TN-ACL-MIB

File: TN-ACL-MIB.mib (61110 bytes)

Imported modules

SNMPv2-SMI	INET-ADDRESS-MIB	SNMPv2-CONF
ENTITY-MIB	SNMPv2-TC	SNMP-FRAMEWORK-MIB
Q-BRIDGE-MIB	IF-MIB	TN-MGMT-MIB

Imported symbols

MODULE-IDENTITY	NOTIFICATION-TYPE	OBJECT-TYPE
Unsigned32	Integer32	Counter32
InetAddress	MODULE-COMPLIANCE	OBJECT-GROUP
NOTIFICATION-GROUP	entPhysicalIndex	TEXTUAL-CONVENTION
TruthValue	RowStatus	MacAddress
StorageType	SnmpAdminString	VlanIdOrAny
VlanIdOrNone	VlanIdOrAnyOrNone	PortList
ifIndex	InterfaceIndexOrZero	tnDevMgmt

Defined Types

RateLimiterValue
Rate limiter valid value. Here '0' means 'disabled'.
TEXTUAL-CONVENTION
	Integer32	0 \| 1..16

TruthValueOrAny
Truth value 0/1 and any.
TEXTUAL-CONVENTION
	INTEGER	any(1), val0(2), val1(3)

HostOrNetworkOrAny
Truth value 0/1 and any.
TEXTUAL-CONVENTION
	INTEGER	any(1), host(2), network(3)

TnAclPortEntry
SEQUENCE
	tnAclPortPolicyId	INTEGER
	tnAclPortAction	INTEGER
	tnAclPortRateLimiterId	RateLimiterValue
	tnAclPortEvcPolicerState	INTEGER
	tnAclPortEvcPolicerId	INTEGER
	tnAclPortRedirect	PortList
	tnAclPortMirrorState	INTEGER
	tnAclPortLoggingState	INTEGER
	tnAclPortShutdownState	INTEGER
	tnAclPortAclState	INTEGER
	tnAclPortCounter	Counter32

TnAclRateLimiterEntry
SEQUENCE
	tnAclRateLimitId	INTEGER
	tnAclRateLimitRate	INTEGER
	tnAclRateLimitUnit	INTEGER

TnAclOperEntry
SEQUENCE
	tnAclClearCounter	INTEGER

TnAceEntry
SEQUENCE
	tnAceIndex	INTEGER
	tnAceNextIndex	INTEGER
	tnAceIngressPort	PortList
	tnAcePolicyFilterType	INTEGER
	tnAcePolicyValue	INTEGER
	tnAcePolicyBitMask	INTEGER
	tnAcePolicyFrameType	INTEGER
	tnAceAction	INTEGER
	tnAceRateLimiter	RateLimiterValue
	tnAceEvcPolicerState	INTEGER
	tnAceEvcPolicerId	INTEGER
	tnAcePortRedirect	PortList
	tnAceMirrorState	INTEGER
	tnAceLoggingState	INTEGER
	tnAceShutdownState	INTEGER
	tnAceCounter	Counter32
	tnAceVlan8021qTagged	INTEGER
	tnAceVlanIdFilter	INTEGER
	tnAceVlanId	INTEGER
	tnAceTagPriority	INTEGER
	tnAceRowStatus	INTEGER
	tnAceLookup	TruthValue

TnAceEtherEntry
SEQUENCE
	tnAceEtherSmacFilter	INTEGER
	tnAceEtherSmacVal	MacAddress
	tnAceEtherDmacFilter	INTEGER
	tnAceEtherDmacVal	MacAddress
	tnAceEtherTypeFilter	INTEGER
	tnAceEtherTypeVal	INTEGER

TnAceArpEntry
SEQUENCE
	tnAceArpSmacFilter	INTEGER
	tnAceArpSmacVal	MacAddress
	tnAceArpDmacFilter	INTEGER
	tnAceArpParmArpRarp	INTEGER
	tnAceArpParmRequestReply	INTEGER
	tnAceArpParmSenderIpFilter	HostOrNetworkOrAny
	tnAceArpParmSenderIpAddress	InetAddress
	tnAceArpParmSenderIpMask	InetAddress
	tnAceArpParmTargetIpFilter	HostOrNetworkOrAny
	tnAceArpParmTargetIpAddress	InetAddress
	tnAceArpParmTargetIpMask	InetAddress
	tnAceArpSenderMacMatch	TruthValueOrAny
	tnAceArpRarpTargetMacMatch	TruthValueOrAny
	tnAceArpIpEthernetLength	TruthValueOrAny
	tnAceArpIp	TruthValueOrAny
	tnAceArpEthernet	TruthValueOrAny

TnAceIpv4Entry
SEQUENCE
	tnAceIpv4ProtoFilter	INTEGER
	tnAceIpv4ProtoValue	INTEGER
	tnAceIpv4Ttl	INTEGER
	tnAceIpv4Fragment	INTEGER
	tnAceIpv4Option	INTEGER
	tnAceIpv4SipFilter	HostOrNetworkOrAny
	tnAceIpv4SipAddress	InetAddress
	tnAceIpv4SipMask	InetAddress
	tnAceIpv4DipFilter	HostOrNetworkOrAny
	tnAceIpv4DipAddress	InetAddress
	tnAceIpv4DipMask	InetAddress
	tnAceIpv4IcmpTypeFilter	INTEGER
	tnAceIpv4IcmpTypeValue	INTEGER
	tnAceIpv4IcmpCodeFilter	INTEGER
	tnAceIpv4IcmpCodeValue	INTEGER
	tnAceIPv4SrcPortFilterType	INTEGER
	tnAceIPv4SrcPortFilterNo	INTEGER
	tnAceIPv4SrcPortRangeStart	INTEGER
	tnAceIPv4SrcPortRangeEnd	INTEGER
	tnAceIPv4DstPortFilterType	INTEGER
	tnAceIPv4DstPortFilterNo	INTEGER
	tnAceIPv4DstPortRangeStart	INTEGER
	tnAceIPv4DstPortRangeEnd	INTEGER
	tnAceIPv4TcpFin	TruthValueOrAny
	tnAceIPv4TcpSyn	TruthValueOrAny
	tnAceIPv4TcpRst	TruthValueOrAny
	tnAceIPv4TcpPsh	TruthValueOrAny
	tnAceIPv4TcpAck	TruthValueOrAny
	tnAceIPv4TcpUrg	TruthValueOrAny

TnAclStatusEntry
SEQUENCE
	tnAclStatusUser	INTEGER
	tnAclStatusIngressPort	PortList
	tnAclStatusFrameType	INTEGER
	tnAclStatusEtypeVal	INTEGER
	tnAclStatusAction	INTEGER
	tnAclStatusRateLimiter	RateLimiterValue
	tnAclStatusPortRedirect	PortList
	tnAclStatusMirror	INTEGER
	tnAclStatusCpu	INTEGER
	tnAclStatusCpuOnce	INTEGER
	tnAclStatusCounter	Counter32
	tnAclStatusConflict	INTEGER

Defined Values

tnAclMgmt		1.3.6.1.4.1.868.2.5.3.1.1.5
The mib provides functionalities for ACL managing in TN modules.
MODULE-IDENTITY

tnAclPortTable		1.3.6.1.4.1.868.2.5.3.1.1.5.1
This table displays and sets the ACL parameters (ACE) of each switch port.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAclPortEntry

tnAclPortEntry		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1
This entry represents an ACL port configuration.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAclPortEntry

tnAclPortPolicyId		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.1
Select the policy to apply to this port. The allowed values are 0 through 255. The default value is 0.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..255

tnAclPortAction		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.2
Select the policy to apply to this port. The allowed values are 0 through 255. The default value is 0.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	deny(1), permit(2)

tnAclPortRateLimiterId		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.3
Select which rate limiter to apply on this port. The allowed values are Disabled or the values 1 through 16. The default value is 'Disabled'.
Status: current	Access: read-write
OBJECT-TYPE
	RateLimiterValue

tnAclPortEvcPolicerState		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.4
Select whether EVC policer is enabled or disabled. The default value is 'Disabled'.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAclPortEvcPolicerId		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.5
Select which EVC policer ID to apply on this port. when 'tnAclPortEvcPolicerState' is enabled, the valid value is from 1 to 128.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	1..128

tnAclPortRedirect		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.6
Select which port frames are redirected on. The allowed values is a specific port number and it can't be set when action is permitted. When no bit is selected, port redirect is 'disabled'.
Status: current	Access: read-write
OBJECT-TYPE
	PortList

tnAclPortMirrorState		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.7
Specify the mirror operation of this port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored. The default value is 'Disabled'.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAclPortLoggingState		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.8
Specify the logging operation of this port. The allowed values are: Enabled: Frames received on the port are stored in the System Log. Disabled: Frames received on the port are not logged. The default value is 'Disabled'.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAclPortShutdownState		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.9
Specify the port shut down operation of this port. The allowed values are: Enabled: If a frame is received on the port, the port will be disabled. Disabled: Port shut down is disabled. The default value is 'Disabled'.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAclPortAclState		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.10
Specify the port state of this port. The allowed values are: Enabled: To reopen ports by changing the volatile port configuration of the ACL user module. Disabled: To close ports by changing the volatile port configuration of the ACL user module. The default value is 'Enabled'.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAclPortCounter		1.3.6.1.4.1.868.2.5.3.1.1.5.1.1.11
Counts the number of frames that match this ACE.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

tnAclRateLimiterTable		1.3.6.1.4.1.868.2.5.3.1.1.5.2
This table displays and sets the rate limiter for the ACL of the switch.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAclRateLimiterEntry

tnAclRateLimiterEntry		1.3.6.1.4.1.868.2.5.3.1.1.5.2.1
This entry represents an ACL rate limiter.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAclRateLimiterEntry

tnAclRateLimitId		1.3.6.1.4.1.868.2.5.3.1.1.5.2.1.1
The rate limiter ID for the settings contained in the same row.
Status: current	Access: not-accessible
OBJECT-TYPE
	INTEGER	1..16

tnAclRateLimitRate		1.3.6.1.4.1.868.2.5.3.1.1.5.2.1.2
The allowed values are: 0-3276700 in pps or 0, 100, 200, 300, ..., 1000000 in kbps.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER

tnAclRateLimitUnit		1.3.6.1.4.1.868.2.5.3.1.1.5.2.1.3
Specify the rate unit. The allowed values are: pps: packets per second. kbps: Kbits per second.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	pps(1), kbps(2)

tnAclOperTable		1.3.6.1.4.1.868.2.5.3.1.1.5.3
This table sets the ACL operation.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAclOperEntry

tnAclOperEntry		1.3.6.1.4.1.868.2.5.3.1.1.5.3.1
This entry represents an ACL operation.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAclOperEntry

tnAclClearCounter		1.3.6.1.4.1.868.2.5.3.1.1.5.3.1.1
Specify ACL clear operation. The allowed values are: nooper: no operation. clear: Clear all ACL counters, including counts the number of frames that match this ACE and ACL port counters.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	nooper(1), clear(2)

tnAceTable		1.3.6.1.4.1.868.2.5.3.1.1.5.4
This table contains the configuration of ACE(ACL control entry) of the switch.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAceEntry

tnAceEntry		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1
This entry represents an ACE. Each entry in this table represents an ACE and can be created or deleted by the management system.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAceEntry

tnAceIndex		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.1
The index of ACE.
Status: current	Access: not-accessible
OBJECT-TYPE
	INTEGER	1..256

tnAceNextIndex		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.2
Specify the created ACE is placed before which ACE.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	1..256

tnAceIngressPort		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.3
Select the ingress port for which this ACE applies.
Status: current	Access: read-create
OBJECT-TYPE
	PortList

tnAcePolicyFilterType		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.4
Specify the policy number filter for this ACE. Any: No policy filter is specified. (policy filter status is 'dont-care'.) Specific: If you want to filter a specific policy with this ACE, choose this value. Two field for entering an policy value and bitmask appears.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	any(1), specific(2)

tnAcePolicyValue		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.5
When 'Specific' is selected for the policy filter, you can enter a specific policy value. The allowed range is 0 to 255.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	0..255

tnAcePolicyBitMask		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.6
When 'Specific' is selected for the policy filter, you can enter a specific policy bitmask. The allowed range is 0x0 to 0xff.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	0..255

tnAcePolicyFrameType		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.7
Select the frame type for this ACE. These frame types are mutually exclusive. any: Any frame can match this ACE. etherType: Only Ethernet Type frames can match this ACE. The IEEE 802.3 describes the value of Length/Type Field specifications to be greater than or equal to 1536 decimal (equal to 0600 hexadecimal). arp: Only ARP frames can match this ACE. Notice the ARP frames won't match the ACE with ethernet type. ipv4: Only IPv4 frames can match this ACE. Notice the IPv4 frames won't match the ACE with ethernet type.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	any(1), etherType(2), arp(3), ipv4(4)

tnAceAction		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.8
Specify the action to take with a frame that hits this ACE. permit: The frame that hits this ACE is granted permission for the ACE operation. deny: The frame that hits this ACE is dropped.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	permit(1), deny(2)

tnAceRateLimiter		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.9
Specify the rate limiter in number of base units. The allowed range is 1 to 16. 'disabled' indicates that the rate limiter operation is disabled.
Status: current	Access: read-write
OBJECT-TYPE
	RateLimiterValue

tnAceEvcPolicerState		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.10
Select whether EVC policer is enabled or disabled. The default value is 'Disabled'.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAceEvcPolicerId		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.11
Select which EVC policer ID to apply on this ACE. The allowed values are from 1 through 128.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	1..128

tnAcePortRedirect		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.12
Frames that hit the ACE are redirected to the port number specified here. The allowed range is the same as the switch port number range. 'disabled' indicates that the port redirect operation is disabled and the specific port number of 'Port Redirect' can't be set when action is permitted.
Status: current	Access: read-create
OBJECT-TYPE
	PortList

tnAceMirrorState		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.13
Specify the mirror operation of this port. Frames matching the ACE are mirrored to the destination mirror port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored. The default value is 'Disabled'.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAceLoggingState		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.14
Specify the logging operation of the ACE. The allowed values are: Enabled: Frames matching the ACE are stored in the System Log. Disabled: Frames matching the ACE are not logged.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAceShutdownState		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.15
Specify the port shut down operation of the ACE. The allowed values are: Enabled: If a frame matches the ACE, the ingress port will be disabled. Disabled: Port shut down is disabled for the ACE.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAceCounter		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.16
The counter indicates the number of times the ACE was hit by a frame.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

tnAceVlan8021qTagged		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.17
Specify whether frames can hit the action according to the 802.1Q tagged. The allowed values are: any: Any value is allowed ('dont-care'). enabled: Tagged frame only. disabled: Untagged frame only. The default value is 'Any'.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	any(1), enabled(2), disabled(3)

tnAceVlanIdFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.18
Specify the VLAN ID filter for this ACE. any: No VLAN ID filter is specified. (VLAN ID filter status is 'dont-care'.) specific: If you want to filter a specific VLAN ID with this ACE, choose this value. A field for entering a VLAN ID number appears.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	any(1), specific(2)

tnAceVlanId		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.19
When 'Specific' is selected for the VLAN ID filter, you can enter a specific VLAN ID number. The allowed range is 1 to 4095. A frame that hits this ACE matches this VLAN ID value.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	1..4094

tnAceTagPriority		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.20
Specify the tag priority for this ACE. A frame that hits this ACE matches this tag priority. The allowed number range is 0 to 7. The value Any means that no tag priority is specified (tag priority is 'dont-care').
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	tp0(1), tp1(2), tp2(3), tp3(4), tp4(5), tp5(6), tp6(7), tp7(8), any(9)

tnAceRowStatus		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.21
The status of this conceptual row entry of ACE table. This object isused to manage the creation and deletion of conceptual rows. The status column has six defined values: - 'active', which indicates that the conceptual row is available for use by the managed device; - 'notInService', which indicates that the conceptual row exists in the agent, but is unavailable for use by the managed device (see NOTE below); - 'notReady', which indicates that the conceptual row exists in the agent, but is missing information necessary in order to be available for use by the managed device; - 'createAndGo', which is supplied by a management station wishing to create a new instance of a conceptual row and to have its status automatically set to active, making it available for use by the managed device; - 'createAndWait', which is supplied by a management station wishing to create a new instance of a conceptual row (but not make it available for use by the managed device); and, - 'destroy', which is supplied by a management station wishing to delete all of the instances associated with an existing conceptual row. For a detailed description of this object, please refer to SNMPv2-TC MIB.
Status: current	Access: read-create
OBJECT-TYPE
	RowStatus

tnAceLookup		1.3.6.1.4.1.868.2.5.3.1.1.5.4.1.22
Specify the second lookup operation of the ACE.
Status: current	Access: read-create
OBJECT-TYPE
	TruthValue

tnAceEtherTable		1.3.6.1.4.1.868.2.5.3.1.1.5.5
This table contains the related configuration of ACE when frame type is etherType.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAceEtherEntry

tnAceEtherEntry		1.3.6.1.4.1.868.2.5.3.1.1.5.5.1
This entry represents an etherType related ACE configuration.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAceEtherEntry

tnAceEtherSmacFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.5.1.1
Specify the source MAC filter for this ACE. any: No SMAC filter is specified. (SMAC filter status is 'dont-care'.) specific: If you want to filter a specific source MAC address with this ACE, choose this value. A field for entering an SMAC value appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), specific(2)

tnAceEtherSmacVal		1.3.6.1.4.1.868.2.5.3.1.1.5.5.1.2
When 'Specific' is selected for the SMAC/DMAC filter, you can enter a specific value. The legal format is 'xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx' (x is a hexadecimal digit). A frame that hits this ACE matches this SMAC value.
Status: current	Access: read-write
OBJECT-TYPE
	MacAddress

tnAceEtherDmacFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.5.1.3
Specify the destination MAC filter for this ACE. any: No DMAC filter is specified. (DMAC filter status is 'dont-care'.) unicast: Frame must be unicast. multicast: Frame must be multicast. broadcast: Frame must be broadcast. specific: If you want to filter a specific destination MAC address with this ACE, choose this value. A field for entering a DMAC value appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), unicast(2), multicast(3), broadcast(4), specific(5)

tnAceEtherDmacVal		1.3.6.1.4.1.868.2.5.3.1.1.5.5.1.4
When 'Specific' is selected for the DMAC filter, you can enter a specific value. The legal format is 'xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx' (x is a hexadecimal digit). A frame that hits this ACE matches this DMAC value.
Status: current	Access: read-write
OBJECT-TYPE
	MacAddress

tnAceEtherTypeFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.5.1.5
Specify the Ethernet type filter for this ACE: any: No EtherType filter is specified. (EtherType filter status is 'don't-care'. specific: If you want to filter a specific EtherType filter with this ACE, you can enter a specific EtherType value. A field for entering a EtherType value appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), specific(2)

tnAceEtherTypeVal		1.3.6.1.4.1.868.2.5.3.1.1.5.5.1.6
When 'Specific' is selected for the EtherType filter, you can enter a specific EtherType value. The allowed range is 0x600 to 0xFFFF but excluding 0x800(IPv4), 0x806(ARP) and 0x86DD(IPv6). A frame that hits this ACE matches this EtherType value.
Status: current	Access: read-create
OBJECT-TYPE
	INTEGER	1536..65535

tnAceArpTable		1.3.6.1.4.1.868.2.5.3.1.1.5.6
This table contains the related configuration of ACE when frame type is ARP.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAceArpEntry

tnAceArpEntry		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1
This entry represents an ARP related ACE configuration.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAceArpEntry

tnAceArpSmacFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.1
Specify the source MAC filter for this ACE. any: No SMAC filter is specified. (SMAC filter status is 'dont-care'.) specific: If you want to filter a specific source MAC address with this ACE, choose this value. A field for entering an SMAC value appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), specific(2)

tnAceArpSmacVal		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.2
When 'Specific' is selected for the SMAC/DMAC filter, you can enter a specific value. The legal format is 'xx-xx-xx-xx-xx-xx' or 'xx.xx.xx.xx.xx.xx' or 'xxxxxxxxxxxx' (x is a hexadecimal digit). A frame that hits this ACE matches this SMAC value.
Status: current	Access: read-write
OBJECT-TYPE
	MacAddress

tnAceArpDmacFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.3
Specify the destination MAC filter for this ACE. any: No DMAC filter is specified. (DMAC filter status is 'dont-care'.) unicast: Frame must be unicast. multicast: Frame must be multicast. broadcast: Frame must be broadcast.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), unicast(2), multicast(3), broadcast(4)

tnAceArpParmArpRarp		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.4
Specify the available ARP/RARP opcode (OP) flag for this ACE. any: No ARP/RARP OP flag is specified. (OP is 'dont-care'.) arp: Frame must have ARP/RARP opcode set to ARP. rarp: Frame must have ARP/RARP opcode set to RARP. other: Frame has unknown ARP/RARP Opcode flag.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), arp(2), rarp(3), other(4)

tnAceArpParmRequestReply		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.5
Specify the available requset/reply opcode (OP) flag for this ACE. any: No ARP/RARP OP flag is specified. (OP is 'dont-care'.) request: Frame must have ARP Request or RARP Request OP flag set. reply: Frame must have ARP Reply or RARP Reply OP flag.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), request(2), reply(3)

tnAceArpParmSenderIpFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.6
Specify the sender IP filter for this ACE. any: No sender filter is specified. (sender ip filter status is 'don't-care'.) host: If you want to filter a specific host address with this ECE, choose this value. A field for entering a host address appears. network: If you want to filter a specific network address with this ECE, choose this value. A Two fields for entering a specific network address and network mask appears.
Status: current	Access: read-write
OBJECT-TYPE
	HostOrNetworkOrAny

tnAceArpParmSenderIpAddress		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.7
When 'Host' or 'Network' is selected for the sender ip filter, you can enter a specific host or network address.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceArpParmSenderIpMask		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.8
When 'Network' is selected for the sender ip filter, you can enter a specific network mask.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceArpParmTargetIpFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.9
Specify the target IP filter for this ACE. any: No sender filter is specified. (target ip filter status is 'don't-care'.) host: If you want to filter a specific host address with this ECE, choose this value. A field for entering a host address appears. network: If you want to filter a specific network address with this ECE, choose this value. A Two fields for entering a specific network address and network mask appears.
Status: current	Access: read-write
OBJECT-TYPE
	HostOrNetworkOrAny

tnAceArpParmTargetIpAddress		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.10
When 'Host' or 'Network' is selected for the target ip filter, you can enter a specific host or network address.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceArpParmTargetIpMask		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.11
When 'Network' is selected for the target ip filter, you can enter a specific network mask.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceArpSenderMacMatch		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.12
Specify whether frames can hit the action according to their sender hardware address field (SHA) settings. 0: ARP frames where SHA is not equal to the SMAC address. 1: ARP frames where SHA is equal to the SMAC address. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceArpRarpTargetMacMatch		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.13
Specify whether frames can hit the action according to their target hardware address field (THA) settings. 0: RARP frames where THA is not equal to the SMAC address. 1: RARP frames where THA is equal to the SMAC address. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceArpIpEthernetLength		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.14
Specify whether frames can hit the action according to their ARP/RARP hardware address length (HLN) and protocol address length (PLN) settings. 0: ARP/RARP frames where the HLN is not equal to Ethernet (0x06) or the (PLN) is not equal to IPv4 (0x04). 1: ARP/RARP frames where the HLN is equal to Ethernet (0x06) and the (PLN) is equal to IPv4 (0x04). Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceArpIp		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.15
Specify whether frames can hit the action according to their ARP/RARP hardware address space (HRD) settings. 0: ARP/RARP frames where the HLD is not equal to Ethernet (1). 1: ARP/RARP frames where the HLD is equal to Ethernet (1). Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceArpEthernet		1.3.6.1.4.1.868.2.5.3.1.1.5.6.1.16
Specify whether frames can hit the action according to their ARP/RARP protocol address space (PRO) settings. 0: ARP/RARP frames where the PRO is not equal to IP (0x800). 1: ARP/RARP frames where the PRO is equal to IP (0x800). Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceIpv4Table		1.3.6.1.4.1.868.2.5.3.1.1.5.7
This table contains the related configuration of ACE when frame type is IPv4.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAceIpv4Entry

tnAceIpv4Entry		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1
This entry represents an IPv4 related ACE configuration.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAceIpv4Entry

tnAceIpv4ProtoFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.1
Specify the IP protocol filter for this ACE. any: No IP protocol filter is specified. (Protocol filter status is 'don't-care'.) other: If you want to filter a specific IP protocol filter with this ACE, choose this value. A field for entering an IP protocol filter appears. icmp: Select ICMP to filter IPv4 ICMP protocol frames. Extra fields for defining ICMP parameters will appear. These fields are explained later in this help file. udp: Select UDP to filter IPv4 UDP protocol frames. Extra fields for defining UDP parameters will appear. These fields are explained later in this help file. tcp: Select TCP to filter IPv4 TCP protocol frames. Extra fields for defining TCP parameters will appear. These fields are explained later in this help file.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), other(2), icmp(3), udp(4), tcp(5)

tnAceIpv4ProtoValue		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.2
When 'Specific' is selected for the IP protocol value, you can enter a specific value. The allowed range is 0 to 255. A frame that hits this ACE matches this IP protocol value.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..255

tnAceIpv4Ttl		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.3
Specify the Time-to-Live settings for this ACE. zero: IPv4 frames with a Time-to-Live field greater than zero must not be able to match this entry. nonZero: IPv4 frames with a Time-to-Live field greater than zero must be able to match this entry. any: Any value is allowed ('don't-care').
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), zero(2), nonZero(3)

tnAceIpv4Fragment		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.4
Specify the fragment offset settings for this ACE. This involves the settings for the More Fragments (MF) bit and the Fragment Offset (FRAG OFFSET) field for an IPv4 frame. any: Any value is allowed ('don't-care'). yes: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry. no: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must not be able to match this entry.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), yes(2), no(3)

tnAceIpv4Option		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.5
Specify the options flag setting for this ACE. any: Any value is allowed ('don't-care'). yes: IPv4 frames where the options flag is set must be able to match this entry. no: IPv4 frames where the options flag is set must not be able to match this entry.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), yes(2), no(3)

tnAceIpv4SipFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.6
Specify the source IP filter for this ACE. any: No source IP filter is specified. (source ip filter is 'don't-care'.) host: Source IP filter is set to Host. Specify the source IP address in the SIP Address field that appears. network: Source IP filter is set to Network. Specify the source IP address and source IP mask in the SIP Address and SIP Mask fields that appear.
Status: current	Access: read-write
OBJECT-TYPE
	HostOrNetworkOrAny

tnAceIpv4SipAddress		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.7
When 'Host' or 'Network' is selected for the source ip filter, you can enter a specific host or network address.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceIpv4SipMask		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.8
When 'Network' is selected for the source ip filter, you can enter a specific network mask.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceIpv4DipFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.9
Specify the destination IP filter for this ACE. any: No destination IP filter is specified. (source ip filter is 'don't-care'.) host: Destination IP filter is set to Host. Specify the destination IP address in the SIP Address field that appears. network: Destination IP filter is set to Network. Specify the destination IP address and source IP mask in the DIP Address and DIP Mask fields that appear.
Status: current	Access: read-write
OBJECT-TYPE
	HostOrNetworkOrAny

tnAceIpv4DipAddress		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.10
When 'Host' or 'Network' is selected for the destination ip filter, you can enter a specific host or network address.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceIpv4DipMask		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.11
When 'Network' is selected for the destination ip filter, you can enter a specific network mask.
Status: current	Access: read-write
OBJECT-TYPE
	InetAddress

tnAceIpv4IcmpTypeFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.12
Specify the ICMP filter for this ACE. any: No ICMP filter is specified. (ICMP filter status is 'dont-care'.) specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value. A field for entering an ICMP value appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), specific(2)

tnAceIpv4IcmpTypeValue		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.13
When 'Specific' is selected for the ICMP filter, you can enter a specific ICMP value. The allowed range is 0 to 255. A frame that hits this ACE matches this ICMP value.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..255

tnAceIpv4IcmpCodeFilter		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.14
Specify the ICMP code filter for this ACE. any: No ICMP code is specified. (ICMP filter status is 'dont-care'.) specific: If you want to filter a specific ICMP code filter with this ACE, you can enter a specific ICMP code value. A field for entering an ICMP code value appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), specific(2)

tnAceIpv4IcmpCodeValue		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.15
When 'Specific' is selected for the ICMP code filter, you can enter a specific ICMP code value. The allowed range is 0 to 255. A frame that hits this ACE matches this ICMP code value.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..255

tnAceIPv4SrcPortFilterType		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.16
The TCP/UDP source port for matching the ACE. It only significant if protocol filter 'UDP' or 'TCP' is selected. The possible values are: any: No TCP/UDP source port filter is specified. (Source port filter status is 'don't-care'.) specific: If you want to filter a specific TCP/UDP source port No. with this ACE, choose this value. A field for entering a specific source port No. appears. range: If you want to filter a specific TCP/UDP source port range filter with this ACE, choose this value. A field for entering a range appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), specific(2), range(3)

tnAceIPv4SrcPortFilterNo		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.17
When 'Specific' is selected for the source port filter, you can enter a specific value. The allowed value is from 0 through 65535.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..65535

tnAceIPv4SrcPortRangeStart		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.18
When 'Range' is selected for the source port filter, you can enter a specific range. The allowed range start is from 0 through 65535.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..65535

tnAceIPv4SrcPortRangeEnd		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.19
When 'Range' is selected for the source port filter, you can enter a specific range. The allowed range end is from 0 through 65535.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..65535

tnAceIPv4DstPortFilterType		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.20
The TCP/UDP destination port for matching the ACE. It only significant if protocol filter 'UDP' or 'TCP' is selected. The possible values are: any: No TCP/UDP destination port filter is specified. (Destination port filter status is 'don't-care'.) specific: If you want to filter a specific TCP/UDP destination port No. with this ACE, choose this value. A field for entering a specific No. appears. range: If you want to filter a specific TCP/UDP destination port range filter with this ACE, choose this value. A field for entering a range appears.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	any(1), specific(2), range(3)

tnAceIPv4DstPortFilterNo		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.21
When 'Specific' is selected for the destination port filter, you can enter a specific value. The allowed value is from 0 through 65535.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..65535

tnAceIPv4DstPortRangeStart		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.22
When 'Range' is selected for the destination port filter, you can enter a specific range. The allowed range start is from 0 through 65535.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..65535

tnAceIPv4DstPortRangeEnd		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.23
When 'Range' is selected for the destination port filter, you can enter a specific range. The allowed range end is from 0 through 65535.
Status: current	Access: read-write
OBJECT-TYPE
	INTEGER	0..65535

tnAceIPv4TcpFin		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.24
Specify the TCP 'No more data from sender' (FIN) value for this ACE. 0: TCP frames where the FIN field is set must not be able to match this entry. 1: TCP frames where the FIN field is set must be able to match this entry. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceIPv4TcpSyn		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.25
Specify the TCP 'Synchronize sequence numbers' (SYN) value for this ACE. 0: TCP frames where the SYN field is set must not be able to match this entry. 1: TCP frames where the SYN field is set must be able to match this entry. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceIPv4TcpRst		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.26
Specify the TCP 'Reset the connection' (RST) value for this ACE. 0: TCP frames where the RST field is set must not be able to match this entry. 1: TCP frames where the RST field is set must be able to match this entry. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceIPv4TcpPsh		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.27
Specify the TCP 'Push Function' (PSH) value for this ACE. 0: TCP frames where the PSH field is set must not be able to match this entry. 1: TCP frames where the PSH field is set must be able to match this entry. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceIPv4TcpAck		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.28
Specify the TCP 'Acknowledgment field significant' (ACK) value for this ACE. 0: TCP frames where the ACK field is set must not be able to match this entry. 1: TCP frames where the ACK field is set must be able to match this entry. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAceIPv4TcpUrg		1.3.6.1.4.1.868.2.5.3.1.1.5.7.1.29
Specify the TCP 'Urgent Pointer field significant' (URG) value for this ACE. 0: TCP frames where the URG field is set must not be able to match this entry. 1: TCP frames where the URG field is set must be able to match this entry. Any: Any value is allowed ('dont-care').
Status: current	Access: read-write
OBJECT-TYPE
	TruthValueOrAny

tnAclStatusTable		1.3.6.1.4.1.868.2.5.3.1.1.5.8
This table shows the ACL status by different ACL users. Each row describes the ACE that is defined. It is a conflict if a specific ACE is not applied to the hardware due to hardware limitations. The maximum number of ACEs is 256 on each switch.
Status: current	Access: not-accessible
OBJECT-TYPE
	SEQUENCE OF
		TnAclStatusEntry

tnAclStatusEntry		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1
This entry represents ACL status by different ACL users.
Status: current	Access: not-accessible
OBJECT-TYPE
	TnAclStatusEntry

tnAclStatusUser		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.1
Indicates the ACL user.
Status: current	Access: not-accessible
OBJECT-TYPE
	INTEGER	static(1), ipsourceguard(2), ipmc(3), mep(4), arpinspection(5), ptp(6), dhcp(7), loopprotect(8), ethersat(9), linkoam(10)

tnAclStatusIngressPort		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.2
Indicates the ingress port of the ACE. Possible values are: All: The ACE will match all ingress port. Port: The ACE will match a specific ingress port.
Status: current	Access: read-only
OBJECT-TYPE
	PortList

tnAclStatusFrameType		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.3
Indicates the frame type of the ACE. Possible values are: Any: The ACE will match any frame type. EType: The ACE will match Ethernet Type frames. Note that an Ethernet Type based ACE will not get matched by IP and ARP frames. ARP: The ACE will match ARP/RARP frames. IPv4: The ACE will match all IPv4 frames. IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol. IPv4/UDP: The ACE will match IPv4 frames with UDP protocol. IPv4/TCP: The ACE will match IPv4 frames with TCP protocol. IPv4/Other: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP. IPv6: The ACE will match all IPv6 standard frames.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	any(1), eType(2), arp(3), ipv4(4), ipv4icmp(5), ipv4udp(6), ipv4tcp(7), ipv4other(8), ipv6(9)

tnAclStatusEtypeVal		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.4
Indicates the type value when frame type of the ACE is Ethernet Type.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER

tnAclStatusAction		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.5
Indicates the forwarding action of the ACE. Permit: Frames matching the ACE may be forwarded and learned. Deny: Frames matching the ACE are dropped.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	permit(1), deny(2)

tnAclStatusRateLimiter		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.6
Indicates the rate limiter number of the ACE. The allowed range is 1 to 16. When Disabled is displayed, the rate limiter operation is disabled.
Status: current	Access: read-only
OBJECT-TYPE
	RateLimiterValue

tnAclStatusPortRedirect		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.7
Indicates the port redirect operation of the ACE. Frames matching the ACE are redirected to the port number. The allowed values are Disabled or a specific port number. When Disabled is displayed, the port redirect operation is disabled.
Status: current	Access: read-only
OBJECT-TYPE
	PortList

tnAclStatusMirror		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.8
Specify the mirror operation of this port. The allowed values are: Enabled: Frames received on the port are mirrored. Disabled: Frames received on the port are not mirrored. The default value is 'Disabled'.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	enable(1), disable(2)

tnAclStatusCpu		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.9
Forward packet that matched the specific ACE to CPU.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	yes(1), no(2)

tnAclStatusCpuOnce		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.10
Forward first packet that matched the specific ACE to CPU.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	yes(1), no(2)

tnAclStatusCounter		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.11
The counter indicates the number of times the ACE was hit by a frame.
Status: current	Access: read-only
OBJECT-TYPE
	Counter32

tnAclStatusConflict		1.3.6.1.4.1.868.2.5.3.1.1.5.8.1.12
Indicates the hardware status of the specific ACE. The specific ACE is not applied to the hardware due to hardware limitations.
Status: current	Access: read-only
OBJECT-TYPE
	INTEGER	yes(1), no(2)