-- ============================================================================ -- Copyright (c) 2009-2023 FS.COM Inc. All Rights Reserved. -- -- Description: -- Reference: -- Version: V3.4 -- History: -- V1.0 created by yuhui. -- V2.0 2004-10-12 updated by gaolong -- Define MODULE-IDENTITY for fsAcl -- Remove chinese characters -- Add limitation(0..65535) for some table index -- Fix a default value error of fsAclAdvancedEstablish -- V2.1 2004-11-18 updated by yubo -- Add 'fsAclIDSTable' for IDS -- V2.2 2004-12-13 -- Fix syntax bugs and adjust format of the whole file by jinyi -- Modify description of fsAclAdvancedDscp by zhuangyu -- V2.3 2005-1-26 updated by WuZhao02557 -- Change MAX-ACCESS from read-create to not-accessible for the -- following MIB nodes: -- fsAclNumGroupAclNum, fsAclNameGroupIndex, fsAclBasicAclNum, -- fsAclBasicSubitem, fsAclAdvancedAclNum, fsAclAdvancedSubitem -- fsAclIfAclNum, fsAclIfSubitem, fsAclLinkAclNum, fsAclLinkSubitem -- fsAclUserAclNum, fsAclUserSubitem, fsAclActiveAclIndex, -- fsAclActiveIfIndex, fsAclActiveVlanID, fsAclActiveDirection -- Adjust format of whole file. -- 2005-01-27 updated by zhangyinxi -- 1. Add objects fsAclLinkL2LabelRangeOp, fsAclLinkL2LabelRangeBegin -- fsAclLinkL2LabelRangeEnd and fsAclLinkMplsExp in fsAclLinkTable -- 2. Add an enumeration mpls(34887) to object fsAclLinkProtocol -- 3. Expand the range of object fsAclActiveVlanID to Integer32 -- V2.4 2005-2-24 -- Make the index of fsAclIDSTable IMPLIED by fuzhenyu because IDS devices -- require fixed length index to be used. IDS devices only provide index -- with no sub-identifier indicating the length of the string. -- Modify enum name(value is 4) of fsAclLinkFormatType to ieee802Dot3 by daishijun -- V2.5 2005-7-25 -- Add objects fsAclMib2Mode, fsAclVersion, fsAclMib2ObjectsCapabilities, -- fsAclIPAclNumGroupTable, fsAclIPAclBasicTable, fsAclIPAclAdvancedTable, -- fsAclMACTable, fsAclEnUserTable by tangshun. -- V2.6 2006-01-03 -- Add objects fsAclIPAclBasicComment, fsAclIPAclAdvancedComment, -- fsAclMACComment, fsAclEnUserComment by tangshun. -- V2.7 2006-03-09 updated by changhuifeng -- Add object fsAclIPAclAdvancedReflective in fsAclIPAclAdvancedTable. -- Modify the description of object fsAclIPAclAdvancedFragmentFlag. -- Modify the description of object fsAclMib2Version. -- Modify the description of object fsAclLinkDestAny for text error. -- Modify the description of object fsAclMib2CharacteristicsValue. -- V2.8 2006-07-06 updated by xialei -- Modify the description of fsAclIPAclAdvancedIcmpType -- and fsAclIPAclAdvancedIcmpCode. -- Change value range of fsAclIPAclAdvancedIcmpCode. -- V2.9 2006-08-08 updated by chenzhaojie -- Add enumeration value to fsAclActiveDirection. -- V3.0 2010-09-01 updated by zhaixiaoxiang -- Add fsAclResourceUsageTable. -- V3.1 2012-02-06 updated by wangchenxiao -- Add fsPacketfilterTrapObjects -- Add fsPacketfilterTrap -- 2012-02-14 updated by mouxuanli -- Add fsAclMib2ProcessingStatus of object fsAclMib2NodesGroup -- Add fsAclNumberGroupName of object fsAclNumberGroupTable -- Add fsAclIPAclBasicCounting of object fsAclIPAclBasicTable -- Add fsAclIPAclBasicRouteTypeAny of object fsAclIPAclBasicTable -- Add fsAclIPAclBasicRouteTypeValue of object fsAclIPAclBasicTable -- Add fsAclIPAclAdvancedCounting of object fsAclIPAclAdvancedTable -- Add fsAclIPAclAdvancedTCPFlagMask of object fsAclIPAclAdvancedTable -- Add fsAclIPAclAdvancedTCPFlagValue of object fsAclIPAclAdvancedTable -- Add fsAclIPAclAdvancedRouteTypeAny of object fsAclIPAclAdvancedTable -- Add fsAclIPAclAdvancedRouteTypeValue of object fsAclIPAclAdvancedTable -- Add fsAclIPAclAdvancedFlowLabel of object fsAclIPAclAdvancedTable -- Add fsAclMACLog of object fsAclMACTable -- Add fsAclMACCounting of object fsAclMACTable -- Add fsAclEnUserLog of object fsAclEnUserTable -- Add fsAclEnUserCounting of object fsAclEnUserTable -- Modify the description of fsAclResourceType -- Add fsAclResourceTypeDescription of object fsAclResourceUsageTable -- Add fsAclPacketFilterObjects -- V3.2 2012-11-30 updated by gaoyu -- Add fsPfilterRunApplyObjType of object fsPfilterAclGroupRunInfoTable -- Add fsPfilterRunApplyObjIndex of object fsPfilterAclGroupRunInfoTable -- Add fsPfilterRunApplyDirection of object fsPfilterAclGroupRunInfoTable -- Add fsPfilterRunApplyAclType of object fsPfilterAclGroupRunInfoTable -- Add fsPfilterRunApplyAclIndex of object fsPfilterAclGroupRunInfoTable -- modify the fsPfilterRunApplyObjType of object fsPfilterAclRuleRunInfoTable -- modify the fsPfilterRunApplyObjIndex of object fsPfilterAclRuleRunInfoTable -- modify the fsPfilterRunApplyDirection of object fsPfilterAclRuleRunInfoTable -- modify the fsPfilterRunApplyAclType of object fsPfilterAclRuleRunInfoTable -- modify the fsPfilterRunApplyAclIndex of object fsPfilterAclRuleRunInfoTable -- V3.3 2013-11-30 updated by gaoyu -- Add fsAclNamedGroupTable to object fsAclMib2GlobalGroup -- Add fsAclIPAclNamedBscTable to object fsAclIPAclGroup -- Add fsAclIPAclNamedAdvTable to object fsAclIPAclGroup -- Add fsAclNamedMACTable to object fsAclMACAclGroup -- Add fsAclIntervalGroup to object fsAclMib2Objects -- Modify fsPfilterApplyAclType of object fsPfilterApplyTable -- Modify fsPfilterRunApplyAclType of object fsPfilterAclGroupRunInfoTable -- Modify fsPfilterSumAclType of object fsPfilterStatisticSumTable -- Add fsPfilter2ApplyTable to object fsAclPacketFilterObjects -- Add fsPfilter2AclGroupRunInfoTable to object fsAclPacketFilterObjects -- Add fsPfilter2AclRuleRunInfoTable to object fsAclPacketFilterObjects -- Add fsPfilter2StatisticSumTable to object fsAclPacketFilterObjects -- Add fsAclPacketIfName to object fsAclPacketfilterTrapObjects -- Add fsAclPacketDirection to object fsAclPacketfilterTrapObjects -- Add fsAclPacketBAGG to object fsAclPacketfilterTrapObjects -- Add fsAclPacketVlanID to object fsAclPacketfilterTrapObjects -- Add fsAclPacketSrcIP to object fsAclPacketfilterTrapObjects -- Add fsAclPacketDstIP to object fsAclPacketfilterTrapObjects -- Add fsAclPacketProtocol to object fsAclPacketfilterTrapObjects -- Add fsAclPacketDscp to object fsAclPacketfilterTrapObjects -- Add fsAclPacketFlowLabel to object fsAclPacketfilterTrapObjects -- Add fsAclPacketIcmpIgmpType to object fsAclPacketfilterTrapObjects -- Add fsAclPacketIcmpIgmpCode to object fsAclPacketfilterTrapObjects -- Add fsAclPacketTcpFlags to object fsAclPacketfilterTrapObjects -- Add fsAclPacketSrcPort to object fsAclPacketfilterTrapObjects -- Add fsAclPacketDstPort to object fsAclPacketfilterTrapObjects -- Add fsAclPacketSrcMacAddr to object fsAclPacketfilterTrapObjects -- Add fsAclPacketDstMacAddr to object fsAclPacketfilterTrapObjects -- Add fsAclPacketMacTypeLen to object fsAclPacketfilterTrapObjects -- Add fsAclPacketVlanPCP to object fsAclPacketfilterTrapObjects -- Add fsAclRuleMatchCount to object fsPfilterTrapPrefix -- Add fsAclFirstIPv4PktCaptured to object fsPfilterTrapPrefix -- Add fsAclFirstIPv6PktCaptured to object fsPfilterTrapPrefix -- Add fsAclFirstEthernetPktCaptured to object fsPfilterTrapPrefix -- 2014-2-20 updated by gaoyu -- Add fsAclNamedUserTable to object fsAclEnUserAclGroup -- 2014-07-08 updated by gaoyu -- Add fsAclIPAclAdvancedSrcSuffix to object fsAclIPAclAdvancedTable -- Add fsAclIPAclAdvancedDestSuffix to object fsAclIPAclAdvancedTable -- Add fsAclIPAclNamedAdvSrcSuffix to object fsAclIPAclNamedAdvTable -- Add fsAclIPAclNamedAdvDstSuffix to object fsAclIPAclNamedAdvTable -- V3.4 2014-10-20 updated by gaoyu -- Add fsAclMib2ResourceThreshold to object fsAclMib2NodesGroup -- Add fsAclMib2ResourceLogInterval to object fsAclMib2NodesGroup -- Add fsAclResourceTypeName to object fsAclTrapObjects -- Add fsAclResourceUsage to object fsAclTrapObjects -- Add fsAclResourceUsedEntries to object fsAclTrapObjects -- Add fsAclResourceTotalEntries to object fsAclTrapObjects -- Add fsAclResourceChassisID to object fsAclTrapObjects -- Add fsAclResourceSlotID to object fsAclTrapObjects -- Add fsAclResourceTrap to object fsAclTrapPrefix -- ============================================================================ FS-ACL-MIB DEFINITIONS ::= BEGIN IMPORTS fsCommon FROM FS-OID-MIB IpAddress, Integer32, Counter32, OBJECT-TYPE, MODULE-IDENTITY, NOTIFICATION-TYPE, Unsigned32, Counter64 FROM SNMPv2-SMI InetAddressType, InetAddress, InetAddressPrefixLength FROM INET-ADDRESS-MIB RowStatus, TruthValue, MacAddress, TEXTUAL-CONVENTION FROM SNMPv2-TC; -- -- Node definitions -- fsAcl MODULE-IDENTITY LAST-UPDATED "201410201000Z" -- Oct 20, 2014 at 10:00 GMT ORGANIZATION "Fiberstore Co.,Limited" CONTACT-INFO "" DESCRIPTION "ACL management information base for managing devices that support access control list and packet filtering. " REVISION "201410201000Z" -- Oct 22, 2014 at 10:00 GMT DESCRIPTION "Added 2 ndoes to configure TCAM function and 6 nodes to show trap info." ::= { fsCommon 8 } -- Rule action value RuleAction ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The value of rule's action. permit: The packet matching the rule will be permitted to forward. deny: The packet matching the rule will be denied. " SYNTAX INTEGER { invalid(1), permit(2), deny(3) } -- CounterClear value CounterClear ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "cleared: Reset the value of the rule's counter. nouse: 'nouse' will be returned when getting. " SYNTAX INTEGER { cleared(1), nouse(2) } -- PortOp value PortOp ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The operation type of TCP and UDP. lt : Less than given port number. eq : Equal to given port number. gt : Greater than given port number. neq : Not equal to given port number. range : Between two port numbers. Default value is 'invalid'. " SYNTAX INTEGER { invalid(0), lt(1), eq(2), gt(3), neq(4), range(5) } -- DSCP value DSCPValue ::= TEXTUAL-CONVENTION DISPLAY-HINT "d" STATUS current DESCRIPTION "The value of DSCP. <0-63> Value of DSCP af11 Specify Assured Forwarding 11 service(10) af12 Specify Assured Forwarding 12 service(12) af13 Specify Assured Forwarding 13 service(14) af21 Specify Assured Forwarding 21 service(18) af22 Specify Assured Forwarding 22 service(20) af23 Specify Assured Forwarding 23 service(22) af31 Specify Assured Forwarding 31 service(26) af32 Specify Assured Forwarding 32 service(28) af33 Specify Assured Forwarding 33 service(30) af41 Specify Assured Forwarding 41 service(34) af42 Specify Assured Forwarding 42 service(36) af43 Specify Assured Forwarding 43 service(38) be Specify Best Effort service(0) cs1 Specify Class Selector 1 service(8) cs2 Specify Class Selector 2 service(16) cs3 Specify Class Selector 3 service(24) cs4 Specify Class Selector 4 service(32) cs5 Specify Class Selector 5 service(40) cs6 Specify Class Selector 6 service(48) cs7 Specify Class Selector 7 service(56) ef Specify Expedited Forwarding service(46) " SYNTAX Integer32 (0..63|255) -- TCP Flags TCPFlag ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Type of TCP. invalid(0) tcpack(1) TCP protocol ACK Packet tcpfin(2) TCP protocol PIN Packet tcppsh(3) TCP protocol PUSH Packet tcprst(4) TCP protocol RST Packet tcpsyn(5) TCP protocol SYN Packet tcpurg(6) TCP protocol URG Packet Default value is 'invalid'. " SYNTAX INTEGER { invalid(0), tcpack(1), tcpfin(2), tcppsh(3), tcprst(4), tcpsyn(5), tcpurg(6) } -- Fragment Flags FragmentFlag ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Type of fragment. invalid(0) fragment(1) Frag-Type Fragment fragmentSubseq(2) Frag-Type Fragment-subsequent nonFragment(3) Frag-Type non-Fragment nonSubseq(4) Frag-Type non-subsequent Default value is 'invalid'. " SYNTAX INTEGER { invalid(0), fragment(1), fragmentSubseq(2), nonFragment(3), nonSubseq(4) } -- Address Flags AddressFlag ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "Address flag to select IPv6 Address. Default value is 'invalid'. t64SrcAddrPre64DestAddrPre(1): The mean of the enumeration 't64SrcAddrPre64DestAddrPre' is that system gets the 64 bits prefix of source address and the 64 bits prefix of destination address. t64SrcAddrPre64DestAddrSuf(2): The mean of the enumeration 't64SrcAddrPre64DestAddrSuf' is that system gets the 64 bits prefix of source address and the 64 bits suffix of destination address. t64SrcAddrSuf64DestAddrPre(3): The mean of the enumeration 't64SrcAddrSuf64DestAddrPre' is that system gets the 64 bits suffix of source address and the 64 bits prefix of destination address. t64SrcAddrSuf64DestAddrSuf(4): The mean of the enumeration 't64SrcAddrSuf64DestAddrSuf' is that system gets the 64 bits suffix of source address and the 64 bits suffix of destination address. t128SourceAddress(5): The mean of the enumeration 't128SourceAddress' is that system gets the 128 bits of source address. t128DestinationAddress(6): The mean of the enumeration 't128SourceAddress' is that system gets the 128 bits of destination address. " SYNTAX INTEGER { invalid(0), t64SrcAddrPre64DestAddrPre(1), t64SrcAddrPre64DestAddrSuf(2), t64SrcAddrSuf64DestAddrPre(3), t64SrcAddrSuf64DestAddrSuf(4), t128SourceAddress(5), t128DestinationAddress(6) } -- Direction type DirectionType ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION "The direction: inbound or outbound." SYNTAX INTEGER { inbound(1), outbound(2) } -- -- nodes defined -- fsAclMibObjects OBJECT IDENTIFIER ::= { fsAcl 1 } fsAclMode OBJECT-TYPE SYNTAX INTEGER { linkBased(1), ipBased(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "Access-list mode." DEFVAL { ipBased } ::= { fsAclMibObjects 1 } -- -- Node of fsAclNumGroupTable -- fsAclNumGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclNumGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Configure the match-order of number-acl group." ::= { fsAclMibObjects 2 } fsAclNumGroupEntry OBJECT-TYPE SYNTAX FsAclNumGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Define the index of fsAclNumGroupTable." INDEX { fsAclNumGroupAclNum } ::= { fsAclNumGroupTable 1 } FsAclNumGroupEntry ::= SEQUENCE { fsAclNumGroupAclNum Integer32, fsAclNumGroupMatchOrder INTEGER, fsAclNumGroupSubitemNum Integer32, fsAclNumGroupDescription OCTET STRING, fsAclNumGroupCountClear INTEGER, fsAclNumGroupRowStatus RowStatus } fsAclNumGroupAclNum OBJECT-TYPE SYNTAX Integer32 (1000..5999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of number-acl group Interface type:1000..1999 Basic type:2000..2999 Advance type:3000..3999 Link type:4000..4999 User type:5000..5999" ::= { fsAclNumGroupEntry 1 } fsAclNumGroupMatchOrder OBJECT-TYPE SYNTAX INTEGER { config(1), auto(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The match-order of number-acl group." DEFVAL { config } ::= { fsAclNumGroupEntry 2 } fsAclNumGroupSubitemNum OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of number-acl group's node." ::= { fsAclNumGroupEntry 3 } fsAclNumGroupDescription OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-write STATUS current DESCRIPTION "The description of this acl group." ::= { fsAclNumGroupEntry 4 } fsAclNumGroupCountClear OBJECT-TYPE SYNTAX INTEGER { cleared(1), nouse(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Reset the value of rules' counter, which belong to this group." ::= { fsAclNumGroupEntry 5 } fsAclNumGroupRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclNumGroupEntry 6 } -- -- Node of fsAclNameGroupTable -- fsAclNameGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclNameGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Create acl-group that identified by name." ::= { fsAclMibObjects 3 } fsAclNameGroupEntry OBJECT-TYPE SYNTAX FsAclNameGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Define the index of fsAclNameGroupTable." INDEX { fsAclNameGroupIndex } ::= { fsAclNameGroupTable 1 } FsAclNameGroupEntry ::= SEQUENCE { fsAclNameGroupIndex Integer32, fsAclNameGroupCreateName OCTET STRING, fsAclNameGroupTypes INTEGER, fsAclNameGroupMatchOrder INTEGER, fsAclNameGroupSubitemNum Integer32, fsAclNameGroupRowStatus RowStatus } fsAclNameGroupIndex OBJECT-TYPE SYNTAX Integer32 (10000..12999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of name-acl group." ::= { fsAclNameGroupEntry 1 } fsAclNameGroupCreateName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The name of name-acl group." ::= { fsAclNameGroupEntry 2 } fsAclNameGroupTypes OBJECT-TYPE SYNTAX INTEGER { basic(1), advanced(2), ifBased(3), link(4), user(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The type of name-acl group." ::= { fsAclNameGroupEntry 3 } fsAclNameGroupMatchOrder OBJECT-TYPE SYNTAX INTEGER { config(1), auto(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The match-order of name-acl group." DEFVAL { config } ::= { fsAclNameGroupEntry 4 } fsAclNameGroupSubitemNum OBJECT-TYPE SYNTAX Integer32 (0..128) MAX-ACCESS read-only STATUS current DESCRIPTION "The number of name-acl group's node." ::= { fsAclNameGroupEntry 5 } fsAclNameGroupRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclNameGroupEntry 6 } -- -- fsAclBasicRuleTable -- fsAclBasicRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclBasicRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Configure the rule for basic acl group." ::= { fsAclMibObjects 4 } fsAclBasicRuleEntry OBJECT-TYPE SYNTAX FsAclBasicRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Define the index of fsAclBasicRuleTable." INDEX { fsAclBasicAclNum, fsAclBasicSubitem } ::= { fsAclBasicRuleTable 1 } FsAclBasicRuleEntry ::= SEQUENCE { fsAclBasicAclNum Integer32, fsAclBasicSubitem Integer32, fsAclBasicAct INTEGER, fsAclBasicSrcIp IpAddress, fsAclBasicSrcWild IpAddress, fsAclBasicTimeRangeName OCTET STRING, fsAclBasicFragments TruthValue, fsAclBasicLog TruthValue, fsAclBasicEnable TruthValue, fsAclBasicCount Counter32, fsAclBasicCountClear INTEGER, fsAclBasicRowStatus RowStatus } fsAclBasicAclNum OBJECT-TYPE SYNTAX Integer32 (0|2000..2999|10000..12999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of basic acl group." ::= { fsAclBasicRuleEntry 1 } fsAclBasicSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The subindex of basic acl group." ::= { fsAclBasicRuleEntry 2 } fsAclBasicAct OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The action of basic acl rule." ::= { fsAclBasicRuleEntry 3 } fsAclBasicSrcIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IP-address of basic acl rule." ::= { fsAclBasicRuleEntry 4 } fsAclBasicSrcWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IP-address wild of basic acl rule." ::= { fsAclBasicRuleEntry 5 } fsAclBasicTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of basic acl rule." ::= { fsAclBasicRuleEntry 6 } fsAclBasicFragments OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching fragmented packet." ::= { fsAclBasicRuleEntry 7 } fsAclBasicLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of log." ::= { fsAclBasicRuleEntry 8 } fsAclBasicEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " ::= { fsAclBasicRuleEntry 9 } fsAclBasicCount OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched by basic rule." ::= { fsAclBasicRuleEntry 10 } fsAclBasicCountClear OBJECT-TYPE SYNTAX INTEGER { cleared(1), nouse(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Reset the value of counter." ::= { fsAclBasicRuleEntry 11 } fsAclBasicRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclBasicRuleEntry 12 } -- -- fsAclAdvancedRuleTable -- fsAclAdvancedRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclAdvancedRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Configure the rule for advanced acl group." ::= { fsAclMibObjects 5 } fsAclAdvancedRuleEntry OBJECT-TYPE SYNTAX FsAclAdvancedRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Define the index of fsAclAdvancedRuleTable." INDEX { fsAclAdvancedAclNum, fsAclAdvancedSubitem } ::= { fsAclAdvancedRuleTable 1 } FsAclAdvancedRuleEntry ::= SEQUENCE { fsAclAdvancedAclNum Integer32, fsAclAdvancedSubitem Integer32, fsAclAdvancedAct INTEGER, fsAclAdvancedProtocol Integer32, fsAclAdvancedSrcIp IpAddress, fsAclAdvancedSrcWild IpAddress, fsAclAdvancedSrcOp INTEGER, fsAclAdvancedSrcPort1 Integer32, fsAclAdvancedSrcPort2 Integer32, fsAclAdvancedDestIp IpAddress, fsAclAdvancedDestWild IpAddress, fsAclAdvancedDestOp INTEGER, fsAclAdvancedDestPort1 Integer32, fsAclAdvancedDestPort2 Integer32, fsAclAdvancedPrecedence Integer32, fsAclAdvancedTos Integer32, fsAclAdvancedDscp Integer32, fsAclAdvancedEstablish TruthValue, fsAclAdvancedTimeRangeName OCTET STRING, fsAclAdvancedIcmpType Integer32, fsAclAdvancedIcmpCode Integer32, fsAclAdvancedFragments TruthValue, fsAclAdvancedLog TruthValue, fsAclAdvancedEnable TruthValue, fsAclAdvancedCount Counter32, fsAclAdvancedCountClear INTEGER, fsAclAdvancedRowStatus RowStatus } fsAclAdvancedAclNum OBJECT-TYPE SYNTAX Integer32 (0|3000..3999|10000..12999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of advanced acl group." ::= { fsAclAdvancedRuleEntry 1 } fsAclAdvancedSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The subindex of advanced acl group." ::= { fsAclAdvancedRuleEntry 2 } fsAclAdvancedAct OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The action of Advance acl rule." ::= { fsAclAdvancedRuleEntry 3 } fsAclAdvancedProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-create STATUS current DESCRIPTION "The protocol-type of advanced acl group. <1-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)" ::= { fsAclAdvancedRuleEntry 4 } fsAclAdvancedSrcIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IP-address of advanced acl group." ::= { fsAclAdvancedRuleEntry 5 } fsAclAdvancedSrcWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IP-address wild of advanced acl group." ::= { fsAclAdvancedRuleEntry 6 } fsAclAdvancedSrcOp OBJECT-TYPE SYNTAX INTEGER { invalid(0), lt(1), eq(2), gt(3), neq(4), range(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The source IP-address's operator of advanced acl group." ::= { fsAclAdvancedRuleEntry 7 } fsAclAdvancedSrcPort1 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer source port1." ::= { fsAclAdvancedRuleEntry 8 } fsAclAdvancedSrcPort2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer source port2." ::= { fsAclAdvancedRuleEntry 9 } fsAclAdvancedDestIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination IP-address of advanced acl group." ::= { fsAclAdvancedRuleEntry 10 } fsAclAdvancedDestWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination IP-address wild of advanced acl group." ::= { fsAclAdvancedRuleEntry 11 } fsAclAdvancedDestOp OBJECT-TYPE SYNTAX INTEGER { invalid(0), lt(1), eq(2), gt(3), neq(4), range(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The destination IP-address's operator of advanced acl group." ::= { fsAclAdvancedRuleEntry 12 } fsAclAdvancedDestPort1 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer destination port1." ::= { fsAclAdvancedRuleEntry 13 } fsAclAdvancedDestPort2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer destination port2." ::= { fsAclAdvancedRuleEntry 14 } fsAclAdvancedPrecedence OBJECT-TYPE SYNTAX Integer32 (0..7|255) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of IP-packet's precedence. <0-7> Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7) " ::= { fsAclAdvancedRuleEntry 15 } fsAclAdvancedTos OBJECT-TYPE SYNTAX Integer32 (0..15|255) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of IP-packet's TOS. <0-15> Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0) " ::= { fsAclAdvancedRuleEntry 16 } fsAclAdvancedDscp OBJECT-TYPE SYNTAX Integer32 (0..63|255) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of DSCP. <0-63> Value of DSCP af11 Specify Assured Forwarding 11 service(10) af12 Specify Assured Forwarding 12 service(12) af13 Specify Assured Forwarding 13 service(14) af21 Specify Assured Forwarding 21 service(18) af22 Specify Assured Forwarding 22 service(20) af23 Specify Assured Forwarding 23 service(22) af31 Specify Assured Forwarding 31 service(26) af32 Specify Assured Forwarding 32 service(28) af33 Specify Assured Forwarding 33 service(30) af41 Specify Assured Forwarding 41 service(34) af42 Specify Assured Forwarding 42 service(36) af43 Specify Assured Forwarding 43 service(38) be Specify Best Effort service(0) cs1 Specify Class Selector 1 service(8) cs2 Specify Class Selector 2 service(16) cs3 Specify Class Selector 3 service(24) cs4 Specify Class Selector 4 service(32) cs5 Specify Class Selector 5 service(40) cs6 Specify Class Selector 6 service(48) cs7 Specify Class Selector 7 service(56) ef Specify Expedited Forwarding service(46)" ::= { fsAclAdvancedRuleEntry 17 } fsAclAdvancedEstablish OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Establish flag." DEFVAL { false } ::= { fsAclAdvancedRuleEntry 18 } fsAclAdvancedTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of advanced acl rule." ::= { fsAclAdvancedRuleEntry 19 } fsAclAdvancedIcmpType OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of ICMP packet. Integer32 ICMP type echo Type=8, Code=0 echo-reply Type=0, Code=0 fragmentneed-DFset Type=3, Code=4 host-redirect Type=5, Code=1 host-tos-redirect Type=5, Code=3 host-unreachable Type=3, Code=1 information-reply Type=16, Code=0 information-request Type=15, Code=0 net-redirect Type=5, Code=0 net-tos-redirect Type=5, Code=2 net-unreachable Type=3, Code=0 parameter-problem Type=12, Code=0 port-unreachable Type=3, Code=3 protocol-unreachable Type=3, Code=2 reassembly-timeout Type=11, Code=1 source-quench Type=4, Code=0 source-route-failed Type=3, Code=5 timestamp-reply Type=14, Code=0 timestamp-request Type=13, Code=0 ttl-exceeded Type=11, Code=0 " ::= { fsAclAdvancedRuleEntry 20 } fsAclAdvancedIcmpCode OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The code of ICMP packet." ::= { fsAclAdvancedRuleEntry 21 } fsAclAdvancedFragments OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching fragmented packet." ::= { fsAclAdvancedRuleEntry 22 } fsAclAdvancedLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of log." ::= { fsAclAdvancedRuleEntry 23 } fsAclAdvancedEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " ::= { fsAclAdvancedRuleEntry 24 } fsAclAdvancedCount OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched by advanced rule." ::= { fsAclAdvancedRuleEntry 25 } fsAclAdvancedCountClear OBJECT-TYPE SYNTAX INTEGER { cleared(1), nouse(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Reset the value of counter." ::= { fsAclAdvancedRuleEntry 26 } fsAclAdvancedRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclAdvancedRuleEntry 27 } -- -- fsAclIfRuleTable -- fsAclIfRuleTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclIfRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Configure the rule for interface-based acl group." ::= { fsAclMibObjects 6 } fsAclIfRuleEntry OBJECT-TYPE SYNTAX FsAclIfRuleEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Define the index of fsAclIfRuleTable." INDEX { fsAclIfAclNum, fsAclIfSubitem } ::= { fsAclIfRuleTable 1 } FsAclIfRuleEntry ::= SEQUENCE { fsAclIfAclNum Integer32, fsAclIfSubitem Integer32, fsAclIfAct INTEGER, fsAclIfIndex Integer32, fsAclIfAny TruthValue, fsAclIfTimeRangeName OCTET STRING, fsAclIfLog TruthValue, fsAclIfEnable TruthValue, fsAclIfCount Counter32, fsAclIfCountClear INTEGER, fsAclIfRowStatus RowStatus } fsAclIfAclNum OBJECT-TYPE SYNTAX Integer32 (0|1000..1999|10000..12999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of interface-based acl group." ::= { fsAclIfRuleEntry 1 } fsAclIfSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The subindex of interface-based acl group." ::= { fsAclIfRuleEntry 2 } fsAclIfAct OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The action of interface-based acl group." ::= { fsAclIfRuleEntry 3 } fsAclIfIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS read-create STATUS current DESCRIPTION "The index of interface." ::= { fsAclIfRuleEntry 4 } fsAclIfAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any interface." ::= { fsAclIfRuleEntry 5 } fsAclIfTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of interface-based acl rule." ::= { fsAclIfRuleEntry 6 } fsAclIfLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of log." ::= { fsAclIfRuleEntry 7 } fsAclIfEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " ::= { fsAclIfRuleEntry 8 } fsAclIfCount OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched by basic rule." ::= { fsAclIfRuleEntry 9 } fsAclIfCountClear OBJECT-TYPE SYNTAX INTEGER { cleared(1), nouse(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Reset the value of the rule's counter." ::= { fsAclIfRuleEntry 10 } fsAclIfRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclIfRuleEntry 11 } -- -- fsAclLinkTable -- fsAclLinkTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclLinkEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Create link acl." ::= { fsAclMibObjects 7 } fsAclLinkEntry OBJECT-TYPE SYNTAX FsAclLinkEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of the link acl table." INDEX { fsAclLinkAclNum, fsAclLinkSubitem } ::= { fsAclLinkTable 1 } FsAclLinkEntry ::= SEQUENCE { fsAclLinkAclNum Integer32, fsAclLinkSubitem Integer32, fsAclLinkAct INTEGER, fsAclLinkProtocol INTEGER, fsAclLinkFormatType INTEGER, fsAclLinkVlanTag INTEGER, fsAclLinkVlanPri Integer32, fsAclLinkSrcVlanId Integer32, fsAclLinkSrcMac MacAddress, fsAclLinkSrcMacWild MacAddress, fsAclLinkSrcIfIndex Integer32, fsAclLinkSrcAny TruthValue, fsAclLinkDestVlanId Integer32, fsAclLinkDestMac MacAddress, fsAclLinkDestMacWild MacAddress, fsAclLinkDestIfIndex Integer32, fsAclLinkDestAny TruthValue, fsAclLinkTimeRangeName OCTET STRING, fsAclLinkEnable TruthValue, fsAclLinkRowStatus RowStatus, fsAclLinkTypeCode OCTET STRING, fsAclLinkTypeMask OCTET STRING, fsAclLinkLsapCode OCTET STRING, fsAclLinkLsapMask OCTET STRING, fsAclLinkL2LabelRangeOp INTEGER, fsAclLinkL2LabelRangeBegin Integer32, fsAclLinkL2LabelRangeEnd Integer32, fsAclLinkMplsExp Integer32 } fsAclLinkAclNum OBJECT-TYPE SYNTAX Integer32 (0|4000..4999|10000..12999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of link-based acl group." ::= { fsAclLinkEntry 1 } fsAclLinkSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The subindex of link-based acl group." ::= { fsAclLinkEntry 2 } fsAclLinkAct OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The action of link-based acl group." ::= { fsAclLinkEntry 3 } fsAclLinkProtocol OBJECT-TYPE SYNTAX INTEGER { invalid(0), ip(2048), arp(2054), rarp(32821), mpls(34887), pppoeControl(34915), pppoeData(34916) } MAX-ACCESS read-create STATUS current DESCRIPTION "The layer 2 protocol-type of link acl rule." DEFVAL { invalid } ::= { fsAclLinkEntry 4 } fsAclLinkFormatType OBJECT-TYPE SYNTAX INTEGER { invalid(0), ethernetII(1), snap(2), ieee802Dot3And2(3), ieee802Dot3(4) } MAX-ACCESS read-create STATUS current DESCRIPTION "Format type of link acl rule." ::= { fsAclLinkEntry 5 } fsAclLinkVlanTag OBJECT-TYPE SYNTAX INTEGER { invalid(0), tagged(1), untagged(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of vlan tag of link acl rule." ::= { fsAclLinkEntry 6 } fsAclLinkVlanPri OBJECT-TYPE SYNTAX Integer32 (0..7 | 255) MAX-ACCESS read-create STATUS current DESCRIPTION "Vlan priority of link acl rule." ::= { fsAclLinkEntry 7 } fsAclLinkSrcVlanId OBJECT-TYPE SYNTAX Integer32 (0..4094) MAX-ACCESS read-create STATUS current DESCRIPTION "Source vlan ID of link acl rule." ::= { fsAclLinkEntry 8 } fsAclLinkSrcMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source mac of link acl rule." ::= { fsAclLinkEntry 9 } fsAclLinkSrcMacWild OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source mac wildzard of link acl rule." ::= { fsAclLinkEntry 10 } fsAclLinkSrcIfIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS read-create STATUS current DESCRIPTION "Source IfIndex of link acl rule." ::= { fsAclLinkEntry 11 } fsAclLinkSrcAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any source." ::= { fsAclLinkEntry 12 } fsAclLinkDestVlanId OBJECT-TYPE SYNTAX Integer32 (0..4094) MAX-ACCESS read-create STATUS current DESCRIPTION "Destination vlan ID of link acl rule." ::= { fsAclLinkEntry 13 } fsAclLinkDestMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination mac of link acl rule." ::= { fsAclLinkEntry 14 } fsAclLinkDestMacWild OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination mac wildzard of link acl rule." ::= { fsAclLinkEntry 15 } fsAclLinkDestIfIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS read-create STATUS current DESCRIPTION "Destination IfIndex of link acl rule." ::= { fsAclLinkEntry 16 } fsAclLinkDestAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any destination." ::= { fsAclLinkEntry 17 } fsAclLinkTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of link-based acl rule." ::= { fsAclLinkEntry 18 } fsAclLinkEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " ::= { fsAclLinkEntry 19 } fsAclLinkRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclLinkEntry 20 } fsAclLinkTypeCode OBJECT-TYPE SYNTAX OCTET STRING ( SIZE(0..32) ) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of layer 2 protocol.0x0000...0xffff." ::= { fsAclLinkEntry 21 } fsAclLinkTypeMask OBJECT-TYPE SYNTAX OCTET STRING ( SIZE(0..32) ) MAX-ACCESS read-create STATUS current DESCRIPTION "The mask of layer 2 protocol.0x0000...0xffff." ::= { fsAclLinkEntry 22 } fsAclLinkLsapCode OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of LSAP.0x0000...0xffff." ::= { fsAclLinkEntry 23 } fsAclLinkLsapMask OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The mask of LSAP.0x0000...0xffff." ::= { fsAclLinkEntry 24 } fsAclLinkL2LabelRangeOp OBJECT-TYPE SYNTAX INTEGER { invalid(0), lt(1), eq(2), gt(3), neq(4), range(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "Operation symbol of the MPLS label. If the symbol is range(5), the objects fsAclLinkL2LabelRangeBegin and fsAclLinkL2LabelRangeEnd should have different values indicating a range. Otherwise, only fsAclLinkL2LabelRangeBegin counts, object fsAclLinkL2LabelRangeEnd is ignored. invalid(0) -- unavailable lt(1) -- less than eq(2) -- equal gt(3) -- great than neq(4) -- not equal range(5) -- a range with two ends included " ::= { fsAclLinkEntry 25 } fsAclLinkL2LabelRangeBegin OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-create STATUS current DESCRIPTION "The beginning of VPLS VC label." ::= { fsAclLinkEntry 26 } fsAclLinkL2LabelRangeEnd OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-create STATUS current DESCRIPTION "The end of VPLS VC label." ::= { fsAclLinkEntry 27 } fsAclLinkMplsExp OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-create STATUS current DESCRIPTION "The value of MPLS-packet's Exp." ::= { fsAclLinkEntry 28 } -- -- fsAclUserTable -- fsAclUserTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclUserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Create user acl." ::= { fsAclMibObjects 8 } fsAclUserEntry OBJECT-TYPE SYNTAX FsAclUserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of user acl table." INDEX { fsAclUserAclNum, fsAclUserSubitem } ::= { fsAclUserTable 1 } FsAclUserEntry ::= SEQUENCE { fsAclUserAclNum Integer32, fsAclUserSubitem Integer32, fsAclUserAct INTEGER, fsAclUserFormatType INTEGER, fsAclUserVlanTag INTEGER, fsAclUserRuleStr OCTET STRING, fsAclUserRuleMask OCTET STRING, fsAclUserTimeRangeName OCTET STRING, fsAclUserEnable TruthValue, fsAclUserRowStatus RowStatus } fsAclUserAclNum OBJECT-TYPE SYNTAX Integer32 (0|5000..5999|10000..12999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The number of the user acl." ::= { fsAclUserEntry 1 } fsAclUserSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The subitem of the user acl." ::= { fsAclUserEntry 2 } fsAclUserAct OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The action of the user acl." ::= { fsAclUserEntry 3 } fsAclUserFormatType OBJECT-TYPE SYNTAX INTEGER { invalid(0), ethernetII(1), snap(2), ieee802Dot2And3(3), ieee802Dot4(4) } MAX-ACCESS read-create STATUS current DESCRIPTION "Format type." DEFVAL { invalid } ::= { fsAclUserEntry 4 } fsAclUserVlanTag OBJECT-TYPE SYNTAX INTEGER { invalid(0), tagged(1), untagged(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "Vlan tag exits or not." DEFVAL { invalid } ::= { fsAclUserEntry 5 } fsAclUserRuleStr OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..80)) MAX-ACCESS read-create STATUS current DESCRIPTION "Rule string." ::= { fsAclUserEntry 6 } fsAclUserRuleMask OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..80)) MAX-ACCESS read-create STATUS current DESCRIPTION "Rule mask." ::= { fsAclUserEntry 7 } fsAclUserTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of the user defined acl." ::= { fsAclUserEntry 8 } fsAclUserEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " ::= { fsAclUserEntry 9 } fsAclUserRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclUserEntry 10 } -- -- fsAclActiveTable -- fsAclActiveTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclActiveEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Active acl." ::= { fsAclMibObjects 9 } fsAclActiveEntry OBJECT-TYPE SYNTAX FsAclActiveEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of active acl table." INDEX { fsAclActiveAclIndex, fsAclActiveIfIndex, fsAclActiveVlanID, fsAclActiveDirection } ::= { fsAclActiveTable 1 } FsAclActiveEntry ::= SEQUENCE { fsAclActiveAclIndex Integer32, fsAclActiveIfIndex Integer32, fsAclActiveVlanID Integer32, fsAclActiveDirection INTEGER, fsAclActiveUserAclNum Integer32, fsAclActiveUserAclSubitem Integer32, fsAclActiveIpAclNum Integer32, fsAclActiveIpAclSubitem Integer32, fsAclActiveLinkAclNum Integer32, fsAclActiveLinkAclSubitem Integer32, fsAclActiveRuntime TruthValue, fsAclActiveRowStatus RowStatus } fsAclActiveAclIndex OBJECT-TYPE SYNTAX Integer32 (0|1..5999|10000..12999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Acl index." ::= { fsAclActiveEntry 1 } fsAclActiveIfIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION "IfIndex." ::= { fsAclActiveEntry 2 } fsAclActiveVlanID OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "The lower 16 bits is Vlan ID, the higher 16 bits, if not zero, it describes the slot ID of the L3plus board. " ::= { fsAclActiveEntry 3 } fsAclActiveDirection OBJECT-TYPE SYNTAX INTEGER { invalid(0), input(1), output(2), both(3) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "Direction." ::= { fsAclActiveEntry 4 } fsAclActiveUserAclNum OBJECT-TYPE SYNTAX Integer32 (0|5000..5999|10000..12999) MAX-ACCESS read-create STATUS current DESCRIPTION "The number of the user acl." ::= { fsAclActiveEntry 5 } fsAclActiveUserAclSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The subitem of the user acl." ::= { fsAclActiveEntry 6 } fsAclActiveIpAclNum OBJECT-TYPE SYNTAX Integer32 (0|2000..3999|10000..12999) MAX-ACCESS read-create STATUS current DESCRIPTION "The number of the IP acl." ::= { fsAclActiveEntry 7 } fsAclActiveIpAclSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The subitem of the IP acl." ::= { fsAclActiveEntry 8 } fsAclActiveLinkAclNum OBJECT-TYPE SYNTAX Integer32 (0|4000..4999|10000..12999) MAX-ACCESS read-create STATUS current DESCRIPTION "The num of the link acl." ::= { fsAclActiveEntry 9 } fsAclActiveLinkAclSubitem OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The subitem of the link acl." ::= { fsAclActiveEntry 10 } fsAclActiveRuntime OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "Is run or not." ::= { fsAclActiveEntry 11 } fsAclActiveRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now support three state: CreateAndGo, Active, Destroy." ::= { fsAclActiveEntry 12 } -- -- fsAclIDSTable -- fsAclIDSTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclIDSEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Configure the rule for IDS." ::= { fsAclMibObjects 10 } fsAclIDSEntry OBJECT-TYPE SYNTAX FsAclIDSEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The entry of acl ids table." INDEX { IMPLIED fsAclIDSName} ::= { fsAclIDSTable 1 } FsAclIDSEntry ::= SEQUENCE { fsAclIDSName OCTET STRING, fsAclIDSSrcMac MacAddress, fsAclIDSDestMac MacAddress, fsAclIDSSrcIp IpAddress, fsAclIDSSrcWild IpAddress, fsAclIDSDestIp IpAddress, fsAclIDSDestWild IpAddress, fsAclIDSSrcPort Integer32, fsAclIDSDestPort Integer32, fsAclIDSProtocol Integer32, fsAclIDSDenyTime Unsigned32, fsAclIDSAct INTEGER, fsAclIDSRowStatus RowStatus } fsAclIDSName OBJECT-TYPE SYNTAX OCTET STRING (SIZE (1..32)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The name index of the IDS table." ::= { fsAclIDSEntry 1 } fsAclIDSSrcMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source mac of IDS acl rule." ::= { fsAclIDSEntry 2 } fsAclIDSDestMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination mac of IDS acl rule." ::= { fsAclIDSEntry 3 } fsAclIDSSrcIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IP-address of IDS acl rule." ::= { fsAclIDSEntry 4 } fsAclIDSSrcWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IP-address wild of IDS acl rule." ::= { fsAclIDSEntry 5 } fsAclIDSDestIp OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination IP-address of IDS acl rule." ::= { fsAclIDSEntry 6 } fsAclIDSDestWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination IP-address wild of IDS acl rule." ::= { fsAclIDSEntry 7 } fsAclIDSSrcPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer source port." ::= { fsAclIDSEntry 8 } fsAclIDSDestPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer destination port." ::= { fsAclIDSEntry 9 } fsAclIDSProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-create STATUS current DESCRIPTION "The protocol-type of advanced acl group. <1-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17) " ::= { fsAclIDSEntry 10 } fsAclIDSDenyTime OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "The maximum number of seconds which deny for this acl rule." DEFVAL { 0 } ::= { fsAclIDSEntry 11 } fsAclIDSAct OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The action of IDS acl rule." ::= { fsAclIDSEntry 12 } fsAclIDSRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus, now supports three states: CreateAndGo, Active, and Destroy." ::= { fsAclIDSEntry 13 } -- -- Nodes of fsAclMib2Objects -- fsAclMib2Objects OBJECT IDENTIFIER ::= { fsAcl 2 } -- -- Nodes of fsAclMib2GlobalGroup -- fsAclMib2GlobalGroup OBJECT IDENTIFIER ::= { fsAclMib2Objects 1 } fsAclMib2NodesGroup OBJECT IDENTIFIER ::= { fsAclMib2GlobalGroup 1 } fsAclMib2Mode OBJECT-TYPE SYNTAX INTEGER { linkBased(1), ipBased(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The applying mode of ACL." ::= { fsAclMib2NodesGroup 1 } fsAclMib2Version OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS read-only STATUS current DESCRIPTION "The version of this file. The output value has the format of 'xx'or 'xxx'. For example: 10 means 1.0; 125 means 12.5. " ::= { fsAclMib2NodesGroup 2 } fsAclMib2ObjectsCapabilities OBJECT-TYPE SYNTAX BITS { fsAclMib2Mode(0), fsAclVersion(1), fsAclMib2ObjectsCapabilities(2), fsAclMib2CapabilityTable(3), fsAclNumberGroupTable(4), fsAclIPAclBasicTable(5), fsAclIPAclAdvancedTable(6), fsAclMACTable(7), fsAclEnUserTable(8), fsAclMib2ProcessingStatus(9) } MAX-ACCESS read-only STATUS current DESCRIPTION "The objects of fsAclMib2Objects." ::= { fsAclMib2NodesGroup 3 } fsAclMib2ProcessingStatus OBJECT-TYPE SYNTAX INTEGER { processing(1), done(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "The processing status of ACL operation." ::= { fsAclMib2NodesGroup 4 } fsAclMib2ResourceThreshold OBJECT-TYPE SYNTAX Integer32 (0..100) MAX-ACCESS read-write STATUS current DESCRIPTION "The threshold of TCAM resources. The value 0 indicates that cancelling the TCAM resource notification function." ::= { fsAclMib2NodesGroup 5 } fsAclMib2ResourceLogInterval OBJECT-TYPE SYNTAX Integer32 (1..60) MAX-ACCESS read-write STATUS current DESCRIPTION "The value of interval. It must be in the range of 1 to 60. Default value is 5." ::= { fsAclMib2NodesGroup 6 } fsAclMib2CapabilityTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclMib2CapabilityEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The capability of mib2." ::= { fsAclMib2GlobalGroup 2 } fsAclMib2CapabilityEntry OBJECT-TYPE SYNTAX FsAclMib2CapabilityEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The information of Capability of mib2." INDEX { fsAclMib2EntityType, fsAclMib2EntityIndex, fsAclMib2ModuleIndex, fsAclMib2CharacteristicsIndex } ::= { fsAclMib2CapabilityTable 1 } FsAclMib2CapabilityEntry ::= SEQUENCE { fsAclMib2EntityType INTEGER, fsAclMib2EntityIndex Integer32, fsAclMib2ModuleIndex INTEGER, fsAclMib2CharacteristicsIndex Integer32, fsAclMib2CharacteristicsDesc OCTET STRING, fsAclMib2CharacteristicsValue Unsigned32 } fsAclMib2EntityType OBJECT-TYPE SYNTAX INTEGER { system(1), interface(2) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of entity. system: The entity is systemic level. interface: The entity is interface level. " ::= { fsAclMib2CapabilityEntry 1 } fsAclMib2EntityIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of entity. If fsAclMib2EntityType is system, the value of this object is 0. If fsAclMib2EntityType is interface, the value of this object is equal to 'ifIndex'. " ::= { fsAclMib2CapabilityEntry 2 } fsAclMib2ModuleIndex OBJECT-TYPE SYNTAX INTEGER { layer3(1), layer2(2), userDefined(3) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The module index of ACL." ::= { fsAclMib2CapabilityEntry 3 } fsAclMib2CharacteristicsIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The characteristics index of mib2. See DESCRIPTION of fsAclMib2CharacteristicsValue to get detail information about the value of this object. " ::= { fsAclMib2CapabilityEntry 4 } fsAclMib2CharacteristicsDesc OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The description of characteristics." ::= { fsAclMib2CapabilityEntry 5 } fsAclMib2CharacteristicsValue OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The value of capability of this object. TypeOfRuleStringValue : notSupport(0) and the length of RuleString. TypeOfCodeValue : OnlyOneNotSupport(0), MoreThanOneNotSupport(1) If fsAclMib2CharacteristicsValue is 'moreThanOneNotSupport', fsAclMib2CharacteristicsDesc must be used to depict which protocols are not supported. The output value of fsAclMib2CharacteristicsDesc has the format of 'a,b'. For example, 'ip,rarp'. layer3 Module: Index Characteristics value 1 SourceIPAddress notSupport(0) 2 DestinationIPAddress notSupport(0) 3 SourcePort notSupport(0) 4 DestinationPort notSupport(0) 5 IPPrecedence notSupport(0) 6 TOS notSupport(0) 7 DSCP notSupport(0) 8 TCPFlag notSupport(0) 9 FragmentFlag notSupport(0) 10 Log notSupport(0) 11 RuleMatchCounter notSupport(0) 12 ResetRuleMatchCounter notSupport(0) 13 VPN notSupport(0) 15 protocol notSupport(0) 16 AddressFlag notSupport(0) layer2 Module: Index Characteristics value 1 ProtocolType TypeOfCodeValue 2 SourceMAC notSupport(0) 3 DestinationMAC notSupport(0) 4 LSAPType TypeOfCodeValue 5 CoS notSupport(0) UserDefined Module: Index Characteristics value 1 UserDefaultOffset TypeOfRuleStringValue 2 UserL2RuleOffset TypeOfRuleStringValue 3 UserMplsOffset TypeOfRuleStringValue 4 UserIPv4Offset TypeOfRuleStringValue 5 UserIPv6Offset TypeOfRuleStringValue 6 UserL4Offset TypeOfRuleStringValue 7 UserL5Offset TypeOfRuleStringValue " ::= { fsAclMib2CapabilityEntry 6 } -- -- Nodes of number group -- fsAclNumberGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclNumberGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of the number acl group information." ::= { fsAclMib2GlobalGroup 3 } fsAclNumberGroupEntry OBJECT-TYPE SYNTAX FsAclNumberGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Number acl group information entry." INDEX { fsAclNumberGroupType, fsAclNumberGroupIndex } ::= { fsAclNumberGroupTable 1 } FsAclNumberGroupEntry ::= SEQUENCE { fsAclNumberGroupType INTEGER, fsAclNumberGroupIndex Integer32, fsAclNumberGroupRowStatus RowStatus, fsAclNumberGroupMatchOrder INTEGER, fsAclNumberGroupStep Integer32, fsAclNumberGroupDescription OCTET STRING, fsAclNumberGroupCountClear CounterClear, fsAclNumberGroupRuleCounter Counter32, fsAclNumberGroupName OCTET STRING } fsAclNumberGroupType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2), mac(3), user(4) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The type of number group. Basic ACL and Advanced ACL support ipv4 and ipv6. The range of Basic ACL is from 2000 to 2999. The range of Advanced ACL is from 3000 to 3999. Simple ACL supports ipv6 only. The range of Simple ACL is from 10000 to 42767. MAC ACL support mac only. The range of MAC ACL is from 4000 to 4999. User-defined ACL support user only. The range of user-defined ACL is from 5000 to 5999. " ::= { fsAclNumberGroupEntry 1 } fsAclNumberGroupIndex OBJECT-TYPE SYNTAX Integer32 (2000..5999|10000..42767) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The group index of number acl. Basic type:2000..2999 Advanced type:3000..3999 MAC type:4000..4999 User type:5000..5999 Simple type:10000..42767 " ::= { fsAclNumberGroupEntry 2 } fsAclNumberGroupRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclNumberGroupEntry 3 } fsAclNumberGroupMatchOrder OBJECT-TYPE SYNTAX INTEGER { config(1), auto(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The match-order of number acl group." DEFVAL { config } ::= { fsAclNumberGroupEntry 4 } fsAclNumberGroupStep OBJECT-TYPE SYNTAX Integer32 (1..20) MAX-ACCESS read-create STATUS current DESCRIPTION "The step of rule index." DEFVAL { 5 } ::= { fsAclNumberGroupEntry 5 } fsAclNumberGroupDescription OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "Description of this acl group." ::= { fsAclNumberGroupEntry 6 } fsAclNumberGroupCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the value of counters of this group." DEFVAL { nouse } ::= { fsAclNumberGroupEntry 7 } fsAclNumberGroupRuleCounter OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The rule count of number acl group." ::= { fsAclNumberGroupEntry 8 } fsAclNumberGroupName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..63)) MAX-ACCESS read-create STATUS current DESCRIPTION "Name of this acl group." ::= { fsAclNumberGroupEntry 9 } -- -- Nodes of named ACL group -- fsAclNamedGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclNamedGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of the named ACL group." ::= { fsAclMib2GlobalGroup 4 } fsAclNamedGroupEntry OBJECT-TYPE SYNTAX FsAclNamedGroupEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Named ACL group entry." INDEX { fsAclNumberGroupType, fsAclNamedGroupCategory, fsAclNamedGroupName } ::= { fsAclNamedGroupTable 1 } FsAclNamedGroupEntry ::= SEQUENCE { fsAclNamedGroupCategory INTEGER, fsAclNamedGroupName OCTET STRING, fsAclNamedGroupRowStatus RowStatus, fsAclNamedGroupMatchOrder INTEGER, fsAclNamedGroupStep Integer32, fsAclNamedGroupDescription OCTET STRING, fsAclNamedGroupCountClear CounterClear, fsAclNamedGroupRuleCounter Counter32 } fsAclNamedGroupCategory OBJECT-TYPE SYNTAX INTEGER { invalid(0), basic(1), advanced(2) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The category of number group. 1 indicates basic ACL, 2 indicates advanced ACL." ::= { fsAclNamedGroupEntry 1 } fsAclNamedGroupName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(1..63)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "Name of an ACL group, a case-insensitive string of 1 to 63 characters. It must start with an English letter. " ::= { fsAclNamedGroupEntry 2 } fsAclNamedGroupRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclNamedGroupEntry 3 } fsAclNamedGroupMatchOrder OBJECT-TYPE SYNTAX INTEGER { config(1), auto(2) } MAX-ACCESS read-create STATUS current DESCRIPTION "The match-order of name acl group." DEFVAL { config } ::= { fsAclNamedGroupEntry 4 } fsAclNamedGroupStep OBJECT-TYPE SYNTAX Integer32 (1..20) MAX-ACCESS read-create STATUS current DESCRIPTION "The numbering step of the increment of the rule index." DEFVAL { 5 } ::= { fsAclNamedGroupEntry 5 } fsAclNamedGroupDescription OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "Description of this ACL group." ::= { fsAclNamedGroupEntry 6 } fsAclNamedGroupCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the statistics counter of this group." DEFVAL { nouse } ::= { fsAclNamedGroupEntry 7 } fsAclNamedGroupRuleCounter OBJECT-TYPE SYNTAX Counter32 MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of rules of this group." ::= { fsAclNamedGroupEntry 8 } -- -- Node of fsAclIPv6Group -- fsAclIPAclGroup OBJECT IDENTIFIER ::= { fsAclMib2Objects 2 } -- -- Nodes of fsAclIPAclBasicTable -- fsAclIPAclBasicTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclIPAclBasicEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of basic rule group. If some objects of this table are not supported by some products, these objects can't be created, changed or applied. Default value of these objects will be returned when they are read. " ::= { fsAclIPAclGroup 2 } fsAclIPAclBasicEntry OBJECT-TYPE SYNTAX FsAclIPAclBasicEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Basic rule group information." INDEX { fsAclNumberGroupType, fsAclNumberGroupIndex, fsAclIPAclBasicRuleIndex } ::= { fsAclIPAclBasicTable 1 } FsAclIPAclBasicEntry ::= SEQUENCE { fsAclIPAclBasicRuleIndex Integer32, fsAclIPAclBasicRowStatus RowStatus, fsAclIPAclBasicAct RuleAction, fsAclIPAclBasicSrcAddrType InetAddressType, fsAclIPAclBasicSrcAddr InetAddress, fsAclIPAclBasicSrcPrefix InetAddressPrefixLength, fsAclIPAclBasicSrcAny TruthValue, fsAclIPAclBasicSrcWild IpAddress, fsAclIPAclBasicTimeRangeName OCTET STRING, fsAclIPAclBasicFragmentFlag FragmentFlag, fsAclIPAclBasicLog TruthValue, fsAclIPAclBasicCount Unsigned32, fsAclIPAclBasicCountClear CounterClear, fsAclIPAclBasicEnable TruthValue, fsAclIPAclBasicVpnInstanceName OCTET STRING, fsAclIPAclBasicComment OCTET STRING, fsAclIPAclBasicCounting TruthValue, fsAclIPAclBasicRouteTypeAny TruthValue, fsAclIPAclBasicRouteTypeValue Integer32 } fsAclIPAclBasicRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The rule index of basic acl group." ::= { fsAclIPAclBasicEntry 1 } fsAclIPAclBasicRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclIPAclBasicEntry 2 } fsAclIPAclBasicAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of basic acl rule." ::= { fsAclIPAclBasicEntry 3 } fsAclIPAclBasicSrcAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "The IP addresses type of IP pool." ::= { fsAclIPAclBasicEntry 4 } fsAclIPAclBasicSrcAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The value of a local IP address is available for this association. The type of this address is determined by the value of fsAclIPAclBasicSrcAddrType. " ::= { fsAclIPAclBasicEntry 5 } fsAclIPAclBasicSrcPrefix OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0. " ::= { fsAclIPAclBasicEntry 6 } fsAclIPAclBasicSrcAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any IP address." DEFVAL { true } ::= { fsAclIPAclBasicEntry 7 } fsAclIPAclBasicSrcWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IPv4 address wildcard mask. Only IPv4 Basic Rule supports this object. Default value is '0.0.0.0'. " ::= { fsAclIPAclBasicEntry 8 } fsAclIPAclBasicTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of basic acl rule. Default value is zero-length. " ::= { fsAclIPAclBasicEntry 9 } fsAclIPAclBasicFragmentFlag OBJECT-TYPE SYNTAX FragmentFlag MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching fragmented packets." DEFVAL { invalid } ::= { fsAclIPAclBasicEntry 10 } fsAclIPAclBasicLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be logged when it matches the rule." DEFVAL { false } ::= { fsAclIPAclBasicEntry 11 } fsAclIPAclBasicCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matches by the rule." ::= { fsAclIPAclBasicEntry 12 } fsAclIPAclBasicCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the value of counter." DEFVAL { nouse } ::= { fsAclIPAclBasicEntry 13 } fsAclIPAclBasicEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclIPAclBasicEntry 14 } fsAclIPAclBasicVpnInstanceName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The VPN name, to which the rule will be applied. Default value is zero-length. " ::= { fsAclIPAclBasicEntry 15 } fsAclIPAclBasicComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is Zero-length String. " ::= { fsAclIPAclBasicEntry 16 } fsAclIPAclBasicCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclIPAclBasicEntry 17 } fsAclIPAclBasicRouteTypeAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any type of routing header of IPv6 packet. " DEFVAL { false } ::= { fsAclIPAclBasicEntry 18 } fsAclIPAclBasicRouteTypeValue OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "Match specific type of routing header of IPv6 packet." DEFVAL { 65535 } ::= { fsAclIPAclBasicEntry 19 } -- -- Notes of fsAclIPAclAdvancedTable -- fsAclIPAclAdvancedTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclIPAclAdvancedEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of advanced and simple acl group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read. " ::= { fsAclIPAclGroup 3 } fsAclIPAclAdvancedEntry OBJECT-TYPE SYNTAX FsAclIPAclAdvancedEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Advanced acl group information." INDEX { fsAclNumberGroupType, fsAclNumberGroupIndex, fsAclIPAclAdvancedRuleIndex } ::= { fsAclIPAclAdvancedTable 1 } FsAclIPAclAdvancedEntry ::= SEQUENCE { fsAclIPAclAdvancedRuleIndex Integer32, fsAclIPAclAdvancedRowStatus RowStatus, fsAclIPAclAdvancedAct RuleAction, fsAclIPAclAdvancedProtocol Integer32, fsAclIPAclAdvancedAddrFlag AddressFlag, fsAclIPAclAdvancedSrcAddrType InetAddressType, fsAclIPAclAdvancedSrcAddr InetAddress, fsAclIPAclAdvancedSrcPrefix InetAddressPrefixLength, fsAclIPAclAdvancedSrcAny TruthValue, fsAclIPAclAdvancedSrcWild IpAddress, fsAclIPAclAdvancedSrcOp PortOp, fsAclIPAclAdvancedSrcPort1 Integer32, fsAclIPAclAdvancedSrcPort2 Integer32, fsAclIPAclAdvancedDestAddrType InetAddressType, fsAclIPAclAdvancedDestAddr InetAddress, fsAclIPAclAdvancedDestPrefix InetAddressPrefixLength, fsAclIPAclAdvancedDestAny TruthValue, fsAclIPAclAdvancedDestWild IpAddress, fsAclIPAclAdvancedDestOp PortOp, fsAclIPAclAdvancedDestPort1 Integer32, fsAclIPAclAdvancedDestPort2 Integer32, fsAclIPAclAdvancedIcmpType Integer32, fsAclIPAclAdvancedIcmpCode Integer32, fsAclIPAclAdvancedPrecedence Integer32, fsAclIPAclAdvancedTos Integer32, fsAclIPAclAdvancedDscp DSCPValue, fsAclIPAclAdvancedTimeRangeName OCTET STRING, fsAclIPAclAdvancedTCPFlag TCPFlag, fsAclIPAclAdvancedFragmentFlag FragmentFlag, fsAclIPAclAdvancedLog TruthValue, fsAclIPAclAdvancedCount Unsigned32, fsAclIPAclAdvancedCountClear CounterClear, fsAclIPAclAdvancedEnable TruthValue, fsAclIPAclAdvancedVpnInstanceName OCTET STRING, fsAclIPAclAdvancedComment OCTET STRING, fsAclIPAclAdvancedReflective TruthValue, fsAclIPAclAdvancedCounting TruthValue, fsAclIPAclAdvancedTCPFlagMask BITS, fsAclIPAclAdvancedTCPFlagValue BITS, fsAclIPAclAdvancedRouteTypeAny TruthValue, fsAclIPAclAdvancedRouteTypeValue Integer32, fsAclIPAclAdvancedFlowLabel Unsigned32, fsAclIPAclAdvancedSrcSuffix Unsigned32, fsAclIPAclAdvancedDestSuffix Unsigned32 } fsAclIPAclAdvancedRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The rule index of advanced acl group. As a Simple ACL group, the value of this object must be 0. As an Advanced ACL group, the value of this object is ranging from 0 to 65534. " ::= { fsAclIPAclAdvancedEntry 1 } fsAclIPAclAdvancedRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclIPAclAdvancedEntry 2 } fsAclIPAclAdvancedAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of advanced acl rule." ::= { fsAclIPAclAdvancedEntry 3 } fsAclIPAclAdvancedProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-create STATUS current DESCRIPTION "The protocol-type of advanced acl group. 0 indicates any IPv4 or IPv6 protocol. <1-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) icmpv6 Internet Control Message Protocol6(58) igmp Internet Group Management Protocol(2) ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17) ipv6-ah IPv6 Authentication Header(51) ipv6-esp IPv6 Encapsulating Security Payload(50) " ::= { fsAclIPAclAdvancedEntry 4 } fsAclIPAclAdvancedAddrFlag OBJECT-TYPE SYNTAX AddressFlag MAX-ACCESS read-create STATUS current DESCRIPTION "Address flag to select address." DEFVAL { invalid } ::= { fsAclIPAclAdvancedEntry 5 } fsAclIPAclAdvancedSrcAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "The IP addresses type of IP pool." ::= { fsAclIPAclAdvancedEntry 6 } fsAclIPAclAdvancedSrcAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The value of a local IP address available for this association. The type of this address is determined by the value of fsAclIPAclAdvancedSrcAddrType. " ::= { fsAclIPAclAdvancedEntry 7 } fsAclIPAclAdvancedSrcPrefix OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0. " ::= { fsAclIPAclAdvancedEntry 8 } fsAclIPAclAdvancedSrcAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any IP address." DEFVAL { true } ::= { fsAclIPAclAdvancedEntry 9 } fsAclIPAclAdvancedSrcWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IPv4 address wildcard mask. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'. " ::= { fsAclIPAclAdvancedEntry 10 } fsAclIPAclAdvancedSrcOp OBJECT-TYPE SYNTAX PortOp MAX-ACCESS read-create STATUS current DESCRIPTION "Source port operation symbol of advanced acl group." DEFVAL { invalid } ::= { fsAclIPAclAdvancedEntry 11 } fsAclIPAclAdvancedSrcPort1 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer source port1." DEFVAL { 0 } ::= { fsAclIPAclAdvancedEntry 12 } fsAclIPAclAdvancedSrcPort2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer source port2." DEFVAL { 65535 } ::= { fsAclIPAclAdvancedEntry 13 } fsAclIPAclAdvancedDestAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "The IP addresses type of IP pool." ::= { fsAclIPAclAdvancedEntry 14 } fsAclIPAclAdvancedDestAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The value of a local IP address available for this association. The type of this address is determined by the value of fsAclIPAclAdvancedDestAddrType. " ::= { fsAclIPAclAdvancedEntry 15 } fsAclIPAclAdvancedDestPrefix OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0. " ::= { fsAclIPAclAdvancedEntry 16 } fsAclIPAclAdvancedDestAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any IP address." DEFVAL { true } ::= { fsAclIPAclAdvancedEntry 17 } fsAclIPAclAdvancedDestWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination IPv4 address wildcard mask. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'. " ::= { fsAclIPAclAdvancedEntry 18 } fsAclIPAclAdvancedDestOp OBJECT-TYPE SYNTAX PortOp MAX-ACCESS read-create STATUS current DESCRIPTION "Destination port operation symbol of advanced acl group." DEFVAL { invalid } ::= { fsAclIPAclAdvancedEntry 19 } fsAclIPAclAdvancedDestPort1 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer destination port1." DEFVAL { 0 } ::= { fsAclIPAclAdvancedEntry 20 } fsAclIPAclAdvancedDestPort2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer destination port2." DEFVAL { 65535 } ::= { fsAclIPAclAdvancedEntry 21 } fsAclIPAclAdvancedIcmpType OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of ICMP packet." DEFVAL { 65535 } ::= { fsAclIPAclAdvancedEntry 22 } fsAclIPAclAdvancedIcmpCode OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The code of ICMP packet." DEFVAL { 65535 } ::= { fsAclIPAclAdvancedEntry 23 } fsAclIPAclAdvancedPrecedence OBJECT-TYPE SYNTAX Integer32 (0..7|255) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of IP-packet's precedence. <0-7> Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7) " DEFVAL { 255 } ::= { fsAclIPAclAdvancedEntry 24 } fsAclIPAclAdvancedTos OBJECT-TYPE SYNTAX Integer32 (0..15|255) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of IP-packet's TOS. <0-15> Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0) " DEFVAL { 255 } ::= { fsAclIPAclAdvancedEntry 25 } fsAclIPAclAdvancedDscp OBJECT-TYPE SYNTAX DSCPValue MAX-ACCESS read-create STATUS current DESCRIPTION "The value of DSCP of IP packet." DEFVAL { 255 } ::= { fsAclIPAclAdvancedEntry 26 } fsAclIPAclAdvancedTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of advanced acl rule. Default value is zero-length. " ::= { fsAclIPAclAdvancedEntry 27 } fsAclIPAclAdvancedTCPFlag OBJECT-TYPE SYNTAX TCPFlag MAX-ACCESS read-create STATUS current DESCRIPTION "The packet type of TCP protocol." DEFVAL { invalid } ::= { fsAclIPAclAdvancedEntry 28 } fsAclIPAclAdvancedFragmentFlag OBJECT-TYPE SYNTAX FragmentFlag MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching fragmented packet, and now support two value: 0 or 2." DEFVAL { invalid } ::= { fsAclIPAclAdvancedEntry 29 } fsAclIPAclAdvancedLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Log matched packets." DEFVAL { false } ::= { fsAclIPAclAdvancedEntry 30 } fsAclIPAclAdvancedCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched by the rule." ::= { fsAclIPAclAdvancedEntry 31 } fsAclIPAclAdvancedCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the value of counter." DEFVAL { nouse } ::= { fsAclIPAclAdvancedEntry 32 } fsAclIPAclAdvancedEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclIPAclAdvancedEntry 33 } fsAclIPAclAdvancedVpnInstanceName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The VPN name that the rule will be applied. Default value is zero-length. " ::= { fsAclIPAclAdvancedEntry 34 } fsAclIPAclAdvancedComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is Zero-length String. " ::= { fsAclIPAclAdvancedEntry 35 } fsAclIPAclAdvancedReflective OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of reflective." ::= { fsAclIPAclAdvancedEntry 36 } fsAclIPAclAdvancedCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclIPAclAdvancedEntry 37 } fsAclIPAclAdvancedTCPFlagMask OBJECT-TYPE SYNTAX BITS { tcpack(0), tcpfin(1), tcppsh(2), tcprst(3), tcpsyn(4), tcpurg(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The TCP Flag Mask. This is a bit-map of possible conditions. The various bit positions are: |0 |tcpack | |1 |tcpfin | |2 |tcppsh | |3 |tcprst | |4 |tcpsyn | |5 |tcpurg | " DEFVAL { { } } ::= { fsAclIPAclAdvancedEntry 38 } fsAclIPAclAdvancedTCPFlagValue OBJECT-TYPE SYNTAX BITS { tcpack(0), tcpfin(1), tcppsh(2), tcprst(3), tcpsyn(4), tcpurg(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The TCP Flag Value. This is a bit-map of possible conditions. The various bit positions are: |0 |tcpack | |1 |tcpfin | |2 |tcppsh | |3 |tcprst | |4 |tcpsyn | |5 |tcpurg | " DEFVAL { { } } ::= { fsAclIPAclAdvancedEntry 39 } fsAclIPAclAdvancedRouteTypeAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any type of routing header of IPv6 packet. " DEFVAL { false } ::= { fsAclIPAclAdvancedEntry 40 } fsAclIPAclAdvancedRouteTypeValue OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of routing header of IPv6 packet." DEFVAL { 65535 } ::= { fsAclIPAclAdvancedEntry 41 } fsAclIPAclAdvancedFlowLabel OBJECT-TYPE SYNTAX Unsigned32 (0..1048575|4294967295) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of flow label of IPv6 packet header." DEFVAL { 4294967295 } ::= { fsAclIPAclAdvancedEntry 42 } fsAclIPAclAdvancedSrcSuffix OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Denotes the length of a generic Internet network address suffix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the least significant bit and all other bits set to 0. " ::= { fsAclIPAclAdvancedEntry 43 } fsAclIPAclAdvancedDestSuffix OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Denotes the length of a generic Internet network address suffix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the least significant bit and all other bits set to 0. " ::= { fsAclIPAclAdvancedEntry 44 } -- --Nodes of fsAclIPAclNamedBscTable -- fsAclIPAclNamedBscTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclIPAclNamedBscEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of basic rule of named ACL. The name of ACL group will be used as an index in this table, which differs from the table fsAclIPAclBasicTable. If some objects of this table are not supported by some products, these objects can't be created, changed or applied. Default value of these objects will be returned when they are read. " ::= { fsAclIPAclGroup 4 } fsAclIPAclNamedBscEntry OBJECT-TYPE SYNTAX FsAclIPAclNamedBscEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Basic named ACL rule entry." INDEX { fsAclNumberGroupType, fsAclNamedGroupName, fsAclIPAclBasicRuleIndex } ::= { fsAclIPAclNamedBscTable 1 } FsAclIPAclNamedBscEntry ::= SEQUENCE { fsAclIPAclNamedBscRowStatus RowStatus, fsAclIPAclNamedBscAct RuleAction, fsAclIPAclNamedBscSrcAddrType InetAddressType, fsAclIPAclNamedBscSrcAddr InetAddress, fsAclIPAclNamedBscSrcPrefix InetAddressPrefixLength, fsAclIPAclNamedBscSrcAny TruthValue, fsAclIPAclNamedBscSrcWild IpAddress, fsAclIPAclNamedBscTRangeName OCTET STRING, fsAclIPAclNamedBscFragmentFlag FragmentFlag, fsAclIPAclNamedBscLog TruthValue, fsAclIPAclNamedBscCount Unsigned32, fsAclIPAclNamedBscCountClear CounterClear, fsAclIPAclNamedBscEnable TruthValue, fsAclIPAclNamedBscVpnInstName OCTET STRING, fsAclIPAclNamedBscComment OCTET STRING, fsAclIPAclNamedBscCounting TruthValue, fsAclIPAclNamedBscRouteTypeAny TruthValue, fsAclIPAclNamedBscRouteTypeValue Integer32 } fsAclIPAclNamedBscRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclIPAclNamedBscEntry 1 } fsAclIPAclNamedBscAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of basic ACL rule." ::= { fsAclIPAclNamedBscEntry 2 } fsAclIPAclNamedBscSrcAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "The IP addresses type of IP pool." ::= { fsAclIPAclNamedBscEntry 3 } fsAclIPAclNamedBscSrcAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The specified source IP address. The type of this address is determined by the value of fsAclIPAclNamedBscSrcAddrType. " ::= { fsAclIPAclNamedBscEntry 4 } fsAclIPAclNamedBscSrcPrefix OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0. " ::= { fsAclIPAclNamedBscEntry 5 } fsAclIPAclNamedBscSrcAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any source IP address." DEFVAL { true } ::= { fsAclIPAclNamedBscEntry 6 } fsAclIPAclNamedBscSrcWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IPv4 address wildcard mask. Only IPv4 Basic Rule supports this object. Default value is '0.0.0.0'. " ::= { fsAclIPAclNamedBscEntry 7 } fsAclIPAclNamedBscTRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of basic acl rule. Default value is zero-length. " ::= { fsAclIPAclNamedBscEntry 8 } fsAclIPAclNamedBscFragmentFlag OBJECT-TYPE SYNTAX FragmentFlag MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching fragmented packets." DEFVAL { invalid } ::= { fsAclIPAclNamedBscEntry 9 } fsAclIPAclNamedBscLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be logged when it matches the rule." DEFVAL { false } ::= { fsAclIPAclNamedBscEntry 10 } fsAclIPAclNamedBscCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matches by the rule." ::= { fsAclIPAclNamedBscEntry 11 } fsAclIPAclNamedBscCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the statistics counter of the rule." DEFVAL { nouse } ::= { fsAclIPAclNamedBscEntry 12 } fsAclIPAclNamedBscEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclIPAclNamedBscEntry 13 } fsAclIPAclNamedBscVpnInstName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The VPN name, to which the rule will be applied. Default value is zero-length. " ::= { fsAclIPAclNamedBscEntry 14 } fsAclIPAclNamedBscComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is Zero-length String. " ::= { fsAclIPAclNamedBscEntry 15 } fsAclIPAclNamedBscCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclIPAclNamedBscEntry 16 } fsAclIPAclNamedBscRouteTypeAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any type of routing header of IPv6 packet. " DEFVAL { false } ::= { fsAclIPAclNamedBscEntry 17 } fsAclIPAclNamedBscRouteTypeValue OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "Value of the routing header type of IPv6 packet, in the range of 0 to 255. " DEFVAL { 65535 } ::= { fsAclIPAclNamedBscEntry 18 } -- -- Notes of fsAclIPAclNamedAdvTable -- fsAclIPAclNamedAdvTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclIPAclNamedAdvEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of advanced rule of named ACL. The name of ACL group will be used as an index in this table, which differs from the table fsAclIPAclAdvancedTable. If some objects of this table are not supported by some products, these objects can't be created, changed or applied. Default value of these objects will be returned when they are read. " ::= { fsAclIPAclGroup 5 } fsAclIPAclNamedAdvEntry OBJECT-TYPE SYNTAX FsAclIPAclNamedAdvEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Advanced ACL rule information entry." INDEX { fsAclNumberGroupType, fsAclNamedGroupName, fsAclIPAclAdvancedRuleIndex } ::= { fsAclIPAclNamedAdvTable 1 } FsAclIPAclNamedAdvEntry ::= SEQUENCE { fsAclIPAclNamedAdvRowStatus RowStatus, fsAclIPAclNamedAdvAct RuleAction, fsAclIPAclNamedAdvProtocol Integer32, fsAclIPAclNamedAdvAddrFlag AddressFlag, fsAclIPAclNamedAdvSrcAddrType InetAddressType, fsAclIPAclNamedAdvSrcAddr InetAddress, fsAclIPAclNamedAdvSrcPrefix InetAddressPrefixLength, fsAclIPAclNamedAdvSrcAny TruthValue, fsAclIPAclNamedAdvSrcWild IpAddress, fsAclIPAclNamedAdvSrcOp PortOp, fsAclIPAclNamedAdvSrcPort1 Integer32, fsAclIPAclNamedAdvSrcPort2 Integer32, fsAclIPAclNamedAdvDstAddrType InetAddressType, fsAclIPAclNamedAdvDstAddr InetAddress, fsAclIPAclNamedAdvDstPrefix InetAddressPrefixLength, fsAclIPAclNamedAdvDstAny TruthValue, fsAclIPAclNamedAdvDstWild IpAddress, fsAclIPAclNamedAdvDstOp PortOp, fsAclIPAclNamedAdvDstPort1 Integer32, fsAclIPAclNamedAdvDstPort2 Integer32, fsAclIPAclNamedAdvIcmpType Integer32, fsAclIPAclNamedAdvIcmpCode Integer32, fsAclIPAclNamedAdvPrecedence Integer32, fsAclIPAclNamedAdvTos Integer32, fsAclIPAclNamedAdvDscp DSCPValue, fsAclIPAclNamedAdvTRangeName OCTET STRING, fsAclIPAclNamedAdvTCPFlag TCPFlag, fsAclIPAclNamedAdvFragmentFlag FragmentFlag, fsAclIPAclNamedAdvLog TruthValue, fsAclIPAclNamedAdvCount Unsigned32, fsAclIPAclNamedAdvCountClear CounterClear, fsAclIPAclNamedAdvEnable TruthValue, fsAclIPAclNamedAdvVpnInstName OCTET STRING, fsAclIPAclNamedAdvComment OCTET STRING, fsAclIPAclNamedAdvReflective TruthValue, fsAclIPAclNamedAdvCounting TruthValue, fsAclIPAclNamedAdvTCPFlagMask BITS, fsAclIPAclNamedAdvTCPFlagValue BITS, fsAclIPAclNamedAdvRouteTypeAny TruthValue, fsAclIPAclNamedAdvRouteTypeValue Integer32, fsAclIPAclNamedAdvFlowLabel Unsigned32, fsAclIPAclNamedAdvSrcSuffix Unsigned32, fsAclIPAclNamedAdvDstSuffix Unsigned32 } fsAclIPAclNamedAdvRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclIPAclNamedAdvEntry 1 } fsAclIPAclNamedAdvAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of advanced ACL rule." ::= { fsAclIPAclNamedAdvEntry 2 } fsAclIPAclNamedAdvProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS read-create STATUS current DESCRIPTION "The protocol-type of advanced ACL rule. 0 indicates any IPv4 or IPv6 protocol. <1-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) icmpv6 Internet Control Message Protocol6(58) igmp Internet Group Management Protocol(2) ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17) ipv6-ah IPv6 Authentication Header(51) ipv6-esp IPv6 Encapsulating Security Payload(50) " ::= { fsAclIPAclNamedAdvEntry 3 } fsAclIPAclNamedAdvAddrFlag OBJECT-TYPE SYNTAX AddressFlag MAX-ACCESS read-create STATUS current DESCRIPTION "Address flag to select address." DEFVAL { invalid } ::= { fsAclIPAclNamedAdvEntry 4 } fsAclIPAclNamedAdvSrcAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "The type of source IP address. " ::= { fsAclIPAclNamedAdvEntry 5 } fsAclIPAclNamedAdvSrcAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The specified source IP address. The type of this address is determined by the value of fsAclIPAclNamedAdvSrcAddrType. " ::= { fsAclIPAclNamedAdvEntry 6 } fsAclIPAclNamedAdvSrcPrefix OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0. " ::= { fsAclIPAclNamedAdvEntry 7 } fsAclIPAclNamedAdvSrcAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any IP address." DEFVAL { true } ::= { fsAclIPAclNamedAdvEntry 8 } fsAclIPAclNamedAdvSrcWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source IPv4 address wildcard mask. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'. " ::= { fsAclIPAclNamedAdvEntry 9 } fsAclIPAclNamedAdvSrcOp OBJECT-TYPE SYNTAX PortOp MAX-ACCESS read-create STATUS current DESCRIPTION "Source port operation symbol of advanced acl group." DEFVAL { invalid } ::= { fsAclIPAclNamedAdvEntry 10 } fsAclIPAclNamedAdvSrcPort1 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer source port1." DEFVAL { 0 } ::= { fsAclIPAclNamedAdvEntry 11 } fsAclIPAclNamedAdvSrcPort2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer source port2." DEFVAL { 65535 } ::= { fsAclIPAclNamedAdvEntry 12 } fsAclIPAclNamedAdvDstAddrType OBJECT-TYPE SYNTAX InetAddressType MAX-ACCESS read-create STATUS current DESCRIPTION "The type of destination IP address. " ::= { fsAclIPAclNamedAdvEntry 13 } fsAclIPAclNamedAdvDstAddr OBJECT-TYPE SYNTAX InetAddress MAX-ACCESS read-create STATUS current DESCRIPTION "The specified destination IP address. The type of this address is determined by the value of fsAclIPAclNamedAdvDstAddrType. " ::= { fsAclIPAclNamedAdvEntry 14 } fsAclIPAclNamedAdvDstPrefix OBJECT-TYPE SYNTAX InetAddressPrefixLength MAX-ACCESS read-create STATUS current DESCRIPTION "Specify the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0. " ::= { fsAclIPAclNamedAdvEntry 15 } fsAclIPAclNamedAdvDstAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any IP address." DEFVAL { true } ::= { fsAclIPAclNamedAdvEntry 16 } fsAclIPAclNamedAdvDstWild OBJECT-TYPE SYNTAX IpAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination IPv4 address wildcard mask. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'. " ::= { fsAclIPAclNamedAdvEntry 17 } fsAclIPAclNamedAdvDstOp OBJECT-TYPE SYNTAX PortOp MAX-ACCESS read-create STATUS current DESCRIPTION "Destination port operation symbol of advanced acl group." DEFVAL { invalid } ::= { fsAclIPAclNamedAdvEntry 18 } fsAclIPAclNamedAdvDstPort1 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer destination port1." DEFVAL { 0 } ::= { fsAclIPAclNamedAdvEntry 19 } fsAclIPAclNamedAdvDstPort2 OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The fourth layer destination port2." DEFVAL { 65535 } ::= { fsAclIPAclNamedAdvEntry 20 } fsAclIPAclNamedAdvIcmpType OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of ICMP packet." DEFVAL { 65535 } ::= { fsAclIPAclNamedAdvEntry 21 } fsAclIPAclNamedAdvIcmpCode OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The code of ICMP packet." DEFVAL { 65535 } ::= { fsAclIPAclNamedAdvEntry 22 } fsAclIPAclNamedAdvPrecedence OBJECT-TYPE SYNTAX Integer32 (0..7|255) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of IP-packet's precedence. <0-7> Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7) " DEFVAL { 255 } ::= { fsAclIPAclNamedAdvEntry 23 } fsAclIPAclNamedAdvTos OBJECT-TYPE SYNTAX Integer32 (0..15|255) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of IP-packet's TOS. <0-15> Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0) " DEFVAL { 255 } ::= { fsAclIPAclNamedAdvEntry 24 } fsAclIPAclNamedAdvDscp OBJECT-TYPE SYNTAX DSCPValue MAX-ACCESS read-create STATUS current DESCRIPTION "The value of DSCP of IP packet." DEFVAL { 255 } ::= { fsAclIPAclNamedAdvEntry 25 } fsAclIPAclNamedAdvTRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of advanced ACL rule. Default value is zero-length. " ::= { fsAclIPAclNamedAdvEntry 26 } fsAclIPAclNamedAdvTCPFlag OBJECT-TYPE SYNTAX TCPFlag MAX-ACCESS read-create STATUS current DESCRIPTION "The packet type of TCP protocol." DEFVAL { invalid } ::= { fsAclIPAclNamedAdvEntry 27 } fsAclIPAclNamedAdvFragmentFlag OBJECT-TYPE SYNTAX FragmentFlag MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching fragmented packet, and now support two value: 0 or 2. " DEFVAL { invalid } ::= { fsAclIPAclNamedAdvEntry 28 } fsAclIPAclNamedAdvLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Log matched packets." DEFVAL { false } ::= { fsAclIPAclNamedAdvEntry 29 } fsAclIPAclNamedAdvCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matches by the rule." ::= { fsAclIPAclNamedAdvEntry 30 } fsAclIPAclNamedAdvCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the statistics counter of this rule." DEFVAL { nouse } ::= { fsAclIPAclNamedAdvEntry 31 } fsAclIPAclNamedAdvEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclIPAclNamedAdvEntry 32 } fsAclIPAclNamedAdvVpnInstName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The VPN name to which the rule will be applied. Default value is zero-length. " ::= { fsAclIPAclNamedAdvEntry 33 } fsAclIPAclNamedAdvComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is zero-length String. " ::= { fsAclIPAclNamedAdvEntry 34 } fsAclIPAclNamedAdvReflective OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of reflective." ::= { fsAclIPAclNamedAdvEntry 35 } fsAclIPAclNamedAdvCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclIPAclNamedAdvEntry 36 } fsAclIPAclNamedAdvTCPFlagMask OBJECT-TYPE SYNTAX BITS { tcpack(0), tcpfin(1), tcppsh(2), tcprst(3), tcpsyn(4), tcpurg(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The TCP Flag Mask. This is a bit-map of possible conditions. The various bit positions are: |0 |tcpack | |1 |tcpfin | |2 |tcppsh | |3 |tcprst | |4 |tcpsyn | |5 |tcpurg | " ::= { fsAclIPAclNamedAdvEntry 37 } fsAclIPAclNamedAdvTCPFlagValue OBJECT-TYPE SYNTAX BITS { tcpack(0), tcpfin(1), tcppsh(2), tcprst(3), tcpsyn(4), tcpurg(5) } MAX-ACCESS read-create STATUS current DESCRIPTION "The TCP Flag Value. This is a bit-map of possible conditions. The various bit positions are: |0 |tcpack | |1 |tcpfin | |2 |tcppsh | |3 |tcprst | |4 |tcpsyn | |5 |tcpurg | " ::= { fsAclIPAclNamedAdvEntry 38 } fsAclIPAclNamedAdvRouteTypeAny OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The flag of matching any type of routing header of IPv6 packet. " DEFVAL { false } ::= { fsAclIPAclNamedAdvEntry 39 } fsAclIPAclNamedAdvRouteTypeValue OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of routing header of IPv6 packet." DEFVAL { 65535 } ::= { fsAclIPAclNamedAdvEntry 40 } fsAclIPAclNamedAdvFlowLabel OBJECT-TYPE SYNTAX Unsigned32 (0..1048575|4294967295) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of flow label of IPv6 packet header." DEFVAL { 4294967295 } ::= { fsAclIPAclNamedAdvEntry 41 } fsAclIPAclNamedAdvSrcSuffix OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Denotes the length of a generic Internet network address suffix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the least significant bit and all other bits set to 0. " ::= { fsAclIPAclNamedAdvEntry 42 } fsAclIPAclNamedAdvDstSuffix OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-create STATUS current DESCRIPTION "Denotes the length of a generic Internet network address suffix. A value of n corresponds to an IP address mask that has n contiguous 1-bits from the least significant bit and all other bits set to 0. " ::= { fsAclIPAclNamedAdvEntry 43 } -- -- Node of fsAclMACAclGroup -- fsAclMACAclGroup OBJECT IDENTIFIER ::= { fsAclMib2Objects 3 } -- -- Nodes of fsAclMACTable -- fsAclMACTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclMACEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of MAC acl group. If some objects of this table are not supported by some products, these objects can't be created, changed or applied. Default value of these objects will be returned when they are read. " ::= { fsAclMACAclGroup 1 } fsAclMACEntry OBJECT-TYPE SYNTAX FsAclMACEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "MAC acl group information." INDEX { fsAclNumberGroupType, fsAclNumberGroupIndex, fsAclMACRuleIndex } ::= { fsAclMACTable 1 } FsAclMACEntry ::= SEQUENCE { fsAclMACRuleIndex Integer32, fsAclMACRowStatus RowStatus, fsAclMACAct RuleAction, fsAclMACTypeCode OCTET STRING, fsAclMACTypeMask OCTET STRING, fsAclMACSrcMac MacAddress, fsAclMACSrcMacWild MacAddress, fsAclMACDestMac MacAddress, fsAclMACDestMacWild MacAddress, fsAclMACLsapCode OCTET STRING, fsAclMACLsapMask OCTET STRING, fsAclMACCos Integer32, fsAclMACTimeRangeName OCTET STRING, fsAclMACCount Unsigned32, fsAclMACCountClear CounterClear, fsAclMACEnable TruthValue, fsAclMACComment OCTET STRING, fsAclMACLog TruthValue, fsAclMACCounting TruthValue } fsAclMACRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The rule index of MAC-based acl group." ::= { fsAclMACEntry 1 } fsAclMACRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclMACEntry 2 } fsAclMACAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of MAC acl rule." ::= { fsAclMACEntry 3 } fsAclMACTypeCode OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of protocol." REFERENCE "rfc894, rfc1010." ::= { fsAclMACEntry 4 } fsAclMACTypeMask OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The mask of protocol." ::= { fsAclMACEntry 5 } fsAclMACSrcMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source MAC of MAC acl rule. Default value is '00:00:00:00:00:00'. " ::= { fsAclMACEntry 6 } fsAclMACSrcMacWild OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00'. " ::= { fsAclMACEntry 7 } fsAclMACDestMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination MAC of MAC acl rule. Default value is '00:00:00:00:00:00'. " ::= { fsAclMACEntry 8 } fsAclMACDestMacWild OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00' " ::= { fsAclMACEntry 9 } fsAclMACLsapCode OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of LSAP." REFERENCE "ANSI/IEEE Std 802.3" ::= { fsAclMACEntry 10 } fsAclMACLsapMask OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The mask of LSAP." ::= { fsAclMACEntry 11 } fsAclMACCos OBJECT-TYPE SYNTAX Integer32 (0..7 | 255) MAX-ACCESS read-create STATUS current DESCRIPTION "Vlan priority of MAC acl rule." DEFVAL { 255 } ::= { fsAclMACEntry 12 } fsAclMACTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of MAC acl rule. Default value is zero-length. " ::= { fsAclMACEntry 13 } fsAclMACCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched frames by the rule." ::= { fsAclMACEntry 14 } fsAclMACCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the value of counter." DEFVAL { nouse } ::= { fsAclMACEntry 15 } fsAclMACEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclMACEntry 16 } fsAclMACComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is Zero-length String. " ::= { fsAclMACEntry 17 } fsAclMACLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be logged when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclMACEntry 18 } fsAclMACCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclMACEntry 19 } -- -- Nodes of named MAC ACL group -- fsAclNamedMACTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclNamedMACEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of named MAC ACL rule. The name of ACL group will be used as an index in this table, which differs from the table fsAclMACTable. If some objects of this table are not supported by some products, these objects can't be created, changed or applied. Default value of these objects will be returned when they are read. " ::= { fsAclMACAclGroup 2 } fsAclNamedMACEntry OBJECT-TYPE SYNTAX FsAclNamedMACEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "MAC acl group information." INDEX { fsAclNumberGroupType, fsAclNamedGroupName, fsAclMACRuleIndex } ::= { fsAclNamedMACTable 1 } FsAclNamedMACEntry ::= SEQUENCE { fsAclNamedMACRowStatus RowStatus, fsAclNamedMACAct RuleAction, fsAclNamedMACTypeCode OCTET STRING, fsAclNamedMACTypeMask OCTET STRING, fsAclNamedMACSrcMac MacAddress, fsAclNamedMACSrcMacWild MacAddress, fsAclNamedMACDstMac MacAddress, fsAclNamedMACDstMacWild MacAddress, fsAclNamedMACLsapCode OCTET STRING, fsAclNamedMACLsapMask OCTET STRING, fsAclNamedMACCos Integer32, fsAclNamedMACTimeRangeName OCTET STRING, fsAclNamedMACCount Unsigned32, fsAclNamedMACCountClear CounterClear, fsAclNamedMACEnable TruthValue, fsAclNamedMACComment OCTET STRING, fsAclNamedMACLog TruthValue, fsAclNamedMACCounting TruthValue } fsAclNamedMACRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclNamedMACEntry 1 } fsAclNamedMACAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of MAC ACL rule." ::= { fsAclNamedMACEntry 2 } fsAclNamedMACTypeCode OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of protocol." REFERENCE "rfc894, rfc1010." ::= { fsAclNamedMACEntry 3 } fsAclNamedMACTypeMask OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The mask of protocol." ::= { fsAclNamedMACEntry 4 } fsAclNamedMACSrcMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source MAC of MAC ACL rule. Default value is '00:00:00:00:00:00'. " ::= { fsAclNamedMACEntry 5 } fsAclNamedMACSrcMacWild OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Source MAC wildcard of MAC ACL rule. Default value is '00:00:00:00:00:00'. " ::= { fsAclNamedMACEntry 6 } fsAclNamedMACDstMac OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination MAC of MAC ACL rule. Default value is '00:00:00:00:00:00'. " ::= { fsAclNamedMACEntry 7 } fsAclNamedMACDstMacWild OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS read-create STATUS current DESCRIPTION "Destination MAC wildcard of MAC ACL rule. Default value is '00:00:00:00:00:00' " ::= { fsAclNamedMACEntry 8 } fsAclNamedMACLsapCode OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The type of LSAP." REFERENCE "ANSI/IEEE Std 802.3" ::= { fsAclNamedMACEntry 9 } fsAclNamedMACLsapMask OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The mask of LSAP." ::= { fsAclNamedMACEntry 10 } fsAclNamedMACCos OBJECT-TYPE SYNTAX Integer32 (0..7 | 255) MAX-ACCESS read-create STATUS current DESCRIPTION "Vlan priority of MAC ACL rule." DEFVAL { 255 } ::= { fsAclNamedMACEntry 11 } fsAclNamedMACTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The time-range of MAC ACL rule. Default value is zero-length. " ::= { fsAclNamedMACEntry 12 } fsAclNamedMACCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched frames by the rule." ::= { fsAclNamedMACEntry 13 } fsAclNamedMACCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the value of counter." DEFVAL { nouse } ::= { fsAclNamedMACEntry 14 } fsAclNamedMACEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclNamedMACEntry 15 } fsAclNamedMACComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is Zero-length String. " ::= { fsAclNamedMACEntry 16 } fsAclNamedMACLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be logged when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclNamedMACEntry 17 } fsAclNamedMACCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclNamedMACEntry 18 } -- -- Node of fsAclEnUserGroup -- fsAclEnUserAclGroup OBJECT IDENTIFIER ::= { fsAclMib2Objects 4 } -- -- Nodes of fsAclEnUserTable -- fsAclEnUserTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclEnUserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of user acl group information. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read. " ::= { fsAclEnUserAclGroup 3 } fsAclEnUserEntry OBJECT-TYPE SYNTAX FsAclEnUserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "User defined acl group entry." INDEX { fsAclNumberGroupType, fsAclNumberGroupIndex, fsAclEnUserRuleIndex } ::= { fsAclEnUserTable 1 } FsAclEnUserEntry ::= SEQUENCE { fsAclEnUserRuleIndex Integer32, fsAclEnUserRowStatus RowStatus, fsAclEnUserAct RuleAction, fsAclEnUserStartString OCTET STRING, fsAclEnUserL2String OCTET STRING, fsAclEnUserMplsString OCTET STRING, fsAclEnUserIPv4String OCTET STRING, fsAclEnUserIPv6String OCTET STRING, fsAclEnUserL4String OCTET STRING, fsAclEnUserL5String OCTET STRING, fsAclEnUserTimeRangeName OCTET STRING, fsAclEnUserCount Unsigned32, fsAclEnUserCountClear CounterClear, fsAclEnUserEnable TruthValue, fsAclEnUserComment OCTET STRING, fsAclEnUserLog TruthValue, fsAclEnUserCounting TruthValue } fsAclEnUserRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The subitem of the user acl." ::= { fsAclEnUserEntry 1 } fsAclEnUserRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclEnUserEntry 2 } fsAclEnUserAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of user defined acl rule." ::= { fsAclEnUserEntry 3 } fsAclEnUserStartString OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value of this object is defined by product and it indicates the offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: 10,10af,ffff. Default value is zero-length. " ::= { fsAclEnUserEntry 4 } fsAclEnUserL2String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching layer 2 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclEnUserEntry 5 } fsAclEnUserMplsString OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching mpls packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclEnUserEntry 6 } fsAclEnUserIPv4String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching IPv4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclEnUserEntry 7 } fsAclEnUserIPv6String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching IPv6 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclEnUserEntry 8 } fsAclEnUserL4String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching layer 4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclEnUserEntry 9 } fsAclEnUserL5String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching layer 5 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclEnUserEntry 10 } fsAclEnUserTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of user acl rule. Default value is zero-length." ::= { fsAclEnUserEntry 11 } fsAclEnUserCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched by the rule." ::= { fsAclEnUserEntry 12 } fsAclEnUserCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the value of counter." ::= { fsAclEnUserEntry 13 } fsAclEnUserEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclEnUserEntry 14 } fsAclEnUserComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is Zero-length String. " ::= { fsAclEnUserEntry 15 } fsAclEnUserLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be logged when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclEnUserEntry 16 } fsAclEnUserCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclEnUserEntry 17 } -- -- Nodes of fsAclNamedUserTable -- fsAclNamedUserTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclNamedUserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of named user acl rule. The name of ACL group will be used as an index in this table, which differs from the table fsAclEnUserTable. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read. " ::= { fsAclEnUserAclGroup 4 } fsAclNamedUserEntry OBJECT-TYPE SYNTAX FsAclNamedUserEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "User defined acl group entry." INDEX { fsAclNumberGroupType, fsAclNamedGroupName, fsAclEnUserRuleIndex } ::= { fsAclNamedUserTable 1 } FsAclNamedUserEntry ::= SEQUENCE { fsAclNamedUserRowStatus RowStatus, fsAclNamedUserAct RuleAction, fsAclNamedUserStartString OCTET STRING, fsAclNamedUserL2String OCTET STRING, fsAclNamedUserMplsString OCTET STRING, fsAclNamedUserIPv4String OCTET STRING, fsAclNamedUserIPv6String OCTET STRING, fsAclNamedUserL4String OCTET STRING, fsAclNamedUserL5String OCTET STRING, fsAclNamedUserTimeRangeName OCTET STRING, fsAclNamedUserCount Unsigned32, fsAclNamedUserCountClear CounterClear, fsAclNamedUserEnable TruthValue, fsAclNamedUserComment OCTET STRING, fsAclNamedUserLog TruthValue, fsAclNamedUserCounting TruthValue } fsAclNamedUserRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclNamedUserEntry 1 } fsAclNamedUserAct OBJECT-TYPE SYNTAX RuleAction MAX-ACCESS read-create STATUS current DESCRIPTION "The action of user defined acl rule." ::= { fsAclNamedUserEntry 2 } fsAclNamedUserStartString OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value of this object is defined by product and it indicates the offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: 10,10af,ffff. Default value is zero-length. " ::= { fsAclNamedUserEntry 3 } fsAclNamedUserL2String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching layer 2 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclNamedUserEntry 4 } fsAclNamedUserMplsString OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching mpls packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclNamedUserEntry 5 } fsAclNamedUserIPv4String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching IPv4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclNamedUserEntry 6 } fsAclNamedUserIPv6String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching IPv6 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclNamedUserEntry 7 } fsAclNamedUserL4String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching layer 4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclNamedUserEntry 8 } fsAclNamedUserL5String OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-create STATUS current DESCRIPTION "The rule, matching layer 5 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is zero-length. " ::= { fsAclNamedUserEntry 9 } fsAclNamedUserTimeRangeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..32)) MAX-ACCESS read-create STATUS current DESCRIPTION "The Time-range of user acl rule. Default value is zero-length." ::= { fsAclNamedUserEntry 10 } fsAclNamedUserCount OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The count of matched by the rule." ::= { fsAclNamedUserEntry 11 } fsAclNamedUserCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Reset the value of counter." ::= { fsAclNamedUserEntry 12 } fsAclNamedUserEnable OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-only STATUS current DESCRIPTION "The rule is active or not. true : active false : inactive " DEFVAL { false } ::= { fsAclNamedUserEntry 13 } fsAclNamedUserComment OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..127)) MAX-ACCESS read-create STATUS current DESCRIPTION "The description of ACL rule. Default value is Zero-length String. " ::= { fsAclNamedUserEntry 14 } fsAclNamedUserLog OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be logged when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclNamedUserEntry 15 } fsAclNamedUserCounting OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "The packet will be counted when it matches the rule. It is disabled by default. " DEFVAL { false } ::= { fsAclNamedUserEntry 16 } -- -- Node of fsAclResourceGroup -- fsAclResourceGroup OBJECT IDENTIFIER ::= { fsAclMib2Objects 5 } -- -- Nodes of fsAclResourceUsageTable -- fsAclResourceUsageTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclResourceUsageEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "The table shows ACL resource usage information. Support for resource types that are denoted by fsAclResourceType object varies with products. If a type is not supported, the corresponding row for the type will not be instantiated in this table. " ::= { fsAclResourceGroup 1 } fsAclResourceUsageEntry OBJECT-TYPE SYNTAX FsAclResourceUsageEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Each row contains a brief description of the resource type, a port range associated with the chip, total, reserved, and configured amount of resource of this type, the percent of resource that has been allocated, and so on. " INDEX { fsAclResourceChassis, fsAclResourceSlot, fsAclResourceChip, fsAclResourceType } ::= { fsAclResourceUsageTable 1 } FsAclResourceUsageEntry ::= SEQUENCE { fsAclResourceChassis Unsigned32, fsAclResourceSlot Unsigned32, fsAclResourceChip Unsigned32, fsAclResourceType Integer32, fsAclPortRange OCTET STRING, fsAclResourceTotal Unsigned32, fsAclResourceReserved Unsigned32, fsAclResourceConfigured Unsigned32, fsAclResourceUsagePercent Unsigned32, fsAclResourceTypeDescription OCTET STRING } fsAclResourceChassis OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "The chassis number. On a centralized or distributed device, the value for this node is always zero. " ::= { fsAclResourceUsageEntry 1 } fsAclResourceSlot OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "The slot number. On a centralized device, the value for this node is always zero." ::= { fsAclResourceUsageEntry 2 } fsAclResourceChip OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS not-accessible STATUS current DESCRIPTION "The chip number. On a single chip device, the value for this node is always zero." ::= { fsAclResourceUsageEntry 3 } fsAclResourceType OBJECT-TYPE SYNTAX Integer32 (1..255) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The resource type." ::= { fsAclResourceUsageEntry 4 } fsAclPortRange OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS read-only STATUS current DESCRIPTION "The port range associated with the chip. Commas are used to separate multiple port ranges, for example, Ethernet1/2 to Ethernet1/12, Ethernet1/31 to Ethernet1/48. " ::= { fsAclResourceUsageEntry 5 } fsAclResourceTotal OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "Total TCAM entries of the resource type." ::= { fsAclResourceUsageEntry 6 } fsAclResourceReserved OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of reserved TCAM entries of the resource type." ::= { fsAclResourceUsageEntry 7 } fsAclResourceConfigured OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The amount of configured TCAM entries of the resource type." ::= { fsAclResourceUsageEntry 8 } fsAclResourceUsagePercent OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The percent of TCAM entries that have been used for this resource type. " ::= { fsAclResourceUsageEntry 9 } fsAclResourceTypeDescription OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..31)) MAX-ACCESS read-only STATUS current DESCRIPTION "The description of this resource type." ::= { fsAclResourceUsageEntry 10 } -- -- Node of fsAclIntervalGroup -- fsAclIntervalGroup OBJECT IDENTIFIER ::= { fsAclMib2Objects 6 } -- -- Nodes of fsAclIntervalTable -- fsAclIntervalTable OBJECT-TYPE SYNTAX SEQUENCE OF FsAclIntervalEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Log interval table." ::= { fsAclIntervalGroup 1 } fsAclIntervalEntry OBJECT-TYPE SYNTAX FsAclIntervalEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Log interval entry." INDEX { fsAclIntervalType } ::= { fsAclIntervalTable 1 } FsAclIntervalEntry ::= SEQUENCE { fsAclIntervalType INTEGER, fsAclIntervalValue Integer32, fsAclIntervalRowStatus RowStatus } fsAclIntervalType OBJECT-TYPE SYNTAX INTEGER { logging(1), trap(2) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The types of the interval specified for generating packet filtering logs or traps. " ::= { fsAclIntervalEntry 1 } fsAclIntervalValue OBJECT-TYPE SYNTAX Integer32 (5..1440) MAX-ACCESS read-create STATUS current DESCRIPTION "The value of interval. It must be a multiple of 5 and in the range of 5 to 1440. " ::= { fsAclIntervalEntry 2 } fsAclIntervalRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsAclIntervalEntry 3 } -- -- Node of fsAclPacketFilterObjects -- fsAclPacketFilterObjects OBJECT IDENTIFIER ::= { fsAcl 3 } fsPfilterScalarGroup OBJECT IDENTIFIER ::= { fsAclPacketFilterObjects 1 } fsPfilterDefaultAction OBJECT-TYPE SYNTAX INTEGER { permit(1), deny(2) } MAX-ACCESS read-write STATUS current DESCRIPTION "The default action of packet filter. By default, the packet filter permits packets that do not match any ACL rule to pass. " ::= { fsPfilterScalarGroup 1 } fsPfilterProcessingStatus OBJECT-TYPE SYNTAX INTEGER { processing(1), done(2) } MAX-ACCESS read-only STATUS current DESCRIPTION "This object shows the status of the system when applying packet filter. It is forbidden to set or read in fsAclPacketFilterObjects MIB module when the value is processing. " ::= { fsPfilterScalarGroup 2 } -- -- Nodes of fsPfilterApplyTable -- fsPfilterApplyTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilterApplyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of packet filter application. It's not supported to set default action on an entity, but supported to enable hardware count of default action on an entity. " ::= { fsAclPacketFilterObjects 2 } fsPfilterApplyEntry OBJECT-TYPE SYNTAX FsPfilterApplyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Packet filter application information entry." INDEX { fsPfilterApplyObjType, fsPfilterApplyObjIndex, fsPfilterApplyDirection, fsPfilterApplyAclType, fsPfilterApplyAclIndex } ::= { fsPfilterApplyTable 1 } FsPfilterApplyEntry ::= SEQUENCE { fsPfilterApplyObjType INTEGER, fsPfilterApplyObjIndex Integer32, fsPfilterApplyDirection DirectionType, fsPfilterApplyAclType INTEGER, fsPfilterApplyAclIndex Integer32, fsPfilterApplyHardCount TruthValue, fsPfilterApplySequence Unsigned32, fsPfilterApplyCountClear CounterClear, fsPfilterApplyRowStatus RowStatus } fsPfilterApplyObjType OBJECT-TYPE SYNTAX INTEGER { interface(1), vlan(2), global(3) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The object type of packet filter application. interface: Apply an ACL to the interface to filter packets. vlan: Apply an ACL to the VLAN to filter packets. global: Apply an ACL globally to filter packets. " ::= { fsPfilterApplyEntry 1 } fsPfilterApplyObjIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The object ID of packet filter application. Interface: interface index, equal to ifIndex VLAN: VLAN ID, 1..4094 Global: 0 " ::= { fsPfilterApplyEntry 2 } fsPfilterApplyDirection OBJECT-TYPE SYNTAX DirectionType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The direction of packet filter application." ::= { fsPfilterApplyEntry 3 } fsPfilterApplyAclType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2), default(3), mac(4), user(5) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL Type: IPv4, IPv6, default action, MAC, and user. Take default action as a special ACL group. " ::= { fsPfilterApplyEntry 4 } fsPfilterApplyAclIndex OBJECT-TYPE SYNTAX Integer32 (0|2000..5999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 Default action type: 0 " ::= { fsPfilterApplyEntry 5 } fsPfilterApplyHardCount OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Hardware count flag. true: enable hardware count false: disable hardware count " DEFVAL { false } ::= { fsPfilterApplyEntry 6 } fsPfilterApplySequence OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The configure sequence of packet filter application." ::= { fsPfilterApplyEntry 7 } fsPfilterApplyCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Clear the value of counters." ::= { fsPfilterApplyEntry 8 } fsPfilterApplyRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsPfilterApplyEntry 9 } -- -- Nodes of fsPfilterAclGroupRunInfoTable -- fsPfilterAclGroupRunInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilterAclGroupRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of group running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the statistics entry will be zero. " ::= { fsAclPacketFilterObjects 3 } fsPfilterAclGroupRunInfoEntry OBJECT-TYPE SYNTAX FsPfilterAclGroupRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL group running information entry for packet filtering." INDEX { fsPfilterRunApplyObjType, fsPfilterRunApplyObjIndex, fsPfilterRunApplyDirection, fsPfilterRunApplyAclType, fsPfilterRunApplyAclIndex } ::= { fsPfilterAclGroupRunInfoTable 1 } FsPfilterAclGroupRunInfoEntry ::= SEQUENCE { fsPfilterRunApplyObjType INTEGER, fsPfilterRunApplyObjIndex Integer32, fsPfilterRunApplyDirection DirectionType, fsPfilterRunApplyAclType INTEGER, fsPfilterRunApplyAclIndex Integer32, fsPfilterAclGroupStatus INTEGER, fsPfilterAclGroupCountStatus INTEGER, fsPfilterAclGroupPermitPkts Counter64, fsPfilterAclGroupPermitBytes Counter64, fsPfilterAclGroupDenyPkts Counter64, fsPfilterAclGroupDenyBytes Counter64 } fsPfilterRunApplyObjType OBJECT-TYPE SYNTAX INTEGER { interface(1), vlan(2), global(3) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The object type of packet filter application. interface: Apply an ACL to the interface to filter packets. vlan: Apply an ACL to the VLAN to filter packets. global: Apply an ACL globally to filter packets. " ::= { fsPfilterAclGroupRunInfoEntry 1 } fsPfilterRunApplyObjIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The object ID of packet filter application. Interface: interface index, equal to ifIndex VLAN: VLAN ID, 1..4094 Global: 0 " ::= { fsPfilterAclGroupRunInfoEntry 2 } fsPfilterRunApplyDirection OBJECT-TYPE SYNTAX DirectionType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The direction of packet filter application." ::= { fsPfilterAclGroupRunInfoEntry 3 } fsPfilterRunApplyAclType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2), default(3), mac(4), user(5) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL Type: IPv4, IPv6, default action, MAC, and user. Take default action as a special ACL group. " ::= { fsPfilterAclGroupRunInfoEntry 4 } fsPfilterRunApplyAclIndex OBJECT-TYPE SYNTAX Integer32 (1..3|2000..5999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 MAC default action: 1 IPv4 default action: 2 IPv6 default action: 3 " ::= { fsPfilterAclGroupRunInfoEntry 5 } fsPfilterAclGroupStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of ACL group applied. success: ACL applied successfully on all slots failed: failed to apply ACL on all slots partialSuccess: failed to apply ACL on some slots " ::= { fsPfilterAclGroupRunInfoEntry 6 } fsPfilterAclGroupCountStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of enabling hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots " ::= { fsPfilterAclGroupRunInfoEntry 7 } fsPfilterAclGroupPermitPkts OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets permitted." ::= { fsPfilterAclGroupRunInfoEntry 8 } fsPfilterAclGroupPermitBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of bytes permitted." ::= { fsPfilterAclGroupRunInfoEntry 9 } fsPfilterAclGroupDenyPkts OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets denied." ::= { fsPfilterAclGroupRunInfoEntry 10 } fsPfilterAclGroupDenyBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of bytes denied." ::= { fsPfilterAclGroupRunInfoEntry 11 } -- -- Nodes of fsPfilterAclRuleRunInfoTable -- fsPfilterAclRuleRunInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilterAclRuleRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of rule's running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the fsPfilterAclRuleMatchPackets and fsPfilterAclRuleMatchBytes will be zero. " ::= { fsAclPacketFilterObjects 4 } fsPfilterAclRuleRunInfoEntry OBJECT-TYPE SYNTAX FsPfilterAclRuleRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL rule's running information entry." INDEX { fsPfilterRunApplyObjType, fsPfilterRunApplyObjIndex, fsPfilterRunApplyDirection, fsPfilterRunApplyAclType, fsPfilterRunApplyAclIndex, fsPfilterAclRuleIndex } ::= { fsPfilterAclRuleRunInfoTable 1 } FsPfilterAclRuleRunInfoEntry ::= SEQUENCE { fsPfilterAclRuleIndex Integer32, fsPfilterAclRuleStatus INTEGER, fsPfilterAclRuleCountStatus INTEGER, fsPfilterAclRuleMatchPackets Counter64, fsPfilterAclRuleMatchBytes Counter64 } fsPfilterAclRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The ACL rule index." ::= { fsPfilterAclRuleRunInfoEntry 1 } fsPfilterAclRuleStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of rule application. success: rule applied successfully on all slots failed: failed to apply rule on all slots partialSuccess: failed to apply rule on some slots " ::= { fsPfilterAclRuleRunInfoEntry 2 } fsPfilterAclRuleCountStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of enabling rule's hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots " ::= { fsPfilterAclRuleRunInfoEntry 3 } fsPfilterAclRuleMatchPackets OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets matched." ::= { fsPfilterAclRuleRunInfoEntry 4 } fsPfilterAclRuleMatchBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of bytes matched." ::= { fsPfilterAclRuleRunInfoEntry 5 } -- -- Nodes of fsPfilterStatisticSumTable -- fsPfilterStatisticSumTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilterStatisticSumEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of ACL rule's sum statistics information, accumulated by all entity application on all slots. " ::= { fsAclPacketFilterObjects 5 } fsPfilterStatisticSumEntry OBJECT-TYPE SYNTAX FsPfilterStatisticSumEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL rule's sum statistics information entry." INDEX { fsPfilterSumDirection, fsPfilterSumAclType, fsPfilterSumAclIndex, fsPfilterSumRuleIndex } ::= { fsPfilterStatisticSumTable 1 } FsPfilterStatisticSumEntry ::= SEQUENCE { fsPfilterSumDirection DirectionType, fsPfilterSumAclType INTEGER, fsPfilterSumAclIndex Integer32, fsPfilterSumRuleIndex Integer32, fsPfilterSumRuleMatchPackets Counter64, fsPfilterSumRuleMatchBytes Counter64 } fsPfilterSumDirection OBJECT-TYPE SYNTAX DirectionType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The direction of application." ::= { fsPfilterStatisticSumEntry 1 } fsPfilterSumAclType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2), mac(3), user(4) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL type: IPv4, IPv6, MAC, and user." ::= { fsPfilterStatisticSumEntry 2 } fsPfilterSumAclIndex OBJECT-TYPE SYNTAX Integer32 (2000..5999) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 " ::= { fsPfilterStatisticSumEntry 3 } fsPfilterSumRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The ACL rule index." ::= { fsPfilterStatisticSumEntry 4 } fsPfilterSumRuleMatchPackets OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The sum number of packets matched the ACL rule." ::= { fsPfilterStatisticSumEntry 5 } fsPfilterSumRuleMatchBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The sum number of bytes matched the ACL rule." ::= { fsPfilterStatisticSumEntry 6 } -- -- Nodes of fsPfilter2ApplyTable -- fsPfilter2ApplyTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilter2ApplyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of packet filter application. It's not supported to set default action on an entity, but supported to enable hardware count of default action on an entity. " ::= { fsAclPacketFilterObjects 6 } fsPfilter2ApplyEntry OBJECT-TYPE SYNTAX FsPfilter2ApplyEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Packet filter application information entry." INDEX { fsPfilter2ApplyObjType, fsPfilter2ApplyObjIndex, fsPfilter2ApplyDirection, fsPfilter2ApplyAclType, fsPfilter2ApplyAclIndex } ::= { fsPfilter2ApplyTable 1 } FsPfilter2ApplyEntry ::= SEQUENCE { fsPfilter2ApplyObjType INTEGER, fsPfilter2ApplyObjIndex Integer32, fsPfilter2ApplyDirection DirectionType, fsPfilter2ApplyAclType INTEGER, fsPfilter2ApplyAclIndex OCTET STRING, fsPfilter2ApplyHardCount TruthValue, fsPfilter2ApplySequence Unsigned32, fsPfilter2ApplyCountClear CounterClear, fsPfilter2ApplyRowStatus RowStatus } fsPfilter2ApplyObjType OBJECT-TYPE SYNTAX INTEGER { interface(1), vlan(2), global(3) } MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The object type of packet filter application. interface: Apply an ACL to the interface to filter packets. vlan: Apply an ACL to the VLAN to filter packets. global: Apply an ACL globally to filter packets. " ::= { fsPfilter2ApplyEntry 1 } fsPfilter2ApplyObjIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The object ID of packet filter application. Interface: interface index, equal to ifIndex VLAN: VLAN ID, 1..4094 Global: 0 " ::= { fsPfilter2ApplyEntry 2 } fsPfilter2ApplyDirection OBJECT-TYPE SYNTAX DirectionType MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The direction of packet filter application." ::= { fsPfilter2ApplyEntry 3 } fsPfilter2ApplyAclType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2), default(3), mac(4), user(5) } MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "ACL Type: IPv4, IPv6, default action, MAC, and user. Take default action as a special ACL group. " ::= { fsPfilter2ApplyEntry 4 } fsPfilter2ApplyAclIndex OBJECT-TYPE SYNTAX OCTET STRING (SIZE(1..63)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The index of ACL group used by packet-filter. If the specified string comprises only digits, it is converted into a numerical sequence in decimal notation, and regarded as an ACL group index or a default action. If the string is a character string beginning with an English letter, it is regarded as an ACL group name. Group index range and default action: Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 Default action type: 0 " ::= { fsPfilter2ApplyEntry 5 } fsPfilter2ApplyHardCount OBJECT-TYPE SYNTAX TruthValue MAX-ACCESS read-create STATUS current DESCRIPTION "Hardware count flag. true: enable hardware count false: disable hardware count " DEFVAL { false } ::= { fsPfilter2ApplyEntry 6 } fsPfilter2ApplySequence OBJECT-TYPE SYNTAX Unsigned32 MAX-ACCESS read-only STATUS current DESCRIPTION "The configure sequence of packet filter application." ::= { fsPfilter2ApplyEntry 7 } fsPfilter2ApplyCountClear OBJECT-TYPE SYNTAX CounterClear MAX-ACCESS read-write STATUS current DESCRIPTION "Clear the value of counters." DEFVAL { nouse } ::= { fsPfilter2ApplyEntry 8 } fsPfilter2ApplyRowStatus OBJECT-TYPE SYNTAX RowStatus MAX-ACCESS read-create STATUS current DESCRIPTION "RowStatus." ::= { fsPfilter2ApplyEntry 9 } -- -- Nodes of fsPfilter2AclGroupRunInfoTable -- fsPfilter2AclGroupRunInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilter2AclGroupRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of group running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the statistics entry will be zero. " ::= { fsAclPacketFilterObjects 7 } fsPfilter2AclGroupRunInfoEntry OBJECT-TYPE SYNTAX FsPfilter2AclGroupRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL group running information entry for packet filtering." INDEX { fsPfilter2RunApplyObjType, fsPfilter2RunApplyObjIndex, fsPfilter2RunApplyDirection, fsPfilter2RunApplyAclType, fsPfilter2RunApplyAclIndex } ::= { fsPfilter2AclGroupRunInfoTable 1 } FsPfilter2AclGroupRunInfoEntry ::= SEQUENCE { fsPfilter2RunApplyObjType INTEGER, fsPfilter2RunApplyObjIndex Integer32, fsPfilter2RunApplyDirection DirectionType, fsPfilter2RunApplyAclType INTEGER, fsPfilter2RunApplyAclIndex OCTET STRING, fsPfilter2AclGroupStatus INTEGER, fsPfilter2AclGroupCountStatus INTEGER, fsPfilter2AclGroupPermitPkts Counter64, fsPfilter2AclGroupPermitBytes Counter64, fsPfilter2AclGroupDenyPkts Counter64, fsPfilter2AclGroupDenyBytes Counter64 } fsPfilter2RunApplyObjType OBJECT-TYPE SYNTAX INTEGER { interface(1), vlan(2), global(3) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "The object type of packet filter application. interface: Apply an ACL to the interface to filter packets. vlan: Apply an ACL to the VLAN to filter packets. global: Apply an ACL globally to filter packets. " ::= { fsPfilter2AclGroupRunInfoEntry 1 } fsPfilter2RunApplyObjIndex OBJECT-TYPE SYNTAX Integer32 (0..2147483647) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The object ID of packet filter application. Interface: interface index, equal to ifIndex VLAN: VLAN ID, 1..4094 Global: 0 " ::= { fsPfilter2AclGroupRunInfoEntry 2 } fsPfilter2RunApplyDirection OBJECT-TYPE SYNTAX DirectionType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The direction of packet filter application." ::= { fsPfilter2AclGroupRunInfoEntry 3 } fsPfilter2RunApplyAclType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2), default(3), mac(4), user(5) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL Type: IPv4, IPv6, default action, MAC, and user. Take default action as a special ACL group. " ::= { fsPfilter2AclGroupRunInfoEntry 4 } fsPfilter2RunApplyAclIndex OBJECT-TYPE SYNTAX OCTET STRING (SIZE(1..63)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of ACL group used by packet-filter. If the specified string comprises only digits, it is converted into a numerical sequence in decimal notation, and regarded as an ACL group index or a default action. If the string is a character string beginning with an English letter, it is regarded as an ACL group name. Group index range and default action: Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 MAC default action: 1 IPv4 default action: 2 IPv6 default action: 3 " ::= { fsPfilter2AclGroupRunInfoEntry 5 } fsPfilter2AclGroupStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of ACL group applied. success: ACL applied successfully on all slots failed: failed to apply ACL on all slots partialSuccess: failed to apply ACL on some slots " ::= { fsPfilter2AclGroupRunInfoEntry 6 } fsPfilter2AclGroupCountStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of enabling hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots " ::= { fsPfilter2AclGroupRunInfoEntry 7 } fsPfilter2AclGroupPermitPkts OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets permitted." ::= { fsPfilter2AclGroupRunInfoEntry 8 } fsPfilter2AclGroupPermitBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of bytes permitted." ::= { fsPfilter2AclGroupRunInfoEntry 9 } fsPfilter2AclGroupDenyPkts OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets denied." ::= { fsPfilter2AclGroupRunInfoEntry 10 } fsPfilter2AclGroupDenyBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of bytes denied." ::= { fsPfilter2AclGroupRunInfoEntry 11 } -- -- Nodes of fsPfilter2AclRuleRunInfoTable -- fsPfilter2AclRuleRunInfoTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilter2AclRuleRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of rule's running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the fsPfilter2AclRuleMatchPackets and fsPfilter2AclRuleMatchBytes will be zero. " ::= { fsAclPacketFilterObjects 8 } fsPfilter2AclRuleRunInfoEntry OBJECT-TYPE SYNTAX FsPfilter2AclRuleRunInfoEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL rule's running information entry." INDEX { fsPfilter2RunApplyObjType, fsPfilter2RunApplyObjIndex, fsPfilter2RunApplyDirection, fsPfilter2RunApplyAclType, fsPfilter2RunApplyAclIndex, fsPfilter2AclRuleIndex } ::= { fsPfilter2AclRuleRunInfoTable 1 } FsPfilter2AclRuleRunInfoEntry ::= SEQUENCE { fsPfilter2AclRuleIndex Integer32, fsPfilter2AclRuleStatus INTEGER, fsPfilter2AclRuleCountStatus INTEGER, fsPfilter2AclRuleMatchPackets Counter64, fsPfilter2AclRuleMatchBytes Counter64 } fsPfilter2AclRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The ACL rule index." ::= { fsPfilter2AclRuleRunInfoEntry 1 } fsPfilter2AclRuleStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of rule application. success: rule applied successfully on all slots failed: failed to apply rule on all slots partialSuccess: failed to apply rule on some slots " ::= { fsPfilter2AclRuleRunInfoEntry 2 } fsPfilter2AclRuleCountStatus OBJECT-TYPE SYNTAX INTEGER { success(1), failed(2), partialSuccess(3) } MAX-ACCESS read-only STATUS current DESCRIPTION "The status of enabling rule's hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots " ::= { fsPfilter2AclRuleRunInfoEntry 3 } fsPfilter2AclRuleMatchPackets OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of packets matched." ::= { fsPfilter2AclRuleRunInfoEntry 4 } fsPfilter2AclRuleMatchBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of bytes matched." ::= { fsPfilter2AclRuleRunInfoEntry 5 } -- -- Nodes of fsPfilter2StatisticSumTable -- fsPfilter2StatisticSumTable OBJECT-TYPE SYNTAX SEQUENCE OF FsPfilter2StatisticSumEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "A table of ACL rule's sum statistics information, accumulated by all entity application on all slots. " ::= { fsAclPacketFilterObjects 9 } fsPfilter2StatisticSumEntry OBJECT-TYPE SYNTAX FsPfilter2StatisticSumEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL rule's sum statistics information entry." INDEX { fsPfilter2SumDirection, fsPfilter2SumAclType, fsPfilter2SumAclIndex, fsPfilter2SumRuleIndex } ::= { fsPfilter2StatisticSumTable 1 } FsPfilter2StatisticSumEntry ::= SEQUENCE { fsPfilter2SumDirection DirectionType, fsPfilter2SumAclType INTEGER, fsPfilter2SumAclIndex OCTET STRING, fsPfilter2SumRuleIndex Integer32, fsPfilter2SumRuleMatchPackets Counter64, fsPfilter2SumRuleMatchBytes Counter64 } fsPfilter2SumDirection OBJECT-TYPE SYNTAX DirectionType MAX-ACCESS not-accessible STATUS current DESCRIPTION "The direction of application." ::= { fsPfilter2StatisticSumEntry 1 } fsPfilter2SumAclType OBJECT-TYPE SYNTAX INTEGER { ipv4(1), ipv6(2), mac(3), user(4) } MAX-ACCESS not-accessible STATUS current DESCRIPTION "ACL type: IPv4, IPv6, MAC, and user." ::= { fsPfilter2StatisticSumEntry 2 } fsPfilter2SumAclIndex OBJECT-TYPE SYNTAX OCTET STRING (SIZE(1..63)) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The index of ACL group used by packet-filter. If the specified string comprises only digits, it is converted into a numerical sequence in decimal notation, and regarded as an ACL group index. If the string is a character string beginning with an English letter, it is regarded as an ACL group name. Group index range and default action: Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 " ::= { fsPfilter2StatisticSumEntry 3 } fsPfilter2SumRuleIndex OBJECT-TYPE SYNTAX Integer32 (0..65534) MAX-ACCESS not-accessible STATUS current DESCRIPTION "The ACL rule index." ::= { fsPfilter2StatisticSumEntry 4 } fsPfilter2SumRuleMatchPackets OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The sum number of packets matched the ACL rule." ::= { fsPfilter2StatisticSumEntry 5 } fsPfilter2SumRuleMatchBytes OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The sum number of bytes matched the ACL rule." ::= { fsPfilter2StatisticSumEntry 6 } -- -- Nodes of fsPacketfilterTrapObjects -- fsAclPacketfilterTrapObjects OBJECT IDENTIFIER ::= { fsAcl 4 } fsPfilterInterface OBJECT-TYPE SYNTAX OCTET STRING MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The interface which policy apply." ::= { fsAclPacketfilterTrapObjects 1 } fsPfilterDirection OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Inbound or outbound." ::= { fsAclPacketfilterTrapObjects 2 } fsPfilterACLNumber OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "ACL number." ::= { fsAclPacketfilterTrapObjects 3 } fsPfilterAction OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Permit or deny." ::= { fsAclPacketfilterTrapObjects 4 } fsMACfilterSourceMac OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Source MAC address." ::= { fsAclPacketfilterTrapObjects 5 } fsMACfilterDestinationMac OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Destination MAC address." ::= { fsAclPacketfilterTrapObjects 6 } fsPfilterPacketNumber OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The number of packets permitted or denied by ACL." ::= { fsAclPacketfilterTrapObjects 7 } fsPfilterReceiveInterface OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The interface where packet come from." ::= { fsAclPacketfilterTrapObjects 8 } fsAclPacketIfName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The name of the interface on which the packet is matched." ::= { fsAclPacketfilterTrapObjects 9 } fsAclPacketDirection OBJECT-TYPE SYNTAX DirectionType MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The direction the packet is going." ::= { fsAclPacketfilterTrapObjects 10 } fsAclPacketBAGG OBJECT-TYPE SYNTAX Integer32 (0..2048) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The bridge-aggregation-interface ID the interface belongs to. " DEFVAL { 0 } ::= { fsAclPacketfilterTrapObjects 11 } fsAclPacketVlanID OBJECT-TYPE SYNTAX Integer32 (1..4094) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The vlan the interface belongs to." ::= { fsAclPacketfilterTrapObjects 12 } fsAclPacketSrcIP OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Source IP address of IPv4/IPv6 packet." ::= { fsAclPacketfilterTrapObjects 13 } fsAclPacketDstIP OBJECT-TYPE SYNTAX OCTET STRING (SIZE(0..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Destination IP address of IPv4/IPv6 packet." ::= { fsAclPacketfilterTrapObjects 14 } fsAclPacketProtocol OBJECT-TYPE SYNTAX Integer32 (0..255) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The protocol of IPv4/IPv6 packet. icmp(1), tcp(6), udp(17), igmp(2), gre(47), ospf(89), ipinip(4), icmp6(58), ipv6_ah(51), ipv6_esp(50) " ::= { fsAclPacketfilterTrapObjects 15 } fsAclPacketDscp OBJECT-TYPE SYNTAX DSCPValue MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "DSCP of IPv4/IPv6 packet." DEFVAL { 255 } ::= { fsAclPacketfilterTrapObjects 16 } fsAclPacketFlowLabel OBJECT-TYPE SYNTAX Unsigned32 (0..1048575|4294967295) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Flow label value of IPv6 packet." DEFVAL { 4294967295 } ::= { fsAclPacketfilterTrapObjects 17 } fsAclPacketIcmpIgmpType OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The type of ICMP or IGMP packet." DEFVAL { 65535 } ::= { fsAclPacketfilterTrapObjects 18 } fsAclPacketIcmpIgmpCode OBJECT-TYPE SYNTAX Integer32 (0..255|65535) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The code of ICMP or IGMP packet." DEFVAL { 65535 } ::= { fsAclPacketfilterTrapObjects 19 } fsAclPacketTcpFlags OBJECT-TYPE SYNTAX INTEGER { tcpack(1), tcpfin(2), tcppsh(3), tcprst(4), tcpsyn(5), tcpurg(6), invalid(255) } MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The flags of TCP packet. tcpack(1), tcpfin(2), tcppsh(3), tcprst(4), tcpsyn(5), tcpurg(6), invalid(255) " DEFVAL { 255 } ::= { fsAclPacketfilterTrapObjects 20 } fsAclPacketSrcPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Source port of TCP or UDP packet." DEFVAL { 0 } ::= { fsAclPacketfilterTrapObjects 21 } fsAclPacketDstPort OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Destination port of TCP or UDP packet." DEFVAL { 65535 } ::= { fsAclPacketfilterTrapObjects 22 } fsAclPacketSrcMacAddr OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Source MAC address of Ethernet packet." ::= { fsAclPacketfilterTrapObjects 23 } fsAclPacketDstMacAddr OBJECT-TYPE SYNTAX MacAddress MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "Destination MAC address of Ethernet packet." ::= { fsAclPacketfilterTrapObjects 24 } fsAclPacketMacTypeLen OBJECT-TYPE SYNTAX Integer32 (0..65535) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The Ethertype or 802.3 length of Ethernet packet." DEFVAL { 0 } ::= { fsAclPacketfilterTrapObjects 25 } fsAclPacketVlanPCP OBJECT-TYPE SYNTAX Integer32 (0..7|255) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "802.1p priority code point of Ethernet packet." DEFVAL { 255 } ::= { fsAclPacketfilterTrapObjects 26 } -- -- Nodes of fsPacketfilterTrap -- fsAclPacketfilterTrap OBJECT IDENTIFIER ::= { fsAcl 5 } fsPfilterTrapPrefix OBJECT IDENTIFIER ::= { fsAclPacketfilterTrap 0 } fsMACfilterTrap NOTIFICATION-TYPE OBJECTS { fsPfilterInterface, fsPfilterDirection, fsPfilterACLNumber, fsPfilterAction, fsMACfilterSourceMac, fsMACfilterDestinationMac, fsPfilterPacketNumber, fsPfilterReceiveInterface } STATUS current DESCRIPTION "This notification is generated when a packet was processed by MAC address filter, but not every packet will generate one notification, the same notification only generate once in 30 seconds. " ::= { fsPfilterTrapPrefix 1 } fsAclRuleMatchCount NOTIFICATION-TYPE OBJECTS { fsPfilter2ApplyObjType, fsPfilter2ApplyObjIndex, fsPfilter2ApplyDirection, fsPfilter2ApplyAclType, fsPfilter2ApplyAclIndex, fsPfilter2AclRuleIndex, fsPfilter2AclRuleMatchPackets } STATUS current DESCRIPTION "This notification is generated periodically due to a timer. The interval of the timer is configured in fsAclIntervalTable. The notification details the entries about the packet-filter object, the matched ACL rule and the number of matching packets. " ::= { fsPfilterTrapPrefix 2 } fsAclFirstIPv4PktCaptured NOTIFICATION-TYPE OBJECTS { fsPfilter2ApplyAclIndex, fsPfilter2AclRuleIndex, fsAclPacketIfName, fsAclPacketDirection, fsAclPacketBAGG, fsAclPacketVlanID, fsAclPacketSrcIP, fsAclPacketDstIP, fsAclPacketProtocol, fsAclPacketDscp, fsAclPacketIcmpIgmpType, fsAclPacketIcmpIgmpCode, fsAclPacketTcpFlags, fsAclPacketSrcPort, fsAclPacketDstPort } STATUS current DESCRIPTION "This notification is generated immediately when the first packet of the matched IPv4 flow is captured. Other packets of the matched flow won't be captured. " ::= { fsPfilterTrapPrefix 3 } fsAclFirstIPv6PktCaptured NOTIFICATION-TYPE OBJECTS { fsPfilter2ApplyAclIndex, fsPfilter2AclRuleIndex, fsAclPacketIfName, fsAclPacketDirection, fsAclPacketBAGG, fsAclPacketVlanID, fsAclPacketSrcIP, fsAclPacketDstIP, fsAclPacketProtocol, fsAclPacketDscp, fsAclPacketFlowLabel, fsAclPacketIcmpIgmpType, fsAclPacketIcmpIgmpCode, fsAclPacketTcpFlags, fsAclPacketSrcPort, fsAclPacketDstPort } STATUS current DESCRIPTION "This notification is generated immediately when the first packet of the matched IPv6 flow is captured. Other packets of the matched flow won't be captured. " ::= { fsPfilterTrapPrefix 4 } fsAclFirstEthernetPktCaptured NOTIFICATION-TYPE OBJECTS { fsPfilter2ApplyAclIndex, fsPfilter2AclRuleIndex, fsAclPacketIfName, fsAclPacketDirection, fsAclPacketBAGG, fsAclPacketVlanID, fsAclPacketSrcMacAddr, fsAclPacketDstMacAddr, fsAclPacketMacTypeLen, fsAclPacketVlanPCP } STATUS current DESCRIPTION "This notification is generated immediately when the first packet of the matched Ethernet flow is captured. Other packets of the matched flow won't be captured. " ::= { fsPfilterTrapPrefix 5 } -- -- Nodes of fsAclTrapObjects -- fsAclTrapObjects OBJECT IDENTIFIER ::= { fsAcl 6 } fsAclResourceTypeName OBJECT-TYPE SYNTAX OCTET STRING (SIZE(1..255)) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The name of TCAM resources." ::= { fsAclTrapObjects 1 } fsAclResourceUsage OBJECT-TYPE SYNTAX Integer32 (1..100) MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The current usage of TCAM resources." ::= { fsAclTrapObjects 2 } fsAclResourceUsedEntries OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The used number of entries on TCAM." ::= { fsAclTrapObjects 3 } fsAclResourceTotalEntries OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The total number of entries on TCAM." ::= { fsAclTrapObjects 4 } fsAclResourceChassisID OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The chassis number. On a centralized or distributed device, the value for this node is always zero." ::= { fsAclTrapObjects 5 } fsAclResourceSlotID OBJECT-TYPE SYNTAX Integer32 MAX-ACCESS accessible-for-notify STATUS current DESCRIPTION "The slot number. On a centralized device, the value for this node is always zero." ::= { fsAclTrapObjects 6 } -- -- Nodes of fsAclResourceTrap -- fsAclTrap OBJECT IDENTIFIER ::= { fsAcl 7 } fsAclTrapPrefix OBJECT IDENTIFIER ::= { fsAclTrap 0 } fsAclResourceTrap NOTIFICATION-TYPE OBJECTS { fsAclResourceTypeName, fsAclResourceUsage, fsAclResourceUsedEntries, fsAclResourceTotalEntries, fsAclMib2ResourceThreshold, fsAclResourceChassisID, fsAclResourceSlotID } STATUS current DESCRIPTION "This notification is generated when the number of entries on TCAM becomes equal to or greater than a preset threshold level" ::= { fsAclTrapPrefix 1 } END