All MIBs › HUAWEI-ACL-MIB
Organization: Huawei Technologies Co.,Ltd.
Last Updated: 2015-02-27
Category: Domain: Security, VPN and Security, Vendor: Huawei
Description: Huawei Access Control List MIB defining objects to configure and monitor ACL rules, groups, and packet filtering policies.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HUAWEI-ACL-MIB?
HUAWEI-ACL-MIB is Huawei's proprietary Access Control List management MIB, used to configure and monitor packet-filtering ACL groups and rules across multiple rule types—basic, advanced, interface-based, Ethernet frame, and their IPv6 equivalents—plus ACL "acceleration"/hardware-compile status. It exposes tables such as hwAclNumGroupTable, hwAclBasicRuleTable, hwAclAdvanceRuleTable, hwAclIfRuleTable, hwAclEthernetFrameRuleTable, and their IPv6 counterparts (hwAclIpv6BasicRuleTable, hwAclIpv6AdvanceRuleTable, hwAclIpv6IfRuleTable), along with hwAclCompileEnableFlag and hwAclCompileNumGroupTable for hardware-compilation state. Its monitoring value is largely in software/configuration status: confirming which ACL groups and rules are actually programmed on the device, whether hardware-accelerated compilation of ACLs succeeded (relevant to forwarding performance), and correlating ACL-related traps when rule application fails or changes. It is a device-management extension used alongside standard filtering/QoS features rather than a general IETF-standard MIB, and its traps supplement fault visibility for ACL processing errors. It is deployed on Huawei routers and switches wherever traffic filtering, security policy enforcement, or QoS classification via ACLs is configured. Engineers can download the HUAWEI-ACL-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-ACL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Huawei routers and switches
Monitoring Examples
An operator queries hwAclNumGroupTable to enumerate configured ACL groups and drills into hwAclBasicRuleTable or hwAclAdvanceRuleTable to confirm the exact match/permit-deny rules programmed for a group, verifying they match the intended security policy. Checking hwAclCompileEnableFlag together with hwAclCompileNumGroupTable reveals whether ACL rules were successfully compiled into hardware for line-rate forwarding, catching a case where a large rule set silently fell back to software processing and degraded throughput. For IPv6 traffic, the equivalent hwAclIpv6AdvanceRuleTable is checked to confirm IPv6-specific filtering is in place.
What Can Be Monitored
- configured ACL groups
- ACL rule contents (basic/advanced/interface/Ethernet)
- IPv6 ACL rule contents
- ACL hardware-compile/acceleration status
- ACL-related trap/error events
This MIB depends on
Related MIBs
Imported Objects
From HUAWEI-MIB
| huaweiMgmt | OBJECT-IDENTITY |
From IPV6-TC
| Ipv6Address |
From P-BRIDGE-MIB
| EnabledStatus |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| MacAddress | |
| RowStatus | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using hwAclBasicCount OID:
Select a Huawei router or switch (Access Control Lists) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hwAclBasicCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The object indicates the statistics of matched packets by the rule. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| hwAcl | 1.3.6.1.4.1.2011.5.1 | The HUAWEI-ACL-MIB contains objects to configure ACL module, including ACL group, rule and acl accelerate, and query the current ACL configuration and status. This MIB module objects indicate hwAclNumGroupTable, hwAclBasicRuleTable, hwAclAdvanceRuleTable, hwAclIfRuleTable, hwAclEthernetFrameRuleTable, hwAclIpv6BasicRuleTable, hwAclIpv6AdvanceRuleTable, hwAclIpv6IfRuleTable, hwAclCompileEnableFlag, hwAclCompileNumGroupTable, hwAclIpv6NumGroupTable and acl trap. To filter data packets, a series of rules need to be configured on the device. These rules are defined by ACL (Access Control List), which are a series of sequential rules consisting of rule permit or deny statements. The rules are described by source address, destination address and port number of data packets. ACL classifies data packets through these device interface applied rules, by which the device decides which packets can be received and which should be rejected. | ||
| hwAclMibObjects | 1.3.6.1.4.1.2011.5.1.1 | |||
| hwAclNumGroupTable | 1.3.6.1.4.1.2011.5.1.1.2 | not-accessible | The table of ACL group information including match order, step, description and so on | |
| hwAclNumGroupEntry | 1.3.6.1.4.1.2011.5.1.1.2.1 | not-accessible | An entry containing characters of an acl group | |
| I32 hwAclNumGroupAclNum | 1.3.6.1.4.1.2011.5.1.1.2.1.1 | Integer32 | read-only | The index of acl group, identifying an ACL. The object specifies the range of an ACL number. The basic ACL is represented by the number in the range 2000 through 2999. The advanced ACL is represented by the number in the range 3000 through 3999. The interface-based ACL is represented by the number in the range 1000 to 1999. The User Defined ACL is represented by the number in the range 5000 through 5999. The User ACL is represented by the number in the range 6000 through 9999. The Mpls ACL is represented by the number in the range 10000 through 10999. The name ACL is represented by the number in the range 42768 through 76535. |
| INT hwAclNumGroupMatchOrder | 1.3.6.1.4.1.2011.5.1.1.2.1.2 | INTEGER | read-create | The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL rules are matched following the 'Depth-first' principle. |
| C32 hwAclNumGroupSubitemNum | 1.3.6.1.4.1.2011.5.1.1.2.1.3 | Counter32 | read-only | The total number of the rules in the acl group. |
| I32 hwAclNumGroupStep | 1.3.6.1.4.1.2011.5.1.1.2.1.4 | Integer32 | read-create | The object indicates the step value of number acl. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs are the multiples of 5 beginning with 5. The ACL IDs change along with the step. When the step is 5, the ACL IDs are 5, 10, and 15 and so on. However, when the step is set to 2, the IDs turn to 2, 4, and 6 and so on. |
| OCT hwAclNumGroupDescription | 1.3.6.1.4.1.2011.5.1.1.2.1.5 | OCTET STRING | read-create | The object indicates the description of this acl group. The object describes the usage of an ACL with a word or a sentence. |
| INT hwAclNumGroupCountClear | 1.3.6.1.4.1.2011.5.1.1.2.1.6 | INTEGER | read-create | Reset the statistics of ACL group. |
| ROW hwAclNumGroupRowStatus | 1.3.6.1.4.1.2011.5.1.1.2.1.7 | RowStatus | read-create | RowStatus, Now support three value:CreateAndGo,Active,Destroy. |
| OCT hwAclNumGroupAclName | 1.3.6.1.4.1.2011.5.1.1.2.1.8 | OCTET STRING | read-create | The object indicates the name of an acl group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character. |
| INT hwAclNumGroupAclType | 1.3.6.1.4.1.2011.5.1.1.2.1.9 | INTEGER | read-only | The type of ACL group. |
| hwAclBasicRuleTable | 1.3.6.1.4.1.2011.5.1.1.4 | not-accessible | Configure the rule for basic acl group. | |
| hwAclBasicRuleEntry | 1.3.6.1.4.1.2011.5.1.1.4.1 | not-accessible | Each entry is a rule of basic acl. | |
| I32 hwAclBasicAclNum | 1.3.6.1.4.1.2011.5.1.1.4.1.1 | Integer32 | read-only | The index of basic acl group, the index range is (1..99 | 2000..2999 | 42768..76535 ). |
| U32 hwAclBasicSubitem | 1.3.6.1.4.1.2011.5.1.1.4.1.2 | Unsigned32 | read-only | The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created. |
| INT hwAclBasicAct | 1.3.6.1.4.1.2011.5.1.1.4.1.3 | INTEGER | read-create | The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| IP hwAclBasicSrcIp | 1.3.6.1.4.1.2011.5.1.1.4.1.4 | IpAddress | read-create | The object indicates the source IP-address of a basic acl rule. |
| IP hwAclBasicSrcWild | 1.3.6.1.4.1.2011.5.1.1.4.1.5 | IpAddress | read-create | The object indicates the source IP-address wild of a basic acl rule. |
| I32 hwAclBasicTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.4.1.6 | Integer32 | read-create | The object indicates the time range of a basic acl rule. When the current time is in time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0. |
| INT hwAclBasicFragments | 1.3.6.1.4.1.2011.5.1.1.4.1.7 | INTEGER | read-create | The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is a fragment 2: nonFragment, indicating that the packet is not a fragment 3: nonSubseq, indicating that the packet is not a subsequent fragment 4: fragmentSpeFirst, indicating that the packet is the first fragment 255: none, invalid value This object cannot be modified once a rule is created. |
| T/F hwAclBasicLog | 1.3.6.1.4.1.2011.5.1.1.4.1.8 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets. |
| T/F hwAclBasicEnable | 1.3.6.1.4.1.2011.5.1.1.4.1.9 | TruthValue | read-only | The object indicates whether the rule is valid or invalid. |
| C64 hwAclBasicCountEx | 1.3.6.1.4.1.2011.5.1.1.4.1.10 | Counter64 | read-only | The object indicates the statistics of matched packets by the rule. |
| OCT hwAclBasicVrfName | 1.3.6.1.4.1.2011.5.1.1.4.1.11 | OCTET STRING | read-create | The object indicates the VRF name of this rule. It specifies the VPN-instance to which the packet belongs. |
| ROW hwAclBasicRowStatus | 1.3.6.1.4.1.2011.5.1.1.4.1.12 | RowStatus | read-create | RowStatus, Now support three value:CreateAndGo,Active and Destroy. |
| OCT hwAclBasicDescription | 1.3.6.1.4.1.2011.5.1.1.4.1.13 | OCTET STRING | read-create | The object indicates the description of this basic rule. The object describes the usage of an ACL with a word or a sentence. |
| hwAclAdvancedRuleTable | 1.3.6.1.4.1.2011.5.1.1.5 | not-accessible | Configure the rule for advanced acl group. | |
| hwAclAdvancedRuleEntry | 1.3.6.1.4.1.2011.5.1.1.5.1 | not-accessible | Each entry contains a rule of advanced acl group. | |
| I32 hwAclAdvancedAclNum | 1.3.6.1.4.1.2011.5.1.1.5.1.1 | Integer32 | read-only | The index of advanced acl table, the index range is (100..199 | 3000..3999 | 42768..76535). |
| U32 hwAclAdvancedSubitem | 1.3.6.1.4.1.2011.5.1.1.5.1.2 | Unsigned32 | read-only | The object specifies the number of an advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created. |
| INT hwAclAdvancedAct | 1.3.6.1.4.1.2011.5.1.1.5.1.3 | INTEGER | read-create | The object indicates the action of an advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| I32 hwAclAdvancedProtocol | 1.3.6.1.4.1.2011.5.1.1.5.1.4 | Integer32 | read-create | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IP protocol is 0. |
| IP hwAclAdvancedSrcIp | 1.3.6.1.4.1.2011.5.1.1.5.1.5 | IpAddress | read-create | The object indicates the source IP-address of an advanced acl rule. |
| IP hwAclAdvancedSrcWild | 1.3.6.1.4.1.2011.5.1.1.5.1.6 | IpAddress | read-create | The object indicates the source IP-address wild of an advanced acl rule. |
| INT hwAclAdvancedSrcOp | 1.3.6.1.4.1.2011.5.1.1.5.1.7 | INTEGER | read-create | The object indicates the source Port operation symbol of an advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclAdvancedSrcPort1 | 1.3.6.1.4.1.2011.5.1.1.5.1.8 | Integer32 | read-create | The object indicates the fourth layer sourec port 1. It specifies the source port information of UDP or TCP packets. |
| I32 hwAclAdvancedSrcPort2 | 1.3.6.1.4.1.2011.5.1.1.5.1.9 | Integer32 | read-create | The object indicates the fourth layer source port2. |
| IP hwAclAdvancedDestIp | 1.3.6.1.4.1.2011.5.1.1.5.1.10 | IpAddress | read-create | The object indicates the destination IP-address of an advanced acl rule. |
| IP hwAclAdvancedDestWild | 1.3.6.1.4.1.2011.5.1.1.5.1.11 | IpAddress | read-create | The object indicates the destination IP-address wild of an advanced acl rule. |
| INT hwAclAdvancedDestOp | 1.3.6.1.4.1.2011.5.1.1.5.1.12 | INTEGER | read-create | The object indicates the destination Port operation symbol of an advanced acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclAdvancedDestPort1 | 1.3.6.1.4.1.2011.5.1.1.5.1.13 | Integer32 | read-create | The object indicates the fourth layer destination port1. |
| I32 hwAclAdvancedDestPort2 | 1.3.6.1.4.1.2011.5.1.1.5.1.14 | Integer32 | read-create | The object indicates the fourth layer destination port2. |
| I32 hwAclAdvancedPrecedence | 1.3.6.1.4.1.2011.5.1.1.5.1.15 | Integer32 | read-create | The object indicates the value of IP-packet's precedence, It filters packets according to precedence field.The invalid value is 255. |
| I32 hwAclAdvancedTos | 1.3.6.1.4.1.2011.5.1.1.5.1.16 | Integer32 | read-create | The object indicates the value of IP-packet's TOS, It filters packets according to type of service.The invalid value is 255. |
| I32 hwAclAdvancedDscp | 1.3.6.1.4.1.2011.5.1.1.5.1.17 | Integer32 | read-create | The object indicates the value of frame.The invalid value is 255. |
| T/F hwAclAdvancedEstablish | 1.3.6.1.4.1.2011.5.1.1.5.1.18 | TruthValue | read-create | The object indicates whether or not establishing. |
| I32 hwAclAdvancedTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.5.1.19 | Integer32 | read-create | The object indicates the time range of an advanced acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule has no time range.The invalid value is 0. |
| I32 hwAclAdvancedIcmpType | 1.3.6.1.4.1.2011.5.1.1.5.1.20 | Integer32 | read-create | The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535. |
| I32 hwAclAdvancedIcmpCode | 1.3.6.1.4.1.2011.5.1.1.5.1.21 | Integer32 | read-create | The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535. |
| INT hwAclAdvancedFragments | 1.3.6.1.4.1.2011.5.1.1.5.1.22 | INTEGER | read-create | The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is a fragment 2: nonFragment, indicating that the packet is not a fragment 3: nonSubseq, indicating that the packet is not a subsequent fragment 4: fragmentSpeFirst, indicating that the packet is the first fragment 255: none, invalid value This object cannot be modified once a rule is created. |
| T/F hwAclAdvancedLog | 1.3.6.1.4.1.2011.5.1.1.5.1.23 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets |
| T/F hwAclAdvancedEnable | 1.3.6.1.4.1.2011.5.1.1.5.1.24 | TruthValue | read-only | The object indicates whether the rule is valid or invalid. |
| C64 hwAclAdvancedCount | 1.3.6.1.4.1.2011.5.1.1.5.1.25 | Counter64 | read-only | The object indicates the statistics of matched packets by the rule. |
| OCT hwAclAdvancedVrfName | 1.3.6.1.4.1.2011.5.1.1.5.1.26 | OCTET STRING | read-create | The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs. |
| ROW hwAclAdvancedRowStatus | 1.3.6.1.4.1.2011.5.1.1.5.1.27 | RowStatus | read-create | RowStatus, Now support three state:CreateAndGo,Active,Destroy. |
| I32 hwAclAdvancedTcpSyncFlag | 1.3.6.1.4.1.2011.5.1.1.5.1.28 | Integer32 | read-create | The object indicates the code of TCP Sync flag(0~63), The invalid value is -1. |
| OCT hwAclAdvancedDescription | 1.3.6.1.4.1.2011.5.1.1.5.1.29 | OCTET STRING | read-create | The object indicates the description of this advanced rule. The object describes the usage of an ACL with a word or a sentence. |
| OCT hwAclAdvancedSrcPoolName | 1.3.6.1.4.1.2011.5.1.1.5.1.30 | OCTET STRING | read-create | The object indicates the source pool name. |
| OCT hwAclAdvancedDestPoolName | 1.3.6.1.4.1.2011.5.1.1.5.1.31 | OCTET STRING | read-create | The object indicates the destination pool name. |
| I32 hwAclAdvancedProtocolNew | 1.3.6.1.4.1.2011.5.1.1.5.1.32 | Integer32 | read-create | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IP protocol is 65535. |
| I32 hwAclAdvancedVni | 1.3.6.1.4.1.2011.5.1.1.5.1.33 | Integer32 | read-create | The object indicates the ID of VXLAN, The invalid value is 0. |
| I32 hwAclAdvancedIgmpType | 1.3.6.1.4.1.2011.5.1.1.5.1.34 | Integer32 | read-create | The object indicates the type of igmp, The invalid value is 65535. |
| INT hwAclAdvancedTtlOp | 1.3.6.1.4.1.2011.5.1.1.5.1.35 | INTEGER | read-create | The object indicates the ttl operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclAdvancedTtlExpire | 1.3.6.1.4.1.2011.5.1.1.5.1.36 | Integer32 | read-create | The object indicates the begin ttl value. The invalid value is 0. |
| I32 hwAclAdvancedTtlExpireEnd | 1.3.6.1.4.1.2011.5.1.1.5.1.37 | Integer32 | read-create | The object indicates the end ttl value. The invalid value is 0. |
| INT hwAclAdvancedPktLenOp | 1.3.6.1.4.1.2011.5.1.1.5.1.38 | INTEGER | read-create | The object indicates the packet length operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclAdvancedPktLenBegin | 1.3.6.1.4.1.2011.5.1.1.5.1.39 | Integer32 | read-create | The object indicates the begin packet length value. |
| I32 hwAclAdvancedPktLenEnd | 1.3.6.1.4.1.2011.5.1.1.5.1.40 | Integer32 | read-create | The object indicates the end packet length value. |
| I32 hwAclAdvancedTcpFlagMask | 1.3.6.1.4.1.2011.5.1.1.5.1.41 | Integer32 | read-create | The object indicates the mask of tcp-flag. The invalid value is 0. |
| hwAclIfRuleTable | 1.3.6.1.4.1.2011.5.1.1.6 | not-accessible | Configure the rule for interface-based acl group. | |
| hwAclIfRuleEntry | 1.3.6.1.4.1.2011.5.1.1.6.1 | not-accessible | Each entry contains a rule of interface-based acl group. | |
| I32 hwAclIfAclNum | 1.3.6.1.4.1.2011.5.1.1.6.1.1 | Integer32 | read-only | The index of interface-based acl group, the index range is (1000..1999 | 42768..76535). |
| U32 hwAclIfSubitem | 1.3.6.1.4.1.2011.5.1.1.6.1.2 | Unsigned32 | read-only | The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created. |
| INT hwAclIfAct | 1.3.6.1.4.1.2011.5.1.1.6.1.3 | INTEGER | read-create | The object indicates the action of an interface-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| I32 hwAclIfIndex | 1.3.6.1.4.1.2011.5.1.1.6.1.4 | Integer32 | read-create | The object indicates the index of an interface. It specifies the interface information of the packets.The invalid interface index is 0. |
| T/F hwAclIfAny | 1.3.6.1.4.1.2011.5.1.1.6.1.5 | TruthValue | read-create | The object indicates whether or not matching any interface. |
| I32 hwAclIfTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.6.1.6 | Integer32 | read-create | The object indicates the time range of an interface-based acl rule. when the current time is in time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0. |
| T/F hwAclIfLog | 1.3.6.1.4.1.2011.5.1.1.6.1.7 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets. |
| T/F hwAclIfEnable | 1.3.6.1.4.1.2011.5.1.1.6.1.8 | TruthValue | read-only | The object indicates whether the rule is valid or invalid. |
| C64 hwAclIfCount | 1.3.6.1.4.1.2011.5.1.1.6.1.9 | Counter64 | read-only | The object indicates the statistics of matched packets by the rule. |
| ROW hwAclIfRowStatus | 1.3.6.1.4.1.2011.5.1.1.6.1.11 | RowStatus | read-create | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| hwAclUserRuleTable | 1.3.6.1.4.1.2011.5.1.1.7 | not-accessible | Configure the rule for user acl group. | |
| hwAclUserRuleEntry | 1.3.6.1.4.1.2011.5.1.1.7.1 | not-accessible | Each entry contains a rule of user acl group. | |
| I32 hwAclUserAclNum | 1.3.6.1.4.1.2011.5.1.1.7.1.1 | Integer32 | read-only | The index of user acl table, the index range is (6000..9999). |
| U32 hwAclUserSubitem | 1.3.6.1.4.1.2011.5.1.1.7.1.2 | Unsigned32 | read-only | The object specifies the number of an User ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle |
| INT hwAclUserAct | 1.3.6.1.4.1.2011.5.1.1.7.1.3 | INTEGER | read-create | The object indicates the action of an User acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| I32 hwAclUserProtocol | 1.3.6.1.4.1.2011.5.1.1.7.1.4 | Integer32 | read-create | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IP protocol is 0. |
| IP hwAclUserSrcIp | 1.3.6.1.4.1.2011.5.1.1.7.1.5 | IpAddress | read-create | The object indicates the source IP-address of an User acl rule. |
| IP hwAclUserSrcWild | 1.3.6.1.4.1.2011.5.1.1.7.1.6 | IpAddress | read-create | The object indicates the source IP-address wild of an User acl rule. |
| INT hwAclUserSrcOp | 1.3.6.1.4.1.2011.5.1.1.7.1.7 | INTEGER | read-create | The object indicates the source Port operation symbol of an User acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclUserSrcPort1 | 1.3.6.1.4.1.2011.5.1.1.7.1.8 | Integer32 | read-create | The object indicates the fourth layer sourec port 1. It specifies the source port information of UDP or TCP packets. |
| I32 hwAclUserSrcPort2 | 1.3.6.1.4.1.2011.5.1.1.7.1.9 | Integer32 | read-create | The object indicates the fourth layer source port2. |
| IP hwAclUserDestIp | 1.3.6.1.4.1.2011.5.1.1.7.1.10 | IpAddress | read-create | The object indicates the destination IP-address of an User acl rule. |
| IP hwAclUserDestWild | 1.3.6.1.4.1.2011.5.1.1.7.1.11 | IpAddress | read-create | The object indicates the destination IP-address wild of an User acl rule. |
| INT hwAclUserDestOp | 1.3.6.1.4.1.2011.5.1.1.7.1.12 | INTEGER | read-create | The object indicates the destination Port operation symbol of an User acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclUserDestPort1 | 1.3.6.1.4.1.2011.5.1.1.7.1.13 | Integer32 | read-create | The object indicates the fourth layer destination port1. |
| I32 hwAclUserDestPort2 | 1.3.6.1.4.1.2011.5.1.1.7.1.14 | Integer32 | read-create | The object indicates the fourth layer destination port2. |
| I32 hwAclUserPrecedence | 1.3.6.1.4.1.2011.5.1.1.7.1.15 | Integer32 | read-create | The object indicates the value of IP-packet's precedence, It filters packets according to precedence field.The invalid value is 255. |
| I32 hwAclUserTos | 1.3.6.1.4.1.2011.5.1.1.7.1.16 | Integer32 | read-create | The object indicates the value of IP-packet's TOS, It filters packets according to type of service.The invalid value is 255. |
| I32 hwAclUserDscp | 1.3.6.1.4.1.2011.5.1.1.7.1.17 | Integer32 | read-create | The object indicates the value of frame.The invalid value is 255. |
| T/F hwAclUserEstablish | 1.3.6.1.4.1.2011.5.1.1.7.1.18 | TruthValue | read-create | The object indicates whether or not establishing. |
| I32 hwAclUserTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.7.1.19 | Integer32 | read-create | The object indicates the time range of an User acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule has no time range.The invalid value is 0. |
| I32 hwAclUserIcmpType | 1.3.6.1.4.1.2011.5.1.1.7.1.20 | Integer32 | read-create | The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535. |
| I32 hwAclUserIcmpCode | 1.3.6.1.4.1.2011.5.1.1.7.1.21 | Integer32 | read-create | The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535. |
| T/F hwAclUserFragments | 1.3.6.1.4.1.2011.5.1.1.7.1.22 | TruthValue | read-create | The object indicates whether or not matching fragmented packet, It specifies that this rule is only valid for the non-first fragment packets. |
| T/F hwAclUserLog | 1.3.6.1.4.1.2011.5.1.1.7.1.23 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets |
| T/F hwAclUserEnable | 1.3.6.1.4.1.2011.5.1.1.7.1.24 | TruthValue | read-only | The object indicates whether the rule is valid or invalid. |
| C32 hwAclUserCount | 1.3.6.1.4.1.2011.5.1.1.7.1.25 | Counter32 | read-only | The object indicates the statistics of matched packets by the rule. |
| OCT hwAclUserVrfName | 1.3.6.1.4.1.2011.5.1.1.7.1.26 | OCTET STRING | read-create | The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs. |
| OCT hwAclUserSrcUserGroupName | 1.3.6.1.4.1.2011.5.1.1.7.1.27 | OCTET STRING | read-create | The object indicates the source user group name of this rule. if modetype source is user, null sting means any user |
| OCT hwAclUserDestUserGroupName | 1.3.6.1.4.1.2011.5.1.1.7.1.28 | OCTET STRING | read-create | The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user |
| I32 hwAclUserSrcModeType | 1.3.6.1.4.1.2011.5.1.1.7.1.29 | Integer32 | read-create | The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet, 1 NetAny match rule from any ip subnet, 2 UserAny match rule from any user group, 3 Net match rule from an ip subnet, 4 User match rule from a user group |
| I32 hwAclUserDestModeType | 1.3.6.1.4.1.2011.5.1.1.7.1.30 | Integer32 | read-create | The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet or any doamin name, 1 NetAny match rule from any ip subnet, 2 UserAny match rule from any user group, 3 Net match rule from an ip subnet, 4 User match rule from a user group, 5 domain match rule from a domain name, 6 domainAny match rule from any doamin name |
| ROW hwAclUserRowStatus | 1.3.6.1.4.1.2011.5.1.1.7.1.31 | RowStatus | read-create | RowStatus, Now support three state:CreateAndGo,Active,Destroy. |
| I32 hwAclUserTcpSyncFlag | 1.3.6.1.4.1.2011.5.1.1.7.1.32 | Integer32 | read-create | The object indicates the code of TCP Sync flag(0~63), The invalid value is -1. |
| I32 hwAclUserSrcUserGroupNum | 1.3.6.1.4.1.2011.5.1.1.7.1.33 | Integer32 | read-create | The object indicates the source user group num of this rule. if modetype source is user, null sting means any user |
| I32 hwAclUserDestUserGroupNum | 1.3.6.1.4.1.2011.5.1.1.7.1.34 | Integer32 | read-create | The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user |
| OCT hwAclUserDestDomainName | 1.3.6.1.4.1.2011.5.1.1.7.1.35 | OCTET STRING | read-only | The object indicates the destination domain name of this rule. if modetype destination is domain, null sting means any domain. |
| T/F hwAclCompileEnableFlag | 1.3.6.1.4.1.2011.5.1.1.10 | TruthValue | read-write | The object indicates whether acl compiler is enabled. when acl compiler is enabled, and ACL accelerate function is enabled, then matching packets by rule is efficient. |
| hwAclCompileNumGroupTable | 1.3.6.1.4.1.2011.5.1.1.11 | not-accessible | The ACL compiler table extending the Acl-number-group table | |
| hwAclCompileNumGroupEntry | 1.3.6.1.4.1.2011.5.1.1.11.1 | not-accessible | The entry of Acl-number-group compiler extended table | |
| INT hwAclCompileNumGroupStatus | 1.3.6.1.4.1.2011.5.1.1.11.1.1 | INTEGER | read-write | The object indicates the status of Acl-number-group compiler. 'notCompile' means acl accelerate function is disabled, 'compiled' means acl accelerate function is enabled, 'changeAfterCompile' means acl is changed after compiled. |
| hwAclIpv6BasicRuleTable | 1.3.6.1.4.1.2011.5.1.1.12 | not-accessible | Configure the rule for ipv6 basic acl group. | |
| hwAclIpv6BasicRuleEntry | 1.3.6.1.4.1.2011.5.1.1.12.1 | not-accessible | Each entry is a rule of ipv6 basic acl. | |
| I32 hwAclIpv6BasicAclNum | 1.3.6.1.4.1.2011.5.1.1.12.1.1 | Integer32 | read-only | The index of ipv6 basic acl group, the index range is (2000..2999 | 42768..75535). |
| U32 hwAclIpv6BasicSubitem | 1.3.6.1.4.1.2011.5.1.1.12.1.2 | Unsigned32 | read-only | The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned automatically; otherwise, this rule will not be created. |
| INT hwAclIpv6BasicAct | 1.3.6.1.4.1.2011.5.1.1.12.1.3 | INTEGER | read-create | The object indicates the action of a ipv6 basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| ADR hwAclIpv6BasicSrcIp | 1.3.6.1.4.1.2011.5.1.1.12.1.4 | Ipv6Address | read-create | The object indicates the source IPv6-address of a ipv6 basic acl rule. |
| I32 hwAclIpv6BasicSrcPrefix | 1.3.6.1.4.1.2011.5.1.1.12.1.5 | Integer32 | read-create | The object indicates the source IPv6-address prefix length of a ipv6 basic acl rule. |
| I32 hwAclIpv6BasicTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.12.1.6 | Integer32 | read-create | The object indicates the time range of a ipv6 basic acl rule. When the current time is in time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0. |
| INT hwAclIpv6BasicFragment | 1.3.6.1.4.1.2011.5.1.1.12.1.7 | INTEGER | read-create | The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once a rule is created. |
| T/F hwAclIpv6BasicLog | 1.3.6.1.4.1.2011.5.1.1.12.1.8 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets. |
| ENA hwAclIpv6BasicEnable | 1.3.6.1.4.1.2011.5.1.1.12.1.9 | EnabledStatus | read-only | The object indicates whether the rule is valid or invalid. |
| C64 hwAclIpv6BasicCount | 1.3.6.1.4.1.2011.5.1.1.12.1.10 | Counter64 | read-only | The object indicates the statistics of matched packets by the rule. |
| OCT hwAclIpv6BasicVrfName | 1.3.6.1.4.1.2011.5.1.1.12.1.11 | OCTET STRING | read-create | The object indicates the VRF name of this rule. It specifies the VPN-instance to which the packet belongs. |
| ROW hwAclIpv6BasicRowStatus | 1.3.6.1.4.1.2011.5.1.1.12.1.12 | RowStatus | read-create | RowStatus, Now support three value: CreateAndGo, Active and Destroy. |
| OCT hwAclIpv6BasicDescription | 1.3.6.1.4.1.2011.5.1.1.12.1.13 | OCTET STRING | read-create | The object indicates the description of this IPv6 basic rule. The object describes the usage of an IPv6 ACL with a word or a sentence. |
| ADR hwAclIpv6BasicSrcMask | 1.3.6.1.4.1.2011.5.1.1.12.1.14 | Ipv6Address | read-create | The object indicates the source IPv6-address mask of a ipv6 basic acl rule. Its mode is positive. |
| hwAclIpv6AdvancedRuleTable | 1.3.6.1.4.1.2011.5.1.1.13 | not-accessible | Configure the rule for ipv6 advanced acl group. | |
| hwAclIpv6AdvancedRuleEntry | 1.3.6.1.4.1.2011.5.1.1.13.1 | not-accessible | Each entry contains a rule of ipv6 advanced acl group. | |
| I32 hwAclIpv6AdvancedAclNum | 1.3.6.1.4.1.2011.5.1.1.13.1.1 | Integer32 | read-only | The index of ipv6 advanced acl table, the index range is (3000..3999 | 42768..75535). |
| U32 hwAclIpv6AdvancedSubitem | 1.3.6.1.4.1.2011.5.1.1.13.1.2 | Unsigned32 | read-only | The object specifies the number of an ipv6 advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned automatically;otherwise,this rule will not be created. |
| INT hwAclIpv6AdvancedAct | 1.3.6.1.4.1.2011.5.1.1.13.1.3 | INTEGER | read-create | The object indicates the action of an ipv6 advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| I32 hwAclIpv6AdvancedProtocol | 1.3.6.1.4.1.2011.5.1.1.13.1.4 | Integer32 | read-create | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IPv6 protocol is 0. |
| ADR hwAclIpv6AdvancedSrcIp | 1.3.6.1.4.1.2011.5.1.1.13.1.5 | Ipv6Address | read-create | The object indicates the source IPv6-address of an ipv6 advanced acl rule. |
| I32 hwAclIpv6AdvancedSrcPrefix | 1.3.6.1.4.1.2011.5.1.1.13.1.6 | Integer32 | read-create | The object indicates the source IPv6-address prefix length of an ipv6 advanced acl rule. |
| INT hwAclIpv6AdvancedSrcOp | 1.3.6.1.4.1.2011.5.1.1.13.1.7 | INTEGER | read-create | The object indicates the source Port operation symbol of an ipv6 advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclIpv6AdvancedSrcPort1 | 1.3.6.1.4.1.2011.5.1.1.13.1.8 | Integer32 | read-create | The object indicates the fourth layer sourec port 1. It specifies the source port information of UDP or TCP packets. |
| I32 hwAclIpv6AdvancedSrcPort2 | 1.3.6.1.4.1.2011.5.1.1.13.1.9 | Integer32 | read-create | The object indicates the fourth layer source port2. |
| ADR hwAclIpv6AdvancedDestIp | 1.3.6.1.4.1.2011.5.1.1.13.1.10 | Ipv6Address | read-create | The object indicates the destination IPv6-address of an ipv6 advanced acl rule. |
| I32 hwAclIpv6AdvancedDestPrefix | 1.3.6.1.4.1.2011.5.1.1.13.1.11 | Integer32 | read-create | The object indicates the destination IPv6-address prefix length of an ipv6 advanced acl rule. |
| INT hwAclIpv6AdvancedDestOp | 1.3.6.1.4.1.2011.5.1.1.13.1.12 | INTEGER | read-create | The object indicates the destination Port operation symbol of an ipv6 advanced acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation of the rule is invalid. |
| I32 hwAclIpv6AdvancedDestPort1 | 1.3.6.1.4.1.2011.5.1.1.13.1.13 | Integer32 | read-create | The object indicates the fourth layer destination port1. |
| I32 hwAclIpv6AdvancedDestPort2 | 1.3.6.1.4.1.2011.5.1.1.13.1.14 | Integer32 | read-create | The object indicates the fourth layer destination port2. |
| I32 hwAclIpv6AdvancedPrecedence | 1.3.6.1.4.1.2011.5.1.1.13.1.15 | Integer32 | read-create | The object indicates the value of IPv6-packet's precedence, It filters packets according to precedence field. The invalid value is 255. |
| I32 hwAclIpv6AdvancedTos | 1.3.6.1.4.1.2011.5.1.1.13.1.16 | Integer32 | read-create | The object indicates the value of IPv6-packet's TOS, It filters packets according to type of service. The invalid value is 255. |
| I32 hwAclIpv6AdvancedDscp | 1.3.6.1.4.1.2011.5.1.1.13.1.17 | Integer32 | read-create | The object indicates the value of frame.The invalid value is 255. |
| T/F hwAclIpv6AdvancedEstablish | 1.3.6.1.4.1.2011.5.1.1.13.1.18 | TruthValue | read-create | The object indicates whether or not establishing. |
| I32 hwAclIpv6AdvancedTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.13.1.19 | Integer32 | read-create | The object indicates the time range of an ipv6 advanced acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule has no time range.The invalid value is 0. |
| I32 hwAclIpv6AdvancedIcmpType | 1.3.6.1.4.1.2011.5.1.1.13.1.20 | Integer32 | read-create | The object indicates the type of ICMPv6 packet. It filters ICMP packets according to the ICMPv6 message type. The invalid value is 65535. |
| I32 hwAclIpv6AdvancedIcmpCode | 1.3.6.1.4.1.2011.5.1.1.13.1.21 | Integer32 | read-create | The object indicates the code of ICMPv6 packet. It filters ICMPv6 packets according to the message code. The invalid value is 65535. |
| INT hwAclIpv6AdvancedFragment | 1.3.6.1.4.1.2011.5.1.1.13.1.22 | INTEGER | read-create | The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once a rule is created. |
| T/F hwAclIpv6AdvancedLog | 1.3.6.1.4.1.2011.5.1.1.13.1.23 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets |
| ENA hwAclIpv6AdvancedEnable | 1.3.6.1.4.1.2011.5.1.1.13.1.24 | EnabledStatus | read-only | The object indicates whether the rule is valid or invalid. |
| C64 hwAclIpv6AdvancedCount | 1.3.6.1.4.1.2011.5.1.1.13.1.25 | Counter64 | read-only | The object indicates the statistics of matched packets by the rule. |
| OCT hwAclIpv6AdvancedVrfName | 1.3.6.1.4.1.2011.5.1.1.13.1.26 | OCTET STRING | read-create | The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs. |
| ROW hwAclIpv6AdvancedRowStatus | 1.3.6.1.4.1.2011.5.1.1.13.1.27 | RowStatus | read-create | RowStatus, Now support three state:CreateAndGo,Active,Destroy. |
| OCT hwAclIpv6AdvancedDescription | 1.3.6.1.4.1.2011.5.1.1.13.1.28 | OCTET STRING | read-create | The object indicates the description of this IPv6 advanced rule. The object describes the usage of an IPv6 ACL with a word or a sentence. |
| ADR hwAclIpv6AdvancedSrcMask | 1.3.6.1.4.1.2011.5.1.1.13.1.29 | Ipv6Address | read-create | The object indicates the source IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive. |
| ADR hwAclIpv6AdvancedDestMask | 1.3.6.1.4.1.2011.5.1.1.13.1.30 | Ipv6Address | read-create | The object indicates the destination IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive. |
| I32 hwAclIpv6AdvancedProtocolNew | 1.3.6.1.4.1.2011.5.1.1.13.1.31 | Integer32 | read-create | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IPv6 protocol is 65535. |
| hwAclEthernetFrameRuleTable | 1.3.6.1.4.1.2011.5.1.1.14 | not-accessible | Configure the rule for ethernet-frame-based acl group. | |
| hwAclEthernetFrameRuleEntry | 1.3.6.1.4.1.2011.5.1.1.14.1 | not-accessible | Each entry contains a rule of ethernet-frame-based acl group. | |
| I32 hwAclEthernetFrameAclNum | 1.3.6.1.4.1.2011.5.1.1.14.1.1 | Integer32 | read-only | The index of ethernet-frame-based acl group, the index range is (4000..4999 | 42768..76535). |
| U32 hwAclEthernetFrameSubitem | 1.3.6.1.4.1.2011.5.1.1.14.1.2 | Unsigned32 | read-only | The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created. |
| INT hwAclEthernetFrameAct | 1.3.6.1.4.1.2011.5.1.1.14.1.3 | INTEGER | read-create | The object indicates the action of an ethernet-frame-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| I32 hwAclEthernetFrameType | 1.3.6.1.4.1.2011.5.1.1.14.1.4 | Integer32 | read-create | The object indicates the type of an ethernet frame. It specifies the interface information of the packets. The invalid ethernet frame type is 0. |
| I32 hwAclEthernetFrameTypeMask | 1.3.6.1.4.1.2011.5.1.1.14.1.5 | Integer32 | read-create | The object indicates the mask of ethernet frame. |
| MAC hwAclEthernetFrameSrcMac | 1.3.6.1.4.1.2011.5.1.1.14.1.6 | MacAddress | read-create | The object indicates the source mac address of rule. |
| MAC hwAclEthernetFrameSrcMacMask | 1.3.6.1.4.1.2011.5.1.1.14.1.7 | MacAddress | read-create | The object indicates the source mac mask of rule. |
| MAC hwAclEthernetFrameDstMac | 1.3.6.1.4.1.2011.5.1.1.14.1.8 | MacAddress | read-create | The object indicates the destination mac address of rule. |
| MAC hwAclEthernetFrameDstMacMask | 1.3.6.1.4.1.2011.5.1.1.14.1.9 | MacAddress | read-create | The object indicates the destination mac mask of rule. |
| I32 hwAclEthernetFrameTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.14.1.10 | Integer32 | read-create | The object indicates the time range of a ethernet frame acl rule. When the current time is in time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0. |
| T/F hwAclEthernetFrameLog | 1.3.6.1.4.1.2011.5.1.1.14.1.11 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, source/destination mac addr, protocol of ethernet frame, and number of packets. |
| ENA hwAclEthernetFrameEnable | 1.3.6.1.4.1.2011.5.1.1.14.1.12 | EnabledStatus | read-only | The object indicates whether the rule is valid or invalid. |
| C64 hwAclEthernetFrameCount | 1.3.6.1.4.1.2011.5.1.1.14.1.13 | Counter64 | read-only | The object indicates the statistics of matched packets by rule. |
| ROW hwAclEthernetFrameRowStatus | 1.3.6.1.4.1.2011.5.1.1.14.1.14 | RowStatus | read-create | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| INT hwAclEthernetFrameEncapType | 1.3.6.1.4.1.2011.5.1.1.14.1.15 | INTEGER | read-create | The object indicates the encapsulation type of rule. |
| T/F hwAclEthernetFrameDoubleTag | 1.3.6.1.4.1.2011.5.1.1.14.1.16 | TruthValue | read-create | The object indicates two tags of rule. False value do not care the number of tags. |
| I32 hwAclEthernetFrameVlanId | 1.3.6.1.4.1.2011.5.1.1.14.1.17 | Integer32 | read-create | The object indicates the vlan ID of rule. The invalid vlan ID is 0. |
| I32 hwAclEthernetFrameVlanIdMask | 1.3.6.1.4.1.2011.5.1.1.14.1.18 | Integer32 | read-create | The object indicates the vlan ID mask of rule. |
| I32 hwAclEthernetFrameCVlanId | 1.3.6.1.4.1.2011.5.1.1.14.1.19 | Integer32 | read-create | The object indicates the ce-vlan ID of rule. The invalid vlan ID is 0. |
| I32 hwAclEthernetFrameCVlanIdMask | 1.3.6.1.4.1.2011.5.1.1.14.1.20 | Integer32 | read-create | The object indicates the ce-vlan ID mask of rule. |
| I32 hwAclEthernetFrameRule8021p | 1.3.6.1.4.1.2011.5.1.1.14.1.21 | Integer32 | read-create | The object indicates the 8021p value of S-tag. |
| I32 hwAclEthernetFrameRuleCVlan8021p | 1.3.6.1.4.1.2011.5.1.1.14.1.22 | Integer32 | read-create | The object indicates the 8021p value of C-tag. |
| OCT hwAclEthernetFrameDescription | 1.3.6.1.4.1.2011.5.1.1.14.1.23 | OCTET STRING | read-create | The object indicates the description of this ethernetframe rule. The object describes the usage of an ACL with a word or a sentence. |
| hwAclAppliedTable | 1.3.6.1.4.1.2011.5.1.1.15 | not-accessible | Configure the applied ACL. | |
| hwAclAppliedEntry | 1.3.6.1.4.1.2011.5.1.1.15.1 | not-accessible | Each entry contains a applied ACL. | |
| INT hwAclAppliedOperation | 1.3.6.1.4.1.2011.5.1.1.15.1.1 | INTEGER | not-accessible | The actions taken when packets conforming or exceeding the configured. |
| INT hwAclAppliedScopeType | 1.3.6.1.4.1.2011.5.1.1.15.1.2 | INTEGER | not-accessible | The scope that ACL apply on. |
| I32 hwAclAppliedScopeIndex | 1.3.6.1.4.1.2011.5.1.1.15.1.3 | Integer32 | not-accessible | When the scope is global, this field is invalid; When the scope is vlan, this field is vlan ID; When the scope is interface, this field is interface index. |
| INT hwAclAppliedDirection | 1.3.6.1.4.1.2011.5.1.1.15.1.4 | INTEGER | not-accessible | The direction acl apply on. |
| I32 hwAclAppliedAclNum | 1.3.6.1.4.1.2011.5.1.1.15.1.5 | Integer32 | not-accessible | The index of ACL group. Basic ACL in range 2000~2999; Advance ACL in range 3000~3999; Link ACL in range 4000~4999; |
| I32 hwAclAppliedSubitem | 1.3.6.1.4.1.2011.5.1.1.15.1.6 | Integer32 | not-accessible | The object specifies the number of an ACL rule. |
| I32 hwAclAppliedAclNum2 | 1.3.6.1.4.1.2011.5.1.1.15.1.7 | Integer32 | not-accessible | The index of ACL group. 65535 means this field is valid. |
| I32 hwAclAppliedSubitem2 | 1.3.6.1.4.1.2011.5.1.1.15.1.8 | Integer32 | not-accessible | The object specifies the number of an ACL rule. |
| INT hwAclAppliedStatMode | 1.3.6.1.4.1.2011.5.1.1.15.1.9 | INTEGER | read-create | The object specifies the mode of statistics. When action is statistic, this field is valid. |
| C64 hwAclAppliedStatCount | 1.3.6.1.4.1.2011.5.1.1.15.1.10 | Counter64 | read-only | The object indicates the statistics of matched packets by the policy. When action is statistic or limit, this field is valid. |
| I32 hwAclAppliedLimitCir | 1.3.6.1.4.1.2011.5.1.1.15.1.11 | Integer32 | read-create | Committed information rate. Unit: kbps. |
| I32 hwAclAppliedLimitPir | 1.3.6.1.4.1.2011.5.1.1.15.1.12 | Integer32 | read-create | Peak information rate. Unit: kbps. 0 is the default value. |
| I32 hwAclAppliedLimitCbs | 1.3.6.1.4.1.2011.5.1.1.15.1.13 | Integer32 | read-create | Committed burst size. Unit: byte. 0 is the default value. |
| I32 hwAclAppliedLimitPbs | 1.3.6.1.4.1.2011.5.1.1.15.1.14 | Integer32 | read-create | Peak burst size. Unit: byte. 0 is the default value. |
| INT hwAclAppliedLimitGreenAction | 1.3.6.1.4.1.2011.5.1.1.15.1.15 | INTEGER | read-create | Green action. |
| I32 hwAclAppliedLimitGreenValue | 1.3.6.1.4.1.2011.5.1.1.15.1.16 | Integer32 | read-create | The value is to remark When green action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7. |
| INT hwAclAppliedLimitYellowAction | 1.3.6.1.4.1.2011.5.1.1.15.1.17 | INTEGER | read-create | Yellow action. |
| I32 hwAclAppliedLimitYellowValue | 1.3.6.1.4.1.2011.5.1.1.15.1.18 | Integer32 | read-create | The value is to remark When yellow action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7. |
| INT hwAclAppliedLimitRedAction | 1.3.6.1.4.1.2011.5.1.1.15.1.19 | INTEGER | read-create | Red action. |
| I32 hwAclAppliedLimitRedValue | 1.3.6.1.4.1.2011.5.1.1.15.1.20 | Integer32 | read-create | The value is to remark When red action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7. |
| I32 hwAclAppliedMirrObservedPort | 1.3.6.1.4.1.2011.5.1.1.15.1.21 | Integer32 | read-create | The mirror observe port number. |
| I32 hwAclAppliedMirrRspanVlan | 1.3.6.1.4.1.2011.5.1.1.15.1.22 | Integer32 | read-create | The object specifies the RSPAN vlan. 0 means mirror to local port. |
| I32 hwAclAppliedRedirectIfIndex | 1.3.6.1.4.1.2011.5.1.1.15.1.23 | Integer32 | read-create | The redirect output interface. |
| IP hwAclAppliedRedirectIpAddr | 1.3.6.1.4.1.2011.5.1.1.15.1.24 | IpAddress | read-create | The redirect IP next hop address. |
| ADR hwAclAppliedRedirectIpv6Addr | 1.3.6.1.4.1.2011.5.1.1.15.1.25 | Ipv6Address | read-create | The redirect IPv6 next hop address. |
| I32 hwAclAppliedRemarkVlan | 1.3.6.1.4.1.2011.5.1.1.15.1.26 | Integer32 | read-create | The remarked vlan ID. |
| I32 hwAclAppliedRemarkCVlan | 1.3.6.1.4.1.2011.5.1.1.15.1.27 | Integer32 | read-create | The remarked ce-vlan ID. |
| I32 hwAclAppliedRemark8021p | 1.3.6.1.4.1.2011.5.1.1.15.1.28 | Integer32 | read-create | The remarked 8021p value. |
| I32 hwAclAppliedRemarkDscp | 1.3.6.1.4.1.2011.5.1.1.15.1.29 | Integer32 | read-create | The remarked DSCP value. |
| I32 hwAclAppliedRemarkIpPre | 1.3.6.1.4.1.2011.5.1.1.15.1.30 | Integer32 | read-create | The remarked IP precedence value. |
| I32 hwAclAppliedRemarkLocalPre | 1.3.6.1.4.1.2011.5.1.1.15.1.31 | Integer32 | read-create | The remarked local precedence value. |
| MAC hwAclAppliedRemarkMacAddr | 1.3.6.1.4.1.2011.5.1.1.15.1.32 | MacAddress | read-create | The remarked MAC address. |
| T/F hwAclAppliedIsIPv6Acl | 1.3.6.1.4.1.2011.5.1.1.15.1.33 | TruthValue | not-accessible | The object indicates whether is IPv6 ACL. |
| ROW hwAclAppliedRowStatus | 1.3.6.1.4.1.2011.5.1.1.15.1.51 | RowStatus | read-create | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| hwAclIpv6NumGroupTable | 1.3.6.1.4.1.2011.5.1.1.16 | not-accessible | The table of IPv6 ACL group information. | |
| hwAclIpv6NumGroupEntry | 1.3.6.1.4.1.2011.5.1.1.16.1 | not-accessible | An entry containing characters of an IPv6 ACL group. | |
| I32 hwAclIpv6NumGroupAclNum | 1.3.6.1.4.1.2011.5.1.1.16.1.1 | Integer32 | read-only | The index of IPv6 ACL group, identifying an IPv6 ACL. |
| INT hwAclIpv6NumGroupMatchOrder | 1.3.6.1.4.1.2011.5.1.1.16.1.2 | INTEGER | read-create | The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL6 rules are matched following the 'Depth-first' principle. |
| C32 hwAclIpv6NumGroupSubitemNum | 1.3.6.1.4.1.2011.5.1.1.16.1.3 | Counter32 | read-only | The total number of the rules in the ACL6 group. |
| INT hwAclIpv6NumGroupCountClear | 1.3.6.1.4.1.2011.5.1.1.16.1.4 | INTEGER | read-create | Reset the statistics of ACL6 group. |
| OCT hwAclIpv6NumGroupAclName | 1.3.6.1.4.1.2011.5.1.1.16.1.5 | OCTET STRING | read-create | The object indicates the name of an acl6 group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character. |
| OCT hwAclIpv6NumGroupDescription | 1.3.6.1.4.1.2011.5.1.1.16.1.6 | OCTET STRING | read-create | The object indicates the description of this acl6 group. The object describes the usage of an ACL6 with a word or a sentence. |
| INT hwAclIpv6NumGroupAclType | 1.3.6.1.4.1.2011.5.1.1.16.1.7 | INTEGER | read-create | The type of IPv6 ACL group. |
| ROW hwAclIpv6NumGroupRowStatus | 1.3.6.1.4.1.2011.5.1.1.16.1.51 | RowStatus | read-create | RowStatus, Now support three value:CreateAndGo,Active,Destroy. |
| I32 hwAclIpv6NumGroupStep | 1.3.6.1.4.1.2011.5.1.1.16.1.52 | Integer32 | read-create | The object indicates the step value of number IPv6 ACL. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs are the multiples of 5 beginning with 5. The IPv6 ACL IDs change along with the step. When the step is 5, the IPv6 ACL IDs are 5, 10, and 15 and so on. However, when the step is set to 2, the IDs turn to 2, 4, and 6 and so on. |
| hwAclIpv6IfRuleTable | 1.3.6.1.4.1.2011.5.1.1.17 | not-accessible | Configure the rule for interface-based acl6 group. | |
| hwAclIpv6IfRuleEntry | 1.3.6.1.4.1.2011.5.1.1.17.1 | not-accessible | Each entry contains a rule of interface-based acl6 group. | |
| I32 hwAclIpv6IfAclNum | 1.3.6.1.4.1.2011.5.1.1.17.1.1 | Integer32 | read-only | The index of interface-based acl6 group, the index range is (1000..1999 | 42768..75535). |
| U32 hwAclIpv6IfSubitem | 1.3.6.1.4.1.2011.5.1.1.17.1.2 | Unsigned32 | read-only | The object specifies the number of an ACL6 rule. If the number specified has been assigned to an ACL6 rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL6. It will be placed at the end of the ACL6 when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL6 rule must be given 0, but it will be assigned automatically;otherwise, this rule will not be created. |
| INT hwAclIpv6IfAct | 1.3.6.1.4.1.2011.5.1.1.17.1.3 | INTEGER | read-create | The object indicates the action of an interface-based acl6 rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| I32 hwAclIpv6IfIndex | 1.3.6.1.4.1.2011.5.1.1.17.1.4 | Integer32 | read-create | The object indicates the index of an interface. It specifies the interface information of the packets. The invalid interface index is 0. |
| T/F hwAclIpv6IfAny | 1.3.6.1.4.1.2011.5.1.1.17.1.5 | TruthValue | read-create | The object indicates whether or not matching any interface. |
| I32 hwAclIpv6IfTimeRangeIndex | 1.3.6.1.4.1.2011.5.1.1.17.1.6 | Integer32 | read-create | The object indicates the time range of an interface-based acl6 rule. when the current time is in time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0. |
| T/F hwAclIpv6IfLog | 1.3.6.1.4.1.2011.5.1.1.17.1.7 | TruthValue | read-create | The object indicates whether to log the matched packets. The log contents include sequence number of ACL6 rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets. |
| T/F hwAclIpv6IfEnable | 1.3.6.1.4.1.2011.5.1.1.17.1.8 | TruthValue | read-only | The object indicates whether the rule is valid or invalid. |
| C64 hwAclIpv6IfCount | 1.3.6.1.4.1.2011.5.1.1.17.1.9 | Counter64 | read-only | The object indicates the statistics of matched packets by basic rule. |
| ROW hwAclIpv6IfRowStatus | 1.3.6.1.4.1.2011.5.1.1.17.1.11 | RowStatus | read-create | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| hwAclMplsRuleTable | 1.3.6.1.4.1.2011.5.1.1.18 | not-accessible | Configure the rule for mpls acl group. | |
| hwAclMplsRuleEntry | 1.3.6.1.4.1.2011.5.1.1.18.1 | not-accessible | Each entry is a rule of mpls acl. | |
| I32 hwAclMplsAclNum | 1.3.6.1.4.1.2011.5.1.1.18.1.1 | Integer32 | read-only | The index of mpls acl group, the index range is (10000..10999 | 42768..76535). |
| U32 hwAclMplsSubitem | 1.3.6.1.4.1.2011.5.1.1.18.1.2 | Unsigned32 | read-only | The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle. When ACL rules are following the 'Depth-first' principle, the number of an ACL rule must be given 0 ,but it will be assigned by step automatically;otherwise,this rule will not be created. |
| INT hwAclMplsAct | 1.3.6.1.4.1.2011.5.1.1.18.1.3 | INTEGER | read-create | The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition. |
| I32 hwAclMplsExp1 | 1.3.6.1.4.1.2011.5.1.1.18.1.4 | Integer32 | read-create | The object indicates the exp1 of a mpls acl rule. |
| I32 hwAclMplsExp2 | 1.3.6.1.4.1.2011.5.1.1.18.1.5 | Integer32 | read-create | The object indicates the exp2 of a mpls acl rule. |
| I32 hwAclMplsExp3 | 1.3.6.1.4.1.2011.5.1.1.18.1.6 | Integer32 | read-create | The object indicates the exp3 of a mpls acl rule. |
| I32 hwAclMplsExp4 | 1.3.6.1.4.1.2011.5.1.1.18.1.7 | Integer32 | read-create | The object indicates the exp4 of a mpls acl rule. |
| I32 hwAclMplsLabel1 | 1.3.6.1.4.1.2011.5.1.1.18.1.8 | Integer32 | read-create | The object indicates the label1 of a mpls acl rule. |
| I32 hwAclMplsLabel2 | 1.3.6.1.4.1.2011.5.1.1.18.1.9 | Integer32 | read-create | The object indicates the label2 of a mpls acl rule. |
| I32 hwAclMplsLabel3 | 1.3.6.1.4.1.2011.5.1.1.18.1.10 | Integer32 | read-create | The object indicates the label3 of a mpls acl rule. |
| I32 hwAclMplsLabel4 | 1.3.6.1.4.1.2011.5.1.1.18.1.11 | Integer32 | read-create | The object indicates the label4 of a mpls acl rule. |
| INT hwAclMplsTTLOP1 | 1.3.6.1.4.1.2011.5.1.1.18.1.12 | INTEGER | read-create | The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this operation of the ttl is invalid. |
| I32 hwAclMplsTTL1Begin | 1.3.6.1.4.1.2011.5.1.1.18.1.13 | Integer32 | read-create | The object indicates the begin value of a mpls ttl. |
| I32 hwAclMplsTTL1End | 1.3.6.1.4.1.2011.5.1.1.18.1.14 | Integer32 | read-create | The object indicates the end value of a mpls ttl. |
| INT hwAclMplsTTLOP2 | 1.3.6.1.4.1.2011.5.1.1.18.1.15 | INTEGER | read-create | The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this operation of the ttl is invalid. |
| I32 hwAclMplsTTL2Begin | 1.3.6.1.4.1.2011.5.1.1.18.1.16 | Integer32 | read-create | The object indicates the begin value of a mpls ttl. |
| I32 hwAclMplsTTL2End | 1.3.6.1.4.1.2011.5.1.1.18.1.17 | Integer32 | read-create | The object indicates the end value of a mpls ttl. |
| INT hwAclMplsTTLOP3 | 1.3.6.1.4.1.2011.5.1.1.18.1.18 | INTEGER | read-create | The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this operation of the ttl is invalid. |
| I32 hwAclMplsTTL3Begin | 1.3.6.1.4.1.2011.5.1.1.18.1.19 | Integer32 | read-create | The object indicates the begin value of a mpls ttl. |
| I32 hwAclMplsTTL3End | 1.3.6.1.4.1.2011.5.1.1.18.1.20 | Integer32 | read-create | The object indicates the end value of a mpls ttl. |
| ROW hwAclMplsRowStatus | 1.3.6.1.4.1.2011.5.1.1.18.1.21 | RowStatus | read-create | RowStatus, Now support three value:CreateAndGo,Active and Destroy. |
| C64 hwAclMplsCount | 1.3.6.1.4.1.2011.5.1.1.18.1.22 | Counter64 | read-only | The object indicates the statistics of matched packets by the rule. |
| hwAclDomainNameConfigTable | 1.3.6.1.4.1.2011.5.1.1.19 | not-accessible | Configure the domain name. | |
| hwAclDomainNameConfigEntry | 1.3.6.1.4.1.2011.5.1.1.19.1 | not-accessible | Each entry is a domain name. | |
| I32 hwAclDomainID | 1.3.6.1.4.1.2011.5.1.1.19.1.1 | Integer32 | not-accessible | The index of DomianName table, the index range is (0..31). |
| OCT hwAclDomainName | 1.3.6.1.4.1.2011.5.1.1.19.1.2 | OCTET STRING | read-write | The domian name. |
| ROW hwAclDomainNameConfigRowStatus | 1.3.6.1.4.1.2011.5.1.1.19.1.3 | RowStatus | read-create | Row status,Two actions are used: createAndGo(4), destroy(6). |
| hwAclMibTrap | 1.3.6.1.4.1.2011.5.1.2 | |||
| hwAclTrapOid | 1.3.6.1.4.1.2011.5.1.2.1 | |||
| hwAclTrapsDefine | 1.3.6.1.4.1.2011.5.1.2.2 | |||
| hwAclTraps | 1.3.6.1.4.1.2011.5.1.2.2.1 | |||
| hwAclResourceTrapsTable | 1.3.6.1.4.1.2011.5.1.2.2.1.1 | |||
| OCT hwAclResSlotStr | 1.3.6.1.4.1.2011.5.1.2.2.1.1.1 | OCTET STRING | accessible-for-notify | The infomation of slot. |
| OCT hwAclResStage | 1.3.6.1.4.1.2011.5.1.2.2.1.1.2 | OCTET STRING | accessible-for-notify | The stage where trap infomation exists. |
| I32 hwAclResLimit | 1.3.6.1.4.1.2011.5.1.2.2.1.1.3 | Integer32 | accessible-for-notify | The usage of rule resource. |
| hwAclResourceTrapsEntry | 1.3.6.1.4.1.2011.5.1.2.2.1.1.4 | |||
| NTF hwAclResThresholdExceedClearTrap | 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.1 | Acl resource lack clear trap | ||
| NTF hwAclResThresholdExceedTrap | 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.2 | Acl resource lack trap | ||
| NTF hwAclResTotalCountExceedClearTrap | 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.3 | Acl resource full clear trap | ||
| NTF hwAclResTotalCountExceedTrap | 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.4 | Acl resource full trap | ||
| hwAclResourceTrapsGroups | 1.3.6.1.4.1.2011.5.1.2.2.1.1.5 | |||
| hwAclResourceTrapsGroup | 1.3.6.1.4.1.2011.5.1.2.2.1.1.5.1 | Group for all acl resource traps. | ||
| hwAclMibConformance | 1.3.6.1.4.1.2011.5.1.3 | |||
| hwAclMibCompliances | 1.3.6.1.4.1.2011.5.1.3.1 | |||
| hwAclMibCompliance | 1.3.6.1.4.1.2011.5.1.3.1.1 | The compliance statement for entities which implement the Huawei acl MIB. | ||
| hwAclMibGroups | 1.3.6.1.4.1.2011.5.1.3.2 | |||
| hwAclGroup | 1.3.6.1.4.1.2011.5.1.3.2.1 | A collection of objects providing mandatory acl information. |
RFC description
Manages ACL (Access Control List) rules, groups, and policies including IPv4 and IPv6 filters on Huawei devices.
Start monitoring Huawei router or switch (Access Control Lists) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.