HM2-PLATFORM-QOS-ACL-MIB

All MIBs › HM2-PLATFORM-QOS-ACL-MIB

Organization: Hirschmann Automation and Control GmbH

Last Updated: 2012-12-20

Category: Quality of Service, Technology: QoS, Vendor: Belden

Description: Hirschmann HiOS (HM2) QoS ACL MIB for access control list configuration used in QoS policy enforcement.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HM2-PLATFORM-QOS-ACL-MIB?

HM2-PLATFORM-QOS-ACL-MIB is a Hirschmann HiOS (HM2/Platform2) proprietary MIB for Access Control Lists used to enforce QoS classification and traffic policy on Hirschmann switches. It exposes configuration data defining ACL rules and their association with QoS treatment (such as classification or rate-limiting) for matching traffic, rather than live traffic counters. Its monitoring value is confirming the software/configuration status of QoS/ACL policy — that the intended rules exist and are correctly applied to interfaces — which is important for verifying traffic prioritization and security filtering behave as designed, though it does not directly expose hardware health metrics. It builds on general ACL/QoS concepts and typically references interface indices consistent with the standard IF-MIB. It is deployed on Hirschmann industrial switches where administrators enforce differentiated traffic handling for time-critical automation protocols alongside general data traffic. Network engineers evaluating or troubleshooting this functionality can download the HM2-PLATFORM-QOS-ACL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HM2-PLATFORM-QOS-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Hirschmann HiOS-based industrial Ethernet switches

Monitoring Examples

No sample objects were provided for this module, so specific object names cannot be cited. In general, an administrator would expect to poll ACL rule-definition objects to confirm rule match criteria and their assigned QoS action, then verify a rule's application status on a specific interface. Without a captured schema, this remains an inferred rather than a verified monitoring workflow.

Imported Objects

From HM2-PLATFORM-QOS-MIB

hm2PlatformQoS

MODULE-IDENTITY

From HM2-TC-MIB

HmEnabledStatus

From IF-MIB

InterfaceIndexOrZero

From SNMPv2-SMI

Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using hm2AgentAclRuleHitCount OID:

Select a Hirschmann HiOS Platform2 industrial switch (QoS ACL policy) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hm2AgentAclRuleHitCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the number of packets that matched the ACL rule. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hm2PlatformQosAcl	1.3.6.1.4.1.248.12.3.2			The Hirschmann Platform2 MIB for Access Control Lists (ACL). Copyright (C) 2012. All Rights Reserved.
hm2AgentAclNotifications	1.3.6.1.4.1.248.12.3.2.0
NTF hm2AgentAclTrapRuleLogEvent	1.3.6.1.4.1.248.12.3.2.0.1			This trap is generated on a periodic basis to indicate that an ACL rule configured for logging was actively used by hardware to take action on one or more packets. The hm2AgentAclTrapRuleHitCount denotes the number of packets that matched this rule during the most recent logging interval. ACL trap generation requires that the hm2AgentAclTrapFlag object is set to enable(1).
NTF hm2AgentAclTrapRuleTimeRangeEvent	1.3.6.1.4.1.248.12.3.2.0.2			This trap is generated when there is a time range notification received on any Time based ACL rule. The hm2AgentAclTrapRuleTimeRangeName denotes the time range name associated with the ACL rule, hm2AgentAclTrapRuleTimeRangeNotification indicates the type of notification received and hm2AgentAclTrapRuleInstallationStatus indicates the installation status of ACL rule in the hardware. When activate notification is received, ACL rule is activated in the hardware. When deactivate notifcation is received, ACL rule is deactivated in the hardware. When delete notification is received, ACL rule is activated in the hardware, if it is not already activated. ACL trap generation requires the hm2AgentAclTrapFlag object to be set to enable(1).
NTF hm2AgentAclTrapRuleLogEventV1	1.3.6.1.4.1.248.12.3.2.0.248			This trap is generated on a periodic basis to indicate that an ACL rule configured for logging was actively used by hardware to take action on one or more packets. The hm2AgentAclTrapRuleHitCount denotes the number of packets that matched this rule during the most recent logging interval. ACL trap generation requires that the hm2AgentAclTrapFlag object is set to enable(1). This version of the trap is only sent when device uses SNMPv1 style traps. Devices using SNMPv2 and above send hm2AgentAclTrapRuleLogeEvent instead.
hm2AgentAclTable	1.3.6.1.4.1.248.12.3.2.1		not-accessible	A table of ACL instances.
hm2AgentAclEntry	1.3.6.1.4.1.248.12.3.2.1.1		not-accessible	An ACL instance table entry.
I32 hm2AgentAclIndex	1.3.6.1.4.1.248.12.3.2.1.1.1	Integer32	not-accessible	The IP ACL table index this instance is associated with. For MSP devices the IPv4 ACL indexes start with 1000.
ROW hm2AgentAclStatus	1.3.6.1.4.1.248.12.3.2.1.1.2	RowStatus	read-create	Status of this instance. Entries can not be deleted until all rows in the hm2AgentAclIfTable and hm2AgentAclRuleTable with corresponding values of hm2AgentAclIndex have been deleted. active(1) - this ACL instance is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance
STR hm2AgentAclName	1.3.6.1.4.1.248.12.3.2.1.1.3	DisplayString	read-create	The name of this IPv4 ACL entry, which must consist of 1 to 31 alphanumeric characters and uniquely identify this IPv4 ACL. An existing IPv4 ACL can be renamed by setting this object to a new name. This object must be set to complete a new IPv4 ACL row instance.
INT hm2AgentAclStatsAction	1.3.6.1.4.1.248.12.3.2.1.1.248	INTEGER	read-create	Setting the object to 'flushAclHitCount(2)' will reset hit counter statistics for all rules in this ACL. Reading the object always returns 'other'.
hm2AgentAclRuleTable	1.3.6.1.4.1.248.12.3.2.4		not-accessible	A table of IP ACL rule instances.
hm2AgentAclRuleEntry	1.3.6.1.4.1.248.12.3.2.4.1		not-accessible	A table of IP ACL Classification Rules
I32 hm2AgentAclRuleIndex	1.3.6.1.4.1.248.12.3.2.4.1.1	Integer32	not-accessible	The index of this rule instance within an IP ACL.
INT hm2AgentAclRuleAction	1.3.6.1.4.1.248.12.3.2.4.1.2	INTEGER	read-create	The type of action this rule should perform.
I32 hm2AgentAclRuleProtocol	1.3.6.1.4.1.248.12.3.2.4.1.3	Integer32	read-create	icmp - 1 igmp - 2 ip-in-ip - 4 tcp - 6 udp - 17 ip - 255 (ip all) All values from 1 to 255 are valid. 0 disables this match criteria.
IP hm2AgentAclRuleSrcIpAddress	1.3.6.1.4.1.248.12.3.2.4.1.4	IpAddress	read-create	The source IP address used in the ACL classification.
IP hm2AgentAclRuleSrcIpMask	1.3.6.1.4.1.248.12.3.2.4.1.5	IpAddress	read-create	The Source IP mask used in the ACL classification. This mask is expressed using wild-card notation, which is the 1's compliment of traditional subnet masks. Here, the 'don't care bits' are represented by binary 1's and 'do care bits' are represented by binary 0's.
I32 hm2AgentAclRuleSrcL4Port	1.3.6.1.4.1.248.12.3.2.4.1.6	Integer32	read-create	The source port number (Layer 4) used in the ACL classification. A value of -1 disables this criteria.
I32 hm2AgentAclRuleSrcL4PortRangeStart	1.3.6.1.4.1.248.12.3.2.4.1.7	Integer32	read-create	The source port number(Layer 4) range start.
I32 hm2AgentAclRuleSrcL4PortRangeEnd	1.3.6.1.4.1.248.12.3.2.4.1.8	Integer32	read-create	The source port number(Layer 4) range end.
IP hm2AgentAclRuleDestIpAddress	1.3.6.1.4.1.248.12.3.2.4.1.9	IpAddress	read-create	The destination IP address used in the ACL classification.
IP hm2AgentAclRuleDestIpMask	1.3.6.1.4.1.248.12.3.2.4.1.10	IpAddress	read-create	The destination IP mask used in the ACL classification. This mask is expressed using wild-card notation, which is the 1's compliment of traditional subnet masks. Here, the 'don't care bits' are represented by binary 1's and 'do care bits' are represented by binary 0's.
I32 hm2AgentAclRuleDestL4Port	1.3.6.1.4.1.248.12.3.2.4.1.11	Integer32	read-create	The destination port number(Layer 4) used in ACl classification.
I32 hm2AgentAclRuleDestL4PortRangeStart	1.3.6.1.4.1.248.12.3.2.4.1.12	Integer32	read-create	The destination port number(Layer 4) starting range used in ACL classification.
I32 hm2AgentAclRuleDestL4PortRangeEnd	1.3.6.1.4.1.248.12.3.2.4.1.13	Integer32	read-create	The destination port number(Layer 4) ending range used in ACL classification.
I32 hm2AgentAclRuleIPDSCP	1.3.6.1.4.1.248.12.3.2.4.1.14	Integer32	read-create	The Differentiated Services Code Point value. A value of -1 indicates that this field is not used.
I32 hm2AgentAclRuleIpPrecedence	1.3.6.1.4.1.248.12.3.2.4.1.15	Integer32	read-create	The type of service (TOS) IP precedence value. A value of -1 indicates that this field is not used.
I32 hm2AgentAclRuleIpTosBits	1.3.6.1.4.1.248.12.3.2.4.1.16	Integer32	read-create	The type of service (TOS) bits value.
I32 hm2AgentAclRuleIpTosMask	1.3.6.1.4.1.248.12.3.2.4.1.17	Integer32	read-create	The type of service (TOS) mask value.
ROW hm2AgentAclRuleStatus	1.3.6.1.4.1.248.12.3.2.4.1.18	RowStatus	read-create	Status of this instance. active(1) - this ACL rule is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance
U32 hm2AgentAclRuleAssignQueueId	1.3.6.1.4.1.248.12.3.2.4.1.19	Unsigned32	read-create	Queue identifier to which all inbound packets matching this ACL rule are directed. This object defaults to the standard queue assignment for user priority 0 traffic per the IEEE 802.1D specification based on the number of assignable queues in the system: 1-3 queues: 0 4-7 queues: 1 8 queues: 2 This default assignment is static and is not influenced by other system configuration changes. A value of 4294967295 indicates that this field is not used
NUM hm2AgentAclRuleRedirectIntf	1.3.6.1.4.1.248.12.3.2.4.1.20	InterfaceIndexOrZero	read-create	A non-zero value indicates the external ifIndex to which all inbound packets matching this ACL rule are directed. A value of zero means packet redirection is not in effect, which is the default value of this object. Note that packet redirection and mirroring (hm2AgentAclRuleMirrorIntf object) are mutually exclusive rule attributes.
T/F hm2AgentAclRuleMatchEvery	1.3.6.1.4.1.248.12.3.2.4.1.21	TruthValue	read-create	Flag to indicate that the ACL rule is defined to match on every IP packet, regardless of content.
NUM hm2AgentAclRuleMirrorIntf	1.3.6.1.4.1.248.12.3.2.4.1.22	InterfaceIndexOrZero	read-create	A non-zero value indicates the external ifIndex to which all inbound packets matching this ACL rule are copied. A value of zero means packet mirroring is not in effect, which is the default value of this object. Note that packet mirroring and redirection (hm2AgentAclRuleRedirectIntf object) are mutually exclusive rule attributes.
T/F hm2AgentAclRuleLogging	1.3.6.1.4.1.248.12.3.2.4.1.23	TruthValue	read-create	Flag to indicate that the ACL rule is being logged. A hardware count of the number of packets that match this rule is reported via the hm2AgentAclTrapRuleLogEvent notification. This object may be supported for a hm2AgentAclRuleAction setting of permit(1) and/or deny(2), depending on the ACL feature capabilities of the device.
STR hm2AgentAclRuleTimeRangeName	1.3.6.1.4.1.248.12.3.2.4.1.24	DisplayString	read-create	Name of the time range, that the ACL rule has referenced. It has to start with a character and shall consist of 0 to 31 alphanumeric characters.
INT hm2AgentAclRuleTimeRangeStatus	1.3.6.1.4.1.248.12.3.2.4.1.25	INTEGER	read-only	Flag that indicates the ACL rule status. If the status is active, it implies that the ACL rule is in effect. If the status is inactive, it implies that the ACL rule is not in effect.
U32 hm2AgentAclRuleRedirectExtAgentId	1.3.6.1.4.1.248.12.3.2.4.1.28	Unsigned32	read-create	A non-zero value indicates the external control plane application agentId to which all inbound packets matching this ACL rule are directed. A value of zero means redirection is not in effect, which is the default value of this object. Note that this action is mutually exclusive with redirect to interface(aclRuleRedirectIntf object) and mirroring (aclRuleMirrorIntf object) rule attributes.
I32 hm2AgentAclRuleIcmpType	1.3.6.1.4.1.248.12.3.2.4.1.29	Integer32	read-create	ACL rule matches on the specified ICMP type. All values from 0 to 255 are valid. A value of -1 indicates that this field is not used.
I32 hm2AgentAclRuleIcmpCode	1.3.6.1.4.1.248.12.3.2.4.1.30	Integer32	read-create	ACL rule matches on the specified ICMP code. All values from 0 to 255 are valid. A value of -1 indicates that this field is not used.
I32 hm2AgentAclRuleIgmpType	1.3.6.1.4.1.248.12.3.2.4.1.31	Integer32	read-create	ACL rule matches on the specified IGMP type. All values from 1 to 255 are valid.
T/F hm2AgentAclRuleEstablished	1.3.6.1.4.1.248.12.3.2.4.1.32	TruthValue	read-create	Flag to indicate the ACL rule to match on TCP packets that has either RST or ACK bits set in the TCP header
T/F hm2AgentAclRuleFragments	1.3.6.1.4.1.248.12.3.2.4.1.33	TruthValue	read-create	Flag to indicate the ACL rule to match if the packet is fragmented
I32 hm2AgentAclRuleIndexNextFree	1.3.6.1.4.1.248.12.3.2.4.1.248	Integer32	read-only	This object contains an unused value for the hm2AgentAclRuleIndex to be used when creating a new named IPv4 ACL. A value of zero indicates the ACL rule table is full.
INT hm2AgentAclRuleRateLimitCrateUnit	1.3.6.1.4.1.248.12.3.2.4.1.249	INTEGER	read-create	The unit of the aclRuleRateLimitCrate. Can be either packets per second (pps) or kilobits per second (kbps).
U32 hm2AgentAclRuleRateLimitCrate	1.3.6.1.4.1.248.12.3.2.4.1.250	Unsigned32	read-create	Committed rate attribute statement value, specified in kbps. Value 0 disables this match criteria.
ACL hm2AgentAclRuleRateLimitCburst	1.3.6.1.4.1.248.12.3.2.4.1.251	AclBurstSize	read-create	Committed burst size attribute statement value, specified in kbytes. Value 0 disables this match criteria.
INT hm2AgentAclRuleStatsAction	1.3.6.1.4.1.248.12.3.2.4.1.252	INTEGER	read-create	Setting the object to 'flushRuleHitCount(2)' will reset hit counter statistics. Reading the object always returns 'other'.
C64 hm2AgentAclRuleHitCountEx	1.3.6.1.4.1.248.12.3.2.4.1.253	Counter64	read-only	Number of packets that matched the ACL rule.
TIM hm2AgentAclRuleHitCountDiscontinuityTime	1.3.6.1.4.1.248.12.3.2.4.1.254	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this rule's counters suffered a discontinuity. If no such discontinuities have occurred since the last re- initialization of the local management subsystem, then this object contains a zero value.
I32 hm2AgentAclRuleTcpFlagBits	1.3.6.1.4.1.248.12.3.2.4.1.255	Integer32	read-create	The TCP flag value.
I32 hm2AgentAclRuleTcpFlagMask	1.3.6.1.4.1.248.12.3.2.4.1.256	Integer32	read-create	The TCP flag mask value.
HM2 hm2AgentAclRuleSrcL4PortOperator	1.3.6.1.4.1.248.12.3.2.4.1.257	Hm2PortOperator	read-create	The operator for the source port.
HM2 hm2AgentAclRuleDstL4PortOperator	1.3.6.1.4.1.248.12.3.2.4.1.258	Hm2PortOperator	read-create	The operator for the destination port.
I32 hm2AgentAclMacIndexNextFree	1.3.6.1.4.1.248.12.3.2.5	Integer32	read-only	This object contains an unused value for the hm2AgentAclMacIndex to be used when creating a new MAC ACL. A value of zero indicates the ACL table is full. For MSP devices the MAC ACL indexes start with 10000.
hm2AgentAclMacTable	1.3.6.1.4.1.248.12.3.2.6		not-accessible	A table of MAC ACL instances.
hm2AgentAclMacEntry	1.3.6.1.4.1.248.12.3.2.6.1		not-accessible	An ACL MAC instance table entry.
I32 hm2AgentAclMacIndex	1.3.6.1.4.1.248.12.3.2.6.1.1	Integer32	not-accessible	The MAC ACL table index this instance is associated with. When creating a new MAC ACL, refer to the hm2AgentAclMacIndexNextFree object to determine the next available hm2AgentAclMacIndex to use. For MSP devices the MAC ACL indexes start with 10000.
STR hm2AgentAclMacName	1.3.6.1.4.1.248.12.3.2.6.1.2	DisplayString	read-create	The name of this MAC ACL entry, which must consist of 1 to 31 alphanumeric characters and uniquely identify this MAC ACL. An existing MAC ACL can be renamed by setting this object to a new name. This object must be set to complete a new MAC ACL row instance.
ROW hm2AgentAclMacStatus	1.3.6.1.4.1.248.12.3.2.6.1.3	RowStatus	read-create	Status of this instance. ACL MAC entries can not be deleted until all rows in the hm2AgentAclIfTable and hm2AgentAclRuleTable with corresponding values of hm2AgentAclMacIndex have been deleted. active(1) - this ACL instance is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance The hm2AgentAclMacName object must be set to complete this row instance.
INT hm2AgentAclMacStatsAction	1.3.6.1.4.1.248.12.3.2.6.1.248	INTEGER	read-create	Setting the object to 'flushAclHitCount(2)' will reset hit counter statistics for the rules in this ACL. Reading the object always returns 'other'.
hm2AgentAclMacRuleTable	1.3.6.1.4.1.248.12.3.2.7		not-accessible	A table of layer 2 MAC ACL rule instances.
hm2AgentAclMacRuleEntry	1.3.6.1.4.1.248.12.3.2.7.1		not-accessible	A table of layer 2 MAC ACL classification rules.
I32 hm2AgentAclMacRuleIndex	1.3.6.1.4.1.248.12.3.2.7.1.1	Integer32	not-accessible	The index of this rule instance within an MAC ACL.
INT hm2AgentAclMacRuleAction	1.3.6.1.4.1.248.12.3.2.7.1.2	INTEGER	read-create	The type of action this MAC ACL rule should perform.
U32 hm2AgentAclMacRuleCos	1.3.6.1.4.1.248.12.3.2.7.1.3	Unsigned32	read-create	The class of service (COS) used in the MAC ACL classification. This is the three-bit user priority field in the 802.1Q tag header of a tagged Ethernet frame. For frames containing a double VLAN tag, this field is located in the first/outer tag. A value of 4294967295 indicates that this field is not used.
U32 hm2AgentAclMacRuleCos2	1.3.6.1.4.1.248.12.3.2.7.1.4	Unsigned32	read-create	The secondary class of service (COS2) used in the MAC ACL classification. This is the three-bit user priority field in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame. A value of 4294967295 indicates that this field is not used.
MAC hm2AgentAclMacRuleDestMacAddr	1.3.6.1.4.1.248.12.3.2.7.1.5	MacAddress	read-create	The destination MAC address used in the MAC ACL classification.
MAC hm2AgentAclMacRuleDestMacMask	1.3.6.1.4.1.248.12.3.2.7.1.6	MacAddress	read-create	The destination MAC address mask used in the MAC ACL classification. This mask value identifies the portion of the hm2AgentAclMacRuleDestMacAddr that is compared against a packet. The 'don't care bits' are represented by binary 0's and 'do care bits' are represented by binary 1's. A non-contiguous mask value is permitted.
INT hm2AgentAclMacRuleEtypeKey	1.3.6.1.4.1.248.12.3.2.7.1.7	INTEGER	read-create	The Ethertype keyword used in the MAC ACL classification. A keyword of custom(1) requires that the hm2AgentAclMacRuleEtypeValue object also be set.
ETY hm2AgentAclMacRuleEtypeValue	1.3.6.1.4.1.248.12.3.2.7.1.8	EtypeValue	read-create	The Ethertype custom value used in the MAC ACL classification. This object is only valid if the hm2AgentAclMacRuleEtypeKey is set to custom(1). Values ranging from 0x0600 to 0xFFFF (1536 to 65535) are interpreted as the Ethertype. Lower values are interpreted as frame size. A value of 0 indicates that this field is not used.
MAC hm2AgentAclMacRuleSrcMacAddr	1.3.6.1.4.1.248.12.3.2.7.1.9	MacAddress	read-create	The source MAC address used in the MAC ACL classification.
MAC hm2AgentAclMacRuleSrcMacMask	1.3.6.1.4.1.248.12.3.2.7.1.10	MacAddress	read-create	The source MAC address mask used in the MAC ACL classification. This mask value identifies the portion of the hm2AgentAclMacRuleSrcMacAddr that is compared against a packet. The 'don't care bits' are represented by binary 0's and 'do care bits' are represented by binary 1's. A non-contiguous mask value is permitted.
U32 hm2AgentAclMacRuleVlanId	1.3.6.1.4.1.248.12.3.2.7.1.11	Unsigned32	read-create	The VLAN ID value used in the MAC ACL classification. The VLAN ID field is defined as the 12-bit VLAN identifier in the 802.1Q tag header of a tagged Ethernet frame which is contained in the first/outer tag of a double VLAN tagged frame.
U32 hm2AgentAclMacRuleVlanIdRangeStart	1.3.6.1.4.1.248.12.3.2.7.1.12	Unsigned32	read-create	The VLAN ID range start value used in the MAC ACL classification. Setting this value greater than the current hm2AgentAclMacRuleVlanIdRangeEnd changes the VLAN ID range end to the same value as the range start. The VLAN ID field is defined as the 12-bit VLAN identifier in the 802.1Q tag header of a tagged Ethernet frame which is contained in the first/outer tag of a double VLAN tagged frame.
U32 hm2AgentAclMacRuleVlanIdRangeEnd	1.3.6.1.4.1.248.12.3.2.7.1.13	Unsigned32	read-create	The VLAN ID range end value used in the MAC ACL classification. Setting this value less than the current hm2AgentAclMacRuleVlanIdRangeStart changes the VLAN ID range start to the same value as the range end. The VLAN ID field is defined as the 12-bit VLAN identifier in the 802.1Q tag header of a tagged Ethernet frame which is contained in the first/outer tag of a double VLAN tagged frame.
U32 hm2AgentAclMacRuleVlanId2	1.3.6.1.4.1.248.12.3.2.7.1.14	Unsigned32	read-create	The secondary VLAN ID value used in the MAC ACL classification. The secondary VLAN ID field is defined as the 12-bit VLAN identifier in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame.
U32 hm2AgentAclMacRuleVlanId2RangeStart	1.3.6.1.4.1.248.12.3.2.7.1.15	Unsigned32	read-create	The secondary VLAN ID range start value used in the MAC ACL classification. Setting this value greater than the current hm2AgentAclMacRuleVlanId2RangeEnd changes the Secondary VLAN ID range end to the same value as the range start. The secondary VLAN ID field is defined as the 12-bit VLAN identifier in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame.
U32 hm2AgentAclMacRuleVlanId2RangeEnd	1.3.6.1.4.1.248.12.3.2.7.1.16	Unsigned32	read-create	The secondary VLAN ID range end value used in the MAC ACL classification. Setting this value less than the current hm2AgentAclMacRuleVlanId2RangeStart changes the Secondary VLAN ID range start to the same value as the range end. The secondary VLAN ID field is defined as the 12-bit VLAN identifier in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet frame.
ROW hm2AgentAclMacRuleStatus	1.3.6.1.4.1.248.12.3.2.7.1.17	RowStatus	read-create	Status of this instance. active(1) - this ACL Rule is active createAndGo(4) - set to this value to create an instance destroy(6) - set to this value to delete an instance
U32 hm2AgentAclMacRuleAssignQueueId	1.3.6.1.4.1.248.12.3.2.7.1.18	Unsigned32	read-create	Queue identifier to which all inbound packets matching this MAC ACL rule are directed. This object defaults to the standard queue assignment for user priority 0 traffic per the IEEE 802.1D specification based on the number of assignable queues in the system: 1-3 queues: 0 4-7 queues: 1 8 queues: 2 This default assignment is static and is not influenced by other system configuration changes. A value of 4294967295 indicates that this field is not used
NUM hm2AgentAclMacRuleRedirectIntf	1.3.6.1.4.1.248.12.3.2.7.1.19	InterfaceIndexOrZero	read-create	A non-zero value indicates the external ifIndex to which all inbound packets matching this MAC ACL rule are directed. A value of zero means packet redirection is not in effect, which is the default value of this object. Note that packet redirection and mirroring (hm2AgentAclMacRuleMirrorIntf object) are mutually exclusive rule attributes.
T/F hm2AgentAclMacRuleMatchEvery	1.3.6.1.4.1.248.12.3.2.7.1.20	TruthValue	read-create	Flag to indicate that the MAC ACL rule is defined to match all packets, regardless of Ethertype.
NUM hm2AgentAclMacRuleMirrorIntf	1.3.6.1.4.1.248.12.3.2.7.1.21	InterfaceIndexOrZero	read-create	A non-zero value indicates the external ifIndex to which all inbound packets matching this MAC ACL rule are copied. A value of zero means packet mirroring is not in effect, which is the default value of this object. Note that packet mirroring and redirection (hm2AgentAclMacRuleRedirectIntf object) are mutually exclusive rule attributes.
T/F hm2AgentAclMacRuleLogging	1.3.6.1.4.1.248.12.3.2.7.1.22	TruthValue	read-create	Flag to indicate that the ACL rule is being logged. A hardware count of the number of packets that match this rule is reported via the hm2AgentAclTrapRuleLogEvent notification. This object may be supported for an hm2AgentAclMacRuleAction setting of permit(1) and/or deny(2), depending on the ACL feature capabilities of the device.
STR hm2AgentAclMacRuleTimeRangeName	1.3.6.1.4.1.248.12.3.2.7.1.23	DisplayString	read-create	Name of the time range, that the ACL rule has referenced. It has to start with a character and shall consist of 0 to 31 alphanumeric characters.
INT hm2AgentAclMacRuleTimeRangeStatus	1.3.6.1.4.1.248.12.3.2.7.1.24	INTEGER	read-only	Flag that indicates the ACL rule status. If the status is active, it implies that the ACL rule is in effect. If the status is inactive, it implies that the ACL rule is not in effect.
I32 hm2AgentAclMacRuleIndexNextFree	1.3.6.1.4.1.248.12.3.2.7.1.248	Integer32	read-only	This object contains an unused value for the hm2AgentAclMacRuleIndex to be used when creating a new MAC ACL. A value of zero indicates the ACL rule table is full.
INT hm2AgentAclMacRuleRateLimitCrateUnit	1.3.6.1.4.1.248.12.3.2.7.1.249	INTEGER	read-create	The unit of the aclMacRuleRateLimitCrate. Can be either packets per second (pps) or kilobits per second (kbps).
U32 hm2AgentAclMacRuleRateLimitCrate	1.3.6.1.4.1.248.12.3.2.7.1.250	Unsigned32	read-create	Committed rate attribute statement value, specified in kbps. Value 0 disables this match criteria.
ACL hm2AgentAclMacRuleRateLimitCburst	1.3.6.1.4.1.248.12.3.2.7.1.251	AclBurstSize	read-create	Committed burst size attribute statement value, specified in kbytes. Value 0 disables this match criteria.
INT hm2AgentAclMacRuleStatsAction	1.3.6.1.4.1.248.12.3.2.7.1.252	INTEGER	read-create	Setting the object to 'flushRuleHitCount(2)' will reset hit counter statistics. Reading the object always returns 'other'.
C64 hm2AgentAclMacRuleHitCount	1.3.6.1.4.1.248.12.3.2.7.1.253	Counter64	read-only	Number of packets that matched the ACL rule.
TIM hm2AgentAclMacRuleHitCountDiscontinuityTime	1.3.6.1.4.1.248.12.3.2.7.1.254	TimeStamp	read-only	The value of sysUpTime on the most recent occasion at which any one or more of this rule's counters suffered a discontinuity. If no such discontinuities have occurred since the last re- initialization of the local management subsystem, then this object contains a zero value.
hm2AgentAclIfTable	1.3.6.1.4.1.248.12.3.2.8		not-accessible	A table of ACL interface instances per direction.
hm2AgentAclIfEntry	1.3.6.1.4.1.248.12.3.2.8.1		not-accessible	An ACL interface instance entry.
I32 hm2AgentAclIfIndex	1.3.6.1.4.1.248.12.3.2.8.1.1	Integer32	not-accessible	The interface index to which this ACL instance applies.
INT hm2AgentAclIfDirection	1.3.6.1.4.1.248.12.3.2.8.1.2	INTEGER	not-accessible	The interface direction to which this ACL instance applies.
U32 hm2AgentAclIfSequence	1.3.6.1.4.1.248.12.3.2.8.1.3	Unsigned32	not-accessible	The relative evaluation sequence of this ACL for this interface and direction. When multiple ACLs are allowed for a given interface and direction, the sequence number determines the order in which the list of ACLs are evaluated, with lower sequence numbers given higher precedence. The sequence number value is arbitrary, but must be a unique non-zero value for a given interface and direction. Setting this object to an existing sequence number value for a given interface and direction causes the ACL corresponding to that value to be replaced with this ACL.
INT hm2AgentAclIfAclType	1.3.6.1.4.1.248.12.3.2.8.1.4	INTEGER	accessible-for-notify	The type of this ACL, which is used to interpret the hm2AgentAclIfId object value. Each type of ACL uses its own numbering scheme for identification (see hm2AgentAclIfAclId object for details). The hm2AgentAclIfAclId object must be specified along with this object.
I32 hm2AgentAclIfAclId	1.3.6.1.4.1.248.12.3.2.8.1.5	Integer32	accessible-for-notify	The ACL identifier value, which is interpreted based on the hm2AgentAclIfType object. For the IP ACLs, the actual ACL number is its identifier as follows: IP standard ranges from 1-99, while IP extended ranges from 100-199. Here, hm2AgentAclIfAclId represents hm2AgentAclIndex. The MAC ACLs use an internally generated index value that is assigned when the ACL is created. Here, hm2AgentAclIfAclId represents hm2AgentAclMacIndex. The IPv6 ACLs use an internally generated index value that is assigned when the ACL is created. Here, hm2AgentAclVlanAclId represents hm2AgentAclIpv6Index. The hm2AgentAclIfType object must be specified along with this object.
ROW hm2AgentAclIfStatus	1.3.6.1.4.1.248.12.3.2.8.1.6	RowStatus	read-create	Status of this instance. active(1) - this ACL interface instance is active createAndGo(4) - set to this value to assign an ACL to an interface and direction destroy(6) - set to this value to remove an ACL from an interface and direction
hm2AgentAclLoggingGroup	1.3.6.1.4.1.248.12.3.2.9
I32 hm2AgentAclTrapRuleIndex	1.3.6.1.4.1.248.12.3.2.9.2	Integer32	accessible-for-notify	The index of an ACL rule instance. Used by hm2AgentAclTrapRuleLogEvent trap.
INT hm2AgentAclTrapRuleAction	1.3.6.1.4.1.248.12.3.2.9.3	INTEGER	accessible-for-notify	The type of action this rule should perform, either permit(1) or deny(2). Used by hm2AgentAclTrapRuleLogEvent trap.
C64 hm2AgentAclTrapRuleHitCount	1.3.6.1.4.1.248.12.3.2.9.4	Counter64	accessible-for-notify	Number of packets that matched the ACL rule during the most recent logging interval. Used by hm2AgentAclTrapRuleLogEvent trap.
HME hm2AgentAclTrapFlag	1.3.6.1.4.1.248.12.3.2.9.5	HmEnabledStatus	read-write	ACL Trap Flag - Enables or disables ACL trap generation. When this value is set to enable(1), ACL traps are sent from the switch when they occur.
STR hm2AgentAclTrapRuleTimeRangeName	1.3.6.1.4.1.248.12.3.2.9.6	DisplayString	accessible-for-notify	Name of the time range on which there is a notification received. Used by hm2AgentAclTrapRuleTimeRangeEvent trap.
INT hm2AgentAclTrapRuleTimeRangeNotification	1.3.6.1.4.1.248.12.3.2.9.7	INTEGER	accessible-for-notify	Flag to indicate the type of time range notification received. Used by hm2AgentAclTrapRuleTimeRangeEvent trap.
INT hm2AgentAclTrapRuleInstallationStatus	1.3.6.1.4.1.248.12.3.2.9.8	INTEGER	accessible-for-notify	Value specifies the status of the ACL Rule installed in hardware as activated/deactivated. Used by hm2AgentAclTrapRuleTimeRangeEvent trap.
G32 hm2AgentAclTrapRuleHitCountHigh	1.3.6.1.4.1.248.12.3.2.9.248	Gauge32	accessible-for-notify	Upper 32bit of number of packets that matched the ACL rule during the most recent logging interval. Used by hm2AgentAclTrapRuleLogEventV1 trap.
G32 hm2AgentAclTrapRuleHitCountLow	1.3.6.1.4.1.248.12.3.2.9.249	Gauge32	accessible-for-notify	Lower 32bit of number of packets that matched the ACL rule during the most recent logging interval. Used by hm2AgentAclTrapRuleLogEventV1 trap.
hm2AgentAclVlanTable	1.3.6.1.4.1.248.12.3.2.13		not-accessible	A table of ACL VLAN instances per direction.
hm2AgentAclVlanEntry	1.3.6.1.4.1.248.12.3.2.13.1		not-accessible	An ACL VLAN table entry.
I32 hm2AgentAclVlanIndex	1.3.6.1.4.1.248.12.3.2.13.1.1	Integer32	not-accessible	The VLAN to which this ACL instance applies.
INT hm2AgentAclVlanDirection	1.3.6.1.4.1.248.12.3.2.13.1.2	INTEGER	not-accessible	The VLAN direction to which this ACL instance applies.
U32 hm2AgentAclVlanSequence	1.3.6.1.4.1.248.12.3.2.13.1.3	Unsigned32	not-accessible	The relative evaluation sequence of this ACL for this VLAN and direction. When multiple ACLs are allowed for a given VLAN and direction, the sequence number determines the order in which the list of ACLs are evaluated, with lower sequence numbers given higher precedence. The sequence number value is arbitrary, but must be an unique non-zero value for a given VLAN and direction. Setting this object to an existing sequence number value for a given VLAN and direction causes the ACL corresponding to that value to be replaced with this ACL.
INT hm2AgentAclVlanAclType	1.3.6.1.4.1.248.12.3.2.13.1.4	INTEGER	not-accessible	The type of this ACL, which is used to interpret the hm2AgentAclVlanId object value. Each type of ACL uses its own numbering scheme for identification (see hm2AgentAclVlanAclId object for details). The hm2AgentAclVlanAclId object must be specified along with this object.
I32 hm2AgentAclVlanAclId	1.3.6.1.4.1.248.12.3.2.13.1.5	Integer32	not-accessible	The ACL identifier value, which is interpreted based on the hm2AgentAclVlanType object. For the IP ACLs, the actual ACL number is its identifier as follows: IP standard ranges from 1-99, while IP extended ranges from 100-199. Here, hm2AgentAclVlanAclId represents hm2AgentAclIndex. The MAC ACLs use an internally generated index value that is assigned when the ACL is created. Here, hm2AgentAclVlanAclId represents hm2AgentAclMacIndex. The IPv6 ACLs use an internally generated index value that is assigned when the ACL is created. Here, hm2AgentAclVlanAclId represents hm2AgentAclIpv6Index. The hm2AgentAclVlanType object must be specified along with this object.
ROW hm2AgentAclVlanStatus	1.3.6.1.4.1.248.12.3.2.13.1.6	RowStatus	read-create	Status of this instance. active(1) - this ACL VLAN instance is active createAndGo(4) - set to this value to assign an ACL to a VLAN and direction destroy(6) - set to this value to remove an ACL from a VLAN and direction
I32 hm2AgentAclNamedIpv4IndexNextFree	1.3.6.1.4.1.248.12.3.2.14	Integer32	read-only	This object contains an unused value for the hm2AgentAclIndex to be used when creating a new named IPv4 ACL. A value of zero indicates the ACL table is full. For MSP devices the IPv4 ACL indexes start with 1000.
hm2AgentOperatorRuleAssignOutboundInvalid	1.3.6.1.4.1.248.12.3.2.248			IP ACL rule with 'greater than', 'lower than', 'not equal' operators cannot be assigned to an interface in outbound direction.

RFC description

Hirschmann Networks QoS and ACL platform MIB for traffic prioritization and filtering on industrial switches.

Start monitoring Hirschmann HiOS Platform2 industrial switch (QoS ACL policy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HM2-PLATFORM-QOS-ACL-MIB

What Is HM2-PLATFORM-QOS-ACL-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

How to Use in IPNetwork Monitor

RFC description