hwAclBasicRuleTable

Configure the rule for basic acl group.

The indexes of the table are hwAclBasicAclNum, hwAclBasicSubitem.

OID

Object

Syntax

Max Access

Description

Implemented Specifications

1.3.6.1.4.1.2011.5.1.1.4.1.1

hwAclBasicAclNum

Integer32

read-only

The index of basic acl group, the index range is (1..99 | 2000..2999 | 42768..76535 ).

Currently, ACLs numbered from 1 to 99 are not supported.

1.3.6.1.4.1.2011.5.1.1.4.1.2

hwAclBasicSubitem

Unsigned32

read-only

The objects specifies the number of an ACL rule.

If the number specified has been assigned to an ACL rule,

the new rule will overwrite the old one,

which is equal to editing the old rule.

If the number is not assigned, the system will define

a rule with the number and insert it to the place

corresponding to its number. If no number is specified,

the system will define a rule, assign a number to it and

add it into the ACL. It will be placed at the end of the

ACL when configuration sequence is adopted; otherwise,

it will be placed based on the 'Depth-first' principle.

When ACL rules are following the 'Depth-first' principle,

the number of an ACL rule must be given 0 ,but it will be assigned

by step automatically;otherwise,this rule will not be created.

The actually supported value range is 0-4294967294.

1.3.6.1.4.1.2011.5.1.1.4.1.3

hwAclBasicAct

INTEGER{permit(1),deny(2)}

read-create

The object indicates the action of a basic acl rule.

'deny' means discarding the packets that meet the condition,

'permit' means permitting the packets that meet the condition.

The actually supported access is read-only.

1.3.6.1.4.1.2011.5.1.1.4.1.4

hwAclBasicSrcIp

IpAddress

read-create

The object indicates the source IP-address of a basic acl rule.

The actually supported access is read-only.

1.3.6.1.4.1.2011.5.1.1.4.1.5

hwAclBasicSrcWild

IpAddress

read-create

The value of this object identifies the wildcard mask of the source IP address.

The value ranges from 0.0.0.0 to 255.255.255.255.

The actually supported access is read-only.

1.3.6.1.4.1.2011.5.1.1.4.1.6

hwAclBasicTimeRangeIndex

Integer32{(0,256)}

read-create

The value of this object identifies the index of a time range of an ACL rule.

The value ranges from 0 to 256.

The value 0 is invalid, indicating that no time range is specified for the rule.

The actually supported access is read-only.

1.3.6.1.4.1.2011.5.1.1.4.1.7

hwAclBasicFragments

INTEGER{fragmentSubseq(0),fragment(1),nonFragment(2),nonSubseq(3),fragmentSpeFirst(4),none(255)}

read-create

The object indicates the type of the packet.

0: fragmentSubseq, indicating that the packet is a subsequent fragment

1: fragment, indicating that the packet is a fragment

2: nonFragment, indicating that the packet is not a fragment

3: nonSubseq, indicating that the packet is not a subsequent fragment

4: fragmentSpeFirst, indicating that the packet is the first fragment

255: none, invalid value

This object cannot be modified once a rule is created.

The actually supported access is read-only.

1.3.6.1.4.1.2011.5.1.1.4.1.9

hwAclBasicEnable

INTEGER{true(1),false(2)}

read-only

The object indicates whether the rule is valid or invalid.

This object is implemented as defined in the corresponding MIB files.

1.3.6.1.4.1.2011.5.1.1.4.1.10

hwAclBasicCount

Counter64

read-only

The object indicates the statistics of matched packets by the rule.

The actually supported value range is 0-4294967295.

1.3.6.1.4.1.2011.5.1.1.4.1.11

hwAclBasicVrfName

OCTET STRING{(0,31)}

read-create

This object indicates an VPN instance.

The length of a VPN instance name cannot exceed 31 characters.

The actually supported access is read-only.

1.3.6.1.4.1.2011.5.1.1.4.1.12

hwAclBasicRowStatus

INTEGER{active(1),notInService(2),notReady(3),createAndGo(4),createAndWait(5),destroy(6)}

read-create

RowStatus, Now support three value:CreateAndGo,Active and Destroy.

The actually supported access is read-only.

1.3.6.1.4.1.2011.5.1.1.4.1.14

hwAclBasicVrfAny

INTEGER{true(1),false(2)}

read-create

The object indicates whether or not matching any VPN-instance.

The actually supported access is read-only.

Creation Restriction

No entry can be created in this table.

Modification Restriction

The entries in this table cannot be modified.

Deletion Restriction

The entries in this table cannot be deleted.

Access Restriction

The entries in this table can be read only when its primary index has a corresponding value defined in hwAclNumGroupTable.
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >