RowStatus, supports three states: createAndGo, active, destroy.
Creation Operation Restriction:
Node hh3cAcfpRuleAction must be bound while creating a line.
Nodes hh3cAcfpRuleAll and hh3cAcfpRuleProtocol, hh3cAcfpRuleSrcIP,
hh3cAcfpRuleSrcIPMask, hh3cAcfpRuleDstIP, hh3cAcfpRuleSrcOp,
hh3cAcfpRuleSrcStartPort, hh3cAcfpRuleSrcEndPort, hh3cAcfpRuleDstIP,
hh3cAcfpRuleDstIPMask, hh3cAcfpRuleDstOp, hh3cAcfpRuleDstStartPort,
hh3cAcfpRuleDstEndPort, hh3cAcfpRulePrecedence, hh3cAcfpRuleTos,
hh3cAcfpRuleDscp, hh3cAcfpRuleTCPFlag, hh3cAcfpRuleFragment are
mutually exclusive.
Nodes hh3cAcfpRuleSrcIP and hh3cAcfpRuleSrcIPMask are bound together,
otherwise, the source IP address is neglected.
The restriction over hh3cAcfpRuleDstIP and hh3cAcfpRuleDstIPMask is the
same as hh3cAcfpRuleSrcIP and hh3cAcfpRuleSrcIPMask.
Nodes hh3cAcfpRuleDscp and hh3cAcfpRulePrecedence, hh3cAcfpRuleTos are
mutually exclusive.
If the node hh3cAcfpRuleSrcOp is bound to range(5),
hh3cAcfpRuleSrcStartPort and hh3cAcfpRuleSrcEndPort must be bound together,
and hh3cAcfpRuleSrcEndPort must be greater than hh3cAcfpRuleSrcStartPort.
If the node hh3cAcfpRuleSrcOp is bound to equal(1), notEqual(2),
lessThan(3) or greaterThan(4), hh3cAcfpRuleSrcStartPort must be bound
together, and hh3cAcfpRuleSrcEndPort is neglected.
The restriction over hh3cAcfpRuleDstOp, hh3cAcfpRuleDstStartPort and
hh3cAcfpRuleDstEndPort is the same as hh3cAcfpRuleSrcOp,
hh3cAcfpRuleSrcStartPort and hh3cAcfpRuleSrcEndPort.
If the node hh3cAcfpRuleAction is bound to redirect(3) or mirror(4),
the destination interfaces of the policy the rule belonging to must exist;
The number of rows created cannot exceed the upper limit for each policy,
each inbound interface and each outbound interface.
Modification Operation Restriction:
The row does not support modification.
Deletion Operation Restriction
If the row to be deleted does not exist, success returns directly.
|