HUAWEI-ACL-MIB
349 objects
The HUAWEI-ACL-MIB contains objects to configure ACL module, including ACL group, rule and acl accelerate, and query the current ACL configuration and status. This MIB module objects indicate hwAclNumGroupTable, hwAclBasicRuleTable, hwAclAdvanceRuleTable, hwAclIfRuleTable, hwAclEthernetFrameRuleTable, hwAclIpv6BasicRuleTable, hwAclIpv6AdvanceRuleTable, hwAclIpv6IfRuleTable, hwAclCompileEnableFlag, hwAclCompileNumGroupTable, hwAclIpv6NumGroupTable and acl trap. To filter data packets, a series of rules need to be configured on the device. These rules are defined by ACL (Access Control List), which are a series of sequential rules consisting of rule permit or deny statements. The rules are described by source address, destination address and port number of data packets. ACL classifies data packets through these device interface applied rules, by which the device decides which packets can be received and which should be rejected.
Imported Objects
| HUAWEI-MIB | huaweiMgmt |
| IPV6-TC | Ipv6Address |
| P-BRIDGE-MIB | EnabledStatus |
| SNMPv2-CONF | MODULE-COMPLIANCE NOTIFICATION-GROUP OBJECT-GROUP |
| SNMPv2-SMI | Counter32 Counter64 Gauge32 Integer32 IpAddress MODULE-IDENTITY NOTIFICATION-TYPE OBJECT-TYPE Unsigned32 |
| SNMPv2-TC | MacAddress RowStatus TruthValue |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.2011.5.1 | IdentityhwAcl | The HUAWEI-ACL-MIB contains objects to configure ACL module, including ACL group, rule and acl accelerate, and query the current ACL configuration and status. … | ||
| 1.3.6.1.4.1.2011.5.1.1 | NodehwAclMibObjects | |||
| 1.3.6.1.4.1.2011.5.1.1.2 | TablehwAclNumGroupTable | not-accessible | current | This table is used to query information about an ACL rule group, including the ACL configuration order, step length, and description. |
| 1.3.6.1.4.1.2011.5.1.1.2.1 | RowhwAclNumGroupEntry | not-accessible | current | An entry containing characters of an acl group |
| 1.3.6.1.4.1.2011.5.1.1.2.1.1 | ColumnhwAclNumGroupAclNum | read-only | current | The index of acl group, identifying an ACL. The object specifies the range of an ACL number. The basic ACL is represented by the number in the range 2000 throu… |
| 1.3.6.1.4.1.2011.5.1.1.2.1.2 | ColumnhwAclNumGroupMatchOrder | read-create | current | The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL rules are matched followin… |
| 1.3.6.1.4.1.2011.5.1.1.2.1.3 | ColumnhwAclNumGroupSubitemNum | read-only | current | The total number of the rules in the acl group. |
| 1.3.6.1.4.1.2011.5.1.1.2.1.4 | ColumnhwAclNumGroupStep | read-create | current | The object indicates the step value of number acl. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs are th… |
| 1.3.6.1.4.1.2011.5.1.1.2.1.5 | ColumnhwAclNumGroupDescription | read-create | current | This object indicates the description of a rule group. The description length cannot exceed 127 characters. |
| 1.3.6.1.4.1.2011.5.1.1.2.1.6 | ColumnhwAclNumGroupCountClear | read-create | current | The value of this object identifies whether to clear up the count of rule groups. The value can be: cleared(1) notUsed(2) This field is effective only when you… |
| 1.3.6.1.4.1.2011.5.1.1.2.1.7 | ColumnhwAclNumGroupRowStatus | read-create | current | RowStatus, Now support three value:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.2.1.8 | ColumnhwAclNumGroupAclName | read-create | current | The object indicates the name of an acl group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character. |
| 1.3.6.1.4.1.2011.5.1.1.2.1.9 | ColumnhwAclNumGroupAclType | read-only | current | The type of ACL group. |
| 1.3.6.1.4.1.2011.5.1.1.4 | TablehwAclBasicRuleTable | not-accessible | current | Configure the rule for basic acl group. |
| 1.3.6.1.4.1.2011.5.1.1.4.1 | RowhwAclBasicRuleEntry | not-accessible | current | Each entry is a rule of basic acl. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.1 | ColumnhwAclBasicAclNum | read-only | current | The index of basic acl group, the index range is (1..99 | 2000..2999 | 42768..76535 ). |
| 1.3.6.1.4.1.2011.5.1.1.4.1.2 | ColumnhwAclBasicSubitem | read-only | current | The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is eq… |
| 1.3.6.1.4.1.2011.5.1.1.4.1.3 | ColumnhwAclBasicAct | read-create | current | The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that me… |
| 1.3.6.1.4.1.2011.5.1.1.4.1.4 | ColumnhwAclBasicSrcIp | read-create | current | The object indicates the source IP-address of a basic acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.5 | ColumnhwAclBasicSrcWild | read-create | current | The value of this object identifies the wildcard mask of the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.6 | ColumnhwAclBasicTimeRangeIndex | read-create | current | The value of this object identifies the index of a time range of an ACL rule. The value ranges from 0 to 256. The value 0 is invalid, indicating that no time r… |
| 1.3.6.1.4.1.2011.5.1.1.4.1.7 | ColumnhwAclBasicFragments | read-create | current | The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is … |
| 1.3.6.1.4.1.2011.5.1.1.4.1.8 | ColumnhwAclBasicLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protoco… |
| 1.3.6.1.4.1.2011.5.1.1.4.1.9 | ColumnhwAclBasicEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.10 | ColumnhwAclBasicCount | read-only | current | The object indicates the statistics of matched packets by the rule. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.11 | ColumnhwAclBasicVrfName | read-create | current | This object indicates an VPN instance. The length of a VPN instance name cannot exceed 31 characters. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.12 | ColumnhwAclBasicRowStatus | read-create | current | RowStatus, Now support three value:CreateAndGo,Active and Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.13 | ColumnhwAclBasicDescription | read-create | current | The object indicates the description of this basic rule. The object describes the usage of an ACL with a word or a sentence. |
| 1.3.6.1.4.1.2011.5.1.1.4.1.14 | ColumnhwAclBasicVrfAny | read-create | current | The object indicates whether or not matching any VPN-instance. |
| 1.3.6.1.4.1.2011.5.1.1.5 | TablehwAclAdvancedRuleTable | not-accessible | current | Configure the rule for advanced acl group. |
| 1.3.6.1.4.1.2011.5.1.1.5.1 | RowhwAclAdvancedRuleEntry | not-accessible | current | Each entry contains a rule of advanced acl group. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.1 | ColumnhwAclAdvancedAclNum | read-only | current | The index of advanced acl table, the index range is (100..199 | 3000..3999 | 42768..76535). |
| 1.3.6.1.4.1.2011.5.1.1.5.1.2 | ColumnhwAclAdvancedSubitem | read-only | current | The object specifies the number of an advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, whi… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.3 | ColumnhwAclAdvancedAct | read-create | current | The object indicates the action of an advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets tha… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.4 | ColumnhwAclAdvancedProtocol | read-create | current | The value of this object identifies the number of the protocol over IP. The value ranges from 0 to 255. The value 0 indicates the IP protocol. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.5 | ColumnhwAclAdvancedSrcIp | read-create | current | The value of this object identifies the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.6 | ColumnhwAclAdvancedSrcWild | read-create | current | The value of this object identifies the wildcard mask of the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.7 | ColumnhwAclAdvancedSrcOp | read-create | current | The object indicates the source Port operation symbol of an advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' mea… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.8 | ColumnhwAclAdvancedSrcPort1 | read-create | current | This object indicates the end source port number. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.9 | ColumnhwAclAdvancedSrcPort2 | read-create | current | This object indicates the start source port number. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.10 | ColumnhwAclAdvancedDestIp | read-create | current | This object indicates the destination IP address. The value ranges from 0.0.0.0 to 255.255.255.255. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.11 | ColumnhwAclAdvancedDestWild | read-create | current | This object indicates the mask of the destination IP address. The value ranges from 0.0.0.0 to 255.255.255.255. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.12 | ColumnhwAclAdvancedDestOp | read-create | current | The object indicates the destination Port operation symbol of an advanced acl group. It compares the port operators of destination address. 'lt' means less tha… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.13 | ColumnhwAclAdvancedDestPort1 | read-create | current | This object indicates the end destination port number. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.14 | ColumnhwAclAdvancedDestPort2 | read-create | current | This object indicates the start destination port number. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.15 | ColumnhwAclAdvancedPrecedence | read-create | current | The value of this object identifies the precedence sub-field. It is the higher three bits of the ToS field in an IP header. The value ranges from 0 to 7. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.16 | ColumnhwAclAdvancedTos | read-create | current | The value of this object identifies the ToS sub-field. This field covers four bits after the higher three bits of the ToS field in an IP header. The value rang… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.17 | ColumnhwAclAdvancedDscp | read-create | current | The value of this object identifies the higher six bits of the ToS field in an IP header. The value ranges from 0 to 63. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.18 | ColumnhwAclAdvancedEstablish | read-create | current | The object indicates whether or not establishing. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.19 | ColumnhwAclAdvancedTimeRangeIndex | read-create | current | The object indicates the time range of an advanced acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl ru… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.20 | ColumnhwAclAdvancedIcmpType | read-create | current | The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.21 | ColumnhwAclAdvancedIcmpCode | read-create | current | The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.22 | ColumnhwAclAdvancedFragments | read-create | current | The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is … |
| 1.3.6.1.4.1.2011.5.1.1.5.1.23 | ColumnhwAclAdvancedLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protoco… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.24 | ColumnhwAclAdvancedEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.25 | ColumnhwAclAdvancedCount | read-only | current | The object indicates the statistics of matched packets by the rule. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.26 | ColumnhwAclAdvancedVrfName | read-create | current | The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.27 | ColumnhwAclAdvancedRowStatus | read-create | current | RowStatus, Now support three state:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.28 | ColumnhwAclAdvancedTcpSyncFlag | read-create | current | The object indicates the code of TCP Sync flag(0~63), The invalid value is -1. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.29 | ColumnhwAclAdvancedDescription | read-create | current | The object indicates the description of this advanced rule. The object describes the usage of an ACL with a word or a sentence. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.30 | ColumnhwAclAdvancedSrcPoolName | read-create | current | The object indicates the source pool name. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.31 | ColumnhwAclAdvancedDestPoolName | read-create | current | The object indicates the destination pool name. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.32 | ColumnhwAclAdvancedProtocolNew | read-create | current | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IP protocol is 65535. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.33 | ColumnhwAclAdvancedVni | read-create | current | The object indicates the ID of VXLAN, The invalid value is 0. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.34 | ColumnhwAclAdvancedIgmpType | read-create | current | The object indicates the type of igmp, The invalid value is 65535. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.35 | ColumnhwAclAdvancedTtlOp | read-create | current | The object indicates the ttl operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equa… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.36 | ColumnhwAclAdvancedTtlExpire | read-create | current | The object indicates the begin ttl value. The invalid value is 0. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.37 | ColumnhwAclAdvancedTtlExpireEnd | read-create | current | The object indicates the end ttl value. The invalid value is 0. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.38 | ColumnhwAclAdvancedPktLenOp | read-create | current | The object indicates the packet length operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' mean… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.39 | ColumnhwAclAdvancedPktLenBegin | read-create | current | The object indicates the begin packet length value. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.40 | ColumnhwAclAdvancedPktLenEnd | read-create | current | The object indicates the end packet length value. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.41 | ColumnhwAclAdvancedTcpFlagMask | read-create | current | The object indicates the mask of tcp-flag. The invalid value is 0. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.42 | ColumnhwAclAdvancedSrcPortPoolName | read-create | current | The object indicates the source port pool name. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.43 | ColumnhwAclAdvancedDestPortPoolName | read-create | current | The object indicates the destination port pool name. |
| 1.3.6.1.4.1.2011.5.1.1.5.1.44 | ColumnhwAclAdvancedIcmpTypeEnd | read-create | current | The value of this object identifies the ICMP message type. The value ranges from 0 to 255. The value 65535 is invalid. This object is used together with hwAclA… |
| 1.3.6.1.4.1.2011.5.1.1.5.1.45 | ColumnhwAclAdvancedVrfAny | read-create | current | The object indicates whether or not matching any VPN-instance. |
| 1.3.6.1.4.1.2011.5.1.1.6 | TablehwAclIfRuleTable | not-accessible | current | Configure the rule for interface-based acl group. |
| 1.3.6.1.4.1.2011.5.1.1.6.1 | RowhwAclIfRuleEntry | not-accessible | current | Each entry contains a rule of interface-based acl group. |
| 1.3.6.1.4.1.2011.5.1.1.6.1.1 | ColumnhwAclIfAclNum | read-only | current | The index of interface-based acl group, the index range is (1000..1999 | 42768..76535). |
| 1.3.6.1.4.1.2011.5.1.1.6.1.2 | ColumnhwAclIfSubitem | read-only | current | The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equ… |
| 1.3.6.1.4.1.2011.5.1.1.6.1.3 | ColumnhwAclIfAct | read-create | current | The object indicates the action of an interface-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the pack… |
| 1.3.6.1.4.1.2011.5.1.1.6.1.4 | ColumnhwAclIfIndex | read-create | current | The object indicates the index of an interface. It specifies the interface information of the packets.The invalid interface index is 0. |
| 1.3.6.1.4.1.2011.5.1.1.6.1.5 | ColumnhwAclIfAny | read-create | current | The object indicates whether or not matching any interface. |
| 1.3.6.1.4.1.2011.5.1.1.6.1.6 | ColumnhwAclIfTimeRangeIndex | read-create | current | The value of this object identifies the index of the time range during which an ACL rule can be applied. When the current time is in the time range, the rule i… |
| 1.3.6.1.4.1.2011.5.1.1.6.1.7 | ColumnhwAclIfLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protoco… |
| 1.3.6.1.4.1.2011.5.1.1.6.1.8 | ColumnhwAclIfEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.6.1.9 | ColumnhwAclIfCount | read-only | current | The object indicates the statistics of matched packets by the rule. |
| 1.3.6.1.4.1.2011.5.1.1.6.1.11 | ColumnhwAclIfRowStatus | read-create | current | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.6.1.12 | ColumnhwAclIfDescription | read-create | current | The object indicates the description of this if rule. The object describes the usage of an ACL with a word or a sentence. |
| 1.3.6.1.4.1.2011.5.1.1.7 | TablehwAclUserRuleTable | not-accessible | current | Configure the rule for user acl group. |
| 1.3.6.1.4.1.2011.5.1.1.7.1 | RowhwAclUserRuleEntry | not-accessible | current | Each entry contains a rule of user acl group. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.1 | ColumnhwAclUserAclNum | read-only | current | The index of user acl table, the index range is (6000..9999). |
| 1.3.6.1.4.1.2011.5.1.1.7.1.2 | ColumnhwAclUserSubitem | read-only | current | The object specifies the number of an User ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which i… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.3 | ColumnhwAclUserAct | read-create | current | The object indicates the action of an User acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that me… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.4 | ColumnhwAclUserProtocol | read-create | current | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IP protocol is 0. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.5 | ColumnhwAclUserSrcIp | read-create | current | The object indicates the source IP-address of an User acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.6 | ColumnhwAclUserSrcWild | read-create | current | The object indicates the source IP-address wild of an User acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.7 | ColumnhwAclUserSrcOp | read-create | current | The object indicates the source Port operation symbol of an User acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means e… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.8 | ColumnhwAclUserSrcPort1 | read-create | current | The object indicates the fourth layer sourec port 1. It specifies the source port information of UDP or TCP packets. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.9 | ColumnhwAclUserSrcPort2 | read-create | current | The object indicates the fourth layer source port2. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.10 | ColumnhwAclUserDestIp | read-create | current | The object indicates the destination IP-address of an User acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.11 | ColumnhwAclUserDestWild | read-create | current | The object indicates the destination IP-address wild of an User acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.12 | ColumnhwAclUserDestOp | read-create | current | The object indicates the destination Port operation symbol of an User acl group. It compares the port operators of destination address. 'lt' means less than, '… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.13 | ColumnhwAclUserDestPort1 | read-create | current | The object indicates the fourth layer destination port1. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.14 | ColumnhwAclUserDestPort2 | read-create | current | The object indicates the fourth layer destination port2. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.15 | ColumnhwAclUserPrecedence | read-create | current | The object indicates the value of IP-packet's precedence, It filters packets according to precedence field.The invalid value is 255. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.16 | ColumnhwAclUserTos | read-create | current | The object indicates the value of IP-packet's TOS, It filters packets according to type of service.The invalid value is 255. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.17 | ColumnhwAclUserDscp | read-create | current | The object indicates the value of frame.The invalid value is 255. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.18 | ColumnhwAclUserEstablish | read-create | current | The object indicates whether or not establishing. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.19 | ColumnhwAclUserTimeRangeIndex | read-create | current | The object indicates the time range of an User acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule h… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.20 | ColumnhwAclUserIcmpType | read-create | current | The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.21 | ColumnhwAclUserIcmpCode | read-create | current | The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.22 | ColumnhwAclUserFragments | read-create | current | The object indicates whether or not matching fragmented packet, It specifies that this rule is only valid for the non-first fragment packets. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.23 | ColumnhwAclUserLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protoco… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.24 | ColumnhwAclUserEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.25 | ColumnhwAclUserCount | read-only | current | The object indicates the statistics of matched packets by the rule. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.26 | ColumnhwAclUserVrfName | read-create | current | The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.27 | ColumnhwAclUserSrcUserGroupName | read-create | current | The object indicates the source user group name of this rule. if modetype source is user, null sting means any user |
| 1.3.6.1.4.1.2011.5.1.1.7.1.28 | ColumnhwAclUserDestUserGroupName | read-create | current | The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user |
| 1.3.6.1.4.1.2011.5.1.1.7.1.29 | ColumnhwAclUserSrcModeType | read-create | current | The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet, 1 NetAny match rule from any ip subnet, 2 U… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.30 | ColumnhwAclUserDestModeType | read-create | current | The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet or any doamin name, 1 NetAny match rule from… |
| 1.3.6.1.4.1.2011.5.1.1.7.1.31 | ColumnhwAclUserRowStatus | read-create | current | RowStatus, Now support three state:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.32 | ColumnhwAclUserTcpSyncFlag | read-create | current | The object indicates the code of TCP Sync flag(0~63), The invalid value is -1. |
| 1.3.6.1.4.1.2011.5.1.1.7.1.33 | ColumnhwAclUserSrcUserGroupNum | read-create | current | The object indicates the source user group num of this rule. if modetype source is user, null sting means any user |
| 1.3.6.1.4.1.2011.5.1.1.7.1.34 | ColumnhwAclUserDestUserGroupNum | read-create | current | The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user |
| 1.3.6.1.4.1.2011.5.1.1.7.1.35 | ColumnhwAclUserDestDomainName | read-only | current | The object indicates the destination domain name of this rule. if modetype destination is domain, null sting means any domain. |
| 1.3.6.1.4.1.2011.5.1.1.10 | ScalarhwAclCompileEnableFlag | read-write | current | The object indicates whether acl compiler is enabled. when acl compiler is enabled, and ACL accelerate function is enabled, then matching packets by rule is ef… |
| 1.3.6.1.4.1.2011.5.1.1.11 | TablehwAclCompileNumGroupTable | not-accessible | current | The ACL compiler table extending the Acl-number-group table |
| 1.3.6.1.4.1.2011.5.1.1.11.1 | RowhwAclCompileNumGroupEntry | not-accessible | current | The entry of Acl-number-group compiler extended table |
| 1.3.6.1.4.1.2011.5.1.1.11.1.1 | ColumnhwAclCompileNumGroupStatus | read-write | current | The object indicates the status of Acl-number-group compiler. 'notCompile' means acl accelerate function is disabled, 'compiled' means acl accelerate function … |
| 1.3.6.1.4.1.2011.5.1.1.12 | TablehwAclIpv6BasicRuleTable | not-accessible | current | Configure the rule for ipv6 basic acl group. |
| 1.3.6.1.4.1.2011.5.1.1.12.1 | RowhwAclIpv6BasicRuleEntry | not-accessible | current | Each entry is a rule of ipv6 basic acl. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.1 | ColumnhwAclIpv6BasicAclNum | read-only | current | The index of ipv6 basic acl group, the index range is (2000..2999 | 42768..75535). |
| 1.3.6.1.4.1.2011.5.1.1.12.1.2 | ColumnhwAclIpv6BasicSubitem | read-only | current | The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is eq… |
| 1.3.6.1.4.1.2011.5.1.1.12.1.3 | ColumnhwAclIpv6BasicAct | read-create | current | The object indicates the action of a ipv6 basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets th… |
| 1.3.6.1.4.1.2011.5.1.1.12.1.4 | ColumnhwAclIpv6BasicSrcIp | read-create | current | The object indicates the source IPv6-address of a ipv6 basic acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.5 | ColumnhwAclIpv6BasicSrcPrefix | read-create | current | The value of this object identifies the mask length of the source IPv6 address. The value ranges from 0 to 128. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.6 | ColumnhwAclIpv6BasicTimeRangeIndex | read-create | current | The value of this object identifies the index of the time range during which an ACL6 rule can be applied.The value ranges from 0 to 256.The value 0 is invalid,… |
| 1.3.6.1.4.1.2011.5.1.1.12.1.7 | ColumnhwAclIpv6BasicFragment | read-create | current | The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once… |
| 1.3.6.1.4.1.2011.5.1.1.12.1.8 | ColumnhwAclIpv6BasicLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protoco… |
| 1.3.6.1.4.1.2011.5.1.1.12.1.9 | ColumnhwAclIpv6BasicEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.10 | ColumnhwAclIpv6BasicCount | read-only | current | This object indicates the number of matched packets by a rule. A maximum of 64 bits are supported. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.11 | ColumnhwAclIpv6BasicVrfName | read-create | current | This object indicates a VPN instance. The length of a VPN instance name cannot exceed 31 characters. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.12 | ColumnhwAclIpv6BasicRowStatus | read-create | current | RowStatus, Now support three value: CreateAndGo, Active and Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.13 | ColumnhwAclIpv6BasicDescription | read-create | current | The object indicates the description of this IPv6 basic rule. The object describes the usage of an IPv6 ACL with a word or a sentence. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.14 | ColumnhwAclIpv6BasicSrcMask | read-create | current | The object indicates the source IPv6-address mask of a ipv6 basic acl rule. Its mode is positive. |
| 1.3.6.1.4.1.2011.5.1.1.12.1.15 | ColumnhwAclIpv6BasicVrfAny | read-create | current | The object indicates whether or not matching any VPN-instance. |
| 1.3.6.1.4.1.2011.5.1.1.13 | TablehwAclIpv6AdvancedRuleTable | not-accessible | current | Configure the rule for ipv6 advanced acl group. |
| 1.3.6.1.4.1.2011.5.1.1.13.1 | RowhwAclIpv6AdvancedRuleEntry | not-accessible | current | Each entry contains a rule of ipv6 advanced acl group. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.1 | ColumnhwAclIpv6AdvancedAclNum | read-only | current | The index of ipv6 advanced acl table, the index range is (3000..3999 | 42768..75535). |
| 1.3.6.1.4.1.2011.5.1.1.13.1.2 | ColumnhwAclIpv6AdvancedSubitem | read-only | current | The object specifies the number of an ipv6 advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.3 | ColumnhwAclIpv6AdvancedAct | read-create | current | The object indicates the action of an ipv6 advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packet… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.4 | ColumnhwAclIpv6AdvancedProtocol | read-create | current | The value of this object identifies the number of the protocol over IPv6. The value ranges from 0 to 255. The value 0 indicates the IPv6 protocol. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.5 | ColumnhwAclIpv6AdvancedSrcIp | read-create | current | The object indicates the source IPv6-address of an ipv6 advanced acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.6 | ColumnhwAclIpv6AdvancedSrcPrefix | read-create | current | The value of this object identifies the mask length of the source IPv6 address. The value ranges from 0 to 128. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.7 | ColumnhwAclIpv6AdvancedSrcOp | read-create | current | The object indicates the source Port operation symbol of an ipv6 advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.8 | ColumnhwAclIpv6AdvancedSrcPort1 | read-create | current | This object indicates the end source port number. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.9 | ColumnhwAclIpv6AdvancedSrcPort2 | read-create | current | This object indicates the start source port number. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.10 | ColumnhwAclIpv6AdvancedDestIp | read-create | current | The object indicates the destination IPv6-address of an ipv6 advanced acl rule. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.11 | ColumnhwAclIpv6AdvancedDestPrefix | read-create | current | The value of this object identifies the mask length of the destination IPv6 address. The value ranges from 0 to 128. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.12 | ColumnhwAclIpv6AdvancedDestOp | read-create | current | The object indicates the destination Port operation symbol of an ipv6 advanced acl group. It compares the port operators of destination address. 'lt' means les… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.13 | ColumnhwAclIpv6AdvancedDestPort1 | read-create | current | This object indicates the largest destination port number. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.14 | ColumnhwAclIpv6AdvancedDestPort2 | read-create | current | This object indicates the smallest destination port number. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.15 | ColumnhwAclIpv6AdvancedPrecedence | read-create | current | The value of this object identifies the precedence sub-field. It is the higher three bits of the ToS field in an IPv6 header. The value ranges from 0 to 7. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.16 | ColumnhwAclIpv6AdvancedTos | read-create | current | The value of this object identifies the ToS sub-field. This field covers four bits after the higher three bits of the ToS field in an IPv6 header. The value ra… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.17 | ColumnhwAclIpv6AdvancedDscp | read-create | current | The value of this object identifies the higher seven bits of the ToS field in an IPv6 header. The value ranges from 0 to 63. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.18 | ColumnhwAclIpv6AdvancedEstablish | read-create | current | The object indicates whether or not establishing. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.19 | ColumnhwAclIpv6AdvancedTimeRangeIndex | read-create | current | The value of this object identifies the index of the time range during which an ACL6 rule can be applied. The value ranges from 0 to 256. The value 0 indicates… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.20 | ColumnhwAclIpv6AdvancedIcmpType | read-create | current | The value of this object identifies the ICMPv6 message type. The value ranges from 0 to 255. The value 65535 is invalid. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.21 | ColumnhwAclIpv6AdvancedIcmpCode | read-create | current | The value of this obejct identifies the code of an ICMPv6 message. The value ranges from 0 to 255. The value 65535 is invalid. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.22 | ColumnhwAclIpv6AdvancedFragment | read-create | current | The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.23 | ColumnhwAclIpv6AdvancedLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protoco… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.24 | ColumnhwAclIpv6AdvancedEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.25 | ColumnhwAclIpv6AdvancedCount | read-only | current | This object indicates the number of packets matched by a rule. A maximum of 64 bits are supported. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.26 | ColumnhwAclIpv6AdvancedVrfName | read-create | current | This object indicates a VPN instance. The length of a VPN instance name cannot exceed 31 characters. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.27 | ColumnhwAclIpv6AdvancedRowStatus | read-create | current | RowStatus, Now support three state:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.28 | ColumnhwAclIpv6AdvancedDescription | read-create | current | The object indicates the description of this IPv6 advanced rule. The object describes the usage of an IPv6 ACL with a word or a sentence. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.29 | ColumnhwAclIpv6AdvancedSrcMask | read-create | current | The object indicates the source IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.30 | ColumnhwAclIpv6AdvancedDestMask | read-create | current | The object indicates the destination IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.31 | ColumnhwAclIpv6AdvancedProtocolNew | read-create | current | The object indicates the protocol type of the rule. It specifies the protocol type over IP.The number of IPv6 protocol is 65535. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.32 | ColumnhwAclIpv6AdvancedIcmpTypeEnd | read-create | current | The value of this object identifies the ICMPv6 message type. The value ranges from 0 to 255. The value 65535 is invalid. This object is used together with hwAc… |
| 1.3.6.1.4.1.2011.5.1.1.13.1.33 | ColumnhwAclIpv6AdvancedVrfAny | read-create | current | The object indicates whether or not matching any VPN-instance. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.34 | ColumnhwAclIpv6AdvancedSrcPoolName | read-create | current | The object indicates the source Ipv6 pool name. |
| 1.3.6.1.4.1.2011.5.1.1.13.1.35 | ColumnhwAclIpv6AdvancedVni | read-create | current | The object indicates the ID of VXLAN, The invalid value is 0. |
| 1.3.6.1.4.1.2011.5.1.1.14 | TablehwAclEthernetFrameRuleTable | not-accessible | current | Configure the rule for ethernet-frame-based acl group. |
| 1.3.6.1.4.1.2011.5.1.1.14.1 | RowhwAclEthernetFrameRuleEntry | not-accessible | current | Each entry contains a rule of ethernet-frame-based acl group. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.1 | ColumnhwAclEthernetFrameAclNum | read-only | current | The index of ethernet-frame-based acl group, the index range is (4000..4999 | 42768..76535). |
| 1.3.6.1.4.1.2011.5.1.1.14.1.2 | ColumnhwAclEthernetFrameSubitem | read-only | current | The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equ… |
| 1.3.6.1.4.1.2011.5.1.1.14.1.3 | ColumnhwAclEthernetFrameAct | read-create | current | The object indicates the action of an ethernet-frame-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the… |
| 1.3.6.1.4.1.2011.5.1.1.14.1.4 | ColumnhwAclEthernetFrameType | read-create | current | The value of this object identifies the protocol type of an Ethernet frame. The value ranges from 0 to 65535. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.5 | ColumnhwAclEthernetFrameTypeMask | read-create | current | The value of this object identifies the mask of the protocol type of an Ethernet frame. The value ranges from 0 to 65535. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.6 | ColumnhwAclEthernetFrameSrcMac | read-create | current | The object indicates the source mac address of rule. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.7 | ColumnhwAclEthernetFrameSrcMacMask | read-create | current | The object indicates the source mac mask of rule. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.8 | ColumnhwAclEthernetFrameDstMac | read-create | current | The object indicates the destination mac address of rule. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.9 | ColumnhwAclEthernetFrameDstMacMask | read-create | current | The object indicates the destination mac mask of rule. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.10 | ColumnhwAclEthernetFrameTimeRangeIndex | read-create | current | The object indicates the time range of a ethernet frame acl rule. When the current time is in time range, the rule is valid. Zero value declares that the acl r… |
| 1.3.6.1.4.1.2011.5.1.1.14.1.11 | ColumnhwAclEthernetFrameLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, source/destination … |
| 1.3.6.1.4.1.2011.5.1.1.14.1.12 | ColumnhwAclEthernetFrameEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.13 | ColumnhwAclEthernetFrameCount | read-only | current | This object indicates the number of matched packets by a rule. A maximum of 64 bits are supported. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.14 | ColumnhwAclEthernetFrameRowStatus | read-create | current | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.15 | ColumnhwAclEthernetFrameEncapType | read-create | current | The object indicates the encapsulation type of rule. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.16 | ColumnhwAclEthernetFrameDoubleTag | read-create | current | The object indicates two tags of rule. False value do not care the number of tags. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.17 | ColumnhwAclEthernetFrameVlanId | read-create | current | The object indicates the vlan ID of rule. The invalid vlan ID is 0. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.18 | ColumnhwAclEthernetFrameVlanIdMask | read-create | current | The object indicates the vlan ID mask of rule. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.19 | ColumnhwAclEthernetFrameCVlanId | read-create | current | The object indicates the ce-vlan ID of rule. The invalid vlan ID is 0. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.20 | ColumnhwAclEthernetFrameCVlanIdMask | read-create | current | The object indicates the ce-vlan ID mask of rule. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.21 | ColumnhwAclEthernetFrameRule8021p | read-create | current | The object indicates the 8021p value of S-tag. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.22 | ColumnhwAclEthernetFrameRuleCVlan8021p | read-create | current | The object indicates the 8021p value of C-tag. |
| 1.3.6.1.4.1.2011.5.1.1.14.1.23 | ColumnhwAclEthernetFrameDescription | read-create | current | The object indicates the description of this ethernetframe rule. The object describes the usage of an ACL with a word or a sentence. |
| 1.3.6.1.4.1.2011.5.1.1.15 | TablehwAclAppliedTable | not-accessible | current | Configure the applied ACL. |
| 1.3.6.1.4.1.2011.5.1.1.15.1 | RowhwAclAppliedEntry | not-accessible | current | Each entry contains a applied ACL. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.1 | ColumnhwAclAppliedOperation | not-accessible | current | The actions taken when packets conforming or exceeding the configured. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.2 | ColumnhwAclAppliedScopeType | not-accessible | current | The scope that ACL apply on. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.3 | ColumnhwAclAppliedScopeIndex | not-accessible | current | When the scope is global, this field is invalid; When the scope is vlan, this field is vlan ID; When the scope is interface, this field is interface index. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.4 | ColumnhwAclAppliedDirection | not-accessible | current | The direction acl apply on. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.5 | ColumnhwAclAppliedAclNum | not-accessible | current | The index of ACL group. Basic ACL in range 2000~2999; Advance ACL in range 3000~3999; Link ACL in range 4000~4999; |
| 1.3.6.1.4.1.2011.5.1.1.15.1.6 | ColumnhwAclAppliedSubitem | not-accessible | current | The object specifies the number of an ACL rule. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.7 | ColumnhwAclAppliedAclNum2 | not-accessible | current | The index of ACL group. 65535 means this field is valid. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.8 | ColumnhwAclAppliedSubitem2 | not-accessible | current | The object specifies the number of an ACL rule. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.9 | ColumnhwAclAppliedStatMode | read-create | current | The object specifies the mode of statistics. When action is statistic, this field is valid. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.10 | ColumnhwAclAppliedStatCount | read-only | current | The object indicates the statistics of matched packets by the policy. When action is statistic or limit, this field is valid. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.11 | ColumnhwAclAppliedLimitCir | read-create | current | Committed information rate. Unit: kbps. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.12 | ColumnhwAclAppliedLimitPir | read-create | current | Peak information rate. Unit: kbps. 0 is the default value. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.13 | ColumnhwAclAppliedLimitCbs | read-create | current | Committed burst size. Unit: byte. 0 is the default value. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.14 | ColumnhwAclAppliedLimitPbs | read-create | current | Peak burst size. Unit: byte. 0 is the default value. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.15 | ColumnhwAclAppliedLimitGreenAction | read-create | current | Green action. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.16 | ColumnhwAclAppliedLimitGreenValue | read-create | current | The value is to remark When green action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.17 | ColumnhwAclAppliedLimitYellowAction | read-create | current | Yellow action. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.18 | ColumnhwAclAppliedLimitYellowValue | read-create | current | The value is to remark When yellow action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.19 | ColumnhwAclAppliedLimitRedAction | read-create | current | Red action. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.20 | ColumnhwAclAppliedLimitRedValue | read-create | current | The value is to remark When red action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.21 | ColumnhwAclAppliedMirrObservedPort | read-create | current | The mirror observe port number. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.22 | ColumnhwAclAppliedMirrRspanVlan | read-create | current | The object specifies the RSPAN vlan. 0 means mirror to local port. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.23 | ColumnhwAclAppliedRedirectIfIndex | read-create | current | The redirect output interface. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.24 | ColumnhwAclAppliedRedirectIpAddr | read-create | current | The redirect IP next hop address. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.25 | ColumnhwAclAppliedRedirectIpv6Addr | read-create | current | The redirect IPv6 next hop address. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.26 | ColumnhwAclAppliedRemarkVlan | read-create | current | The remarked vlan ID. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.27 | ColumnhwAclAppliedRemarkCVlan | read-create | current | The remarked ce-vlan ID. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.28 | ColumnhwAclAppliedRemark8021p | read-create | current | The remarked 8021p value. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.29 | ColumnhwAclAppliedRemarkDscp | read-create | current | The remarked DSCP value. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.30 | ColumnhwAclAppliedRemarkIpPre | read-create | current | The remarked IP precedence value. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.31 | ColumnhwAclAppliedRemarkLocalPre | read-create | current | The remarked local precedence value. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.32 | ColumnhwAclAppliedRemarkMacAddr | read-create | current | The remarked MAC address. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.33 | ColumnhwAclAppliedIsIPv6Acl | not-accessible | current | The object indicates whether is IPv6 ACL. |
| 1.3.6.1.4.1.2011.5.1.1.15.1.51 | ColumnhwAclAppliedRowStatus | read-create | current | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.16 | TablehwAclIpv6NumGroupTable | not-accessible | current | This table is used to query information about an ACL rule group, including the ACL configuration order, step length, and description. |
| 1.3.6.1.4.1.2011.5.1.1.16.1 | RowhwAclIpv6NumGroupEntry | not-accessible | current | An entry containing characters of an IPv6 ACL group. |
| 1.3.6.1.4.1.2011.5.1.1.16.1.1 | ColumnhwAclIpv6NumGroupAclNum | read-only | current | The value of this object identifies a table index, representing the number of an IPv6 ACL rule group. The value range is as follows: Interface-based ACL6: 1000… |
| 1.3.6.1.4.1.2011.5.1.1.16.1.2 | ColumnhwAclIpv6NumGroupMatchOrder | read-create | current | The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL6 rules are matched followi… |
| 1.3.6.1.4.1.2011.5.1.1.16.1.3 | ColumnhwAclIpv6NumGroupSubitemNum | read-only | current | The total number of the rules in the ACL6 group. |
| 1.3.6.1.4.1.2011.5.1.1.16.1.4 | ColumnhwAclIpv6NumGroupCountClear | read-create | current | This object indicates whether to clear the statistics of an ACL6 rule group. cleared(1): clear notUsed(2): not clear This object is valid only when the Set ope… |
| 1.3.6.1.4.1.2011.5.1.1.16.1.5 | ColumnhwAclIpv6NumGroupAclName | read-create | current | The object indicates the name of an acl6 group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character. |
| 1.3.6.1.4.1.2011.5.1.1.16.1.6 | ColumnhwAclIpv6NumGroupDescription | read-create | current | This object indicates the description of an ACL6 rule group. The description length cannot exceed 127 characters. |
| 1.3.6.1.4.1.2011.5.1.1.16.1.7 | ColumnhwAclIpv6NumGroupAclType | read-create | current | The type of IPv6 ACL group. |
| 1.3.6.1.4.1.2011.5.1.1.16.1.51 | ColumnhwAclIpv6NumGroupRowStatus | read-create | current | RowStatus, Now support three value:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.16.1.52 | ColumnhwAclIpv6NumGroupStep | read-create | current | The object indicates the step value of number IPv6 ACL. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs a… |
| 1.3.6.1.4.1.2011.5.1.1.17 | TablehwAclIpv6IfRuleTable | not-accessible | current | Configure the rule for interface-based acl6 group. |
| 1.3.6.1.4.1.2011.5.1.1.17.1 | RowhwAclIpv6IfRuleEntry | not-accessible | current | Each entry contains a rule of interface-based acl6 group. |
| 1.3.6.1.4.1.2011.5.1.1.17.1.1 | ColumnhwAclIpv6IfAclNum | read-only | current | The index of interface-based acl6 group, the index range is (1000..1999 | 42768..75535). |
| 1.3.6.1.4.1.2011.5.1.1.17.1.2 | ColumnhwAclIpv6IfSubitem | read-only | current | The object specifies the number of an ACL6 rule. If the number specified has been assigned to an ACL6 rule, the new rule will overwrite the old one, which is e… |
| 1.3.6.1.4.1.2011.5.1.1.17.1.3 | ColumnhwAclIpv6IfAct | read-create | current | The object indicates the action of an interface-based acl6 rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the pac… |
| 1.3.6.1.4.1.2011.5.1.1.17.1.4 | ColumnhwAclIpv6IfIndex | read-create | current | The object indicates the index of an interface. It specifies the interface information of the packets. The invalid interface index is 0. |
| 1.3.6.1.4.1.2011.5.1.1.17.1.5 | ColumnhwAclIpv6IfAny | read-create | current | The object indicates whether or not matching any interface. |
| 1.3.6.1.4.1.2011.5.1.1.17.1.6 | ColumnhwAclIpv6IfTimeRangeIndex | read-create | current | The value of this object identifies the index of the time range during which an ACL rule can be applied. When the current time is in the time range, the rule i… |
| 1.3.6.1.4.1.2011.5.1.1.17.1.7 | ColumnhwAclIpv6IfLog | read-create | current | The object indicates whether to log the matched packets. The log contents include sequence number of ACL6 rule, packets passed or discarded, upper layer protoc… |
| 1.3.6.1.4.1.2011.5.1.1.17.1.8 | ColumnhwAclIpv6IfEnable | read-only | current | The object indicates whether the rule is valid or invalid. |
| 1.3.6.1.4.1.2011.5.1.1.17.1.9 | ColumnhwAclIpv6IfCount | read-only | current | The object indicates the statistics of matched packets by basic rule. |
| 1.3.6.1.4.1.2011.5.1.1.17.1.11 | ColumnhwAclIpv6IfRowStatus | read-create | current | RowStatus,Now support three state:CreateAndGo,Active,Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.18 | TablehwAclMplsRuleTable | not-accessible | current | Configure the rule for mpls acl group. |
| 1.3.6.1.4.1.2011.5.1.1.18.1 | RowhwAclMplsRuleEntry | not-accessible | current | Each entry is a rule of mpls acl. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.1 | ColumnhwAclMplsAclNum | read-only | current | The index of mpls acl group, the index range is (10000..10999 | 42768..76535). |
| 1.3.6.1.4.1.2011.5.1.1.18.1.2 | ColumnhwAclMplsSubitem | read-only | current | The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is eq… |
| 1.3.6.1.4.1.2011.5.1.1.18.1.3 | ColumnhwAclMplsAct | read-create | current | The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that me… |
| 1.3.6.1.4.1.2011.5.1.1.18.1.4 | ColumnhwAclMplsExp1 | read-create | current | The value of this object identifies the EXP value in the first label of an MPLS packet. The value ranges from 0 to 7. The default value is 255. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.5 | ColumnhwAclMplsExp2 | read-create | current | The value of this object identifies the EXP value in the second label of an MPLS packet. The value ranges from 0 to 7. The default value is 255. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.6 | ColumnhwAclMplsExp3 | read-create | current | The value of this object identifies the EXP value in the third label of an MPLS packet. The value ranges from 0 to 7. The default value is 255. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.7 | ColumnhwAclMplsExp4 | read-create | current | The value of this object identifies the EXP value in the fourth label of an MPLS packet. The value ranges from 0 to 7. The default value is 255. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.8 | ColumnhwAclMplsLabel1 | read-create | current | The value of this object identifies the Label value in the first label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.9 | ColumnhwAclMplsLabel2 | read-create | current | The value of this object identifies the Label value in the second label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.10 | ColumnhwAclMplsLabel3 | read-create | current | The value of this object identifies the Label value in the third label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.11 | ColumnhwAclMplsLabel4 | read-create | current | The value of this object identifies the Label value in the fourth label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.12 | ColumnhwAclMplsTTLOP1 | read-create | current | The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means… |
| 1.3.6.1.4.1.2011.5.1.1.18.1.13 | ColumnhwAclMplsTTL1Begin | read-create | current | The object indicates the begin value of a mpls ttl. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.14 | ColumnhwAclMplsTTL1End | read-create | current | The object indicates the end value of a mpls ttl. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.15 | ColumnhwAclMplsTTLOP2 | read-create | current | The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means… |
| 1.3.6.1.4.1.2011.5.1.1.18.1.16 | ColumnhwAclMplsTTL2Begin | read-create | current | The object indicates the begin value of a mpls ttl. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.17 | ColumnhwAclMplsTTL2End | read-create | current | The object indicates the end value of a mpls ttl. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.18 | ColumnhwAclMplsTTLOP3 | read-create | current | The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means… |
| 1.3.6.1.4.1.2011.5.1.1.18.1.19 | ColumnhwAclMplsTTL3Begin | read-create | current | The object indicates the begin value of a mpls ttl. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.20 | ColumnhwAclMplsTTL3End | read-create | current | The object indicates the end value of a mpls ttl. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.21 | ColumnhwAclMplsRowStatus | read-create | current | RowStatus, Now support three value:CreateAndGo,Active and Destroy. |
| 1.3.6.1.4.1.2011.5.1.1.18.1.22 | ColumnhwAclMplsCount | read-only | current | The object indicates the statistics of matched packets by the rule. |
| 1.3.6.1.4.1.2011.5.1.1.19 | TablehwAclDomainNameConfigTable | not-accessible | current | Configure the domain name. |
| 1.3.6.1.4.1.2011.5.1.1.19.1 | RowhwAclDomainNameConfigEntry | not-accessible | current | Each entry is a domain name. |
| 1.3.6.1.4.1.2011.5.1.1.19.1.1 | ColumnhwAclDomainID | not-accessible | current | The index of DomianName table, the index range is (0..31). |
| 1.3.6.1.4.1.2011.5.1.1.19.1.2 | ColumnhwAclDomainName | read-write | current | The domian name. |
| 1.3.6.1.4.1.2011.5.1.1.19.1.3 | ColumnhwAclDomainNameConfigRowStatus | read-create | current | Row status,Two actions are used: createAndGo(4), destroy(6). |
| 1.3.6.1.4.1.2011.5.1.1.20 | TablehwAclIPPoolTable | not-accessible | current | Configure the IP pool name. |
| 1.3.6.1.4.1.2011.5.1.1.20.1 | RowhwAclIPPoolEntry | not-accessible | current | Each entry is a IP pool name. |
| 1.3.6.1.4.1.2011.5.1.1.20.1.1 | ColumnhwAclIPPoolIndex | read-only | current | The index of ACL IP pool table. |
| 1.3.6.1.4.1.2011.5.1.1.20.1.2 | ColumnhwAclIPPoolName | read-create | current | The IP pool name. |
| 1.3.6.1.4.1.2011.5.1.1.20.1.3 | ColumnhwAclIPPoolRowStatus | read-create | current | Row status. |
| 1.3.6.1.4.1.2011.5.1.1.20.1.4 | ColumnhwAclIPPoolApplyBGPPeer | read-create | current | The object indicates whether or not BGP peers are applied. |
| 1.3.6.1.4.1.2011.5.1.1.21 | TablehwAclIPPoolIPTable | not-accessible | current | Configure the IP address of IP pool. |
| 1.3.6.1.4.1.2011.5.1.1.21.1 | RowhwAclIPPoolIPEntry | not-accessible | current | Each entry is a IP address of IP pool. |
| 1.3.6.1.4.1.2011.5.1.1.21.1.1 | ColumnhwAclIPPoolIPPoolIndex | read-only | current | This object indicates the level 1 index, that is, the index of an IP address pool used by an ACL. |
| 1.3.6.1.4.1.2011.5.1.1.21.1.2 | ColumnhwAclIPPoolIPIndex | read-only | current | This object indicates the level 2 index, that is, the index of an IPv4 address in an IP address pool used by an ACL. |
| 1.3.6.1.4.1.2011.5.1.1.21.1.3 | ColumnhwAclIPPoolIPIpAdd | read-create | current | The object indicates the IP-address. |
| 1.3.6.1.4.1.2011.5.1.1.21.1.4 | ColumnhwAclIPPoolIPIpWild | read-create | current | The object indicates the IP-address wild. |
| 1.3.6.1.4.1.2011.5.1.1.21.1.5 | ColumnhwAclIPPoolIPRowStatus | read-create | current | Row status. |
| 1.3.6.1.4.1.2011.5.1.1.22 | TablehwAclPortPoolTable | not-accessible | current | Configure the port pool name. |
| 1.3.6.1.4.1.2011.5.1.1.22.1 | RowhwAclPortPoolEntry | not-accessible | current | Each entry is a port pool name. |
| 1.3.6.1.4.1.2011.5.1.1.22.1.1 | ColumnhwAclPortPoolIndex | read-only | current | The index of ACL port pool table. |
| 1.3.6.1.4.1.2011.5.1.1.22.1.2 | ColumnhwAclPortPoolName | read-create | current | The Port pool name. |
| 1.3.6.1.4.1.2011.5.1.1.22.1.3 | ColumnhwAclPortPoolRowStatus | read-create | current | Row status. |
| 1.3.6.1.4.1.2011.5.1.1.23 | TablehwAclPortPoolPortTable | not-accessible | current | Configure the port range of port pool. |
| 1.3.6.1.4.1.2011.5.1.1.23.1 | RowhwAclPortPoolPortEntry | not-accessible | current | Each entry is a port range of port pool. |
| 1.3.6.1.4.1.2011.5.1.1.23.1.1 | ColumnhwAclPortPoolPortPoolIndex | read-only | current | This object indicates the level 1 index, that is, the index of an ACL port pool. |
| 1.3.6.1.4.1.2011.5.1.1.23.1.2 | ColumnhwAclPortPoolPortIndex | read-only | current | This object indicates the level 2 index, that is, the index of a port number in the ACL port pool. |
| 1.3.6.1.4.1.2011.5.1.1.23.1.3 | ColumnhwAclPortPoolPortOp | read-create | current | The object indicates the Port operation. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, '… |
| 1.3.6.1.4.1.2011.5.1.1.23.1.4 | ColumnhwAclPortPoolPortNumBegin | read-create | current | The object indicates the begin port number. |
| 1.3.6.1.4.1.2011.5.1.1.23.1.5 | ColumnhwAclPortPoolPortNumEnd | read-create | current | The object indicates the end port number. |
| 1.3.6.1.4.1.2011.5.1.1.23.1.6 | ColumnhwAclPortPoolPortRowStatus | read-create | current | Row status. |
| 1.3.6.1.4.1.2011.5.1.1.24 | TablehwAclIPPool6Table | not-accessible | current | Configure the IPv6 pool name. |
| 1.3.6.1.4.1.2011.5.1.1.24.1 | RowhwAclIPPool6Entry | not-accessible | current | Each entry is a IPv6 pool name. |
| 1.3.6.1.4.1.2011.5.1.1.24.1.1 | ColumnhwAclIPPool6Index | read-only | current | The index of ACL IPv6 pool table. |
| 1.3.6.1.4.1.2011.5.1.1.24.1.2 | ColumnhwAclIPPool6Name | read-create | current | The IPv6 pool name. |
| 1.3.6.1.4.1.2011.5.1.1.24.1.3 | ColumnhwAclIPPool6ApplyBGPIPv6Peer | read-create | current | The object indicates whether or not BGP IPv6 peers are applied. |
| 1.3.6.1.4.1.2011.5.1.1.24.1.4 | ColumnhwAclIPPool6RowStatus | read-create | current | Row status. |
| 1.3.6.1.4.1.2011.5.1.2 | NodehwAclMibTrap | |||
| 1.3.6.1.4.1.2011.5.1.2.1 | NodehwAclTrapOid | |||
| 1.3.6.1.4.1.2011.5.1.2.2 | NodehwAclTrapsDefine | |||
| 1.3.6.1.4.1.2011.5.1.2.2.1 | NodehwAclTraps | |||
| 1.3.6.1.4.1.2011.5.1.2.2.1.1 | NodehwAclResourceTrapsTable | |||
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.1 | ScalarhwAclResSlotStr | accessible-for-notify | current | The infomation of slot. |
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.2 | ScalarhwAclResStage | accessible-for-notify | current | The stage where trap infomation exists. |
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.3 | ScalarhwAclResLimit | accessible-for-notify | current | The usage of rule resource. |
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.4 | NodehwAclResourceTrapsEntry | |||
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.1 | NotificationhwAclResThresholdExceedClearTrap | current | Acl resource lack clear trap | |
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.2 | NotificationhwAclResThresholdExceedTrap | current | Acl resource lack trap | |
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.3 | NotificationhwAclResTotalCountExceedClearTrap | current | Acl resource full clear trap | |
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.4.4 | NotificationhwAclResTotalCountExceedTrap | current | Acl resource full trap | |
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.5 | NodehwAclResourceTrapsGroups | |||
| 1.3.6.1.4.1.2011.5.1.2.2.1.1.5.1 | GrouphwAclResourceTrapsGroup | current | Group for all acl resource traps. | |
| 1.3.6.1.4.1.2011.5.1.3 | NodehwAclMibConformance | |||
| 1.3.6.1.4.1.2011.5.1.3.1 | NodehwAclMibCompliances | |||
| 1.3.6.1.4.1.2011.5.1.3.1.1 | CompliancehwAclMibCompliance | current | The compliance statement for entities which implement the Huawei acl MIB. | |
| 1.3.6.1.4.1.2011.5.1.3.2 | NodehwAclMibGroups | |||
| 1.3.6.1.4.1.2011.5.1.3.2.1 | GrouphwAclGroup | current | A collection of objects providing mandatory acl information. |