H3C-ACFP-MIB

File: H3C-ACFP-MIB.mib (36269 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC HUAWEI-3COM-OID-MIB

Imported symbols

IpAddress Integer32 OBJECT-TYPE
MODULE-IDENTITY NOTIFICATION-TYPE RowStatus
TruthValue MacAddress DisplayString
h3cCommon

Defined Types

H3cAcfpClientInfoEntry  
SEQUENCE    
  h3cAcfpClientID Integer32
  h3cAcfpClientDescription DisplayString
  h3cAcfpClientHwVersion DisplayString
  h3cAcfpClientOSVersion DisplayString
  h3cAcfpClientAppVersion DisplayString
  h3cAcfpClientIP IpAddress
  h3cAcfpClientMode BITS
  h3cAcfpClientRowStatus RowStatus

H3cAcfpPolicyEntry  
SEQUENCE    
  h3cAcfpPolicyIndex Integer32
  h3cAcfpPolicyInIfIndex Integer32
  h3cAcfpPolicyOutIfIndex Integer32
  h3cAcfpPolicyDestIfIndex Integer32
  h3cAcfpPolicyContextID Integer32
  h3cAcfpPolicyAdminStatus INTEGER
  h3cAcfpPolicyLifetime Integer32
  h3cAcfpPolicyTimeStart OCTET STRING
  h3cAcfpPolicyTimeEnd OCTET STRING
  h3cAcfpPolicyRowStatus RowStatus
  h3cAcfpPolicyDestIfFailAction INTEGER
  h3cAcfpPolicyPriority INTEGER

H3cAcfpRuleEntry  
SEQUENCE    
  h3cAcfpRuleIndex Integer32
  h3cAcfpRuleOperStatus INTEGER
  h3cAcfpRuleAction INTEGER
  h3cAcfpRuleAll TruthValue
  h3cAcfpRuleSrcMAC MacAddress
  h3cAcfpRuleDstMAC MacAddress
  h3cAcfpRuleVlanStart Integer32
  h3cAcfpRuleVlanEnd Integer32
  h3cAcfpRuleProtocol Integer32
  h3cAcfpRuleSrcIP IpAddress
  h3cAcfpRuleSrcIPMask IpAddress
  h3cAcfpRuleSrcOp INTEGER
  h3cAcfpRuleSrcStartPort Integer32
  h3cAcfpRuleSrcEndPort Integer32
  h3cAcfpRuleDstIP IpAddress
  h3cAcfpRuleDstIPMask IpAddress
  h3cAcfpRuleDstOp INTEGER
  h3cAcfpRuleDstStartPort Integer32
  h3cAcfpRuleDstEndPort Integer32
  h3cAcfpRulePrecedence Integer32
  h3cAcfpRuleTos Integer32
  h3cAcfpRuleDscp Integer32
  h3cAcfpRuleEstablish TruthValue
  h3cAcfpRuleFragment TruthValue
  h3cAcfpRulePacketRate Integer32
  h3cAcfpRuleRowStatus RowStatus
  h3cAcfpRuleTCPFlag Integer32

Defined Values

h3cAcfp 1.3.6.1.4.1.2011.10.2.74
This MIB module defines a set of basic objects for configuring switches and routers to enable ACFP.
MODULE-IDENTITY    

h3cAcfpObjects 1.3.6.1.4.1.2011.10.2.74.1
OBJECT IDENTIFIER    

h3cAcfpOAP 1.3.6.1.4.1.2011.10.2.74.1.1
OBJECT IDENTIFIER    

h3cAcfpServer 1.3.6.1.4.1.2011.10.2.74.1.1.1
OBJECT IDENTIFIER    

h3cAcfpServerInfo 1.3.6.1.4.1.2011.10.2.74.1.1.1.1
When retrieved, this object returns a set of bits indicating the capabilities (or configuration) of the switch or router. The set bit is indication that a router or switch can support the action for security rule.
Status: current Access: read-only
OBJECT-TYPE    
  BITS ipserver(0), redirect(1), mirror(2), passThrough(3)  

h3cAcfpServerMaxLifetime 1.3.6.1.4.1.2011.10.2.74.1.1.1.2
When retrieved, this object returns the maximum lifetime in seconds, that this router or switch allows policy rules to have.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAcfpServerPersistentRules 1.3.6.1.4.1.2011.10.2.74.1.1.1.3
When retrieved, this object returns true(1) if the ACFP MIB implementation can store policy rules persistently. Otherwise, it returns false(2).
Status: current Access: read-only
OBJECT-TYPE    
  TruthValue  

h3cAcfpServerCurContextType 1.3.6.1.4.1.2011.10.2.74.1.1.1.4
In some circumstances, it's necessary that packets go to ACFP client with context from ACFP server. However, the context perhaps is different. h3cAcfpServerCurContextType is used to distinguish this difference, ACFP client may process distinctively.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER no-context(1), context-VLANID(2), context-HG(3), context-FlowID(4), context-HGPlus(5)  

h3cAcfpClientInfo 1.3.6.1.4.1.2011.10.2.74.1.1.2
OBJECT IDENTIFIER    

h3cAcfpClientInfoTable 1.3.6.1.4.1.2011.10.2.74.1.1.2.1
This table contains the basic information about ACFP client.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAcfpClientInfoEntry

h3cAcfpClientInfoEntry 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1
This list contains the basic information about ACFP client.
Status: current Access: not-accessible
OBJECT-TYPE    
  H3cAcfpClientInfoEntry  

h3cAcfpClientID 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.1
The identifier of ACFP client.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cAcfpClientDescription 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.2
Description of the application that is running on ACFP client, eg. IPS, VCX.
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(0..64)  

h3cAcfpClientHwVersion 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.3
The hardware revision of ACFP client.
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(0..64)  

h3cAcfpClientOSVersion 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.4
The operating system version running ACFP client.
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(0..64)  

h3cAcfpClientAppVersion 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.5
The application version running on ACFP client
Status: current Access: read-create
OBJECT-TYPE    
  DisplayString Size(0..64)  

h3cAcfpClientIP 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.6
IP address of ACFP client.
Status: current Access: read-create
OBJECT-TYPE    
  IpAddress  

h3cAcfpClientMode 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.7
ACFP client informs Router or switch which mode it is operating. Router or switch checks h3cAcfpServerInfo to see whether it is capable of fulfilling this function. If not, router or switch generates a trap informing ACFP client such OAP mode is not supported.
Status: current Access: read-create
OBJECT-TYPE    
  BITS ipserver(0), redirect(1), mirror(2), passThrough(3)  

h3cAcfpClientRowStatus 1.3.6.1.4.1.2011.10.2.74.1.1.2.1.1.8
RowStatus, supports three states: createAndGo, active, destroy. Creation Operation Restriction: Node h3cAcfpClientMode must be bound while creating a row. It is optional for other nodes. ACFP module must be enabled for the server while creating a row. The number of rows created must not exceed upper limit. Modification Operation Restriction: Nodes that do not support modification: h3cAcfpClientMode. Nodes that support modification: h3cAcfpClientDescription, h3cAcfpClientHwVersion, h3cAcfpClientOSVersion, h3cAcfpClientAppVersion and h3cAcfpClientIP. If the row to be modified does not exist, error returns directly. Deletion Operation Restriction: If the row to be deleted does not exist, success returns directly.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

h3cAcfpPolicy 1.3.6.1.4.1.2011.10.2.74.1.1.3
OBJECT IDENTIFIER    

h3cAcfpPolicyTable 1.3.6.1.4.1.2011.10.2.74.1.1.3.1
This table lists all current policies for ACFP client(s). Entries in this table are created or removed implicitly when entries in the h3cAcfpRuleTable are created or removed, respectively. A policy entry in this table only exists as long as there is rule of this policy in the h3cAcfpRuleTable. The table serves for listing the existing policies and their remaining lifetimes and for changing lifetimes of policies and implicitly of all policy members and all their member policy rules can be deleted by setting h3cAcfpPolicyLifetime to 0.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAcfpPolicyEntry

h3cAcfpPolicyEntry 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1
The list contains basic information of ACFP Policy.
Status: current Access: not-accessible
OBJECT-TYPE    
  H3cAcfpPolicyEntry  

h3cAcfpPolicyIndex 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.1
The identifier of the Policy of ACFP client
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cAcfpPolicyInIfIndex 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.2
Packet is received from this interface. The value of this object contains the same value of ifIndex of ifTable.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAcfpPolicyOutIfIndex 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.3
Packet is sent to this interface. The value of this object contains the same value of ifIndex of ifTable.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAcfpPolicyDestIfIndex 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.4
Through this interface, packet go to ACFP client from ACFP server. The value of this object contains the same value of ifIndex of ifTable.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32  

h3cAcfpPolicyContextID 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.5
Internal id ACFP server allocated used to map to the interface. ACFP server may send packet with this h3cAcfpPolicyContextID to ACFP client, ACFP client can make use of this h3cAcfpPolicyContextID and find the policy.
Status: current Access: read-only
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAcfpPolicyAdminStatus 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.6
The value of this object indicates the desired status of the policy.
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER enable(1), disable(2)  

h3cAcfpPolicyLifetime 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.7
When retrieved, this object delivers the maximum lifetime (seconds) of all the rules of this, i.e., of all the rows in h3cAcfpRuleTable that have the same values of h3cAcfpRulePolicyIndex and h3cAcfpClientID. Successfully writing to this object modifies the lifetime of all the rules of this. Successfully writing a value of 0 terminates all the rules and implicitly deletes this as soon as all member entries are removed from the h3cAcfpRuleTable. Note that after a lifetime expired, all the corresponding entry in the h3cAcfpRuleTable will be removed and this will be deleted implicitly. Writing to this object is processed by the ACFP MIB implementation by choosing a lifetime value that is greater than or equal to zero and less than or equal to the minimum of the requested value and the value specified by object h3cAcfpServerMaxLifetime: 0 <= lt_granted <= MINIMUM(lt_requested, lt_maximum) whereas: lt_granted is the actually granted lifetime by the ACFP MIB implementation. lt_requested is the requested lifetime of the ACFP client. lt_maximum is the value of object h3cAcfpServerMaxLifetime. SNMP set requests to this object may be rejected or the value of the object after an accepted set operation may be less than the value that was contained in the SNMP set request.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAcfpPolicyTimeStart 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.8
Beginning time of this policy every day. Eg. HH:MM:SS
Status: current Access: read-create
OBJECT-TYPE    
  OCTET STRING Size(8)  

h3cAcfpPolicyTimeEnd 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.9
Ending time of this policy every day. Eg. HH:MM:SS
Status: current Access: read-create
OBJECT-TYPE    
  OCTET STRING Size(8)  

h3cAcfpPolicyRowStatus 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.10
RowStatus, supports three states: createAndGo, active, destroy. Creation Operation Restriction: The client corresponding to the index h3cAcfpClientID must exist while creating a row. Nodes h3cAcfpPolicyTimeStart and h3cAcfpPolicyTimeEnd are bound together, and h3cAcfpPolicyTimeEnd must be greater than h3cAcfpPolicyTimeStart. The number of rows created on an incoming/outgoing interface cannot exceed the upper limit. The number of rows created cannot exceed the upper limit for each client. A packet matches a policy in the following order: - It first matches the policy with the highest priority. - For two policies with the same priority, it matches the one with the smallest client index. - For two policies with the same client index, it matches the one with the smallest policy index. Modification Operation Restriction: Nodes that do not support modification: h3cAcfpPolicyInIfIndex, h3cAcfpPolicyOutIfIndex, h3cAcfpPolicyDestIfIndex, h3cAcfpPolicyDestIfFailAction, h3cAcfpPolicyPriority. Nodes that support modification: h3cAcfpPolicyAdminStatus, h3cAcfpPolicyLifetime, h3cAcfpPolicyTimeStart and h3cAcfpPolicyTimeEnd. While modifying a row, if the row corresponding to the index configured does not exist, error returns directly. While modifying a node, the restriction over h3cAcfpPolicyTimeStart and h3cAcfpPolicyTimeEnd is the same as creating a node. Deletion Operation Restriction: If the row to be deleted does not exist, success returns directly.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

h3cAcfpPolicyDestIfFailAction 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.11
The value of this object indicates the action of the policy when the destination interface failed.
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER delete(1), reserve(2)  

h3cAcfpPolicyPriority 1.3.6.1.4.1.2011.10.2.74.1.1.3.1.1.12
The value of this object indicates the priority of the policy. Priority8 is maximal priority. Priority1 is minimal priority.
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER priority1(1), priority2(2), priority3(3), priority4(4), priority5(5), priority6(6), priority7(7), priority8(8)  

h3cAcfpRule 1.3.6.1.4.1.2011.10.2.74.1.1.4
OBJECT IDENTIFIER    

h3cAcfpRuleTable 1.3.6.1.4.1.2011.10.2.74.1.1.4.1
This table lists all the rules. It is indexed by h3cAcfpClientID, h3cAcfpRulePolicyIndex and h3cAcfpRuleIndex. Entries can be deleted by writing h3cAcfpPolicyLifetime to 0.
Status: current Access: not-accessible
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAcfpRuleEntry

h3cAcfpRuleEntry 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1
The list contains basic information of the rule.
Status: current Access: not-accessible
OBJECT-TYPE    
  H3cAcfpRuleEntry  

h3cAcfpRuleIndex 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.1
The identifier of the rules which have the same h3cAcfpPolicyIndex and h3cAcfpClientID.h3cAcfpRuleIndex indicates rule sequence in the same policy.
Status: current Access: accessible-for-notify
OBJECT-TYPE    
  Integer32 1..2147483647  

h3cAcfpRuleOperStatus 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.2
The value of this object indicates the status of a rule. success : Applied rule to interface successfully. fail : Failed to apply rule to interface.
Status: current Access: read-only
OBJECT-TYPE    
  INTEGER success(1), fail(2)  

h3cAcfpRuleAction 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.3
The action of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER permit(1), deny(2), redirect(3), mirror(4), rate(5)  

h3cAcfpRuleAll 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.4
The rule match all packet or does not. true : all false : not all
Status: current Access: read-create
OBJECT-TYPE    
  TruthValue  

h3cAcfpRuleSrcMAC 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.5
Source MAC of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  MacAddress  

h3cAcfpRuleDstMAC 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.6
Destination MAC of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  MacAddress  

h3cAcfpRuleVlanStart 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.7
Starting VLAN id of this rule. 0 : Invalid value
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..4094  

h3cAcfpRuleVlanEnd 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.8
Ending VLAN id of this rule. 0 : Invalid value
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..4094  

h3cAcfpRuleProtocol 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.9
The protocol-type of this rule. <0-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Management Protocol(2) ip Any IP protocol(0) ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..255  

h3cAcfpRuleSrcIP 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.10
Source IP address of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  IpAddress  

h3cAcfpRuleSrcIPMask 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.11
Source IP-address wild of this rule. Eg. 0.0.0.255.
Status: current Access: read-create
OBJECT-TYPE    
  IpAddress  

h3cAcfpRuleSrcOp 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.12
Source Port operation for this rule
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER equal(1), notEqual(2), lessThan(3), greaterThan(4), range(5), invalid(6)  

h3cAcfpRuleSrcStartPort 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.13
Starting UDP/TCP Source Port number of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..65535  

h3cAcfpRuleSrcEndPort 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.14
Ending UDP/TCP Source Port of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..65535  

h3cAcfpRuleDstIP 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.15
Destination IP address of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  IpAddress  

h3cAcfpRuleDstIPMask 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.16
Destination IP-address wild of this rule. Eg. 0.0.0.255
Status: current Access: read-create
OBJECT-TYPE    
  IpAddress  

h3cAcfpRuleDstOp 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.17
Destination Port operation for this rule
Status: current Access: read-create
OBJECT-TYPE    
  INTEGER equal(1), nonEqual(2), lessThan(3), greaterThan(4), range(5), invalid(6)  

h3cAcfpRuleDstStartPort 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.18
Starting UDP/TCP Destination Port number of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..65535  

h3cAcfpRuleDstEndPort 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.19
Ending UDP/TCP Destination Port of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..65535  

h3cAcfpRulePrecedence 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.20
The value of precedence field in IP header. <255> Invalid value <0-7> value of precedence routine(0) Routine precedence priority(1) Priority precedence immediate(2) Immediate precedence flash(3) Flash precedence flash-override(4) Flash Override precedence critical(5) Critical precedence internet(6) Network Control precedence network(7) Internetwork Control precedence
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..7 | 255  

h3cAcfpRuleTos 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.21
The value of TOS field in IP header. <255> Invalid value <0-15> value of ToS (Type of Service) Normal(0) normal service min-monetary-cost(1) minimum monetary cost max-reliability(2) maximum reliability max-throughput(4) maximum throughput min-delay(8) minimum delay
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..15 | 255  

h3cAcfpRuleDscp 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.22
The value of DSCP. <255> Invalid value <0-63> value of DSCP Be(0) best effort af11(10) assured forwarding 11 service af12(12) assured forwarding 12 service af13(14) assured forwarding 13 service af21(18) assured forwarding 18 service af22(20) assured forwarding 20 service af23(22) assured forwarding 22 service af31(26) assured forwarding 31 service af32(28) assured forwarding 32 service af33(30) assured forwarding 33 service af41(34) assured forwarding 41 service af42(36) assured forwarding 42 service af43(38) assured forwarding 43 service cs1(8) class selector 1 service cs2(16) class selector 2 service cs3(24) class selector 3 service cs4(32) class selector 4 service cs5(40) class selector 5 service cs6(48) class selector 6 service cs7(56) class selector 7 service ef(46) expedited forwarding service
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..63 | 255  

h3cAcfpRuleEstablish 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.23
Establish Flag. Matches the TCP packets with the ACK and/or RST flag, including the TCP packets of these types: SYN+ACK, ACK, FIN+ACK, RST, RST+ACK.
Status: deprecated Access: read-create
OBJECT-TYPE    
  TruthValue  

h3cAcfpRuleFragment 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.24
The flag of matching fragmented packet.
Status: current Access: read-create
OBJECT-TYPE    
  TruthValue  

h3cAcfpRulePacketRate 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.25
Packet rate (Kbps) of this rule.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32  

h3cAcfpRuleRowStatus 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.26
RowStatus, supports three states: createAndGo, active, destroy. Creation Operation Restriction: Node h3cAcfpRuleAction must be bound while creating a line. Nodes h3cAcfpRuleAll and h3cAcfpRuleProtocol, h3cAcfpRuleSrcIP, h3cAcfpRuleSrcIPMask, h3cAcfpRuleDstIP, h3cAcfpRuleSrcOp, h3cAcfpRuleSrcStartPort, h3cAcfpRuleSrcEndPort, h3cAcfpRuleDstIP, h3cAcfpRuleDstIPMask, h3cAcfpRuleDstOp, h3cAcfpRuleDstStartPort, h3cAcfpRuleDstEndPort, h3cAcfpRulePrecedence, h3cAcfpRuleTos, h3cAcfpRuleDscp, h3cAcfpRuleTCPFlag, h3cAcfpRuleFragment are mutually exclusive. Nodes h3cAcfpRuleSrcIP and h3cAcfpRuleSrcIPMask are bound together, otherwise, the source IP address is neglected. The restriction over h3cAcfpRuleDstIP and h3cAcfpRuleDstIPMask is the same as h3cAcfpRuleSrcIP and h3cAcfpRuleSrcIPMask. Nodes h3cAcfpRuleDscp and h3cAcfpRulePrecedence, h3cAcfpRuleTos are mutually exclusive. If the node h3cAcfpRuleSrcOp is bound to range(5), h3cAcfpRuleSrcStartPort and h3cAcfpRuleSrcEndPort must be bound together, and h3cAcfpRuleSrcEndPort must be greater than h3cAcfpRuleSrcStartPort. If the node h3cAcfpRuleSrcOp is bound to equal(1), notEqual(2), lessThan(3) or greaterThan(4), h3cAcfpRuleSrcStartPort must be bound together, and h3cAcfpRuleSrcEndPort is neglected. The restriction over h3cAcfpRuleDstOp, h3cAcfpRuleDstStartPort and h3cAcfpRuleDstEndPort is the same as h3cAcfpRuleSrcOp, h3cAcfpRuleSrcStartPort and h3cAcfpRuleSrcEndPort. If the node h3cAcfpRuleAction is bound to redirect(3) or mirror(4), the destination interfaces of the policy the rule belonging to must exist; The number of rows created cannot exceed the upper limit for each policy, each inbound interface and each outbound interface. Modification Operation Restriction: The row does not support modification. Deletion Operation Restriction If the row to be deleted does not exist, success returns directly.
Status: current Access: read-create
OBJECT-TYPE    
  RowStatus  

h3cAcfpRuleTCPFlag 1.3.6.1.4.1.2011.10.2.74.1.1.4.1.1.27
TCP Flag. <0> don't care for TCP flag to match packets <1-65535> care for TCP flag to match packets, the value is combination of next list. URG_VALID (1 << 13) URG_SET (1 << 5) ACK_VALID (1 << 12) ACK_SET (1 << 4) PSH_VALID (1 << 11) PSH_SET (1 << 3) RST_VALID (1 << 10) RST_SET (1 << 2) SYN_VALID (1 << 9) SYN_SET (1 << 1) FIN_VALID (1 << 8) FIN_SET 1 Matches the TCP packets with the URG and/or ACK and/or PSH and/or RST and/or SYN and/or FIN flag, including the TCP packets of these types: SYN+ACK, ACK, FIN+ACK, RST, RST+ACK.
Status: current Access: read-create
OBJECT-TYPE    
  Integer32 0..65535  

h3cAcfpNotifications 1.3.6.1.4.1.2011.10.2.74.1.1.5
OBJECT IDENTIFIER    

h3cAcfpCurContextChanged 1.3.6.1.4.1.2011.10.2.74.1.1.5.1
This notification is sent when router or switch changed h3cAcfpServerCurContextType.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpClientRegister 1.3.6.1.4.1.2011.10.2.74.1.1.5.2
This notification is sent when the ACFP client is registered.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpClientUnRegister 1.3.6.1.4.1.2011.10.2.74.1.1.5.3
This notification is sent when the ACFP client is unregistered.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpClientDead 1.3.6.1.4.1.2011.10.2.74.1.1.5.4
This notification is sent when the ACFP client is not responding.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpNotSupportedOAPMode 1.3.6.1.4.1.2011.10.2.74.1.1.5.5
This notification is sent when router or switch cannot support OAP mode that ACFP client wants to operate on.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpLifetimeChangeEvent 1.3.6.1.4.1.2011.10.2.74.1.1.5.6
This notification can be generated for indicating that The lifetime of all member rules of the was changed by successfully writing to object h3cAcfpPolicyLifetime. Note that this notification is only sent if the lifetime of a policy was changed by successfully writing to object h3cAcfpPolicyLifetime.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpRuleCreatedEvent 1.3.6.1.4.1.2011.10.2.74.1.1.5.7
This notification is sent when a new rule is created.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpRuleDeletedEvent 1.3.6.1.4.1.2011.10.2.74.1.1.5.8
This notification is sent when a rule is deleted.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpRuleErrorEvent 1.3.6.1.4.1.2011.10.2.74.1.1.5.9
This notification is sent when rule cannot be applied.
Status: current Access: read-create
NOTIFICATION-TYPE    

h3cAcfpLifetimeExpireEvent 1.3.6.1.4.1.2011.10.2.74.1.1.5.10
This notification is sent when the time of the policy existed exceeds its lifetime.
Status: current Access: read-create
NOTIFICATION-TYPE