H3C-ACL-MIB

File: H3C-ACL-MIB.mib (156890 bytes)

Imported modules

HUAWEI-3COM-OID-MIB SNMPv2-SMI INET-ADDRESS-MIB
SNMPv2-TC

Imported symbols

h3cCommon IpAddress Integer32
Counter32 OBJECT-TYPE MODULE-IDENTITY
NOTIFICATION-TYPE Unsigned32 Counter64
InetAddressType InetAddress InetAddressPrefixLength
RowStatus TruthValue MacAddress
TEXTUAL-CONVENTION

Defined Types

RuleAction  
TEXTUAL-CONVENTION    
  current INTEGER invalid(1), permit(2), deny(3)

CounterClear  
TEXTUAL-CONVENTION    
  current INTEGER cleared(1), nouse(2)

PortOp  
TEXTUAL-CONVENTION    
  current INTEGER invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)

DSCPValue  
TEXTUAL-CONVENTION    
  current Integer32 0..63 | 255

TCPFlag  
TEXTUAL-CONVENTION    
  current INTEGER invalid(0), tcpack(1), tcpfin(2), tcppsh(3), tcprst(4), tcpsyn(5), tcpurg(6)

FragmentFlag  
TEXTUAL-CONVENTION    
  current INTEGER invalid(0), fragment(1), fragmentSubseq(2), nonFragment(3), nonSubseq(4)

AddressFlag  
TEXTUAL-CONVENTION    
  current INTEGER invalid(0), t64SrcAddrPre64DestAddrPre(1), t64SrcAddrPre64DestAddrSuf(2), t64SrcAddrSuf64DestAddrPre(3), t64SrcAddrSuf64DestAddrSuf(4), t128SourceAddress(5), t128DestinationAddress(6)

DirectionType  
TEXTUAL-CONVENTION    
  current INTEGER inbound(1), outbound(2)

H3cAclNumGroupEntry  
SEQUENCE    
  h3cAclNumGroupAclNum Integer32
  h3cAclNumGroupMatchOrder INTEGER
  h3cAclNumGroupSubitemNum Integer32
  h3cAclNumGroupDescription STRING
  h3cAclNumGroupCountClear INTEGER
  h3cAclNumGroupRowStatus RowStatus

H3cAclNameGroupEntry  
SEQUENCE    
  h3cAclNameGroupIndex Integer32
  h3cAclNameGroupCreateName STRING
  h3cAclNameGroupTypes INTEGER
  h3cAclNameGroupMatchOrder INTEGER
  h3cAclNameGroupSubitemNum Integer32
  h3cAclNameGroupRowStatus RowStatus

H3cAclBasicRuleEntry  
SEQUENCE    
  h3cAclBasicAclNum Integer32
  h3cAclBasicSubitem Integer32
  h3cAclBasicAct INTEGER
  h3cAclBasicSrcIp IpAddress
  h3cAclBasicSrcWild IpAddress
  h3cAclBasicTimeRangeName STRING
  h3cAclBasicFragments TruthValue
  h3cAclBasicLog TruthValue
  h3cAclBasicEnable TruthValue
  h3cAclBasicCount Counter32
  h3cAclBasicCountClear INTEGER
  h3cAclBasicRowStatus RowStatus

H3cAclAdvancedRuleEntry  
SEQUENCE    
  h3cAclAdvancedAclNum Integer32
  h3cAclAdvancedSubitem Integer32
  h3cAclAdvancedAct INTEGER
  h3cAclAdvancedProtocol Integer32
  h3cAclAdvancedSrcIp IpAddress
  h3cAclAdvancedSrcWild IpAddress
  h3cAclAdvancedSrcOp INTEGER
  h3cAclAdvancedSrcPort1 Integer32
  h3cAclAdvancedSrcPort2 Integer32
  h3cAclAdvancedDestIp IpAddress
  h3cAclAdvancedDestWild IpAddress
  h3cAclAdvancedDestOp INTEGER
  h3cAclAdvancedDestPort1 Integer32
  h3cAclAdvancedDestPort2 Integer32
  h3cAclAdvancedPrecedence Integer32
  h3cAclAdvancedTos Integer32
  h3cAclAdvancedDscp Integer32
  h3cAclAdvancedEstablish TruthValue
  h3cAclAdvancedTimeRangeName STRING
  h3cAclAdvancedIcmpType Integer32
  h3cAclAdvancedIcmpCode Integer32
  h3cAclAdvancedFragments TruthValue
  h3cAclAdvancedLog TruthValue
  h3cAclAdvancedEnable TruthValue
  h3cAclAdvancedCount Counter32
  h3cAclAdvancedCountClear INTEGER
  h3cAclAdvancedRowStatus RowStatus

H3cAclIfRuleEntry  
SEQUENCE    
  h3cAclIfAclNum Integer32
  h3cAclIfSubitem Integer32
  h3cAclIfAct INTEGER
  h3cAclIfIndex Integer32
  h3cAclIfAny TruthValue
  h3cAclIfTimeRangeName STRING
  h3cAclIfLog TruthValue
  h3cAclIfEnable TruthValue
  h3cAclIfCount Counter32
  h3cAclIfCountClear INTEGER
  h3cAclIfRowStatus RowStatus

H3cAclLinkEntry  
SEQUENCE    
  h3cAclLinkAclNum Integer32
  h3cAclLinkSubitem Integer32
  h3cAclLinkAct INTEGER
  h3cAclLinkProtocol INTEGER
  h3cAclLinkFormatType INTEGER
  h3cAclLinkVlanTag INTEGER
  h3cAclLinkVlanPri Integer32
  h3cAclLinkSrcVlanId Integer32
  h3cAclLinkSrcMac MacAddress
  h3cAclLinkSrcMacWild MacAddress
  h3cAclLinkSrcIfIndex Integer32
  h3cAclLinkSrcAny TruthValue
  h3cAclLinkDestVlanId Integer32
  h3cAclLinkDestMac MacAddress
  h3cAclLinkDestMacWild MacAddress
  h3cAclLinkDestIfIndex Integer32
  h3cAclLinkDestAny TruthValue
  h3cAclLinkTimeRangeName STRING
  h3cAclLinkEnable TruthValue
  h3cAclLinkRowStatus RowStatus
  h3cAclLinkTypeCode STRING
  h3cAclLinkTypeMask STRING
  h3cAclLinkLsapCode STRING
  h3cAclLinkLsapMask STRING
  h3cAclLinkL2LabelRangeOp INTEGER
  h3cAclLinkL2LabelRangeBegin Integer32
  h3cAclLinkL2LabelRangeEnd Integer32
  h3cAclLinkMplsExp Integer32

H3cAclUserEntry  
SEQUENCE    
  h3cAclUserAclNum Integer32
  h3cAclUserSubitem Integer32
  h3cAclUserAct INTEGER
  h3cAclUserFormatType INTEGER
  h3cAclUserVlanTag INTEGER
  h3cAclUserRuleStr STRING
  h3cAclUserRuleMask STRING
  h3cAclUserTimeRangeName STRING
  h3cAclUserEnable TruthValue
  h3cAclUserRowStatus RowStatus

H3cAclActiveEntry  
SEQUENCE    
  h3cAclActiveAclIndex Integer32
  h3cAclActiveIfIndex Integer32
  h3cAclActiveVlanID Integer32
  h3cAclActiveDirection INTEGER
  h3cAclActiveUserAclNum Integer32
  h3cAclActiveUserAclSubitem Integer32
  h3cAclActiveIpAclNum Integer32
  h3cAclActiveIpAclSubitem Integer32
  h3cAclActiveLinkAclNum Integer32
  h3cAclActiveLinkAclSubitem Integer32
  h3cAclActiveRuntime TruthValue
  h3cAclActiveRowStatus RowStatus

H3cAclIDSEntry  
SEQUENCE    
  h3cAclIDSName STRING
  h3cAclIDSSrcMac MacAddress
  h3cAclIDSDestMac MacAddress
  h3cAclIDSSrcIp IpAddress
  h3cAclIDSSrcWild IpAddress
  h3cAclIDSDestIp IpAddress
  h3cAclIDSDestWild IpAddress
  h3cAclIDSSrcPort Integer32
  h3cAclIDSDestPort Integer32
  h3cAclIDSProtocol Integer32
  h3cAclIDSDenyTime Unsigned32
  h3cAclIDSAct INTEGER
  h3cAclIDSRowStatus RowStatus

H3cAclMib2CapabilityEntry  
SEQUENCE    
  h3cAclMib2EntityType INTEGER
  h3cAclMib2EntityIndex Integer32
  h3cAclMib2ModuleIndex INTEGER
  h3cAclMib2CharacteristicsIndex Integer32
  h3cAclMib2CharacteristicsDesc STRING
  h3cAclMib2CharacteristicsValue Unsigned32

H3cAclNumberGroupEntry  
SEQUENCE    
  h3cAclNumberGroupType INTEGER
  h3cAclNumberGroupIndex Integer32
  h3cAclNumberGroupRowStatus RowStatus
  h3cAclNumberGroupMatchOrder INTEGER
  h3cAclNumberGroupStep Integer32
  h3cAclNumberGroupDescription STRING
  h3cAclNumberGroupCountClear CounterClear
  h3cAclNumberGroupRuleCounter Counter32
  h3cAclNumberGroupName STRING

H3cAclIPAclBasicEntry  
SEQUENCE    
  h3cAclIPAclBasicRuleIndex Integer32
  h3cAclIPAclBasicRowStatus RowStatus
  h3cAclIPAclBasicAct RuleAction
  h3cAclIPAclBasicSrcAddrType InetAddressType
  h3cAclIPAclBasicSrcAddr InetAddress
  h3cAclIPAclBasicSrcPrefix InetAddressPrefixLength
  h3cAclIPAclBasicSrcAny TruthValue
  h3cAclIPAclBasicSrcWild IpAddress
  h3cAclIPAclBasicTimeRangeName STRING
  h3cAclIPAclBasicFragmentFlag FragmentFlag
  h3cAclIPAclBasicLog TruthValue
  h3cAclIPAclBasicCount Unsigned32
  h3cAclIPAclBasicCountClear CounterClear
  h3cAclIPAclBasicEnable TruthValue
  h3cAclIPAclBasicVpnInstanceName STRING
  h3cAclIPAclBasicComment STRING
  h3cAclIPAclBasicCounting TruthValue
  h3cAclIPAclBasicRouteTypeAny TruthValue
  h3cAclIPAclBasicRouteTypeValue Integer32

H3cAclIPAclAdvancedEntry  
SEQUENCE    
  h3cAclIPAclAdvancedRuleIndex Integer32
  h3cAclIPAclAdvancedRowStatus RowStatus
  h3cAclIPAclAdvancedAct RuleAction
  h3cAclIPAclAdvancedProtocol Integer32
  h3cAclIPAclAdvancedAddrFlag AddressFlag
  h3cAclIPAclAdvancedSrcAddrType InetAddressType
  h3cAclIPAclAdvancedSrcAddr InetAddress
  h3cAclIPAclAdvancedSrcPrefix InetAddressPrefixLength
  h3cAclIPAclAdvancedSrcAny TruthValue
  h3cAclIPAclAdvancedSrcWild IpAddress
  h3cAclIPAclAdvancedSrcOp PortOp
  h3cAclIPAclAdvancedSrcPort1 Integer32
  h3cAclIPAclAdvancedSrcPort2 Integer32
  h3cAclIPAclAdvancedDestAddrType InetAddressType
  h3cAclIPAclAdvancedDestAddr InetAddress
  h3cAclIPAclAdvancedDestPrefix InetAddressPrefixLength
  h3cAclIPAclAdvancedDestAny TruthValue
  h3cAclIPAclAdvancedDestWild IpAddress
  h3cAclIPAclAdvancedDestOp PortOp
  h3cAclIPAclAdvancedDestPort1 Integer32
  h3cAclIPAclAdvancedDestPort2 Integer32
  h3cAclIPAclAdvancedIcmpType Integer32
  h3cAclIPAclAdvancedIcmpCode Integer32
  h3cAclIPAclAdvancedPrecedence Integer32
  h3cAclIPAclAdvancedTos Integer32
  h3cAclIPAclAdvancedDscp DSCPValue
  h3cAclIPAclAdvancedTimeRangeName STRING
  h3cAclIPAclAdvancedTCPFlag TCPFlag
  h3cAclIPAclAdvancedFragmentFlag FragmentFlag
  h3cAclIPAclAdvancedLog TruthValue
  h3cAclIPAclAdvancedCount Unsigned32
  h3cAclIPAclAdvancedCountClear CounterClear
  h3cAclIPAclAdvancedEnable TruthValue
  h3cAclIPAclAdvancedVpnInstanceName STRING
  h3cAclIPAclAdvancedComment STRING
  h3cAclIPAclAdvancedReflective TruthValue
  h3cAclIPAclAdvancedCounting TruthValue
  h3cAclIPAclAdvancedTCPFlagMask BITS
  h3cAclIPAclAdvancedTCPFlagValue BITS
  h3cAclIPAclAdvancedRouteTypeAny TruthValue
  h3cAclIPAclAdvancedRouteTypeValue Integer32
  h3cAclIPAclAdvancedFlowLabel Unsigned32

H3cAclMACEntry  
SEQUENCE    
  h3cAclMACRuleIndex Integer32
  h3cAclMACRowStatus RowStatus
  h3cAclMACAct RuleAction
  h3cAclMACTypeCode STRING
  h3cAclMACTypeMask STRING
  h3cAclMACSrcMac MacAddress
  h3cAclMACSrcMacWild MacAddress
  h3cAclMACDestMac MacAddress
  h3cAclMACDestMacWild MacAddress
  h3cAclMACLsapCode STRING
  h3cAclMACLsapMask STRING
  h3cAclMACCos Integer32
  h3cAclMACTimeRangeName STRING
  h3cAclMACCount Unsigned32
  h3cAclMACCountClear CounterClear
  h3cAclMACEnable TruthValue
  h3cAclMACComment STRING
  h3cAclMACLog TruthValue
  h3cAclMACCounting TruthValue

H3cAclEnUserEntry  
SEQUENCE    
  h3cAclEnUserRuleIndex Integer32
  h3cAclEnUserRowStatus RowStatus
  h3cAclEnUserAct RuleAction
  h3cAclEnUserStartString STRING
  h3cAclEnUserL2String STRING
  h3cAclEnUserMplsString STRING
  h3cAclEnUserIPv4String STRING
  h3cAclEnUserIPv6String STRING
  h3cAclEnUserL4String STRING
  h3cAclEnUserL5String STRING
  h3cAclEnUserTimeRangeName STRING
  h3cAclEnUserCount Unsigned32
  h3cAclEnUserCountClear CounterClear
  h3cAclEnUserEnable TruthValue
  h3cAclEnUserComment STRING
  h3cAclEnUserLog TruthValue
  h3cAclEnUserCounting TruthValue

H3cAclResourceUsageEntry  
SEQUENCE    
  h3cAclResourceChassis Unsigned32
  h3cAclResourceSlot Unsigned32
  h3cAclResourceChip Unsigned32
  h3cAclResourceType Integer32
  h3cAclPortRange STRING
  h3cAclResourceTotal Unsigned32
  h3cAclResourceReserved Unsigned32
  h3cAclResourceConfigured Unsigned32
  h3cAclResourceUsagePercent Unsigned32
  h3cAclResourceTypeDescription STRING

H3cPfilterApplyEntry  
SEQUENCE    
  h3cPfilterApplyObjType INTEGER
  h3cPfilterApplyObjIndex Integer32
  h3cPfilterApplyDirection DirectionType
  h3cPfilterApplyAclType INTEGER
  h3cPfilterApplyAclIndex Integer32
  h3cPfilterApplyHardCount TruthValue
  h3cPfilterApplySequence Unsigned32
  h3cPfilterApplyCountClear CounterClear
  h3cPfilterApplyRowStatus RowStatus

H3cPfilterAclGroupRunInfoEntry  
SEQUENCE    
  h3cPfilterAclGroupStatus INTEGER
  h3cPfilterAclGroupCountStatus INTEGER
  h3cPfilterAclGroupPermitPkts Counter64
  h3cPfilterAclGroupPermitBytes Counter64
  h3cPfilterAclGroupDenyPkts Counter64
  h3cPfilterAclGroupDenyBytes Counter64

H3cPfilterAclRuleRunInfoEntry  
SEQUENCE    
  h3cPfilterAclRuleIndex Integer32
  h3cPfilterAclRuleStatus INTEGER
  h3cPfilterAclRuleCountStatus INTEGER
  h3cPfilterAclRuleMatchPackets Counter64
  h3cPfilterAclRuleMatchBytes Counter64

H3cPfilterStatisticSumEntry  
SEQUENCE    
  h3cPfilterSumDirection DirectionType
  h3cPfilterSumAclType INTEGER
  h3cPfilterSumAclIndex Integer32
  h3cPfilterSumRuleIndex Integer32
  h3cPfilterSumRuleMatchPackets Counter64
  h3cPfilterSumRuleMatchBytes Counter64

Defined Values

h3cAcl 1.3.6.1.4.1.2011.10.2.8
ACL management information base for managing devices that support access control list and packet filtering.
MODULE-IDENTITY    

h3cAclMibObjects 1.3.6.1.4.1.2011.10.2.8.1
OBJECT IDENTIFIER    

h3cAclMode 1.3.6.1.4.1.2011.10.2.8.1.1
Access-list mode.
OBJECT-TYPE    
  INTEGER linkBased(1), ipBased(2)  

h3cAclNumGroupTable 1.3.6.1.4.1.2011.10.2.8.1.2
Configure the match-order of number-acl group.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclNumGroupEntry

h3cAclNumGroupEntry 1.3.6.1.4.1.2011.10.2.8.1.2.1
Define the index of h3cAclNumGroupTable.
OBJECT-TYPE    
  H3cAclNumGroupEntry  

h3cAclNumGroupAclNum 1.3.6.1.4.1.2011.10.2.8.1.2.1.1
The index of number-acl group Interface type:1000..1999 Basic type:2000..2999 Advance type:3000..3999 Link type:4000..4999 User type:5000..5999
OBJECT-TYPE    
  Integer32 1000..5999  

h3cAclNumGroupMatchOrder 1.3.6.1.4.1.2011.10.2.8.1.2.1.2
The match-order of number-acl group.
OBJECT-TYPE    
  INTEGER config(1), auto(2)  

h3cAclNumGroupSubitemNum 1.3.6.1.4.1.2011.10.2.8.1.2.1.3
The number of number-acl group's node.
OBJECT-TYPE    
  Integer32  

h3cAclNumGroupDescription 1.3.6.1.4.1.2011.10.2.8.1.2.1.4
The description of this acl group.
OBJECT-TYPE    
  STRING Size(0..127)  

h3cAclNumGroupCountClear 1.3.6.1.4.1.2011.10.2.8.1.2.1.5
Reset the value of rules' counter, which belong to this group.
OBJECT-TYPE    
  INTEGER cleared(1), nouse(2)  

h3cAclNumGroupRowStatus 1.3.6.1.4.1.2011.10.2.8.1.2.1.6
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclNameGroupTable 1.3.6.1.4.1.2011.10.2.8.1.3
Create acl-group that identified by name.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclNameGroupEntry

h3cAclNameGroupEntry 1.3.6.1.4.1.2011.10.2.8.1.3.1
Define the index of h3cAclNameGroupTable.
OBJECT-TYPE    
  H3cAclNameGroupEntry  

h3cAclNameGroupIndex 1.3.6.1.4.1.2011.10.2.8.1.3.1.1
The index of name-acl group.
OBJECT-TYPE    
  Integer32 10000..12999  

h3cAclNameGroupCreateName 1.3.6.1.4.1.2011.10.2.8.1.3.1.2
The name of name-acl group.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclNameGroupTypes 1.3.6.1.4.1.2011.10.2.8.1.3.1.3
The type of name-acl group.
OBJECT-TYPE    
  INTEGER basic(1), advanced(2), ifBased(3), link(4), user(5)  

h3cAclNameGroupMatchOrder 1.3.6.1.4.1.2011.10.2.8.1.3.1.4
The match-order of name-acl group.
OBJECT-TYPE    
  INTEGER config(1), auto(2)  

h3cAclNameGroupSubitemNum 1.3.6.1.4.1.2011.10.2.8.1.3.1.5
The number of name-acl group's node.
OBJECT-TYPE    
  Integer32 0..128  

h3cAclNameGroupRowStatus 1.3.6.1.4.1.2011.10.2.8.1.3.1.6
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclBasicRuleTable 1.3.6.1.4.1.2011.10.2.8.1.4
Configure the rule for basic acl group.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclBasicRuleEntry

h3cAclBasicRuleEntry 1.3.6.1.4.1.2011.10.2.8.1.4.1
Define the index of h3cAclBasicRuleTable.
OBJECT-TYPE    
  H3cAclBasicRuleEntry  

h3cAclBasicAclNum 1.3.6.1.4.1.2011.10.2.8.1.4.1.1
The index of basic acl group.
OBJECT-TYPE    
  Integer32 0 | 2000..2999 | 10000..12999  

h3cAclBasicSubitem 1.3.6.1.4.1.2011.10.2.8.1.4.1.2
The subindex of basic acl group.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclBasicAct 1.3.6.1.4.1.2011.10.2.8.1.4.1.3
The action of basic acl rule.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

h3cAclBasicSrcIp 1.3.6.1.4.1.2011.10.2.8.1.4.1.4
Source IP-address of basic acl rule.
OBJECT-TYPE    
  IpAddress  

h3cAclBasicSrcWild 1.3.6.1.4.1.2011.10.2.8.1.4.1.5
Source IP-address wild of basic acl rule.
OBJECT-TYPE    
  IpAddress  

h3cAclBasicTimeRangeName 1.3.6.1.4.1.2011.10.2.8.1.4.1.6
The Time-range of basic acl rule.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclBasicFragments 1.3.6.1.4.1.2011.10.2.8.1.4.1.7
The flag of matching fragmented packet.
OBJECT-TYPE    
  TruthValue  

h3cAclBasicLog 1.3.6.1.4.1.2011.10.2.8.1.4.1.8
The flag of log.
OBJECT-TYPE    
  TruthValue  

h3cAclBasicEnable 1.3.6.1.4.1.2011.10.2.8.1.4.1.9
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclBasicCount 1.3.6.1.4.1.2011.10.2.8.1.4.1.10
The count of matched by basic rule.
OBJECT-TYPE    
  Counter32  

h3cAclBasicCountClear 1.3.6.1.4.1.2011.10.2.8.1.4.1.11
Reset the value of counter.
OBJECT-TYPE    
  INTEGER cleared(1), nouse(2)  

h3cAclBasicRowStatus 1.3.6.1.4.1.2011.10.2.8.1.4.1.12
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclAdvancedRuleTable 1.3.6.1.4.1.2011.10.2.8.1.5
Configure the rule for advanced acl group.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclAdvancedRuleEntry

h3cAclAdvancedRuleEntry 1.3.6.1.4.1.2011.10.2.8.1.5.1
Define the index of h3cAclAdvancedRuleTable.
OBJECT-TYPE    
  H3cAclAdvancedRuleEntry  

h3cAclAdvancedAclNum 1.3.6.1.4.1.2011.10.2.8.1.5.1.1
The index of advanced acl group.
OBJECT-TYPE    
  Integer32 0 | 3000..3999 | 10000..12999  

h3cAclAdvancedSubitem 1.3.6.1.4.1.2011.10.2.8.1.5.1.2
The subindex of advanced acl group.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclAdvancedAct 1.3.6.1.4.1.2011.10.2.8.1.5.1.3
The action of Advance acl rule.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

h3cAclAdvancedProtocol 1.3.6.1.4.1.2011.10.2.8.1.5.1.4
The protocol-type of advanced acl group. <1-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
OBJECT-TYPE    
  Integer32 0..255  

h3cAclAdvancedSrcIp 1.3.6.1.4.1.2011.10.2.8.1.5.1.5
Source IP-address of advanced acl group.
OBJECT-TYPE    
  IpAddress  

h3cAclAdvancedSrcWild 1.3.6.1.4.1.2011.10.2.8.1.5.1.6
Source IP-address wild of advanced acl group.
OBJECT-TYPE    
  IpAddress  

h3cAclAdvancedSrcOp 1.3.6.1.4.1.2011.10.2.8.1.5.1.7
The source IP-address's operator of advanced acl group.
OBJECT-TYPE    
  INTEGER invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)  

h3cAclAdvancedSrcPort1 1.3.6.1.4.1.2011.10.2.8.1.5.1.8
The fourth layer source port1.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclAdvancedSrcPort2 1.3.6.1.4.1.2011.10.2.8.1.5.1.9
The fourth layer source port2.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclAdvancedDestIp 1.3.6.1.4.1.2011.10.2.8.1.5.1.10
Destination IP-address of advanced acl group.
OBJECT-TYPE    
  IpAddress  

h3cAclAdvancedDestWild 1.3.6.1.4.1.2011.10.2.8.1.5.1.11
Destination IP-address wild of advanced acl group.
OBJECT-TYPE    
  IpAddress  

h3cAclAdvancedDestOp 1.3.6.1.4.1.2011.10.2.8.1.5.1.12
The destination IP-address's operator of advanced acl group.
OBJECT-TYPE    
  INTEGER invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)  

h3cAclAdvancedDestPort1 1.3.6.1.4.1.2011.10.2.8.1.5.1.13
The fourth layer destination port1.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclAdvancedDestPort2 1.3.6.1.4.1.2011.10.2.8.1.5.1.14
The fourth layer destination port2.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclAdvancedPrecedence 1.3.6.1.4.1.2011.10.2.8.1.5.1.15
The value of IP-packet's precedence. <0-7> Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7)
OBJECT-TYPE    
  Integer32 0..7 | 255  

h3cAclAdvancedTos 1.3.6.1.4.1.2011.10.2.8.1.5.1.16
The value of IP-packet's TOS. <0-15> Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0)
OBJECT-TYPE    
  Integer32 0..15 | 255  

h3cAclAdvancedDscp 1.3.6.1.4.1.2011.10.2.8.1.5.1.17
The value of DSCP. <0-63> Value of DSCP af11 Specify Assured Forwarding 11 service(10) af12 Specify Assured Forwarding 12 service(12) af13 Specify Assured Forwarding 13 service(14) af21 Specify Assured Forwarding 21 service(18) af22 Specify Assured Forwarding 22 service(20) af23 Specify Assured Forwarding 23 service(22) af31 Specify Assured Forwarding 31 service(26) af32 Specify Assured Forwarding 32 service(28) af33 Specify Assured Forwarding 33 service(30) af41 Specify Assured Forwarding 41 service(34) af42 Specify Assured Forwarding 42 service(36) af43 Specify Assured Forwarding 43 service(38) be Specify Best Effort service(0) cs1 Specify Class Selector 1 service(8) cs2 Specify Class Selector 2 service(16) cs3 Specify Class Selector 3 service(24) cs4 Specify Class Selector 4 service(32) cs5 Specify Class Selector 5 service(40) cs6 Specify Class Selector 6 service(48) cs7 Specify Class Selector 7 service(56) ef Specify Expedited Forwarding service(46)
OBJECT-TYPE    
  Integer32 0..63 | 255  

h3cAclAdvancedEstablish 1.3.6.1.4.1.2011.10.2.8.1.5.1.18
Establish flag.
OBJECT-TYPE    
  TruthValue  

h3cAclAdvancedTimeRangeName 1.3.6.1.4.1.2011.10.2.8.1.5.1.19
The Time-range of advanced acl rule.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclAdvancedIcmpType 1.3.6.1.4.1.2011.10.2.8.1.5.1.20
The type of ICMP packet. Integer32 ICMP type echo Type=8, Code=0 echo-reply Type=0, Code=0 fragmentneed-DFset Type=3, Code=4 host-redirect Type=5, Code=1 host-tos-redirect Type=5, Code=3 host-unreachable Type=3, Code=1 information-reply Type=16, Code=0 information-request Type=15, Code=0 net-redirect Type=5, Code=0 net-tos-redirect Type=5, Code=2 net-unreachable Type=3, Code=0 parameter-problem Type=12, Code=0 port-unreachable Type=3, Code=3 protocol-unreachable Type=3, Code=2 reassembly-timeout Type=11, Code=1 source-quench Type=4, Code=0 source-route-failed Type=3, Code=5 timestamp-reply Type=14, Code=0 timestamp-request Type=13, Code=0 ttl-exceeded Type=11, Code=0
OBJECT-TYPE    
  Integer32 0..255 | 65535  

h3cAclAdvancedIcmpCode 1.3.6.1.4.1.2011.10.2.8.1.5.1.21
The code of ICMP packet.
OBJECT-TYPE    
  Integer32 0..255 | 65535  

h3cAclAdvancedFragments 1.3.6.1.4.1.2011.10.2.8.1.5.1.22
The flag of matching fragmented packet.
OBJECT-TYPE    
  TruthValue  

h3cAclAdvancedLog 1.3.6.1.4.1.2011.10.2.8.1.5.1.23
The flag of log.
OBJECT-TYPE    
  TruthValue  

h3cAclAdvancedEnable 1.3.6.1.4.1.2011.10.2.8.1.5.1.24
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclAdvancedCount 1.3.6.1.4.1.2011.10.2.8.1.5.1.25
The count of matched by advanced rule.
OBJECT-TYPE    
  Counter32  

h3cAclAdvancedCountClear 1.3.6.1.4.1.2011.10.2.8.1.5.1.26
Reset the value of counter.
OBJECT-TYPE    
  INTEGER cleared(1), nouse(2)  

h3cAclAdvancedRowStatus 1.3.6.1.4.1.2011.10.2.8.1.5.1.27
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclIfRuleTable 1.3.6.1.4.1.2011.10.2.8.1.6
Configure the rule for interface-based acl group.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclIfRuleEntry

h3cAclIfRuleEntry 1.3.6.1.4.1.2011.10.2.8.1.6.1
Define the index of h3cAclIfRuleTable.
OBJECT-TYPE    
  H3cAclIfRuleEntry  

h3cAclIfAclNum 1.3.6.1.4.1.2011.10.2.8.1.6.1.1
The index of interface-based acl group.
OBJECT-TYPE    
  Integer32 0 | 1000..1999 | 10000..12999  

h3cAclIfSubitem 1.3.6.1.4.1.2011.10.2.8.1.6.1.2
The subindex of interface-based acl group.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclIfAct 1.3.6.1.4.1.2011.10.2.8.1.6.1.3
The action of interface-based acl group.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

h3cAclIfIndex 1.3.6.1.4.1.2011.10.2.8.1.6.1.4
The index of interface.
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAclIfAny 1.3.6.1.4.1.2011.10.2.8.1.6.1.5
The flag of matching any interface.
OBJECT-TYPE    
  TruthValue  

h3cAclIfTimeRangeName 1.3.6.1.4.1.2011.10.2.8.1.6.1.6
The Time-range of interface-based acl rule.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclIfLog 1.3.6.1.4.1.2011.10.2.8.1.6.1.7
The flag of log.
OBJECT-TYPE    
  TruthValue  

h3cAclIfEnable 1.3.6.1.4.1.2011.10.2.8.1.6.1.8
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclIfCount 1.3.6.1.4.1.2011.10.2.8.1.6.1.9
The count of matched by basic rule.
OBJECT-TYPE    
  Counter32  

h3cAclIfCountClear 1.3.6.1.4.1.2011.10.2.8.1.6.1.10
Reset the value of the rule's counter.
OBJECT-TYPE    
  INTEGER cleared(1), nouse(2)  

h3cAclIfRowStatus 1.3.6.1.4.1.2011.10.2.8.1.6.1.11
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclLinkTable 1.3.6.1.4.1.2011.10.2.8.1.7
Create link acl.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclLinkEntry

h3cAclLinkEntry 1.3.6.1.4.1.2011.10.2.8.1.7.1
The entry of the link acl table.
OBJECT-TYPE    
  H3cAclLinkEntry  

h3cAclLinkAclNum 1.3.6.1.4.1.2011.10.2.8.1.7.1.1
The index of link-based acl group.
OBJECT-TYPE    
  Integer32 0 | 4000..4999 | 10000..12999  

h3cAclLinkSubitem 1.3.6.1.4.1.2011.10.2.8.1.7.1.2
The subindex of link-based acl group.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclLinkAct 1.3.6.1.4.1.2011.10.2.8.1.7.1.3
The action of link-based acl group.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

h3cAclLinkProtocol 1.3.6.1.4.1.2011.10.2.8.1.7.1.4
The layer 2 protocol-type of link acl rule.
OBJECT-TYPE    
  INTEGER invalid(0), ip(2048), arp(2054), rarp(32821), pppoeControl(34915), pppoeData(34916), mpls(34887)  

h3cAclLinkFormatType 1.3.6.1.4.1.2011.10.2.8.1.7.1.5
Format type of link acl rule.
OBJECT-TYPE    
  INTEGER invalid(0), ethernetII(1), snap(2), ieee802Dot3And2(3), ieee802Dot3(4)  

h3cAclLinkVlanTag 1.3.6.1.4.1.2011.10.2.8.1.7.1.6
The flag of vlan tag of link acl rule.
OBJECT-TYPE    
  INTEGER invalid(0), tagged(1), untagged(2)  

h3cAclLinkVlanPri 1.3.6.1.4.1.2011.10.2.8.1.7.1.7
Vlan priority of link acl rule.
OBJECT-TYPE    
  Integer32 0..7 | 255  

h3cAclLinkSrcVlanId 1.3.6.1.4.1.2011.10.2.8.1.7.1.8
Source vlan ID of link acl rule.
OBJECT-TYPE    
  Integer32 0..4094  

h3cAclLinkSrcMac 1.3.6.1.4.1.2011.10.2.8.1.7.1.9
Source mac of link acl rule.
OBJECT-TYPE    
  MacAddress  

h3cAclLinkSrcMacWild 1.3.6.1.4.1.2011.10.2.8.1.7.1.10
Source mac wildzard of link acl rule.
OBJECT-TYPE    
  MacAddress  

h3cAclLinkSrcIfIndex 1.3.6.1.4.1.2011.10.2.8.1.7.1.11
Source IfIndex of link acl rule.
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAclLinkSrcAny 1.3.6.1.4.1.2011.10.2.8.1.7.1.12
The flag of matching any source.
OBJECT-TYPE    
  TruthValue  

h3cAclLinkDestVlanId 1.3.6.1.4.1.2011.10.2.8.1.7.1.13
Destination vlan ID of link acl rule.
OBJECT-TYPE    
  Integer32 0..4094  

h3cAclLinkDestMac 1.3.6.1.4.1.2011.10.2.8.1.7.1.14
Destination mac of link acl rule.
OBJECT-TYPE    
  MacAddress  

h3cAclLinkDestMacWild 1.3.6.1.4.1.2011.10.2.8.1.7.1.15
Destination mac wildzard of link acl rule.
OBJECT-TYPE    
  MacAddress  

h3cAclLinkDestIfIndex 1.3.6.1.4.1.2011.10.2.8.1.7.1.16
Destination IfIndex of link acl rule.
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAclLinkDestAny 1.3.6.1.4.1.2011.10.2.8.1.7.1.17
The flag of matching any destination.
OBJECT-TYPE    
  TruthValue  

h3cAclLinkTimeRangeName 1.3.6.1.4.1.2011.10.2.8.1.7.1.18
The Time-range of link-based acl rule.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclLinkEnable 1.3.6.1.4.1.2011.10.2.8.1.7.1.19
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclLinkRowStatus 1.3.6.1.4.1.2011.10.2.8.1.7.1.20
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclLinkTypeCode 1.3.6.1.4.1.2011.10.2.8.1.7.1.21
The type of layer 2 protocol.0x0000...0xffff.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclLinkTypeMask 1.3.6.1.4.1.2011.10.2.8.1.7.1.22
The mask of layer 2 protocol.0x0000...0xffff.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclLinkLsapCode 1.3.6.1.4.1.2011.10.2.8.1.7.1.23
The type of LSAP.0x0000...0xffff.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclLinkLsapMask 1.3.6.1.4.1.2011.10.2.8.1.7.1.24
The mask of LSAP.0x0000...0xffff.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclLinkL2LabelRangeOp 1.3.6.1.4.1.2011.10.2.8.1.7.1.25
Operation symbol of the MPLS label. If the symbol is range(5), the objects h3cAclLinkL2LabelRangeBegin and h3cAclLinkL2LabelRangeEnd should have different values indicating a range. Otherwise, only h3cAclLinkL2LabelRangeBegin counts, object h3cAclLinkL2LabelRangeEnd is ignored. invalid(0) -- unavailable lt(1) -- less than eq(2) -- equal gt(3) -- great than neq(4) -- not equal range(5) -- a range with two ends included
OBJECT-TYPE    
  INTEGER invalid(0), lt(1), eq(2), gt(3), neq(4), range(5)  

h3cAclLinkL2LabelRangeBegin 1.3.6.1.4.1.2011.10.2.8.1.7.1.26
The beginning of VPLS VC label.
OBJECT-TYPE    
  Integer32  

h3cAclLinkL2LabelRangeEnd 1.3.6.1.4.1.2011.10.2.8.1.7.1.27
The end of VPLS VC label.
OBJECT-TYPE    
  Integer32  

h3cAclLinkMplsExp 1.3.6.1.4.1.2011.10.2.8.1.7.1.28
The value of MPLS-packet's Exp.
OBJECT-TYPE    
  Integer32  

h3cAclUserTable 1.3.6.1.4.1.2011.10.2.8.1.8
Create user acl.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclUserEntry

h3cAclUserEntry 1.3.6.1.4.1.2011.10.2.8.1.8.1
The entry of user acl table.
OBJECT-TYPE    
  H3cAclUserEntry  

h3cAclUserAclNum 1.3.6.1.4.1.2011.10.2.8.1.8.1.1
The number of the user acl.
OBJECT-TYPE    
  Integer32 0 | 5000..5999 | 10000..12999  

h3cAclUserSubitem 1.3.6.1.4.1.2011.10.2.8.1.8.1.2
The subitem of the user acl.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclUserAct 1.3.6.1.4.1.2011.10.2.8.1.8.1.3
The action of the user acl.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

h3cAclUserFormatType 1.3.6.1.4.1.2011.10.2.8.1.8.1.4
Format type.
OBJECT-TYPE    
  INTEGER invalid(0), ethernetII(1), snap(2), ieee802Dot2And3(3), ieee802Dot4(4)  

h3cAclUserVlanTag 1.3.6.1.4.1.2011.10.2.8.1.8.1.5
Vlan tag exits or not.
OBJECT-TYPE    
  INTEGER tagged(1), untagged(2), invalid(0)  

h3cAclUserRuleStr 1.3.6.1.4.1.2011.10.2.8.1.8.1.6
Rule string.
OBJECT-TYPE    
  STRING Size(1..80)  

h3cAclUserRuleMask 1.3.6.1.4.1.2011.10.2.8.1.8.1.7
Rule mask.
OBJECT-TYPE    
  STRING Size(1..80)  

h3cAclUserTimeRangeName 1.3.6.1.4.1.2011.10.2.8.1.8.1.8
The Time-range of the user defined acl.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclUserEnable 1.3.6.1.4.1.2011.10.2.8.1.8.1.9
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclUserRowStatus 1.3.6.1.4.1.2011.10.2.8.1.8.1.10
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclActiveTable 1.3.6.1.4.1.2011.10.2.8.1.9
Active acl.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclActiveEntry

h3cAclActiveEntry 1.3.6.1.4.1.2011.10.2.8.1.9.1
The entry of active acl table.
OBJECT-TYPE    
  H3cAclActiveEntry  

h3cAclActiveAclIndex 1.3.6.1.4.1.2011.10.2.8.1.9.1.1
Acl index.
OBJECT-TYPE    
  Integer32 0 | 1..5999 | 10000..12999  

h3cAclActiveIfIndex 1.3.6.1.4.1.2011.10.2.8.1.9.1.2
IfIndex.
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cAclActiveVlanID 1.3.6.1.4.1.2011.10.2.8.1.9.1.3
The lower 16 bits is Vlan ID, the higher 16 bits, if not zero, it describes the slot ID of the L3plus board.
OBJECT-TYPE    
  Integer32  

h3cAclActiveDirection 1.3.6.1.4.1.2011.10.2.8.1.9.1.4
Direction.
OBJECT-TYPE    
  INTEGER input(1), output(2), both(3), invalid(0)  

h3cAclActiveUserAclNum 1.3.6.1.4.1.2011.10.2.8.1.9.1.5
The number of the user acl.
OBJECT-TYPE    
  Integer32 0 | 5000..5999 | 10000..12999  

h3cAclActiveUserAclSubitem 1.3.6.1.4.1.2011.10.2.8.1.9.1.6
The subitem of the user acl.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclActiveIpAclNum 1.3.6.1.4.1.2011.10.2.8.1.9.1.7
The number of the IP acl.
OBJECT-TYPE    
  Integer32 0 | 2000..3999 | 10000..12999  

h3cAclActiveIpAclSubitem 1.3.6.1.4.1.2011.10.2.8.1.9.1.8
The subitem of the IP acl.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclActiveLinkAclNum 1.3.6.1.4.1.2011.10.2.8.1.9.1.9
The num of the link acl.
OBJECT-TYPE    
  Integer32 0 | 4000..4999 | 10000..12999  

h3cAclActiveLinkAclSubitem 1.3.6.1.4.1.2011.10.2.8.1.9.1.10
The subitem of the link acl.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclActiveRuntime 1.3.6.1.4.1.2011.10.2.8.1.9.1.11
Is run or not.
OBJECT-TYPE    
  TruthValue  

h3cAclActiveRowStatus 1.3.6.1.4.1.2011.10.2.8.1.9.1.12
RowStatus, now support three state: CreateAndGo, Active, Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclIDSTable 1.3.6.1.4.1.2011.10.2.8.1.10
Configure the rule for IDS.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclIDSEntry

h3cAclIDSEntry 1.3.6.1.4.1.2011.10.2.8.1.10.1
The entry of acl ids table.
OBJECT-TYPE    
  H3cAclIDSEntry  

h3cAclIDSName 1.3.6.1.4.1.2011.10.2.8.1.10.1.1
The name index of the IDS table.
OBJECT-TYPE    
  STRING Size(1..32)  

h3cAclIDSSrcMac 1.3.6.1.4.1.2011.10.2.8.1.10.1.2
Source mac of IDS acl rule.
OBJECT-TYPE    
  MacAddress  

h3cAclIDSDestMac 1.3.6.1.4.1.2011.10.2.8.1.10.1.3
Destination mac of IDS acl rule.
OBJECT-TYPE    
  MacAddress  

h3cAclIDSSrcIp 1.3.6.1.4.1.2011.10.2.8.1.10.1.4
Source IP-address of IDS acl rule.
OBJECT-TYPE    
  IpAddress  

h3cAclIDSSrcWild 1.3.6.1.4.1.2011.10.2.8.1.10.1.5
Source IP-address wild of IDS acl rule.
OBJECT-TYPE    
  IpAddress  

h3cAclIDSDestIp 1.3.6.1.4.1.2011.10.2.8.1.10.1.6
Destination IP-address of IDS acl rule.
OBJECT-TYPE    
  IpAddress  

h3cAclIDSDestWild 1.3.6.1.4.1.2011.10.2.8.1.10.1.7
Destination IP-address wild of IDS acl rule.
OBJECT-TYPE    
  IpAddress  

h3cAclIDSSrcPort 1.3.6.1.4.1.2011.10.2.8.1.10.1.8
The fourth layer source port.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclIDSDestPort 1.3.6.1.4.1.2011.10.2.8.1.10.1.9
The fourth layer destination port.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclIDSProtocol 1.3.6.1.4.1.2011.10.2.8.1.10.1.10
The protocol-type of advanced acl group. <1-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) igmp Internet Group Management Protocol(2) ip Any IP protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17)
OBJECT-TYPE    
  Integer32 0..255  

h3cAclIDSDenyTime 1.3.6.1.4.1.2011.10.2.8.1.10.1.11
The maximum number of seconds which deny for this acl rule.
OBJECT-TYPE    
  Unsigned32  

h3cAclIDSAct 1.3.6.1.4.1.2011.10.2.8.1.10.1.12
The action of IDS acl rule.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

h3cAclIDSRowStatus 1.3.6.1.4.1.2011.10.2.8.1.10.1.13
RowStatus, now supports three states: CreateAndGo, Active, and Destroy.
OBJECT-TYPE    
  RowStatus  

h3cAclMib2Objects 1.3.6.1.4.1.2011.10.2.8.2
OBJECT IDENTIFIER    

h3cAclMib2GlobalGroup 1.3.6.1.4.1.2011.10.2.8.2.1
OBJECT IDENTIFIER    

h3cAclMib2NodesGroup 1.3.6.1.4.1.2011.10.2.8.2.1.1
OBJECT IDENTIFIER    

h3cAclMib2Mode 1.3.6.1.4.1.2011.10.2.8.2.1.1.1
The applying mode of ACL.
OBJECT-TYPE    
  INTEGER linkBased(1), ipBased(2)  

h3cAclMib2Version 1.3.6.1.4.1.2011.10.2.8.2.1.1.2
The version of this file. The output value has the format of 'xx'or 'xxx'. For example: 10 means 1.0; 125 means 12.5.
OBJECT-TYPE    
  Integer32  

h3cAclMib2ObjectsCapabilities 1.3.6.1.4.1.2011.10.2.8.2.1.1.3
The objects of h3cAclMib2Objects.
OBJECT-TYPE    
  BITS h3cAclMib2Mode(0), h3cAclVersion(1), h3cAclMib2ObjectsCapabilities(2), h3cAclMib2CapabilityTable(3), h3cAclNumberGroupTable(4), h3cAclIPAclBasicTable(5), h3cAclIPAclAdvancedTable(6), h3cAclMACTable(7), h3cAclEnUserTable(8), h3cAclMib2ProcessingStatus(9)  

h3cAclMib2ProcessingStatus 1.3.6.1.4.1.2011.10.2.8.2.1.1.4
The processing status of ACL operation.
OBJECT-TYPE    
  INTEGER processing(1), done(2)  

h3cAclMib2CapabilityTable 1.3.6.1.4.1.2011.10.2.8.2.1.2
The capability of mib2.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclMib2CapabilityEntry

h3cAclMib2CapabilityEntry 3.1
The information of Capability of mib2.
OBJECT-TYPE    
  H3cAclMib2CapabilityEntry  

h3cAclMib2EntityType 3.1.1
The type of entity . system: The entity is systemic level. interface: The entity is interface level.
OBJECT-TYPE    
  INTEGER system(1), interface(2)  

h3cAclMib2EntityIndex 3.1.2
The index of entity. If h3cAclMib2EntityType is system, the value of this object is 0. If h3cAclMib2EntityType is interface, the value of this object is equal to 'ifIndex'.
OBJECT-TYPE    
  Integer32  

h3cAclMib2ModuleIndex 3.1.3
The module index of ACL.
OBJECT-TYPE    
  INTEGER layer3(1), layer2(2), userDefined(3)  

h3cAclMib2CharacteristicsIndex 3.1.4
The characteristics index of mib2. See DESCRIPTION of h3cAclMib2CharacteristicsValue to get detail information about the value of this object.
OBJECT-TYPE    
  Integer32  

h3cAclMib2CharacteristicsDesc 3.1.5
The description of characteristics.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclMib2CharacteristicsValue 3.1.6
The value of capability of this object. TypeOfRuleStringValue : notSupport(0) and the length of RuleString. TypeOfCodeValue : OnlyOneNotSupport(0), MoreThanOneNotSupport(1) If h3cAclMib2CharacteristicsValue is 'moreThanOneNotSupport', h3cAclMib2CharacteristicsDesc must be used to depict which protocols are not supported. The output value of h3cAclMib2CharacteristicsDesc has the format of 'a,b'. For example, 'ip,rarp'. layer3 Module: Index Characteristics value 1 SourceIPAddress notSupport(0) 2 DestinationIPAddress notSupport(0) 3 SourcePort notSupport(0) 4 DestinationPort notSupport(0) 5 IPPrecedence notSupport(0) 6 TOS notSupport(0) 7 DSCP notSupport(0) 8 TCPFlag notSupport(0) 9 FragmentFlag notSupport(0) 10 Log notSupport(0) 11 RuleMatchCounter notSupport(0) 12 ResetRuleMatchCounter notSupport(0) 13 VPN notSupport(0) 15 protocol notSupport(0) 16 AddressFlag notSupport(0) layer2 Module: Index Characteristics value 1 ProtocolType TypeOfCodeValue 2 SourceMAC notSupport(0) 3 DestinationMAC notSupport(0) 4 LSAPType TypeOfCodeValue 5 CoS notSupport(0) UserDefined Module: Index Characteristics value 1 UserDefaultOffset TypeOfRuleStringValue 2 UserL2RuleOffset TypeOfRuleStringValue 3 UserMplsOffset TypeOfRuleStringValue 4 UserIPv4Offset TypeOfRuleStringValue 5 UserIPv6Offset TypeOfRuleStringValue 6 UserL4Offset TypeOfRuleStringValue 7 UserL5Offset TypeOfRuleStringValue
OBJECT-TYPE    
  Unsigned32  

h3cAclNumberGroupTable 1.3.6.1.4.1.2011.10.2.8.2.1.3
A table of the number acl group information.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclNumberGroupEntry

h3cAclNumberGroupEntry 4.1
Number acl group information entry.
OBJECT-TYPE    
  H3cAclNumberGroupEntry  

h3cAclNumberGroupType 4.1.1
The type of number group. Basic ACL and Advanced ACL support ipv4 and ipv6. The range of Basic ACL is from 2000 to 2999. The range of Advanced ACL is from 3000 to 3999. Simple ACL supports ipv6 only. The range of Simple ACL is from 10000 to 42767. MAC ACL and User ACL support ipv4 only. The range of MAC ACL is from 4000 to 4999. The range of User ACL is from 5000 to 5999.
OBJECT-TYPE    
  INTEGER ipv4(1), ipv6(2)  

h3cAclNumberGroupIndex 4.1.2
The group index of number acl. Basic type:2000..2999 Advanced type:3000..3999 MAC type:4000..4999 User type:5000..5999 Simple type:10000..42767
OBJECT-TYPE    
  Integer32 2000..5999 | 10000..42767  

h3cAclNumberGroupRowStatus 4.1.3
RowStatus.
OBJECT-TYPE    
  RowStatus  

h3cAclNumberGroupMatchOrder 4.1.4
The match-order of number acl group.
OBJECT-TYPE    
  INTEGER config(1), auto(2)  

h3cAclNumberGroupStep 4.1.5
The step of rule index.
OBJECT-TYPE    
  Integer32 1..20  

h3cAclNumberGroupDescription 4.1.6
Description of this acl group.
OBJECT-TYPE    
  STRING Size(0..127)  

h3cAclNumberGroupCountClear 4.1.7
Reset the value of counters of this group.
OBJECT-TYPE    
  CounterClear  

h3cAclNumberGroupRuleCounter 4.1.8
The rule count of number acl group.
OBJECT-TYPE    
  Counter32  

h3cAclNumberGroupName 4.1.9
Name of this acl group.
OBJECT-TYPE    
  STRING Size(0..63)  

h3cAclIPAclGroup 1.3.6.1.4.1.2011.10.2.8.2.2
OBJECT IDENTIFIER    

h3cAclIPAclBasicTable 1.3.6.1.4.1.2011.10.2.8.2.2.2
A table of basic rule group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclIPAclBasicEntry

h3cAclIPAclBasicEntry 5.1
Basic rule group information.
OBJECT-TYPE    
  H3cAclIPAclBasicEntry  

h3cAclIPAclBasicRuleIndex 5.1.1
The rule index of basic acl group.
OBJECT-TYPE    
  Integer32 0..65534  

h3cAclIPAclBasicRowStatus 5.1.2
RowStatus.
OBJECT-TYPE    
  RowStatus  

h3cAclIPAclBasicAct 5.1.3
The action of basic acl rule.
OBJECT-TYPE    
  RuleAction  

h3cAclIPAclBasicSrcAddrType 5.1.4
The IP addresses type of IP pool.
OBJECT-TYPE    
  InetAddressType  

h3cAclIPAclBasicSrcAddr 5.1.5
The value of a local IP address is available for this association. The type of this address is determined by the value of h3cAclIPAclBasicSrcAddrType.
OBJECT-TYPE    
  InetAddress  

h3cAclIPAclBasicSrcPrefix 5.1.6
Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
OBJECT-TYPE    
  InetAddressPrefixLength  

h3cAclIPAclBasicSrcAny 5.1.7
The flag of matching any IP address.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclBasicSrcWild 5.1.8
Source IPv4 address wild. Only IPv4 Basic Rule support this object. Default value is '0.0.0.0'.
OBJECT-TYPE    
  IpAddress  

h3cAclIPAclBasicTimeRangeName 5.1.9
The Time-range of basic acl rule. Default value is null.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclIPAclBasicFragmentFlag 5.1.10
The flag of matching fragmented packets.
OBJECT-TYPE    
  FragmentFlag  

h3cAclIPAclBasicLog 5.1.11
The packet will be logged when it matches the rule.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclBasicCount 5.1.12
The count of matched by the rule.
OBJECT-TYPE    
  Unsigned32  

h3cAclIPAclBasicCountClear 5.1.13
Reset the value of counter.
OBJECT-TYPE    
  CounterClear  

h3cAclIPAclBasicEnable 5.1.14
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclBasicVpnInstanceName 5.1.15
The VPN name, which the rule will be applied. Default value is null.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclIPAclBasicComment 5.1.16
The description of ACL rule. Default value is Zero-length String.
OBJECT-TYPE    
  STRING Size(0..127)  

h3cAclIPAclBasicCounting 5.1.17
The packet will be counted when it matches the rule. It is disabled by default.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclBasicRouteTypeAny 5.1.18
The flag of matching any type of routing header of IPv6 packet.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclBasicRouteTypeValue 5.1.19
Match specify type of routing header of IPv6 packet.
OBJECT-TYPE    
  Integer32 0..255 | 65535  

h3cAclIPAclAdvancedTable 1.3.6.1.4.1.2011.10.2.8.2.2.3
A table of advanced and simple acl group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclIPAclAdvancedEntry

h3cAclIPAclAdvancedEntry 6.1
Advanced acl group information.
OBJECT-TYPE    
  H3cAclIPAclAdvancedEntry  

h3cAclIPAclAdvancedRuleIndex 6.1.1
The rule index of advanced acl group. As a Simple ACL group, the value of this object must be 0. As an Advanced ACL group, the value of this object is ranging from 0 to 65534.
OBJECT-TYPE    
  Integer32 0..65534  

h3cAclIPAclAdvancedRowStatus 6.1.2
RowStatus.
OBJECT-TYPE    
  RowStatus  

h3cAclIPAclAdvancedAct 6.1.3
The action of advanced acl rule.
OBJECT-TYPE    
  RuleAction  

h3cAclIPAclAdvancedProtocol 6.1.4
The protocol-type of advanced acl group. <1-255> Protocol number gre GRE tunneling(47) icmp Internet Control Message Protocol(1) icmpv6 Internet Control Message Protocol6(58) igmp Internet Group Management Protocol(2) ip Any IPv4 protocol ipv6 Any IPv6 protocol ipinip IP in IP tunneling(4) ospf OSPF routing protocol(89) tcp Transmission Control Protocol (6) udp User Datagram Protocol (17) ipv6-ah IPv6 Authentication Header(51) ipv6-esp IPv6 Encapsulating Security Payload(50)
OBJECT-TYPE    
  Integer32 0..255  

h3cAclIPAclAdvancedAddrFlag 6.1.5
Address flag to select address.
OBJECT-TYPE    
  AddressFlag  

h3cAclIPAclAdvancedSrcAddrType 6.1.6
The IP addresses type of IP pool.
OBJECT-TYPE    
  InetAddressType  

h3cAclIPAclAdvancedSrcAddr 6.1.7
The value of a local IP address available for this association. The type of this address is determined by the value of h3cAclIPAclAdvancedSrcAddrType.
OBJECT-TYPE    
  InetAddress  

h3cAclIPAclAdvancedSrcPrefix 6.1.8
Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
OBJECT-TYPE    
  InetAddressPrefixLength  

h3cAclIPAclAdvancedSrcAny 6.1.9
The flag of matching any IP address.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclAdvancedSrcWild 6.1.10
Source IPv4 address wild. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'.
OBJECT-TYPE    
  IpAddress  

h3cAclIPAclAdvancedSrcOp 6.1.11
Source port operation symbol of advanced acl group.
OBJECT-TYPE    
  PortOp  

h3cAclIPAclAdvancedSrcPort1 6.1.12
The fourth layer source port1.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclIPAclAdvancedSrcPort2 6.1.13
The fourth layer source port2.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclIPAclAdvancedDestAddrType 6.1.14
The IP addresses type of IP pool.
OBJECT-TYPE    
  InetAddressType  

h3cAclIPAclAdvancedDestAddr 6.1.15
The value of a local IP address available for this association. The type of this address is determined by the value of h3cAclIPAclAdvancedDestAddrType.
OBJECT-TYPE    
  InetAddress  

h3cAclIPAclAdvancedDestPrefix 6.1.16
Denotes the length of a generic Internet network address prefix. A value of n corresponds to an IP address mask which has n contiguous 1-bits from the most significant bit (MSB) and all other bits set to 0.
OBJECT-TYPE    
  InetAddressPrefixLength  

h3cAclIPAclAdvancedDestAny 6.1.17
The flag of matching any IP address.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclAdvancedDestWild 6.1.18
Destination IPv4 address wild. Only IPv4 Advanced Rule supports this object. Default value is '0.0.0.0'.
OBJECT-TYPE    
  IpAddress  

h3cAclIPAclAdvancedDestOp 6.1.19
Destination port operation symbol of advanced acl group.
OBJECT-TYPE    
  PortOp  

h3cAclIPAclAdvancedDestPort1 6.1.20
The fourth layer destination port1.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclIPAclAdvancedDestPort2 6.1.21
The fourth layer destination port2.
OBJECT-TYPE    
  Integer32 0..65535  

h3cAclIPAclAdvancedIcmpType 6.1.22
The type of ICMP packet.
OBJECT-TYPE    
  Integer32 0..255 | 65535  

h3cAclIPAclAdvancedIcmpCode 6.1.23
The code of ICMP packet.
OBJECT-TYPE    
  Integer32 0..255 | 65535  

h3cAclIPAclAdvancedPrecedence 6.1.24
The value of IP-packet's precedence. <0-7> Value of precedence routine Specify routine precedence(0) priority Specify priority precedence(1) immediate Specify immediate precedence(2) flash Specify flash precedence(3) flash-override Specify flash-override precedence(4) critical Specify critical precedence(5) internet Specify internetwork control precedence(6) network Specify network control precedence(7)
OBJECT-TYPE    
  Integer32 0..7 | 255  

h3cAclIPAclAdvancedTos 6.1.25
The value of IP-packet's TOS. <0-15> Value of TOS(type of service) max-reliability Match packets with max reliable TOS(2) max-throughput Match packets with max throughput TOS(4) min-delay Match packets with min delay TOS(8) min-monetary-cost Match packets with min monetary cost TOS(1) normal Match packets with normal TOS(0)
OBJECT-TYPE    
  Integer32 0..15 | 255  

h3cAclIPAclAdvancedDscp 6.1.26
The value of DSCP of IP packet.
OBJECT-TYPE    
  DSCPValue  

h3cAclIPAclAdvancedTimeRangeName 6.1.27
The Time-range of advanced acl rule. Default value is null.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclIPAclAdvancedTCPFlag 6.1.28
The packet type of TCP protocol.
OBJECT-TYPE    
  TCPFlag  

h3cAclIPAclAdvancedFragmentFlag 6.1.29
The flag of matching fragmented packet, and now support two value: 0 or 2 .
OBJECT-TYPE    
  FragmentFlag  

h3cAclIPAclAdvancedLog 6.1.30
Log matched packets.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclAdvancedCount 6.1.31
The count of matched by the rule.
OBJECT-TYPE    
  Unsigned32  

h3cAclIPAclAdvancedCountClear 6.1.32
Reset the value of counter.
OBJECT-TYPE    
  CounterClear  

h3cAclIPAclAdvancedEnable 6.1.33
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclAdvancedVpnInstanceName 6.1.34
The VPN name that the rule will be applied. Default value is null.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclIPAclAdvancedComment 6.1.35
The description of ACL rule. Default value is Zero-length String.
OBJECT-TYPE    
  STRING Size(0..127)  

h3cAclIPAclAdvancedReflective 6.1.36
The flag of reflective.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclAdvancedCounting 6.1.37
The packet will be counted when it matches the rule. It is disabled by default.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclAdvancedTCPFlagMask 6.1.38
The TCP Flag Mask. This is a bit-map of possible conditions. The various bit positions are: |0 |tcpack | |1 |tcpfin | |2 |tcppsh | |3 |tcprst | |4 |tcpsyn | |5 |tcpurg |
OBJECT-TYPE    
  BITS tcpack(0), tcpfin(1), tcppsh(2), tcprst(3), tcpsyn(4), tcpurg(5)  

h3cAclIPAclAdvancedTCPFlagValue 6.1.39
The TCP Flag Value. This is a bit-map of possible conditions. The various bit positions are: |0 |tcpack | |1 |tcpfin | |2 |tcppsh | |3 |tcprst | |4 |tcpsyn | |5 |tcpurg |
OBJECT-TYPE    
  BITS tcpack(0), tcpfin(1), tcppsh(2), tcprst(3), tcpsyn(4), tcpurg(5)  

h3cAclIPAclAdvancedRouteTypeAny 6.1.40
The flag of matching any type of routing header of IPv6 packet.
OBJECT-TYPE    
  TruthValue  

h3cAclIPAclAdvancedRouteTypeValue 6.1.41
The type of routing header of IPv6 packet.
OBJECT-TYPE    
  Integer32 0..255 | 65535  

h3cAclIPAclAdvancedFlowLabel 6.1.42
The value of flow label of IPv6 packet header.
OBJECT-TYPE    
  Unsigned32 0..1048575 | 4294967295  

h3cAclMACAclGroup 1.3.6.1.4.1.2011.10.2.8.2.3
OBJECT IDENTIFIER    

h3cAclMACTable 1.3.6.1.4.1.2011.10.2.8.2.3.1
A table of MAC acl group. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclMACEntry

h3cAclMACEntry 7.1
MAC acl group information.
OBJECT-TYPE    
  H3cAclMACEntry  

h3cAclMACRuleIndex 7.1.1
The rule index of MAC-based acl group.
OBJECT-TYPE    
  Integer32 0..65534  

h3cAclMACRowStatus 7.1.2
RowStatus.
OBJECT-TYPE    
  RowStatus  

h3cAclMACAct 7.1.3
The action of MAC acl rule.
OBJECT-TYPE    
  RuleAction  

h3cAclMACTypeCode 7.1.4
The type of protocol.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclMACTypeMask 7.1.5
The mask of protocol.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclMACSrcMac 7.1.6
Source MAC of MAC acl rule. Default value is '00:00:00:00:00:00'.
OBJECT-TYPE    
  MacAddress  

h3cAclMACSrcMacWild 7.1.7
Source MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00'.
OBJECT-TYPE    
  MacAddress  

h3cAclMACDestMac 7.1.8
Destination MAC of MAC acl rule. Default value is '00:00:00:00:00:00'.
OBJECT-TYPE    
  MacAddress  

h3cAclMACDestMacWild 7.1.9
Destination MAC wildzard of MAC acl rule. Default value is '00:00:00:00:00:00'
OBJECT-TYPE    
  MacAddress  

h3cAclMACLsapCode 7.1.10
The type of LSAP.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclMACLsapMask 7.1.11
The mask of LSAP.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclMACCos 7.1.12
Vlan priority of MAC acl rule.
OBJECT-TYPE    
  Integer32  

h3cAclMACTimeRangeName 7.1.13
The Time-range of MAC acl rule. Default value is null.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclMACCount 7.1.14
The count of matched frame by the rule.
OBJECT-TYPE    
  Unsigned32  

h3cAclMACCountClear 7.1.15
Reset the value of counter.
OBJECT-TYPE    
  CounterClear  

h3cAclMACEnable 7.1.16
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclMACComment 7.1.17
The description of ACL rule. Default value is Zero-length String.
OBJECT-TYPE    
  STRING Size(0..127)  

h3cAclMACLog 7.1.18
The packet will be logged when it matches the rule. It is disabled by default.
OBJECT-TYPE    
  TruthValue  

h3cAclMACCounting 7.1.19
The packet will be counted when it matches the rule. It is disabled by default.
OBJECT-TYPE    
  TruthValue  

h3cAclEnUserAclGroup 1.3.6.1.4.1.2011.10.2.8.2.4
OBJECT IDENTIFIER    

h3cAclEnUserTable 1.3.6.1.4.1.2011.10.2.8.2.4.3
A table of user acl group information. If some objects of this table are not supported by some products, these objects can't be created, changed and applied. Default value of these objects will be returned when they are read.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclEnUserEntry

h3cAclEnUserEntry 8.1
User defined acl group entry.
OBJECT-TYPE    
  H3cAclEnUserEntry  

h3cAclEnUserRuleIndex 8.1.1
The subitem of the user acl.
OBJECT-TYPE    
  Integer32 0..65534  

h3cAclEnUserRowStatus 8.1.2
RowStatus.
OBJECT-TYPE    
  RowStatus  

h3cAclEnUserAct 8.1.3
The action of user defined acl rule.
OBJECT-TYPE    
  RuleAction  

h3cAclEnUserStartString 8.1.4
The rule, matching packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value of this object is defined by product and it indicates the offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: 10,10af,ffff. Default value is null.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclEnUserL2String 8.1.5
The rule, matching layer 2 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclEnUserMplsString 8.1.6
The rule, matching mpls packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclEnUserIPv4String 8.1.7
The rule, matching IPv4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclEnUserIPv6String 8.1.8
The rule, matching IPv6 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclEnUserL4String 8.1.9
The rule, matching layer 4 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclEnUserL5String 8.1.10
The rule, matching layer 5 packets, input like this: 'RuleOffset','RuleString','RuleMask'. RuleOffset: The value is defined by product and it indicates offset of the rule mask in the packet(unit: byte). RuleString: The length of RuleString is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. RuleMask: The length of RuleMask is defined by product. The string must be hexadecimal. The length of string must be multiple of 2. For example: '10','10af','ffff'. Default value is null.
OBJECT-TYPE    
  STRING Size(0..255)  

h3cAclEnUserTimeRangeName 8.1.11
The Time-range of user acl rule. Default value is null.
OBJECT-TYPE    
  STRING Size(0..32)  

h3cAclEnUserCount 8.1.12
The count of matched by the rule.
OBJECT-TYPE    
  Unsigned32  

h3cAclEnUserCountClear 8.1.13
Reset the value of counter.
OBJECT-TYPE    
  CounterClear  

h3cAclEnUserEnable 8.1.14
The rule is active or not. true : active false : inactive
OBJECT-TYPE    
  TruthValue  

h3cAclEnUserComment 8.1.15
The description of ACL rule. Default value is Zero-length String.
OBJECT-TYPE    
  STRING Size(0..127)  

h3cAclEnUserLog 8.1.16
The packet will be logged when it matches the rule. It is disabled by default.
OBJECT-TYPE    
  TruthValue  

h3cAclEnUserCounting 8.1.17
The packet will be counted when it matches the rule. It is disabled by default.
OBJECT-TYPE    
  TruthValue  

h3cAclResourceGroup 1.3.6.1.4.1.2011.10.2.8.2.5
OBJECT IDENTIFIER    

h3cAclResourceUsageTable 1.3.6.1.4.1.2011.10.2.8.2.5.1
The table shows ACL resource usage information. Support for resource types that are denoted by h3cAclResourceType object varies with products. If a type is not supported, the corresponding row for the type will not be instantiated in this table.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cAclResourceUsageEntry

h3cAclResourceUsageEntry 1.3.6.1.4.1.2011.10.2.8.2.5.1.1
Each row contains a brief description of the resource type, a port range associated with the chip, total, reserved, and configured amount of resource of this type, the percent of resource that has been allocated, and so on.
OBJECT-TYPE    
  H3cAclResourceUsageEntry  

h3cAclResourceChassis 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.1
The chassis number. On a centralized or distributed device, the value for this node is always zero.
OBJECT-TYPE    
  Unsigned32  

h3cAclResourceSlot 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.2
The slot number. On a centralized device, the value for this node is always zero.
OBJECT-TYPE    
  Unsigned32  

h3cAclResourceChip 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.3
The chip number. On a single chip device, the value for this node is always zero.
OBJECT-TYPE    
  Unsigned32  

h3cAclResourceType 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.4
The resource type.
OBJECT-TYPE    
  Integer32 1..255  

h3cAclPortRange 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.5
The port range associated with the chip. Commas are used to separate multiple port ranges, for example, Ethernet1/2 to Ethernet1/12, Ethernet1/31 to Ethernet1/48.
OBJECT-TYPE    
  STRING  

h3cAclResourceTotal 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.6
Total TCAM entries of the resource type.
OBJECT-TYPE    
  Unsigned32  

h3cAclResourceReserved 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.7
The amount of reserved TCAM entries of the resource type.
OBJECT-TYPE    
  Unsigned32  

h3cAclResourceConfigured 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.8
The amount of configured TCAM entries of the resource type.
OBJECT-TYPE    
  Unsigned32  

h3cAclResourceUsagePercent 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.9
The percent of TCAM entries that have been used for this resource type.
OBJECT-TYPE    
  Unsigned32  

h3cAclResourceTypeDescription 1.3.6.1.4.1.2011.10.2.8.2.5.1.1.10
The description of this resource type.
OBJECT-TYPE    
  STRING Size(0..31)  

h3cAclPacketFilterObjects 1.3.6.1.4.1.2011.10.2.8.3
OBJECT IDENTIFIER    

h3cPfilterScalarGroup 1.3.6.1.4.1.2011.10.2.8.3.1
OBJECT IDENTIFIER    

h3cPfilterDefaultAction 1.3.6.1.4.1.2011.10.2.8.3.1.1
The default action of packet filter. By default, the packet filter permits packets that do not match any ACL rule to pass.
OBJECT-TYPE    
  INTEGER permit(1), deny(2)  

h3cPfilterProcessingStatus 1.3.6.1.4.1.2011.10.2.8.3.1.2
This object shows the status of the system when applying packet filter. It is forbidden to set or read in h3cAclPacketFilterObjects MIB module when the value is processing.
OBJECT-TYPE    
  INTEGER processing(1), done(2)  

h3cPfilterApplyTable 1.3.6.1.4.1.2011.10.2.8.3.2
A table of packet filter application. It's not supported to set default action on an entity, but supported to enable hardware count of default action on an entity.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cPfilterApplyEntry

h3cPfilterApplyEntry 1.3.6.1.4.1.2011.10.2.8.3.2.1
Packet filter application information entry.
OBJECT-TYPE    
  H3cPfilterApplyEntry  

h3cPfilterApplyObjType 1.3.6.1.4.1.2011.10.2.8.3.2.1.1
The object type of packet filter application. interface: Apply an ACL to the interface to filter packets. vlan: Apply an ACL to the VLAN to filter packets. global: Apply an ACL globally to filter packets.
OBJECT-TYPE    
  INTEGER interface(1), vlan(2), global(3)  

h3cPfilterApplyObjIndex 1.3.6.1.4.1.2011.10.2.8.3.2.1.2
The object ID of packet filter application. Interface: interface index, equal to ifIndex VLAN: VLAN ID, 1..4094 Global: 0
OBJECT-TYPE    
  Integer32 0..2147483647  

h3cPfilterApplyDirection 1.3.6.1.4.1.2011.10.2.8.3.2.1.3
The direction of packet filter application.
OBJECT-TYPE    
  DirectionType  

h3cPfilterApplyAclType 1.3.6.1.4.1.2011.10.2.8.3.2.1.4
ACL Type: IPv4, IPv6, default action. Take default action as a special ACL group.
OBJECT-TYPE    
  INTEGER ipv4(1), ipv6(2), default(3)  

h3cPfilterApplyAclIndex 1.3.6.1.4.1.2011.10.2.8.3.2.1.5
The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999 Default action type: 0
OBJECT-TYPE    
  Integer32 0 | 2000..5999  

h3cPfilterApplyHardCount 1.3.6.1.4.1.2011.10.2.8.3.2.1.6
Hardware count flag. true: enable hardware count false: disable hardware count
OBJECT-TYPE    
  TruthValue  

h3cPfilterApplySequence 1.3.6.1.4.1.2011.10.2.8.3.2.1.7
The configure sequence of packet filter application.
OBJECT-TYPE    
  Unsigned32  

h3cPfilterApplyCountClear 1.3.6.1.4.1.2011.10.2.8.3.2.1.8
Clear the value of counters.
OBJECT-TYPE    
  CounterClear  

h3cPfilterApplyRowStatus 1.3.6.1.4.1.2011.10.2.8.3.2.1.9
RowStatus.
OBJECT-TYPE    
  RowStatus  

h3cPfilterAclGroupRunInfoTable 1.3.6.1.4.1.2011.10.2.8.3.3
A table of group running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the statistics entry will be zero.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cPfilterAclGroupRunInfoEntry

h3cPfilterAclGroupRunInfoEntry 1.3.6.1.4.1.2011.10.2.8.3.3.1
ACL group running information entry for packet filtering.
OBJECT-TYPE    
  H3cPfilterAclGroupRunInfoEntry  

h3cPfilterAclGroupStatus 1.3.6.1.4.1.2011.10.2.8.3.3.1.1
The status of ACL group applied. success: ACL applied successfully on all slots failed: failed to apply ACL on all slots partialSuccess: failed to apply ACL on some slots
OBJECT-TYPE    
  INTEGER success(1), failed(2), partialSuccess(3)  

h3cPfilterAclGroupCountStatus 1.3.6.1.4.1.2011.10.2.8.3.3.1.2
The status of enabling hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots
OBJECT-TYPE    
  INTEGER success(1), failed(2), partialSuccess(3)  

h3cPfilterAclGroupPermitPkts 1.3.6.1.4.1.2011.10.2.8.3.3.1.3
The number of packets permitted.
OBJECT-TYPE    
  Counter64  

h3cPfilterAclGroupPermitBytes 1.3.6.1.4.1.2011.10.2.8.3.3.1.4
The number of bytes permitted.
OBJECT-TYPE    
  Counter64  

h3cPfilterAclGroupDenyPkts 1.3.6.1.4.1.2011.10.2.8.3.3.1.5
The number of packets denied.
OBJECT-TYPE    
  Counter64  

h3cPfilterAclGroupDenyBytes 1.3.6.1.4.1.2011.10.2.8.3.3.1.6
The number of bytes denied.
OBJECT-TYPE    
  Counter64  

h3cPfilterAclRuleRunInfoTable 1.3.6.1.4.1.2011.10.2.8.3.4
A table of rule's running information of ACLs for packet filtering. If hardware count function is not supported or not enabled to the packet filter application, the h3cPfilterAclRuleMatchPackets and h3cPfilterAclRuleMatchBytes will be zero.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cPfilterAclRuleRunInfoEntry

h3cPfilterAclRuleRunInfoEntry 1.3.6.1.4.1.2011.10.2.8.3.4.1
ACL rule's running information entry.
OBJECT-TYPE    
  H3cPfilterAclRuleRunInfoEntry  

h3cPfilterAclRuleIndex 1.3.6.1.4.1.2011.10.2.8.3.4.1.1
The ACL rule index.
OBJECT-TYPE    
  Integer32 0..65534  

h3cPfilterAclRuleStatus 1.3.6.1.4.1.2011.10.2.8.3.4.1.2
The status of rule application. success: rule applied successfully on all slots failed: failed to apply rule on all slots partialSuccess: failed to apply rule on some slots
OBJECT-TYPE    
  INTEGER success(1), failed(2), partialSuccess(3)  

h3cPfilterAclRuleCountStatus 1.3.6.1.4.1.2011.10.2.8.3.4.1.3
The status of enabling rule's hardware count. If hardware count is not enabled, it returns success. success: enable hardware count successfully on all slots failed: failed to enable hardware count on all slots partialSuccess: failed to enable hardware count on some slots
OBJECT-TYPE    
  INTEGER success(1), failed(2), partialSuccess(3)  

h3cPfilterAclRuleMatchPackets 1.3.6.1.4.1.2011.10.2.8.3.4.1.4
The number of packets matched.
OBJECT-TYPE    
  Counter64  

h3cPfilterAclRuleMatchBytes 1.3.6.1.4.1.2011.10.2.8.3.4.1.5
The number of bytes matched.
OBJECT-TYPE    
  Counter64  

h3cPfilterStatisticSumTable 1.3.6.1.4.1.2011.10.2.8.3.5
A table of ACL rule's sum statistics information, accumulated by all entity application on all slots.
OBJECT-TYPE    
  SEQUENCE OF  
    H3cPfilterStatisticSumEntry

h3cPfilterStatisticSumEntry 1.3.6.1.4.1.2011.10.2.8.3.5.1
ACL rule's sum statistics information entry.
OBJECT-TYPE    
  H3cPfilterStatisticSumEntry  

h3cPfilterSumDirection 1.3.6.1.4.1.2011.10.2.8.3.5.1.1
The direction of application.
OBJECT-TYPE    
  DirectionType  

h3cPfilterSumAclType 1.3.6.1.4.1.2011.10.2.8.3.5.1.2
ACL type, IPv4 or IPv6.
OBJECT-TYPE    
  INTEGER ipv4(1), ipv6(2)  

h3cPfilterSumAclIndex 1.3.6.1.4.1.2011.10.2.8.3.5.1.3
The ACL group index. Basic type: 2000..2999 Advanced type: 3000..3999 MAC type: 4000..4999 User type: 5000..5999
OBJECT-TYPE    
  Integer32 2000..5999  

h3cPfilterSumRuleIndex 1.3.6.1.4.1.2011.10.2.8.3.5.1.4
The ACL rule index.
OBJECT-TYPE    
  Integer32 0..65534  

h3cPfilterSumRuleMatchPackets 1.3.6.1.4.1.2011.10.2.8.3.5.1.5
The sum number of packets matched the ACL rule.
OBJECT-TYPE    
  Counter64  

h3cPfilterSumRuleMatchBytes 1.3.6.1.4.1.2011.10.2.8.3.5.1.6
The sum number of bytes matched the ACL rule.
OBJECT-TYPE    
  Counter64  

h3cAclPacketfilterTrapObjects 1.3.6.1.4.1.2011.10.2.8.4
OBJECT IDENTIFIER    

h3cPfilterInterface 1.3.6.1.4.1.2011.10.2.8.4.1
The interface which policy apply.
OBJECT-TYPE    
  STRING  

h3cPfilterDirection 1.3.6.1.4.1.2011.10.2.8.4.2
Inbound or outbound.
OBJECT-TYPE    
  STRING  

h3cPfilterACLNumber 1.3.6.1.4.1.2011.10.2.8.4.3
ACL number.
OBJECT-TYPE    
  Integer32  

h3cPfilterAction 1.3.6.1.4.1.2011.10.2.8.4.4
Permit or deny.
OBJECT-TYPE    
  STRING  

h3cMACfilterSourceMac 1.3.6.1.4.1.2011.10.2.8.4.5
Source MAC address.
OBJECT-TYPE    
  STRING  

h3cMACfilterDestinationMac 1.3.6.1.4.1.2011.10.2.8.4.6
Destination MAC address.
OBJECT-TYPE    
  STRING  

h3cPfilterPacketNumber 1.3.6.1.4.1.2011.10.2.8.4.7
The number of packets permitted or denied by ACL.
OBJECT-TYPE    
  Integer32  

h3cPfilterReceiveInterface 1.3.6.1.4.1.2011.10.2.8.4.8
The interface where packet come from.
OBJECT-TYPE    
  STRING  

h3cAclPacketfilterTrap 1.3.6.1.4.1.2011.10.2.8.5
OBJECT IDENTIFIER    

h3cPfilterTrapPrefix 1.3.6.1.4.1.2011.10.2.8.5.0
OBJECT IDENTIFIER    

h3cMACfilterTrap 1.3.6.1.4.1.2011.10.2.8.5.0.1
This notification is generated when a packet was processed by MAC address filter, but not every packet will generate one notification, the same notification only generate once in 30 seconds.
NOTIFICATION-TYPE