HPN-ICF-ACL-MIB

All MIBs › HPN-ICF-ACL-MIB

Last Updated: 2004-09-21

Category: Domain: Security, IP and Core Protocols, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: HP Networking ICF SNMP MIB for Access Control List (ACL) configuration and rule management on HP Networking devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-ACL-MIB?

HPN-ICF-ACL-MIB is a HP/H3C Comware proprietary MIB managing Access Control Lists (ACLs) and packet filtering, functionally identical to the sibling A3COM-HUAWEI-ACL-MIB but registered under HP/H3C Comware's own OID branch. Its objects cover a global ACL matching mode, a numbered-ACL-group table (ACL number, match order, subitem count, description, counter-clear action, row status), a named-ACL-group table (index, name, type, match order), and a basic-rule table defining rule action, source IP/wildcard mask, and an associated time range. As a configuration MIB it lets an administrator confirm an ACL's match order and rule content before troubleshooting unexpected traffic filtering. It is deployed on HP/H3C Comware switches and routers. Engineers can download the HPN-ICF-ACL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP/H3C Comware managed switches and routers

Monitoring Examples

An administrator checks hpnicfAclAclNumGroupMatchOrder for an ACL group to confirm rules are being evaluated in the intended order before diagnosing a rule that appears to be silently overridden.

What Can Be Monitored

ACL group and rule configuration

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommon

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType

From SNMPv2-SMI

Counter32
Counter64
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using hpnicfAclBasicCount OID:

Select an HP/H3C Comware managed switch or router (Access Control Lists) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfAclBasicCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The count of matched by basic rule. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpnicfAcl	1.3.6.1.4.1.11.2.14.11.15.2.8			ACL management information base for managing devices that support access control list and packet filtering.
hpnicfAclMibObjects	1.3.6.1.4.1.11.2.14.11.15.2.8.1
INT hpnicfAclMode	1.3.6.1.4.1.11.2.14.11.15.2.8.1.1	INTEGER	read-write	Access-list mode.
hpnicfAclNumGroupTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2		not-accessible	Configure the match-order of number-acl group.
hpnicfAclNumGroupEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2.1		not-accessible	Define the index of hpnicfAclNumGroupTable.
I32 hpnicfAclNumGroupAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2.1.1	Integer32	not-accessible	The index of number-acl group Interface type:1000..1999 Basic type:2000..2999 Advance type:3000..3999 Link type:4000..4999 User type:5000..5999
INT hpnicfAclNumGroupMatchOrder	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2.1.2	INTEGER	read-create	The match-order of number-acl group.
I32 hpnicfAclNumGroupSubitemNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2.1.3	Integer32	read-only	The number of number-acl group's node.
OCT hpnicfAclNumGroupDescription	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2.1.4	OCTET STRING	read-write	The description of this acl group.
INT hpnicfAclNumGroupCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2.1.5	INTEGER	read-create	Reset the value of rules' counter, which belong to this group.
ROW hpnicfAclNumGroupRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.2.1.6	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hpnicfAclNameGroupTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3		not-accessible	Create acl-group that identified by name.
hpnicfAclNameGroupEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3.1		not-accessible	Define the index of hpnicfAclNameGroupTable.
I32 hpnicfAclNameGroupIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3.1.1	Integer32	not-accessible	The index of name-acl group.
OCT hpnicfAclNameGroupCreateName	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3.1.2	OCTET STRING	read-create	The name of name-acl group.
INT hpnicfAclNameGroupTypes	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3.1.3	INTEGER	read-create	The type of name-acl group.
INT hpnicfAclNameGroupMatchOrder	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3.1.4	INTEGER	read-create	The match-order of name-acl group.
I32 hpnicfAclNameGroupSubitemNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3.1.5	Integer32	read-only	The number of name-acl group's node.
ROW hpnicfAclNameGroupRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.3.1.6	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hpnicfAclBasicRuleTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4		not-accessible	Configure the rule for basic acl group.
hpnicfAclBasicRuleEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1		not-accessible	Define the index of hpnicfAclBasicRuleTable.
I32 hpnicfAclBasicAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.1	Integer32	not-accessible	The index of basic acl group.
I32 hpnicfAclBasicSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.2	Integer32	not-accessible	The subindex of basic acl group.
INT hpnicfAclBasicAct	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.3	INTEGER	read-create	The action of basic acl rule.
IP hpnicfAclBasicSrcIp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.4	IpAddress	read-create	Source IP-address of basic acl rule.
IP hpnicfAclBasicSrcWild	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.5	IpAddress	read-create	Source IP-address wild of basic acl rule.
OCT hpnicfAclBasicTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.6	OCTET STRING	read-create	The Time-range of basic acl rule.
T/F hpnicfAclBasicFragments	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.7	TruthValue	read-create	The flag of matching fragmented packet.
T/F hpnicfAclBasicLog	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.8	TruthValue	read-create	The flag of log.
T/F hpnicfAclBasicEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.9	TruthValue	read-only	The rule is active or not. true : active false : inactive
C32 hpnicfAclBasicCountEx	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.10	Counter32	read-only	The count of matched by basic rule.
INT hpnicfAclBasicCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.11	INTEGER	read-create	Reset the value of counter.
ROW hpnicfAclBasicRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.4.1.12	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hpnicfAclAdvancedRuleTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5		not-accessible	Configure the rule for advanced acl group.
hpnicfAclAdvancedRuleEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1		not-accessible	Define the index of hpnicfAclAdvancedRuleTable.
I32 hpnicfAclAdvancedAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.1	Integer32	not-accessible	The index of advanced acl group.
I32 hpnicfAclAdvancedSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.2	Integer32	not-accessible	The subindex of advanced acl group.
INT hpnicfAclAdvancedAct	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.3	INTEGER	read-create	The action of Advance acl rule.
I32 hpnicfAclAdvancedProtocol	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.4	Integer32	read-create	The protocol-type of advanced acl group. Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
IP hpnicfAclAdvancedSrcIp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.5	IpAddress	read-create	Source IP-address of advanced acl group.
IP hpnicfAclAdvancedSrcWild	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.6	IpAddress	read-create	Source IP-address wild of advanced acl group.
INT hpnicfAclAdvancedSrcOp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.7	INTEGER	read-create	The source IP-address's operator of advanced acl group.
I32 hpnicfAclAdvancedSrcPort1	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.8	Integer32	read-create	The fourth layer source port1.
I32 hpnicfAclAdvancedSrcPort2	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.9	Integer32	read-create	The fourth layer source port2.
IP hpnicfAclAdvancedDestIp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.10	IpAddress	read-create	Destination IP-address of advanced acl group.
IP hpnicfAclAdvancedDestWild	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.11	IpAddress	read-create	Destination IP-address wild of advanced acl group.
INT hpnicfAclAdvancedDestOp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.12	INTEGER	read-create	The destination IP-address's operator of advanced acl group.
I32 hpnicfAclAdvancedDestPort1	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.13	Integer32	read-create	The fourth layer destination port1.
I32 hpnicfAclAdvancedDestPort2	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.14	Integer32	read-create	The fourth layer destination port2.
I32 hpnicfAclAdvancedPrecedence	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.15	Integer32	read-create	The value of IP-packet's precedence. Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7)
I32 hpnicfAclAdvancedTos	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.16	Integer32	read-create	The value of IP-packet's TOS. Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0)
I32 hpnicfAclAdvancedDscp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.17	Integer32	read-create	The value of DSCP. Value of DSCP af11 Specify Assured Forwarding 11 service(10) af12 Specify Assured Forwarding 12 service(12) af13 Specify Assured Forwarding 13 service(14) af21 Specify Assured Forwarding 21 service(18) af22 Specify Assured Forwarding 22 service(20) af23 Specify Assured Forwarding 23 service(22) af31 Specify Assured Forwarding 31 service(26) af32 Specify Assured Forwarding 32 service(28) af33 Specify Assured Forwarding 33 service(30) af41 Specify Assured Forwarding 41 service(34) af42 Specify Assured Forwarding 42 service(36) af43 Specify Assured Forwarding 43 service(38) be Specify Best Effort service(0) cs1 Specify Class Selector 1 service(8) cs2 Specify Class Selector 2 service(16) cs3 Specify Class Selector 3 service(24) cs4 Specify Class Selector 4 service(32) cs5 Specify Class Selector 5 service(40) cs6 Specify Class Selector 6 service(48) cs7 Specify Class Selector 7 service(56) ef Specify Expedited Forwarding service(46)
T/F hpnicfAclAdvancedEstablish	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.18	TruthValue	read-create	Establish flag.
OCT hpnicfAclAdvancedTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.19	OCTET STRING	read-create	The Time-range of advanced acl rule.
I32 hpnicfAclAdvancedIcmpType	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.20	Integer32	read-create	The type of ICMP packet. Integer32 ICMP type echo Type=8, Code=0 echo-reply Type=0, Code=0 fragmentneed-DFset Type=3, Code=4 host-redirect Type=5, Code=1 host-tos-redirect Type=5, Code=3 host-unreachable Type=3, Code=1 information-reply Type=16, Code=0 information-request Type=15, Code=0 net-redirect Type=5, Code=0 net-tos-redirect Type=5, Code=2 net-unreachable Type=3, Code=0 parameter-problem Type=12, Code=0 port-unreachable Type=3, Code=3 protocol-unreachable Type=3, Code=2 reassembly-timeout Type=11, Code=1 source-quench Type=4, Code=0 source-route-failed Type=3, Code=5 timestamp-reply Type=14, Code=0 timestamp-request Type=13, Code=0 ttl-exceeded Type=11, Code=0
I32 hpnicfAclAdvancedIcmpCode	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.21	Integer32	read-create	The code of ICMP packet.
T/F hpnicfAclAdvancedFragments	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.22	TruthValue	read-create	The flag of matching fragmented packet.
T/F hpnicfAclAdvancedLog	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.23	TruthValue	read-create	The flag of log.
T/F hpnicfAclAdvancedEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.24	TruthValue	read-only	The rule is active or not. true : active false : inactive
C32 hpnicfAclAdvancedCount	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.25	Counter32	read-only	The count of matched by advanced rule.
INT hpnicfAclAdvancedCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.26	INTEGER	read-create	Reset the value of counter.
ROW hpnicfAclAdvancedRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.5.1.27	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hpnicfAclIfRuleTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6		not-accessible	Configure the rule for interface-based acl group.
hpnicfAclIfRuleEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1		not-accessible	Define the index of hpnicfAclIfRuleTable.
I32 hpnicfAclIfAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.1	Integer32	not-accessible	The index of interface-based acl group.
I32 hpnicfAclIfSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.2	Integer32	not-accessible	The subindex of interface-based acl group.
INT hpnicfAclIfAct	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.3	INTEGER	read-create	The action of interface-based acl group.
I32 hpnicfAclIfIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.4	Integer32	read-create	The index of interface.
T/F hpnicfAclIfAny	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.5	TruthValue	read-create	The flag of matching any interface.
OCT hpnicfAclIfTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.6	OCTET STRING	read-create	The Time-range of interface-based acl rule.
T/F hpnicfAclIfLog	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.7	TruthValue	read-create	The flag of log.
T/F hpnicfAclIfEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.8	TruthValue	read-only	The rule is active or not. true : active false : inactive
C32 hpnicfAclIfCount	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.9	Counter32	read-only	The count of matched by basic rule.
INT hpnicfAclIfCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.10	INTEGER	read-create	Reset the value of the rule's counter.
ROW hpnicfAclIfRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.6.1.11	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hpnicfAclLinkTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7		not-accessible	Create link acl.
hpnicfAclLinkEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1		not-accessible	The entry of the link acl table.
I32 hpnicfAclLinkAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.1	Integer32	not-accessible	The index of link-based acl group.
I32 hpnicfAclLinkSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.2	Integer32	not-accessible	The subindex of link-based acl group.
INT hpnicfAclLinkAct	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.3	INTEGER	read-create	The action of link-based acl group.
INT hpnicfAclLinkProtocol	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.4	INTEGER	read-create	The layer 2 protocol-type of link acl rule.
INT hpnicfAclLinkFormatType	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.5	INTEGER	read-create	Format type of link acl rule.
INT hpnicfAclLinkVlanTag	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.6	INTEGER	read-create	The flag of vlan tag of link acl rule.
I32 hpnicfAclLinkVlanPri	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.7	Integer32	read-create	Vlan priority of link acl rule.
I32 hpnicfAclLinkSrcVlanId	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.8	Integer32	read-create	Source vlan ID of link acl rule.
MAC hpnicfAclLinkSrcMac	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.9	MacAddress	read-create	Source mac of link acl rule.
MAC hpnicfAclLinkSrcMacWild	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.10	MacAddress	read-create	Source mac wildzard of link acl rule.
I32 hpnicfAclLinkSrcIfIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.11	Integer32	read-create	Source IfIndex of link acl rule.
T/F hpnicfAclLinkSrcAny	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.12	TruthValue	read-create	The flag of matching any source.
I32 hpnicfAclLinkDestVlanId	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.13	Integer32	read-create	Destination vlan ID of link acl rule.
MAC hpnicfAclLinkDestMac	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.14	MacAddress	read-create	Destination mac of link acl rule.
MAC hpnicfAclLinkDestMacWild	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.15	MacAddress	read-create	Destination mac wildzard of link acl rule.
I32 hpnicfAclLinkDestIfIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.16	Integer32	read-create	Destination IfIndex of link acl rule.
T/F hpnicfAclLinkDestAny	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.17	TruthValue	read-create	The flag of matching any destination.
OCT hpnicfAclLinkTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.18	OCTET STRING	read-create	The Time-range of link-based acl rule.
T/F hpnicfAclLinkEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.19	TruthValue	read-only	The rule is active or not. true : active false : inactive
ROW hpnicfAclLinkRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.20	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
OCT hpnicfAclLinkTypeCode	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.21	OCTET STRING	read-create	The type of layer 2 protocol.0x0000...0xffff.
OCT hpnicfAclLinkTypeMask	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.22	OCTET STRING	read-create	The mask of layer 2 protocol.0x0000...0xffff.
OCT hpnicfAclLinkLsapCode	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.23	OCTET STRING	read-create	The type of LSAP.0x0000...0xffff.
OCT hpnicfAclLinkLsapMask	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.24	OCTET STRING	read-create	The mask of LSAP.0x0000...0xffff.
INT hpnicfAclLinkL2LabelRangeOp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.25	INTEGER	read-create	Operation symbol of the MPLS label. If the symbol is range(5), the objects hpnicfAclLinkL2LabelRangeBegin and hpnicfAclLinkL2LabelRangeEnd should have different values indicating a range. Otherwise, only hpnicfAclLinkL2LabelRangeBegin counts, object hpnicfAclLinkL2LabelRangeEnd is ignored. invalid(0) -- unavailable lt(1) -- less than eq(2) -- equal gt(3) -- great than neq(4) -- not equal range(5) -- a range with two ends included
I32 hpnicfAclLinkL2LabelRangeBegin	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.26	Integer32	read-create	The beginning of VPLS VC label.
I32 hpnicfAclLinkL2LabelRangeEnd	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.27	Integer32	read-create	The end of VPLS VC label.
I32 hpnicfAclLinkMplsExp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.7.1.28	Integer32	read-create	The value of MPLS-packet's Exp.
hpnicfAclUserTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8		not-accessible	Create user acl.
hpnicfAclUserEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1		not-accessible	The entry of user acl table.
I32 hpnicfAclUserAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.1	Integer32	not-accessible	The number of the user acl.
I32 hpnicfAclUserSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.2	Integer32	not-accessible	The subitem of the user acl.
INT hpnicfAclUserAct	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.3	INTEGER	read-create	The action of the user acl.
INT hpnicfAclUserFormatType	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.4	INTEGER	read-create	Format type.
INT hpnicfAclUserVlanTag	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.5	INTEGER	read-create	Vlan tag exits or not.
OCT hpnicfAclUserRuleStr	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.6	OCTET STRING	read-create	Rule string.
OCT hpnicfAclUserRuleMask	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.7	OCTET STRING	read-create	Rule mask.
OCT hpnicfAclUserTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.8	OCTET STRING	read-create	The Time-range of the user defined acl.
T/F hpnicfAclUserEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.9	TruthValue	read-only	The rule is active or not. true : active false : inactive
ROW hpnicfAclUserRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.8.1.10	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hpnicfAclActiveTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9		not-accessible	Active acl.
hpnicfAclActiveEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1		not-accessible	The entry of active acl table.
I32 hpnicfAclActiveAclIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.1	Integer32	not-accessible	Acl index.
I32 hpnicfAclActiveIfIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.2	Integer32	not-accessible	IfIndex.
I32 hpnicfAclActiveVlanID	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.3	Integer32	not-accessible	The lower 16 bits is Vlan ID, the higher 16 bits, if not zero, it describes the slot ID of the L3plus board.
INT hpnicfAclActiveDirection	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.4	INTEGER	not-accessible	Direction.
I32 hpnicfAclActiveUserAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.5	Integer32	read-create	The number of the user acl.
I32 hpnicfAclActiveUserAclSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.6	Integer32	read-create	The subitem of the user acl.
I32 hpnicfAclActiveIpAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.7	Integer32	read-create	The number of the IP acl.
I32 hpnicfAclActiveIpAclSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.8	Integer32	read-create	The subitem of the IP acl.
I32 hpnicfAclActiveLinkAclNum	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.9	Integer32	read-create	The num of the link acl.
I32 hpnicfAclActiveLinkAclSubitem	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.10	Integer32	read-create	The subitem of the link acl.
T/F hpnicfAclActiveRuntime	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.11	TruthValue	read-only	Is run or not.
ROW hpnicfAclActiveRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.9.1.12	RowStatus	read-create	RowStatus, now support three state: CreateAndGo, Active, Destroy.
hpnicfAclIDSTable	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10		not-accessible	Configure the rule for IDS.
hpnicfAclIDSEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1		not-accessible	The entry of acl ids table.
OCT hpnicfAclIDSName	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.1	OCTET STRING	not-accessible	The name index of the IDS table.
MAC hpnicfAclIDSSrcMac	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.2	MacAddress	read-create	Source mac of IDS acl rule.
MAC hpnicfAclIDSDestMac	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.3	MacAddress	read-create	Destination mac of IDS acl rule.
IP hpnicfAclIDSSrcIp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.4	IpAddress	read-create	Source IP-address of IDS acl rule.
IP hpnicfAclIDSSrcWild	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.5	IpAddress	read-create	Source IP-address wild of IDS acl rule.
IP hpnicfAclIDSDestIp	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.6	IpAddress	read-create	Destination IP-address of IDS acl rule.
IP hpnicfAclIDSDestWild	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.7	IpAddress	read-create	Destination IP-address wild of IDS acl rule.
I32 hpnicfAclIDSSrcPort	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.8	Integer32	read-create	The fourth layer source port.
I32 hpnicfAclIDSDestPort	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.9	Integer32	read-create	The fourth layer destination port.
I32 hpnicfAclIDSProtocol	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.10	Integer32	read-create	The protocol-type of advanced acl group. Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
U32 hpnicfAclIDSDenyTime	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.11	Unsigned32	read-create	The maximum number of seconds which deny for this acl rule.
INT hpnicfAclIDSAct	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.12	INTEGER	read-create	The action of IDS acl rule.
ROW hpnicfAclIDSRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.1.10.1.13	RowStatus	read-create	RowStatus, now supports three states: CreateAndGo, Active, and Destroy.
hpnicfAclMib2Objects	1.3.6.1.4.1.11.2.14.11.15.2.8.2
hpnicfAclMib2GlobalGroup	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1
hpnicfAclMib2NodesGroup	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.1
INT hpnicfAclMib2Mode	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.1.1	INTEGER	read-write	The applying mode of ACL.
I32 hpnicfAclMib2Version	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.1.2	Integer32	read-only	The version of this file. The output value has the format of 'xx'or 'xxx'. For example: 10 means 1.0; 125 means 12.5.
BIT hpnicfAclMib2ObjectsCapabilities	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.1.3	Bits	read-only	The objects of hpnicfAclMib2Objects.
INT hpnicfAclMib2ProcessingStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.1.4	INTEGER	read-only	The processing status of ACL operation.
hpnicfAclMib2CapabilityTable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2		not-accessible	The capability of mib2.
hpnicfAclMib2CapabilityEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2.1		not-accessible	The information of Capability of mib2.
INT hpnicfAclMib2EntityType	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2.1.1	INTEGER	not-accessible	The type of entity . system: The entity is systemic level. interface: The entity is interface level.
I32 hpnicfAclMib2EntityIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2.1.2	Integer32	not-accessible	The index of entity. If hpnicfAclMib2EntityType is system, the value of this object is 0. If hpnicfAclMib2EntityType is interface, the value of this object is equal to 'ifIndex'.
INT hpnicfAclMib2ModuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2.1.3	INTEGER	not-accessible	The module index of ACL.
I32 hpnicfAclMib2CharacteristicsIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2.1.4	Integer32	not-accessible	The characteristics index of mib2. See DESCRIPTION of hpnicfAclMib2CharacteristicsValue to get detail information about the value of this object.
OCT hpnicfAclMib2CharacteristicsDesc	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2.1.5	OCTET STRING	read-only	The description of characteristics.
U32 hpnicfAclMib2CharacteristicsValue	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.2.1.6	Unsigned32	read-only	The value of capability of this object. TypeOfRuleStringValue : notSupport(0) and the length of RuleString. TypeOfCodeValue : OnlyOneNotSupport(0), MoreThanOneNotSupport(1) If hpnicfAclMib2CharacteristicsValue is 'moreThanOneNotSupport', hpnicfAclMib2CharacteristicsDesc must be used to depict which protocols are not supported. The output value of hpnicfAclMib2CharacteristicsDesc has the format of 'a,b'. For example, 'ip,rarp'. layer3 Module: Index Characteristics value 1 SourceIPAddress notSupport(0) 2 DestinationIPAddress notSupport(0) 3 SourcePort notSupport(0) 4 DestinationPort notSupport(0) 5 IPPrecedence notSupport(0) 6 TOS notSupport(0) 7 DSCP notSupport(0) 8 TCPFlag notSupport(0) 9 FragmentFlag notSupport(0) 10 Log notSupport(0) 11 RuleMatchCounter notSupport(0) 12 ResetRuleMatchCounter notSupport(0) 13 VPN notSupport(0) 15 protocol notSupport(0) 16 AddressFlag notSupport(0) layer2 Module: Index Characteristics value 1 ProtocolType TypeOfCodeValue 2 SourceMAC notSupport(0) 3 DestinationMAC notSupport(0) 4 LSAPType TypeOfCodeValue 5 CoS notSupport(0) UserDefined Module: Index Characteristics value 1 UserDefaultOffset TypeOfRuleStringValue 2 UserL2RuleOffset TypeOfRuleStringValue 3 UserMplsOffset TypeOfRuleStringValue 4 UserIPv4Offset TypeOfRuleStringValue 5 UserIPv6Offset TypeOfRuleStringValue 6 UserL4Offset TypeOfRuleStringValue 7 UserL5Offset TypeOfRuleStringValue
hpnicfAclNumberGroupTable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3		not-accessible	A table of the number acl group information.
hpnicfAclNumberGroupEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1		not-accessible	Number acl group information entry.
INT hpnicfAclNumberGroupType	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.1	INTEGER	not-accessible	The type of number group. Basic ACL and Advanced ACL support ipv4 and ipv6. The range of Basic ACL is from 2000 to 2999. The range of Advanced ACL is from 3000 to 3999. Simple ACL supports ipv6 only. The range of Simple ACL is from 10000 to 42767. MAC ACL and User ACL support ipv4 only. The range of MAC ACL is from 4000 to 4999. The range of User ACL is from 5000 to 5999.
I32 hpnicfAclNumberGroupIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.2	Integer32	not-accessible	The group index of number acl. Basic type:2000..2999 Advanced type:3000..3999 MAC type:4000..4999 User type:5000..5999 Simple type:10000..42767
ROW hpnicfAclNumberGroupRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.3	RowStatus	read-create	RowStatus.
INT hpnicfAclNumberGroupMatchOrder	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.4	INTEGER	read-create	The match-order of number acl group.
I32 hpnicfAclNumberGroupStep	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.5	Integer32	read-create	The step of rule index.
OCT hpnicfAclNumberGroupDescription	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.6	OCTET STRING	read-create	Description of this acl group.
NUM hpnicfAclNumberGroupCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.7	CounterClear	read-write	Reset the value of counters of this group.
C32 hpnicfAclNumberGroupRuleCounter	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.8	Counter32	read-only	The rule count of number acl group.
OCT hpnicfAclNumberGroupName	1.3.6.1.4.1.11.2.14.11.15.2.8.2.1.3.1.9	OCTET STRING	read-create	Name of this acl group.
hpnicfAclIPAclGroup	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2
hpnicfAclIPAclBasicTable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2		not-accessible	A table of basic rule group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hpnicfAclIPAclBasicEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1		not-accessible	Basic rule group information.
I32 hpnicfAclIPAclBasicRuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.1	Integer32	not-accessible	The rule index of basic acl group.
ROW hpnicfAclIPAclBasicRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.2	RowStatus	read-create	RowStatus.
RUL hpnicfAclIPAclBasicAct	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.3	RuleAction	read-create	The action of basic acl rule.
IPt hpnicfAclIPAclBasicSrcAddrType	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.4	InetAddressType	read-create	The IP addresses type of IP pool.
IP hpnicfAclIPAclBasicSrcAddr	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.5	InetAddress	read-create	The value of a local IP address is available for this association. The type of this address is determined by the value of hpnicfAclIPAclBasicSrcAddrType.
ADR hpnicfAclIPAclBasicSrcPrefix	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.6	InetAddressPrefixLength	read-create	Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
T/F hpnicfAclIPAclBasicSrcAny	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.7	TruthValue	read-create	The flag of matching any IP address.
IP hpnicfAclIPAclBasicSrcWild	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.8	IpAddress	read-create	Source IPv4 address wild. Only IPv4 Basic Rule support this object. Default value is '0.0.0.0'.
OCT hpnicfAclIPAclBasicTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.9	OCTET STRING	read-create	The Time-range of basic acl rule. Default value is null.
FRA hpnicfAclIPAclBasicFragmentFlag	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.10	FragmentFlag	read-create	The flag of matching fragmented packets.
T/F hpnicfAclIPAclBasicLog	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.11	TruthValue	read-create	The packet will be logged when it matches the rule.
U32 hpnicfAclIPAclBasicCount	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.12	Unsigned32	read-only	The count of matched by the rule.
NUM hpnicfAclIPAclBasicCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.13	CounterClear	read-write	Reset the value of counter.
T/F hpnicfAclIPAclBasicEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.14	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hpnicfAclIPAclBasicVpnInstanceName	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.15	OCTET STRING	read-create	The VPN name, which the rule will be applied. Default value is null.
OCT hpnicfAclIPAclBasicComment	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.16	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
T/F hpnicfAclIPAclBasicCounting	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.17	TruthValue	read-create	The packet will be counted when it matches the rule. It is disabled by default.
T/F hpnicfAclIPAclBasicRouteTypeAny	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.18	TruthValue	read-create	The flag of matching any type of routing header of IPv6 packet.
I32 hpnicfAclIPAclBasicRouteTypeValue	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.2.1.19	Integer32	read-create	Match specify type of routing header of IPv6 packet.
hpnicfAclIPAclAdvancedTable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3		not-accessible	A table of advanced and simple acl group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hpnicfAclIPAclAdvancedEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1		not-accessible	Advanced acl group information.
I32 hpnicfAclIPAclAdvancedRuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.1	Integer32	not-accessible	The rule index of advanced acl group. As a Simple ACL group, the value of this object must be 0. As an Advanced ACL group, the value of this object is ranging from 0 to 65534.
ROW hpnicfAclIPAclAdvancedRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.2	RowStatus	read-create	RowStatus.
RUL hpnicfAclIPAclAdvancedAct	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.3	RuleAction	read-create	The action of advanced acl rule.
I32 hpnicfAclIPAclAdvancedProtocol	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.4	Integer32	read-create	The protocol-type of advanced acl group. Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) icmpv6 Internet Control Message Protocol6(58) igmp Internet Group Management Protocol(2) ip Any IPv4 protocol ipv6 Any IPv6 protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17) ipv6-ah IPv6 Authentication Header(51) ipv6-esp IPv6 Encapsulating Security Payload(50)
ADR hpnicfAclIPAclAdvancedAddrFlag	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.5	AddressFlag	read-create	Address flag to select address.
IPt hpnicfAclIPAclAdvancedSrcAddrType	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.6	InetAddressType	read-create	The IP addresses type of IP pool.
IP hpnicfAclIPAclAdvancedSrcAddr	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.7	InetAddress	read-create	The value of a local IP address available for this association. The type of this address is determined by the value of hpnicfAclIPAclAdvancedSrcAddrType.
ADR hpnicfAclIPAclAdvancedSrcPrefix	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.8	InetAddressPrefixLength	read-create	Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
T/F hpnicfAclIPAclAdvancedSrcAny	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.9	TruthValue	read-create	The flag of matching any IP address.
IP hpnicfAclIPAclAdvancedSrcWild	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.10	IpAddress	read-create	Source IPv4 address wild. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'.
POR hpnicfAclIPAclAdvancedSrcOp	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.11	PortOp	read-create	Source port operation symbol of advanced acl group.
I32 hpnicfAclIPAclAdvancedSrcPort1	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.12	Integer32	read-create	The fourth layer source port1.
I32 hpnicfAclIPAclAdvancedSrcPort2	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.13	Integer32	read-create	The fourth layer source port2.
IPt hpnicfAclIPAclAdvancedDestAddrType	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.14	InetAddressType	read-create	The IP addresses type of IP pool.
IP hpnicfAclIPAclAdvancedDestAddr	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.15	InetAddress	read-create	The value of a local IP address available for this association. The type of this address is determined by the value of hpnicfAclIPAclAdvancedDestAddrType.
ADR hpnicfAclIPAclAdvancedDestPrefix	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.16	InetAddressPrefixLength	read-create	Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
T/F hpnicfAclIPAclAdvancedDestAny	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.17	TruthValue	read-create	The flag of matching any IP address.
IP hpnicfAclIPAclAdvancedDestWild	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.18	IpAddress	read-create	Destination IPv4 address wild. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'.
POR hpnicfAclIPAclAdvancedDestOp	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.19	PortOp	read-create	Destination port operation symbol of advanced acl group.
I32 hpnicfAclIPAclAdvancedDestPort1	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.20	Integer32	read-create	The fourth layer destination port1.
I32 hpnicfAclIPAclAdvancedDestPort2	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.21	Integer32	read-create	The fourth layer destination port2.
I32 hpnicfAclIPAclAdvancedIcmpType	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.22	Integer32	read-create	The type of ICMP packet.
I32 hpnicfAclIPAclAdvancedIcmpCode	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.23	Integer32	read-create	The code of ICMP packet.
I32 hpnicfAclIPAclAdvancedPrecedence	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.24	Integer32	read-create	The value of IP-packet's precedence. Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7)
I32 hpnicfAclIPAclAdvancedTos	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.25	Integer32	read-create	The value of IP-packet's TOS. Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0)
DSC hpnicfAclIPAclAdvancedDscp	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.26	DSCPValue	read-create	The value of DSCP of IP packet.
OCT hpnicfAclIPAclAdvancedTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.27	OCTET STRING	read-create	The Time-range of advanced acl rule. Default value is null.
TCP hpnicfAclIPAclAdvancedTCPFlag	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.28	TCPFlag	read-create	The packet type of TCP protocol.
FRA hpnicfAclIPAclAdvancedFragmentFlag	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.29	FragmentFlag	read-create	The flag of matching fragmented packet, and now support two value: 0 or 2 .
T/F hpnicfAclIPAclAdvancedLog	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.30	TruthValue	read-create	Log matched packets.
U32 hpnicfAclIPAclAdvancedCount	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.31	Unsigned32	read-only	The count of matched by the rule.
NUM hpnicfAclIPAclAdvancedCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.32	CounterClear	read-write	Reset the value of counter.
T/F hpnicfAclIPAclAdvancedEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.33	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hpnicfAclIPAclAdvancedVpnInstanceName	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.34	OCTET STRING	read-create	The VPN name that the rule will be applied. Default value is null.
OCT hpnicfAclIPAclAdvancedComment	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.35	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
T/F hpnicfAclIPAclAdvancedReflective	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.36	TruthValue	read-create	The flag of reflective.
T/F hpnicfAclIPAclAdvancedCounting	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.37	TruthValue	read-create	The packet will be counted when it matches the rule. It is disabled by default.
BIT hpnicfAclIPAclAdvancedTCPFlagMask	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.38	Bits	read-create	The TCP Flag Mask. This is a bit-map of possible conditions. The various bit positions are: \|0 \|tcpack \| \|1 \|tcpfin \| \|2 \|tcppsh \| \|3 \|tcprst \| \|4 \|tcpsyn \| \|5 \|tcpurg \|
BIT hpnicfAclIPAclAdvancedTCPFlagValue	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.39	Bits	read-create	The TCP Flag Value. This is a bit-map of possible conditions. The various bit positions are: \|0 \|tcpack \| \|1 \|tcpfin \| \|2 \|tcppsh \| \|3 \|tcprst \| \|4 \|tcpsyn \| \|5 \|tcpurg \|
T/F hpnicfAclIPAclAdvancedRouteTypeAny	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.40	TruthValue	read-create	The flag of matching any type of routing header of IPv6 packet.
I32 hpnicfAclIPAclAdvancedRouteTypeValue	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.41	Integer32	read-create	The type of routing header of IPv6 packet.
U32 hpnicfAclIPAclAdvancedFlowLabel	1.3.6.1.4.1.11.2.14.11.15.2.8.2.2.3.1.42	Unsigned32	read-create	The value of flow label of IPv6 packet header.
hpnicfAclMACAclGroup	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3
hpnicfAclMACTable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1		not-accessible	A table of MAC acl group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hpnicfAclMACEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1		not-accessible	MAC acl group information.
I32 hpnicfAclMACRuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.1	Integer32	not-accessible	The rule index of MAC-based acl group.
ROW hpnicfAclMACRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.2	RowStatus	read-create	RowStatus.
RUL hpnicfAclMACAct	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.3	RuleAction	read-create	The action of MAC acl rule.
OCT hpnicfAclMACTypeCode	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.4	OCTET STRING	read-create	The type of protocol.
OCT hpnicfAclMACTypeMask	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.5	OCTET STRING	read-create	The mask of protocol.
MAC hpnicfAclMACSrcMac	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.6	MacAddress	read-create	Source MAC of MAC acl rule. Default value is '00:00:00:00:00:00'.
MAC hpnicfAclMACSrcMacWild	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.7	MacAddress	read-create	Source MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00'.
MAC hpnicfAclMACDestMac	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.8	MacAddress	read-create	Destination MAC of MAC acl rule. Default value is '00:00:00:00:00:00'.
MAC hpnicfAclMACDestMacWild	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.9	MacAddress	read-create	Destination MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00'
OCT hpnicfAclMACLsapCode	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.10	OCTET STRING	read-create	The type of LSAP.
OCT hpnicfAclMACLsapMask	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.11	OCTET STRING	read-create	The mask of LSAP.
I32 hpnicfAclMACCos	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.12	Integer32	read-create	Vlan priority of MAC acl rule.
OCT hpnicfAclMACTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.13	OCTET STRING	read-create	The Time-range of MAC acl rule. Default value is null.
U32 hpnicfAclMACCount	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.14	Unsigned32	read-only	The count of matched frame by the rule.
NUM hpnicfAclMACCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.15	CounterClear	read-write	Reset the value of counter.
T/F hpnicfAclMACEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.16	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hpnicfAclMACComment	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.17	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
T/F hpnicfAclMACLog	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.18	TruthValue	read-create	The packet will be logged when it matches the rule. It is disabled by default.
T/F hpnicfAclMACCounting	1.3.6.1.4.1.11.2.14.11.15.2.8.2.3.1.1.19	TruthValue	read-create	The packet will be counted when it matches the rule. It is disabled by default.
hpnicfAclEnUserAclGroup	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4
hpnicfAclEnUserTable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3		not-accessible	A table of user acl group information. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
hpnicfAclEnUserEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1		not-accessible	User defined acl group entry.
I32 hpnicfAclEnUserRuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.1	Integer32	not-accessible	The subitem of the user acl.
ROW hpnicfAclEnUserRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.2	RowStatus	read-create	RowStatus.
RUL hpnicfAclEnUserAct	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.3	RuleAction	read-create	The action of user defined acl rule.
OCT hpnicfAclEnUserStartString	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.4	OCTET STRING	read-create	The rule, matching packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value of this object is defined by product and it indicates the offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: 10,10af,ffff. Default value is null.
OCT hpnicfAclEnUserL2String	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.5	OCTET STRING	read-create	The rule, matching layer 2 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hpnicfAclEnUserMplsString	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.6	OCTET STRING	read-create	The rule, matching mpls packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hpnicfAclEnUserIPv4String	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.7	OCTET STRING	read-create	The rule, matching IPv4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hpnicfAclEnUserIPv6String	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.8	OCTET STRING	read-create	The rule, matching IPv6 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hpnicfAclEnUserL4String	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.9	OCTET STRING	read-create	The rule, matching layer 4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hpnicfAclEnUserL5String	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.10	OCTET STRING	read-create	The rule, matching layer 5 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OCT hpnicfAclEnUserTimeRangeName	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.11	OCTET STRING	read-create	The Time-range of user acl rule. Default value is null.
U32 hpnicfAclEnUserCount	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.12	Unsigned32	read-only	The count of matched by the rule.
NUM hpnicfAclEnUserCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.13	CounterClear	read-write	Reset the value of counter.
T/F hpnicfAclEnUserEnable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.14	TruthValue	read-only	The rule is active or not. true : active false : inactive
OCT hpnicfAclEnUserComment	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.15	OCTET STRING	read-create	The description of ACL rule. Default value is Zero-length String.
T/F hpnicfAclEnUserLog	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.16	TruthValue	read-create	The packet will be logged when it matches the rule. It is disabled by default.
T/F hpnicfAclEnUserCounting	1.3.6.1.4.1.11.2.14.11.15.2.8.2.4.3.1.17	TruthValue	read-create	The packet will be counted when it matches the rule. It is disabled by default.
hpnicfAclResourceGroup	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5
hpnicfAclResourceUsageTable	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1		not-accessible	The table shows ACL resource usage information. Support for resource types that are denoted by hpnicfAclResourceType object varies with products. If a type is not supported, the corresponding row for the type will not be instantiated in this table.
hpnicfAclResourceUsageEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1		not-accessible	Each row contains a brief description of the resource type, a port range associated with the chip, total, reserved, and configured amount of resource of this type, the percent of resource that has been allocated, and so on.
U32 hpnicfAclResourceChassis	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.1	Unsigned32	not-accessible	The chassis number. On a centralized or distributed device, the value for this node is always zero.
U32 hpnicfAclResourceSlot	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.2	Unsigned32	not-accessible	The slot number. On a centralized device, the value for this node is always zero.
U32 hpnicfAclResourceChip	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.3	Unsigned32	not-accessible	The chip number. On a single chip device, the value for this node is always zero.
I32 hpnicfAclResourceType	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.4	Integer32	not-accessible	The resource type.
OCT hpnicfAclPortRange	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.5	OCTET STRING	read-only	The port range associated with the chip. Commas are used to separate multiple port ranges, for example, Ethernet1/2 to Ethernet1/12, Ethernet1/31 to Ethernet1/48.
U32 hpnicfAclResourceTotal	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.6	Unsigned32	read-only	Total TCAM entries of the resource type.
U32 hpnicfAclResourceReserved	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.7	Unsigned32	read-only	The amount of reserved TCAM entries of the resource type.
U32 hpnicfAclResourceConfigured	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.8	Unsigned32	read-only	The amount of configured TCAM entries of the resource type.
U32 hpnicfAclResourceUsagePercent	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.9	Unsigned32	read-only	The percent of TCAM entries that have been used for this resource type.
OCT hpnicfAclResourceTypeDescription	1.3.6.1.4.1.11.2.14.11.15.2.8.2.5.1.1.10	OCTET STRING	read-only	The description of this resource type.
hpnicfAclPacketFilterObjects	1.3.6.1.4.1.11.2.14.11.15.2.8.3
hpnicfPfilterScalarGroup	1.3.6.1.4.1.11.2.14.11.15.2.8.3.1
INT hpnicfPfilterDefaultAction	1.3.6.1.4.1.11.2.14.11.15.2.8.3.1.1	INTEGER	read-write	The default action of packet filter. By default, the packet filter permits packets that do not match any ACL rule to pass.
INT hpnicfPfilterProcessingStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.3.1.2	INTEGER	read-only	This object shows the status of the system when applying packet filter. It is forbidden to set or read in hpnicfAclPacketFilterObjects MIB module when the value is processing.
hpnicfPfilterApplyTable	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2		not-accessible	A table of packet filter application. It's not supported to set default action on an entity, but supported to enable hardware count of default action on an entity.
hpnicfPfilterApplyEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1		not-accessible	Packet filter application information entry.
INT hpnicfPfilterApplyObjType	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.1	INTEGER	not-accessible	The object type of packet filter application. interface: Apply an ACL to the interface to filter packets. vlan: Apply an ACL to the VLAN to filter packets. global: Apply an ACL globally to filter packets.
I32 hpnicfPfilterApplyObjIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.2	Integer32	not-accessible	The object ID of packet filter application. Interface: interface index, equal to ifIndex VLAN: VLAN ID, 1..4094 Global: 0
DIR hpnicfPfilterApplyDirection	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.3	DirectionType	not-accessible	The direction of packet filter application.
INT hpnicfPfilterApplyAclType	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.4	INTEGER	not-accessible	ACL Type: IPv4, IPv6, default action. Take default action as a special ACL group.
I32 hpnicfPfilterApplyAclIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.5	Integer32	not-accessible	The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 Default action type: 0
T/F hpnicfPfilterApplyHardCount	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.6	TruthValue	read-create	Hardware count flag. true: enable hardware count false: disable hardware count
U32 hpnicfPfilterApplySequence	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.7	Unsigned32	read-only	The configure sequence of packet filter application.
NUM hpnicfPfilterApplyCountClear	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.8	CounterClear	read-write	Clear the value of counters.
ROW hpnicfPfilterApplyRowStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.3.2.1.9	RowStatus	read-create	RowStatus.
hpnicfPfilterAclGroupRunInfoTable	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3		not-accessible	A table of group running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the statistics entry will be zero.
hpnicfPfilterAclGroupRunInfoEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1		not-accessible	ACL group running information entry for packet filtering.
INT hpnicfPfilterRunApplyObjType	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.1	INTEGER	not-accessible	The object type of packet filter application. interface: Apply an ACL to the interface to filter packets. vlan: Apply an ACL to the VLAN to filter packets. global: Apply an ACL globally to filter packets.
I32 hpnicfPfilterRunApplyObjIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.2	Integer32	not-accessible	The object ID of packet filter application. Interface: interface index, equal to ifIndex VLAN: VLAN ID, 1..4094 Global: 0
DIR hpnicfPfilterRunApplyDirection	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.3	DirectionType	not-accessible	The direction of packet filter application.
INT hpnicfPfilterRunApplyAclType	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.4	INTEGER	not-accessible	ACL Type: IPv4, IPv6, default action. Take default action as a special ACL group.
I32 hpnicfPfilterRunApplyAclIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.5	Integer32	not-accessible	The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 MAC default action: 1 IPv4 default action: 2 IPv6 default action: 3
INT hpnicfPfilterAclGroupStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.6	INTEGER	read-only	The status of ACL group applied. success: ACL applied successfully on all slots failed: failed to apply ACL on all slots partialSuccess: failed to apply ACL on some slots
INT hpnicfPfilterAclGroupCountStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.7	INTEGER	read-only	The status of enabling hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots
C64 hpnicfPfilterAclGroupPermitPkts	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.8	Counter64	read-only	The number of packets permitted.
C64 hpnicfPfilterAclGroupPermitBytes	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.9	Counter64	read-only	The number of bytes permitted.
C64 hpnicfPfilterAclGroupDenyPkts	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.10	Counter64	read-only	The number of packets denied.
C64 hpnicfPfilterAclGroupDenyBytes	1.3.6.1.4.1.11.2.14.11.15.2.8.3.3.1.11	Counter64	read-only	The number of bytes denied.
hpnicfPfilterAclRuleRunInfoTable	1.3.6.1.4.1.11.2.14.11.15.2.8.3.4		not-accessible	A table of rule's running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the hpnicfPfilterAclRuleMatchPackets and hpnicfPfilterAclRuleMatchBytes will be zero.
hpnicfPfilterAclRuleRunInfoEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.3.4.1		not-accessible	ACL rule's running information entry.
I32 hpnicfPfilterAclRuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.3.4.1.1	Integer32	not-accessible	The ACL rule index.
INT hpnicfPfilterAclRuleStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.3.4.1.2	INTEGER	read-only	The status of rule application. success: rule applied successfully on all slots failed: failed to apply rule on all slots partialSuccess: failed to apply rule on some slots
INT hpnicfPfilterAclRuleCountStatus	1.3.6.1.4.1.11.2.14.11.15.2.8.3.4.1.3	INTEGER	read-only	The status of enabling rule's hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots
C64 hpnicfPfilterAclRuleMatchPackets	1.3.6.1.4.1.11.2.14.11.15.2.8.3.4.1.4	Counter64	read-only	The number of packets matched.
C64 hpnicfPfilterAclRuleMatchBytes	1.3.6.1.4.1.11.2.14.11.15.2.8.3.4.1.5	Counter64	read-only	The number of bytes matched.
hpnicfPfilterStatisticSumTable	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5		not-accessible	A table of ACL rule's sum statistics information, accumulated by all entity application on all slots.
hpnicfPfilterStatisticSumEntry	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5.1		not-accessible	ACL rule's sum statistics information entry.
DIR hpnicfPfilterSumDirection	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5.1.1	DirectionType	not-accessible	The direction of application.
INT hpnicfPfilterSumAclType	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5.1.2	INTEGER	not-accessible	ACL type, IPv4 or IPv6.
I32 hpnicfPfilterSumAclIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5.1.3	Integer32	not-accessible	The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999
I32 hpnicfPfilterSumRuleIndex	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5.1.4	Integer32	not-accessible	The ACL rule index.
C64 hpnicfPfilterSumRuleMatchPackets	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5.1.5	Counter64	read-only	The sum number of packets matched the ACL rule.
C64 hpnicfPfilterSumRuleMatchBytes	1.3.6.1.4.1.11.2.14.11.15.2.8.3.5.1.6	Counter64	read-only	The sum number of bytes matched the ACL rule.
hpnicfAclPacketfilterTrapObjects	1.3.6.1.4.1.11.2.14.11.15.2.8.4
OCT hpnicfPfilterInterface	1.3.6.1.4.1.11.2.14.11.15.2.8.4.1	OCTET STRING	accessible-for-notify	The interface which policy apply.
OCT hpnicfPfilterDirection	1.3.6.1.4.1.11.2.14.11.15.2.8.4.2	OCTET STRING	accessible-for-notify	Inbound or outbound.
I32 hpnicfPfilterACLNumber	1.3.6.1.4.1.11.2.14.11.15.2.8.4.3	Integer32	accessible-for-notify	ACL number.
OCT hpnicfPfilterAction	1.3.6.1.4.1.11.2.14.11.15.2.8.4.4	OCTET STRING	accessible-for-notify	Permit or deny.
OCT hpnicfMACfilterSourceMac	1.3.6.1.4.1.11.2.14.11.15.2.8.4.5	OCTET STRING	accessible-for-notify	Source MAC address.
OCT hpnicfMACfilterDestinationMac	1.3.6.1.4.1.11.2.14.11.15.2.8.4.6	OCTET STRING	accessible-for-notify	Destination MAC address.
I32 hpnicfPfilterPacketNumber	1.3.6.1.4.1.11.2.14.11.15.2.8.4.7	Integer32	accessible-for-notify	The number of packets permitted or denied by ACL.
OCT hpnicfPfilterReceiveInterface	1.3.6.1.4.1.11.2.14.11.15.2.8.4.8	OCTET STRING	accessible-for-notify	The interface where packet come from.
hpnicfAclPacketfilterTrap	1.3.6.1.4.1.11.2.14.11.15.2.8.5
hpnicfPfilterTrapPrefix	1.3.6.1.4.1.11.2.14.11.15.2.8.5.0
NTF hpnicfMACfilterTrap	1.3.6.1.4.1.11.2.14.11.15.2.8.5.0.1			This notification is generated when a packet was processed by MAC address filter, but not every packet will generate one notification, the same notification only generate once in 30 seconds.

RFC description

Configures and monitors ACLs (Access Control Lists) including IP, MAC, and link-layer rules on HPE devices.

Start monitoring HP/H3C Comware managed switch or router (Access Control Lists) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-ACL-MIB