| RowStatus, supports three states: createAndGo, active, destroy.
Creation Operation Restriction:
Node hpnicfAcfpRuleAction must be bound while creating a line.
Nodes hpnicfAcfpRuleAll and hpnicfAcfpRuleProtocol, hpnicfAcfpRuleSrcIP,
hpnicfAcfpRuleSrcIPMask, hpnicfAcfpRuleDstIP, hpnicfAcfpRuleSrcOp,
hpnicfAcfpRuleSrcStartPort, hpnicfAcfpRuleSrcEndPort, hpnicfAcfpRuleDstIP,
hpnicfAcfpRuleDstIPMask, hpnicfAcfpRuleDstOp, hpnicfAcfpRuleDstStartPort,
hpnicfAcfpRuleDstEndPort, hpnicfAcfpRulePrecedence, hpnicfAcfpRuleTos,
hpnicfAcfpRuleDscp, hpnicfAcfpRuleTCPFlag, hpnicfAcfpRuleFragment are
mutually exclusive.
Nodes hpnicfAcfpRuleSrcIP and hpnicfAcfpRuleSrcIPMask are bound together,
otherwise, the source IP address is neglected.
The restriction over hpnicfAcfpRuleDstIP and hpnicfAcfpRuleDstIPMask is the
same as hpnicfAcfpRuleSrcIP and hpnicfAcfpRuleSrcIPMask.
Nodes hpnicfAcfpRuleDscp and hpnicfAcfpRulePrecedence, hpnicfAcfpRuleTos are
mutually exclusive.
If the node hpnicfAcfpRuleSrcOp is bound to range(5),
hpnicfAcfpRuleSrcStartPort and hpnicfAcfpRuleSrcEndPort must be bound together,
and hpnicfAcfpRuleSrcEndPort must be greater than hpnicfAcfpRuleSrcStartPort.
If the node hpnicfAcfpRuleSrcOp is bound to equal(1), notEqual(2),
lessThan(3) or greaterThan(4), hpnicfAcfpRuleSrcStartPort must be bound
together, and hpnicfAcfpRuleSrcEndPort is neglected.
The restriction over hpnicfAcfpRuleDstOp, hpnicfAcfpRuleDstStartPort and
hpnicfAcfpRuleDstEndPort is the same as hpnicfAcfpRuleSrcOp,
hpnicfAcfpRuleSrcStartPort and hpnicfAcfpRuleSrcEndPort.
If the node hpnicfAcfpRuleAction is bound to redirect(3) or mirror(4),
the destination interfaces of the policy the rule belonging to must exist;
The number of rows created cannot exceed the upper limit for each policy,
each inbound interface and each outbound interface.
Modification Operation Restriction:
The row does not support modification.
Deletion Operation Restriction
If the row to be deleted does not exist, success returns directly.
|
