4.1.25506.2.8.2.3.1.1.7	MacAddress	read-create	Source MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00'.
MAC hh3cAclMACDestMac	1.3.6.1.4.1.25506.2.8.2.3.1.1.8	MacAddress	read-create	Destination MAC of MAC acl rule. Default value is '00:00:00:00:00:00'.
MAC hh3cAclMACDestMacWild	1.3.6.1.4.1.25506.2.8.2.3.1.1.9	MacAddress	read-create	Destination MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00'
OCT hh3cAclMACLsapCode	1.3.6.1.4.1.25506.2.8.2.3.1.1.10	OCTET STRING	read-create	The type of LSAP.
OCT hh3cAclMACLsapMask	1.3.6.1.4.1.25506.2.8.2.3.1.1.11	OCTET STRING	read-create	The mask of LSAP.
I32 hh3cAclMACCos	1.3.6.1.4.1.25506.2.8.2.3.1.1.12	Integer32	read-create	Vlan priority of MAC acl rule.
OCT hh3cAclMACTimeRangeName	1.3.6.1.4.1.25506.2.8.2.3.1.1.13	OCTET STRING	read-create	The Time-range of MAC acl rule. Default value is null.
U32 hh3cAclMACCount	1.3.6.1.4.1.25506.2.8.2.3.1.1.14	Unsigned32	read-only	The count of matched frame by the rule.
NUM hh3cAclMACCountClear	1.3.6.1.4.1.25506.2.8.2.3.1.1.15	CounterClear	read-write	Reset the value of counter.
T/F hh3cAclMACEnable	1.3.6.1.4.1.25506.2.8.2.3.1.1.16	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hh3cAclMACComment	1.3.6.1.4.1.25506.2.8.2.3.1.1.17	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
hh3cAclEnUserAclGroup	1.3.6.1.4.1.25506.2.8.2.4
hh3cAclEnUserTable	1.3.6.1.4.1.25506.2.8.2.4.3		not-accessible	A table of user acl group information. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hh3cAclEnUserEntry	1.3.6.1.4.1.25506.2.8.2.4.3.1		not-accessible	User defined acl group entry.
I32 hh3cAclEnUserRuleIndex	1.3.6.1.4.1.25506.2.8.2.4.3.1.1	Integer32	not-accessible	The subitem of the user acl.
ROW hh3cAclEnUserRowStatus	1.3.6.1.4.1.25506.2.8.2.4.3.1.2	RowStatus	read-create	RowStatus.
RUL hh3cAclEnUserAct	1.3.6.1.4.1.25506.2.8.2.4.3.1.3	RuleAction	read-create	The action of user defined acl rule.
OCT hh3cAclEnUserStartString	1.3.6.1.4.1.25506.2.8.2.4.3.1.4	OCTET STRING	read-create	The rule, matching packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value of this object is defined by product and it indicates the offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: 10,10af,ffff. Default value is null.
OCT hh3cAclEnUserL2String	1.3.6.1.4.1.25506.2.8.2.4.3.1.5	OCTET STRING	read-create	The rule, matching layer 2 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hh3cAclEnUserMplsString	1.3.6.1.4.1.25506.2.8.2.4.3.1.6	OCTET STRING	read-create	The rule, matching mpls packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hh3cAclEnUserIPv4String	1.3.6.1.4.1.25506.2.8.2.4.3.1.7	OCTET STRING	read-create	The rule, matching IPv4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hh3cAclEnUserIPv6String	1.3.6.1.4.1.25506.2.8.2.4.3.1.8	OCTET STRING	read-create	The rule, matching IPv6 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hh3cAclEnUserL4String	1.3.6.1.4.1.25506.2.8.2.4.3.1.9	OCTET STRING	read-create	The rule, matching layer 4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hh3cAclEnUserL5String	1.3.6.1.4.1.25506.2.8.2.4.3.1.10	OCTET STRING	read-create	The rule, matching layer 5 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hh3cAclEnUserTimeRangeName	1.3.6.1.4.1.25506.2.8.2.4.3.1.11	OCTET STRING	read-create	The Time-range of user acl rule. Default value is null.
U32 hh3cAclEnUserCount	1.3.6.1.4.1.25506.2.8.2.4.3.1.12	Unsigned32	read-only	The count of matched by the rule.
NUM hh3cAclEnUserCountClear	1.3.6.1.4.1.25506.2.8.2.4.3.1.13	CounterClear	read-write	Reset the value of counter.
T/F hh3cAclEnUserEnable	1.3.6.1.4.1.25506.2.8.2.4.3.1.14	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hh3cAclEnUserComment	1.3.6.1.4.1.25506.2.8.2.4.3.1.15	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
hh3cAclResourceGroup	1.3.6.1.4.1.25506.2.8.2.5
hh3cAclResourceUsageTable	1.3.6.1.4.1.25506.2.8.2.5.1		not-accessible	The table shows ACL resource usage information. Support for resource types that are denoted by hh3cAclResourceType object varies with products. If a type is not supported, the corresponding row for the type will not be instantiated in this table.
hh3cAclResourceUsageEntry	1.3.6.1.4.1.25506.2.8.2.5.1.1		not-accessible	Each row contains a brief description of the resource type, a port range associated with the chip, total, reserved, and configured amount of resource of this type, the percent of resource that has been allocated, and so on.
U32 hh3cAclResourceChassis	1.3.6.1.4.1.25506.2.8.2.5.1.1.1	Unsigned32	not-accessible	The chassis number. On a centralized or distributed device, the value for this node is always zero.
U32 hh3cAclResourceSlot	1.3.6.1.4.1.25506.2.8.2.5.1.1.2	Unsigned32	not-accessible	The slot number. On a centralized device, the value for this node is always zero.
U32 hh3cAclResourceChip	1.3.6.1.4.1.25506.2.8.2.5.1.1.3	Unsigned32	not-accessible	The chip number. On a single chip device, the value for this node is always zero.
INT hh3cAclResourceType	1.3.6.1.4.1.25506.2.8.2.5.1.1.4	INTEGER	not-accessible	TCAM (Ternary Content Addressable Memory) resource can be of the following types. vfpAclResource indicates TCAM entries used by VFP for packet filtering. ifpAclResource indicates TCAM entries used by IFP for packet filtering. ifpMeterResource indicates TCAM entries used by IFP for traffic policing. ifpCounterResource indicates TCAM entries used by IFP for packet counting. efpAclResource indicates TCAM entries used by EFP for packet filtering. efpMeterResource indicates TCAM entries used by EFP for traffic policing. efpCounterResource indicates TCAM entries used by EFP for packet counting. aclRuleResource indicates TCAM entries for packet filtering. meterResource indicates TCAM entries for traffic policing. counterResource indicates TCAM entries for packet counting. ingressAclResource indicates TCAM entries for inbound packet filtering. egressAclResource indicates TCAM entries for outbound packet filtering. ipv4AclResource indicates TCAM entries for IPv4 packet filtering. ipv6AclResource indicates TCAM entries for IPv6 packet filtering.
OCT hh3cAclPortRange	1.3.6.1.4.1.25506.2.8.2.5.1.1.5	OCTET STRING	read-only	The port range associated with the chip. Commas are used to separate multiple port ranges, for example, Ethernet1/2 to Ethernet1/12, Ethernet1/31 to Ethernet1/48.
U32 hh3cAclResourceTotal	1.3.6.1.4.1.25506.2.8.2.5.1.1.6	Unsigned32	read-only	Total TCAM entries of the resource type.
U32 hh3cAclResourceReserved	1.3.6.1.4.1.25506.2.8.2.5.1.1.7	Unsigned32	read-only	The amount of reserved TCAM entries of the resource type.
U32 hh3cAclResourceConfigured	1.3.6.1.4.1.25506.2.8.2.5.1.1.8	Unsigned32	read-only	The amount of configured TCAM entries of the resource type.
U32 hh3cAclResourceUsagePercent	1.3.6.1.4.1.25506.2.8.2.5.1.1.9	Unsigned32	read-only	The percent of TCAM entries that have been used for this resource type.

RFC description

Vendor-private MIB for H3C/Huawei devices; manages Access Control Lists (ACLs), including ACL definition, rules, and filtering policies.

Start monitoring H3C Comware switch/router (Access Control Lists) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HH3C-ACL-MIB