HUAWEI-ACL-MIB Table View

This table is used to query information about an ACL rule group, including the ACL configuration order, step length, and description.

hwAclNumGroupEntry row .1.3.6.1.4.1.2011.5.1.1.2.1

An entry containing characters of an acl group

Indexes

hwAclNumGroupAclNum

Column	Syntax	OID
hwAclNumGroupAclNum The index of acl group, identifying an ACL. The object specifies the range of an ACL number.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.2.1.1
hwAclNumGroupMatchOrder The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL rules are matched following the 'Depth-first' principle.	Enumerationr/w Enumerated Values: 1 config 2 auto	.1.3.6.1.4.1.2011.5.1.1.2.1.2
hwAclNumGroupSubitemNum The total number of the rules in the acl group.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.2.1.3
hwAclNumGroupStep The object indicates the step value of number acl. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs are the multiples of 5 beginning with 5. The ACL IDs change alon…	Integer32r/w Constraints: range: 1-20	.1.3.6.1.4.1.2011.5.1.1.2.1.4
hwAclNumGroupDescription This object indicates the description of a rule group. The description length cannot exceed 127 characters.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.2.1.5
hwAclNumGroupCountClear The value of this object identifies whether to clear up the count of rule groups. The value can be: cleared(1) notUsed(2) This field is effective only when you perform the Set operation to this object.	Enumerationr/w Enumerated Values: 1 cleared 2 notUsed	.1.3.6.1.4.1.2011.5.1.1.2.1.6
hwAclNumGroupRowStatus RowStatus, Now support three value: CreateAndGo, Active, Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.2.1.7
hwAclNumGroupAclName The object indicates the name of an acl group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.2011.5.1.1.2.1.8
hwAclNumGroupAclType The type of ACL group.	Enumeration Enumerated Values: 1 basic 2 advanced 3 link 4 user 5 interface 6 mpls 7 mac 8 ucl	.1.3.6.1.4.1.2011.5.1.1.2.1.9

Configure the rule for basic acl group.

hwAclBasicRuleEntry row .1.3.6.1.4.1.2011.5.1.1.4.1

Each entry is a rule of basic acl.

Indexes

hwAclBasicAclNum hwAclBasicSubitem

Column	Syntax	OID
hwAclBasicAclNum The index of basic acl group, the index range is (1..99 | 2000..2999 | 42768..76535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.4.1.1
hwAclBasicSubitem The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigne…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.4.1.2
hwAclBasicAct The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.4.1.3
hwAclBasicSrcIp The object indicates the source IP-address of a basic acl rule.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.4.1.4
hwAclBasicSrcWild The value of this object identifies the wildcard mask of the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.4.1.5
hwAclBasicTimeRangeIndex The value of this object identifies the index of a time range of an ACL rule. The value ranges from 0 to 256. The value 0 is invalid, indicating that no time range is specified for the rule.	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.4.1.6
hwAclBasicFragments The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is a fragment 2: nonFragment, indicating that the packet i…	Enumerationr/w Enumerated Values: 0 fragmentSubseq 1 fragment 2 nonFragment 3 nonSubseq 4 fragmentSpeFirst 255 none	.1.3.6.1.4.1.2011.5.1.1.4.1.7
hwAclBasicLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/dest…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.4.1.8
hwAclBasicEnable The object indicates whether the rule is valid or invalid.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.4.1.9
hwAclBasicCount The object indicates the statistics of matched packets by the rule.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.4.1.10
hwAclBasicVrfName This object indicates an VPN instance. The length of a VPN instance name cannot exceed 31 characters.	OctetStringr/w Constraints: range: 0-31	.1.3.6.1.4.1.2011.5.1.1.4.1.11
hwAclBasicRowStatus RowStatus, Now support three value: CreateAndGo, Active and Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.4.1.12
hwAclBasicDescription The object indicates the description of this basic rule. The object describes the usage of an ACL with a word or a sentence.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.4.1.13
hwAclBasicVrfAny The object indicates whether or not matching any VPN-instance.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.4.1.14

Configure the rule for advanced acl group.

hwAclAdvancedRuleEntry row .1.3.6.1.4.1.2011.5.1.1.5.1

Each entry contains a rule of advanced acl group.

Indexes

hwAclAdvancedAclNum hwAclAdvancedSubitem

Column	Syntax	OID
hwAclAdvancedAclNum The index of advanced acl table, the index range is (100..199 | 3000..3999 | 42768..76535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.5.1.1
hwAclAdvancedSubitem The object specifies the number of an advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.5.1.2
hwAclAdvancedAct The object indicates the action of an advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.5.1.3
hwAclAdvancedProtocol The value of this object identifies the number of the protocol over IP. The value ranges from 0 to 255. The value 0 indicates the IP protocol.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.5.1.4
hwAclAdvancedSrcIp The value of this object identifies the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.5.1.5
hwAclAdvancedSrcWild The value of this object identifies the wildcard mask of the source IP address. The value ranges from 0.0.0.0 to 255.255.255.255.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.5.1.6
hwAclAdvancedSrcOp The object indicates the source Port operation symbol of an advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal …	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 4 neq 5 range	.1.3.6.1.4.1.2011.5.1.1.5.1.7
hwAclAdvancedSrcPort1 This object indicates the end source port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.8
hwAclAdvancedSrcPort2 This object indicates the start source port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.9
hwAclAdvancedDestIp This object indicates the destination IP address. The value ranges from 0.0.0.0 to 255.255.255.255.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.5.1.10
hwAclAdvancedDestWild This object indicates the mask of the destination IP address. The value ranges from 0.0.0.0 to 255.255.255.255.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.5.1.11
hwAclAdvancedDestOp The object indicates the destination Port operation symbol of an advanced acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means…	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 4 neq 5 range	.1.3.6.1.4.1.2011.5.1.1.5.1.12
hwAclAdvancedDestPort1 This object indicates the end destination port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.13
hwAclAdvancedDestPort2 This object indicates the start destination port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.14
hwAclAdvancedPrecedence The value of this object identifies the precedence sub-field. It is the higher three bits of the ToS field in an IP header. The value ranges from 0 to 7. The invalid value is 255.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.5.1.15
hwAclAdvancedTos The value of this object identifies the ToS sub-field. This field covers four bits after the higher three bits of the ToS field in an IP header. The value ranges from 0 to 15. The invalid value is 255.	Integer32r/w Constraints: range: 0-15 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.5.1.16
hwAclAdvancedDscp The value of this object identifies the higher six bits of the ToS field in an IP header. The value ranges from 0 to 63. The invalid value is 255.	Integer32r/w Constraints: range: 0-63 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.5.1.17
hwAclAdvancedEstablish The object indicates whether or not establishing.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.5.1.18
hwAclAdvancedTimeRangeIndex The object indicates the time range of an advanced acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0.	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.5.1.19
hwAclAdvancedIcmpType The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.20
hwAclAdvancedIcmpCode The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.21
hwAclAdvancedFragments The object indicates the type of the packet. 0: fragmentSubseq, indicating that the packet is a subsequent fragment 1: fragment, indicating that the packet is a fragment 2: nonFragment, indicating that the packet i…	Enumerationr/w Enumerated Values: 0 fragmentSubseq 1 fragment 2 nonFragment 3 nonSubseq 4 fragmentSpeFirst 255 none	.1.3.6.1.4.1.2011.5.1.1.5.1.22
hwAclAdvancedLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destin…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.5.1.23
hwAclAdvancedEnable The object indicates whether the rule is valid or invalid.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.5.1.24
hwAclAdvancedCount The object indicates the statistics of matched packets by the rule.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.5.1.25
hwAclAdvancedVrfName The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs.	OctetStringr/w Constraints: range: 0-31	.1.3.6.1.4.1.2011.5.1.1.5.1.26
hwAclAdvancedRowStatus RowStatus, Now support three state: CreateAndGo, Active, Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.5.1.27
hwAclAdvancedTcpSyncFlag The object indicates the code of TCP Sync flag(0~63), The invalid value is -1.	Integer32r/w Constraints: range: -1-63	.1.3.6.1.4.1.2011.5.1.1.5.1.28
hwAclAdvancedDescription The object indicates the description of this advanced rule. The object describes the usage of an ACL with a word or a sentence.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.5.1.29
hwAclAdvancedSrcPoolName The object indicates the source pool name.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.5.1.30
hwAclAdvancedDestPoolName The object indicates the destination pool name.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.5.1.31
hwAclAdvancedProtocolNew The object indicates the protocol type of the rule. It specifies the protocol type over IP. The number of IP protocol is 65535.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.32
hwAclAdvancedVni The object indicates the ID of VXLAN, The invalid value is 0.	Integer32r/w Constraints: range: 0-16777215	.1.3.6.1.4.1.2011.5.1.1.5.1.33
hwAclAdvancedIgmpType The object indicates the type of igmp, The invalid value is 65535.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.34
hwAclAdvancedTtlOp The object indicates the ttl operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this operation …	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 4 neq 5 range	.1.3.6.1.4.1.2011.5.1.1.5.1.35
hwAclAdvancedTtlExpire The object indicates the begin ttl value. The invalid value is 0.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.5.1.36
hwAclAdvancedTtlExpireEnd The object indicates the end ttl value. The invalid value is 0.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.5.1.37
hwAclAdvancedPktLenOp The object indicates the packet length operation symbol of an advanced acl rule. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, 'range' means between, 'invalid' means this …	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 4 neq 5 range	.1.3.6.1.4.1.2011.5.1.1.5.1.38
hwAclAdvancedPktLenBegin The object indicates the begin packet length value.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.39
hwAclAdvancedPktLenEnd The object indicates the end packet length value.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.40
hwAclAdvancedTcpFlagMask The object indicates the mask of tcp-flag. The invalid value is 0.	Integer32r/w Constraints: range: 0-63	.1.3.6.1.4.1.2011.5.1.1.5.1.41
hwAclAdvancedSrcPortPoolName The object indicates the source port pool name.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.5.1.42
hwAclAdvancedDestPortPoolName The object indicates the destination port pool name.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.5.1.43
hwAclAdvancedIcmpTypeEnd The value of this object identifies the ICMP message type. The value ranges from 0 to 255. The value 65535 is invalid. This object is used together with hwAclAdvancedIcmpType to indicate the value range of the ICMP mess…	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.5.1.44
hwAclAdvancedVrfAny The object indicates whether or not matching any VPN-instance.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.5.1.45

Configure the rule for interface-based acl group.

hwAclIfRuleEntry row .1.3.6.1.4.1.2011.5.1.1.6.1

Each entry contains a rule of interface-based acl group.

Indexes

hwAclIfAclNum hwAclIfSubitem

Column	Syntax	OID
hwAclIfAclNum The index of interface-based acl group, the index range is (1000..1999 | 42768..76535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.6.1.1
hwAclIfSubitem The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.6.1.2
hwAclIfAct The object indicates the action of an interface-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.6.1.3
hwAclIfIndex The object indicates the index of an interface. It specifies the interface information of the packets.The invalid interface index is 0.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.6.1.4
hwAclIfAny The object indicates whether or not matching any interface.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.6.1.5
hwAclIfTimeRangeIndex The value of this object identifies the index of the time range during which an ACL rule can be applied. When the current time is in the time range, the rule is valid. The value 0 is invalid, indicating that no time …	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.6.1.6
hwAclIfLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destin…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.6.1.7
hwAclIfEnable The object indicates whether the rule is valid or invalid.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.6.1.8
hwAclIfCount The object indicates the statistics of matched packets by the rule.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.6.1.9
hwAclIfRowStatus RowStatus,Now support three state:CreateAndGo,Active,Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.6.1.11
hwAclIfDescription The object indicates the description of this if rule. The object describes the usage of an ACL with a word or a sentence.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.6.1.12

Configure the rule for user acl group.

hwAclUserRuleEntry row .1.3.6.1.4.1.2011.5.1.1.7.1

Each entry contains a rule of user acl group.

Indexes

hwAclUserAclNum hwAclUserSubitem

Column	Syntax	OID
hwAclUserAclNum The index of user acl table, the index range is (6000..9999).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.7.1.1
hwAclUserSubitem The object specifies the number of an User ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not ass…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.7.1.2
hwAclUserAct The object indicates the action of an User acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.7.1.3
hwAclUserProtocol The object indicates the protocol type of the rule. It specifies the protocol type over IP. The number of IP protocol is 0.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.7.1.4
hwAclUserSrcIp The object indicates the source IP-address of an User acl rule.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.7.1.5
hwAclUserSrcWild The object indicates the source IP-address wild of an User acl rule.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.7.1.6
hwAclUserSrcOp The object indicates the source Port operation symbol of an User acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not equal to, …	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 4 neq 5 range	.1.3.6.1.4.1.2011.5.1.1.7.1.7
hwAclUserSrcPort1 The object indicates the fourth layer sourec port 1. It specifies the source port information of UDP or TCP packets.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.8
hwAclUserSrcPort2 The object indicates the fourth layer source port2.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.9
hwAclUserDestIp The object indicates the destination IP-address of an User acl rule.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.7.1.10
hwAclUserDestWild The object indicates the destination IP-address wild of an User acl rule.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.7.1.11
hwAclUserDestOp The object indicates the destination Port operation symbol of an User acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not…	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 4 neq 5 range	.1.3.6.1.4.1.2011.5.1.1.7.1.12
hwAclUserDestPort1 The object indicates the fourth layer destination port1.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.13
hwAclUserDestPort2 The object indicates the fourth layer destination port2.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.14
hwAclUserPrecedence The object indicates the value of IP-packet's precedence, It filters packets according to precedence field.The invalid value is 255.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.7.1.15
hwAclUserTos The object indicates the value of IP-packet's TOS, It filters packets according to type of service.The invalid value is 255.	Integer32r/w Constraints: range: 0-15 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.7.1.16
hwAclUserDscp The object indicates the value of frame.The invalid value is 255.	Integer32r/w Constraints: range: 0-63 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.7.1.17
hwAclUserEstablish The object indicates whether or not establishing.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.7.1.18
hwAclUserTimeRangeIndex The object indicates the time range of an User acl rule. When the current time is in the time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0.	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.7.1.19
hwAclUserIcmpType The object indicates the type of ICMP packet. It filters ICMP packets according to the ICMP message type. The invalid value is 65535.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.20
hwAclUserIcmpCode The object indicates the code of ICMP packet. It filters ICMP packets according to the message code. The invalid value is 65535.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.21
hwAclUserFragments The object indicates whether or not matching fragmented packet, It specifies that this rule is only valid for the non-first fragment packets.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.7.1.22
hwAclUserLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destin…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.7.1.23
hwAclUserEnable The object indicates whether the rule is valid or invalid.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.7.1.24
hwAclUserCount The object indicates the statistics of matched packets by the rule.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.7.1.25
hwAclUserVrfName The object indicates the VRF name of this rule, It specifies the VPN-instance to which the packet belongs.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.7.1.26
hwAclUserSrcUserGroupName The object indicates the source user group name of this rule. if modetype source is user, null sting means any user	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.7.1.27
hwAclUserDestUserGroupName The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.7.1.28
hwAclUserSrcModeType The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet, 1 NetAny match rule from any ip subnet, 2 UserAny match rule from any user group, 3 Net …	Integer32r/w Constraints: range: 0-4	.1.3.6.1.4.1.2011.5.1.1.7.1.29
hwAclUserDestModeType The object indicates ACL's mode type, Now support four state 0 Any match rule from any user group or any ip subnet or any doamin name, 1 NetAny match rule from any ip subnet, 2 UserAny match rule from any…	Integer32r/w Constraints: range: 0-6	.1.3.6.1.4.1.2011.5.1.1.7.1.30
hwAclUserRowStatus RowStatus, Now support three state: CreateAndGo, Active, Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.7.1.31
hwAclUserTcpSyncFlag The object indicates the code of TCP Sync flag(0~63), The invalid value is -1.	Integer32r/w Constraints: range: -1-63	.1.3.6.1.4.1.2011.5.1.1.7.1.32
hwAclUserSrcUserGroupNum The object indicates the source user group num of this rule. if modetype source is user, null sting means any user	Integer32r/w Constraints: range: 0-64000 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.33
hwAclUserDestUserGroupNum The object indicates the destination user group name of this rule. if modetype destination is user, null sting means any user	Integer32r/w Constraints: range: 0-64000 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.7.1.34
hwAclUserDestDomainName The object indicates the destination domain name of this rule. if modetype destination is domain, null sting means any domain.	OctetString Constraints: range: 3-127	.1.3.6.1.4.1.2011.5.1.1.7.1.35

The ACL compiler table extending the Acl-number-group table

hwAclCompileNumGroupEntry row .1.3.6.1.4.1.2011.5.1.1.11.1

The entry of Acl-number-group compiler extended table

Indexes

No indexes recorded

Column	Syntax	OID
hwAclCompileNumGroupStatus The object indicates the status of Acl-number-group compiler. 'notCompile' means acl accelerate function is disabled, 'compiled' means acl accelerate function is enabled, 'changeAfterCompile' means acl is changed after …	Enumerationr/w Enumerated Values: 1 notCompile 2 compiled 3 changeAfterCompile	.1.3.6.1.4.1.2011.5.1.1.11.1.1

Configure the rule for ipv6 basic acl group.

hwAclIpv6BasicRuleEntry row .1.3.6.1.4.1.2011.5.1.1.12.1

Each entry is a rule of ipv6 basic acl.

Indexes

hwAclIpv6BasicAclNum hwAclIpv6BasicSubitem

Column	Syntax	OID
hwAclIpv6BasicAclNum The index of ipv6 basic acl group, the index range is (2000..2999 | 42768..75535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.12.1.1
hwAclIpv6BasicSubitem The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigne…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.12.1.2
hwAclIpv6BasicAct The object indicates the action of a ipv6 basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.12.1.3
hwAclIpv6BasicSrcIp The object indicates the source IPv6-address of a ipv6 basic acl rule.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.12.1.4
hwAclIpv6BasicSrcPrefix The value of this object identifies the mask length of the source IPv6 address. The value ranges from 0 to 128.	Integer32r/w Constraints: range: 0-128	.1.3.6.1.4.1.2011.5.1.1.12.1.5
hwAclIpv6BasicTimeRangeIndex The value of this object identifies the index of the time range during which an ACL6 rule can be applied. The value ranges from 0 to 256. The value 0 is invalid, indicating that no time range is specified for the rule.	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.12.1.6
hwAclIpv6BasicFragment The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once a rule is created.	Enumerationr/w Enumerated Values: 0 fragmentSubseq 1 fragment 255 none	.1.3.6.1.4.1.2011.5.1.1.12.1.7
hwAclIpv6BasicLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destina…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.12.1.8
hwAclIpv6BasicEnable The object indicates whether the rule is valid or invalid.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.2011.5.1.1.12.1.9
hwAclIpv6BasicCount This object indicates the number of matched packets by a rule. A maximum of 64 bits are supported.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.12.1.10
hwAclIpv6BasicVrfName This object indicates a VPN instance. The length of a VPN instance name cannot exceed 31 characters.	OctetStringr/w Constraints: range: 0-31	.1.3.6.1.4.1.2011.5.1.1.12.1.11
hwAclIpv6BasicRowStatus RowStatus, Now support three value: CreateAndGo, Active and Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.12.1.12
hwAclIpv6BasicDescription The object indicates the description of this IPv6 basic rule. The object describes the usage of an IPv6 ACL with a word or a sentence.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.12.1.13
hwAclIpv6BasicSrcMask The object indicates the source IPv6-address mask of a ipv6 basic acl rule. Its mode is positive.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.12.1.14
hwAclIpv6BasicVrfAny The object indicates whether or not matching any VPN-instance.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.12.1.15
hwAclIpv6BasicSrcWild The object indicates the wildcard mask of the source IPv6 address.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.12.1.16

Configure the rule for ipv6 advanced acl group.

hwAclIpv6AdvancedRuleEntry row .1.3.6.1.4.1.2011.5.1.1.13.1

Each entry contains a rule of ipv6 advanced acl group.

Indexes

hwAclIpv6AdvancedAclNum hwAclIpv6AdvancedSubitem

Column	Syntax	OID
hwAclIpv6AdvancedAclNum The index of ipv6 advanced acl table, the index range is (3000..3999 | 42768..75535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.13.1.1
hwAclIpv6AdvancedSubitem The object specifies the number of an ipv6 advanced ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number i…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.13.1.2
hwAclIpv6AdvancedAct The object indicates the action of an ipv6 advanced acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.13.1.3
hwAclIpv6AdvancedProtocol The value of this object identifies the number of the protocol over IPv6. The value ranges from 0 to 255. The value 0 indicates the IPv6 protocol.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.13.1.4
hwAclIpv6AdvancedSrcIp The object indicates the source IPv6-address of an ipv6 advanced acl rule.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.13.1.5
hwAclIpv6AdvancedSrcPrefix The value of this object identifies the mask length of the source IPv6 address. The value ranges from 0 to 128.	Integer32r/w Constraints: range: 0-128	.1.3.6.1.4.1.2011.5.1.1.13.1.6
hwAclIpv6AdvancedSrcOp The object indicates the source Port operation symbol of an ipv6 advanced acl rule. It compares the port operators of source address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' means not e…	Enumerationr/w Enumerated Values: 1 lt 2 eq 3 gt 4 neq 5 range 255 invalid	.1.3.6.1.4.1.2011.5.1.1.13.1.7
hwAclIpv6AdvancedSrcPort1 This object indicates the end source port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.8
hwAclIpv6AdvancedSrcPort2 This object indicates the start source port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.9
hwAclIpv6AdvancedDestIp The object indicates the destination IPv6-address of an ipv6 advanced acl rule.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.13.1.10
hwAclIpv6AdvancedDestPrefix The value of this object identifies the mask length of the destination IPv6 address. The value ranges from 0 to 128.	Integer32r/w Constraints: range: 0-128	.1.3.6.1.4.1.2011.5.1.1.13.1.11
hwAclIpv6AdvancedDestOp The object indicates the destination Port operation symbol of an ipv6 advanced acl group. It compares the port operators of destination address. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'neq' …	Enumerationr/w Enumerated Values: 1 lt 2 eq 3 gt 4 neq 5 range 255 invalid	.1.3.6.1.4.1.2011.5.1.1.13.1.12
hwAclIpv6AdvancedDestPort1 This object indicates the largest destination port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.13
hwAclIpv6AdvancedDestPort2 This object indicates the smallest destination port number.	Integer32r/w Constraints: range: 0-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.14
hwAclIpv6AdvancedPrecedence The value of this object identifies the precedence sub-field. It is the higher three bits of the ToS field in an IPv6 header. The value ranges from 0 to 7. The invalid value is 255.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.13.1.15
hwAclIpv6AdvancedTos The value of this object identifies the ToS sub-field. This field covers four bits after the higher three bits of the ToS field in an IPv6 header. The value ranges from 0 to 15. The invalid value is 255.	Integer32r/w Constraints: range: 0-15 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.13.1.16
hwAclIpv6AdvancedDscp The value of this object identifies the higher seven bits of the ToS field in an IPv6 header. The value ranges from 0 to 63. The invalid value is 255.	Integer32r/w Constraints: range: 0-63 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.13.1.17
hwAclIpv6AdvancedEstablish The object indicates whether or not establishing.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.13.1.18
hwAclIpv6AdvancedTimeRangeIndex The value of this object identifies the index of the time range during which an ACL6 rule can be applied. The value ranges from 0 to 256. The value 0 indicates that no time range is specified for the rule.	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.13.1.19
hwAclIpv6AdvancedIcmpType The value of this object identifies the ICMPv6 message type. The value ranges from 0 to 255. The value 65535 is invalid.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.20
hwAclIpv6AdvancedIcmpCode The value of this object identifies the code of an ICMPv6 message. The value ranges from 0 to 255. The value 65535 is invalid.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.21
hwAclIpv6AdvancedFragment The object indicates the type of the packet. 1: fragment, indicating that the packet is a fragment 255: none, invalid value This object cannot be modified once a rule is created.	Enumerationr/w Enumerated Values: 0 fragmentSubseq 1 fragment 255 none	.1.3.6.1.4.1.2011.5.1.1.13.1.22
hwAclIpv6AdvancedLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destin…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.13.1.23
hwAclIpv6AdvancedEnable The object indicates whether the rule is valid or invalid.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.2011.5.1.1.13.1.24
hwAclIpv6AdvancedCount This object indicates the number of packets matched by a rule. A maximum of 64 bits are supported.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.13.1.25
hwAclIpv6AdvancedVrfName This object indicates a VPN instance. The length of a VPN instance name cannot exceed 31 characters.	OctetStringr/w Constraints: range: 0-31	.1.3.6.1.4.1.2011.5.1.1.13.1.26
hwAclIpv6AdvancedRowStatus RowStatus, Now support three state: CreateAndGo, Active, Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.13.1.27
hwAclIpv6AdvancedDescription The object indicates the description of this IPv6 advanced rule. The object describes the usage of an IPv6 ACL with a word or a sentence.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.13.1.28
hwAclIpv6AdvancedSrcMask The object indicates the source IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.13.1.29
hwAclIpv6AdvancedDestMask The object indicates the destination IPv6-address mask of an ipv6 advanced acl rule. Its mode is positive.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.13.1.30
hwAclIpv6AdvancedProtocolNew The object indicates the protocol type of the rule. It specifies the protocol type over IP. The number of IPv6 protocol is 65535.	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.31
hwAclIpv6AdvancedIcmpTypeEnd The value of this object identifies the ICMPv6 message type. The value ranges from 0 to 255. The value 65535 is invalid. This object is used together with hwAclIpv6AdvancedIcmpType to indicate the value range of the ICM…	Integer32r/w Constraints: range: 0-255 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.13.1.32
hwAclIpv6AdvancedVrfAny The object indicates whether or not matching any VPN-instance.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.13.1.33
hwAclIpv6AdvancedSrcPoolName The object indicates the source Ipv6 pool name.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.13.1.34
hwAclIpv6AdvancedVni The object indicates the ID of VXLAN, The invalid value is 0.	Integer32r/w Constraints: range: 0-16777215	.1.3.6.1.4.1.2011.5.1.1.13.1.35
hwAclIpv6AdvancedTcpFlag The object indicates the code of TCP Sync flag(0~63), The invalid value is -1.	Integer32r/w Constraints: range: -1-63	.1.3.6.1.4.1.2011.5.1.1.13.1.36
hwAclIpv6AdvancedTcpFlagMask The object indicates the mask of tcp-flag. The invalid value is 0.	Integer32r/w Constraints: range: 0-63	.1.3.6.1.4.1.2011.5.1.1.13.1.37
hwAclIpv6AdvancedSrcWild The object indicates the wildcard mask of the source IPv6 address.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.13.1.38
hwAclIpv6AdvancedDestWild The object indicates the wildcard mask of the destination IPv6 address.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.13.1.39

Configure the rule for ethernet-frame-based acl group.

hwAclEthernetFrameRuleEntry row .1.3.6.1.4.1.2011.5.1.1.14.1

Each entry contains a rule of ethernet-frame-based acl group.

Indexes

hwAclEthernetFrameAclNum hwAclEthernetFrameSubitem

Column	Syntax	OID
hwAclEthernetFrameAclNum The index of ethernet-frame-based acl group, the index range is (4000..4999 | 42768..76535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.14.1.1
hwAclEthernetFrameSubitem The object specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.14.1.2
hwAclEthernetFrameAct The object indicates the action of an ethernet-frame-based acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.14.1.3
hwAclEthernetFrameType The value of this object identifies the protocol type of an Ethernet frame. The value ranges from 0 to 65535.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.14.1.4
hwAclEthernetFrameTypeMask The value of this object identifies the mask of the protocol type of an Ethernet frame. The value ranges from 0 to 65535.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.14.1.5
hwAclEthernetFrameSrcMac The object indicates the source mac address of rule.	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2011.5.1.1.14.1.6
hwAclEthernetFrameSrcMacMask The object indicates the source mac mask of rule.	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2011.5.1.1.14.1.7
hwAclEthernetFrameDstMac The object indicates the destination mac address of rule.	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2011.5.1.1.14.1.8
hwAclEthernetFrameDstMacMask The object indicates the destination mac mask of rule.	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2011.5.1.1.14.1.9
hwAclEthernetFrameTimeRangeIndex The object indicates the time range of a ethernet frame acl rule. When the current time is in time range, the rule is valid. Zero value declares that the acl rule has no time range. The invalid value is 0.	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.14.1.10
hwAclEthernetFrameLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL rule, packets passed or discarded, source/destination mac addr, protocol of ethernet frame, and number of packe…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.14.1.11
hwAclEthernetFrameEnable The object indicates whether the rule is valid or invalid.	P-BRIDGE-MIBEnabledStatus Type Values: 1 enabled 2 disabled	.1.3.6.1.4.1.2011.5.1.1.14.1.12
hwAclEthernetFrameCount This object indicates the number of matched packets by a rule. A maximum of 64 bits are supported.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.14.1.13
hwAclEthernetFrameRowStatus RowStatus,Now support three state:CreateAndGo,Active,Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.14.1.14
hwAclEthernetFrameEncapType The object indicates the encapsulation type of rule.	Enumerationr/w Enumerated Values: 1 ether2 2 ieee802dot3 3 snap 255 none	.1.3.6.1.4.1.2011.5.1.1.14.1.15
hwAclEthernetFrameDoubleTag The object indicates two tags of rule. False value do not care the number of tags.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.14.1.16
hwAclEthernetFrameVlanId The object indicates the vlan ID of rule. The invalid vlan ID is 0.	Integer32r/w Constraints: range: 0-4094	.1.3.6.1.4.1.2011.5.1.1.14.1.17
hwAclEthernetFrameVlanIdMask The object indicates the vlan ID mask of rule.	Integer32r/w Constraints: range: 0-4095	.1.3.6.1.4.1.2011.5.1.1.14.1.18
hwAclEthernetFrameCVlanId The object indicates the ce-vlan ID of rule. The invalid vlan ID is 0.	Integer32r/w Constraints: range: 0-4094	.1.3.6.1.4.1.2011.5.1.1.14.1.19
hwAclEthernetFrameCVlanIdMask The object indicates the ce-vlan ID mask of rule.	Integer32r/w Constraints: range: 0-4095	.1.3.6.1.4.1.2011.5.1.1.14.1.20
hwAclEthernetFrameRule8021p The object indicates the 8021p value of S-tag.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.14.1.21
hwAclEthernetFrameRuleCVlan8021p The object indicates the 8021p value of C-tag.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.14.1.22
hwAclEthernetFrameDescription The object indicates the description of this ethernetframe rule. The object describes the usage of an ACL with a word or a sentence.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.14.1.23

Configure the applied ACL.

hwAclAppliedEntry row .1.3.6.1.4.1.2011.5.1.1.15.1

Each entry contains a applied ACL.

Indexes

hwAclAppliedOperation hwAclAppliedScopeType hwAclAppliedScopeIndex hwAclAppliedDirection hwAclAppliedAclNum hwAclAppliedSubitem hwAclAppliedAclNum2 hwAclAppliedSubitem2 hwAclAppliedIsIPv6Acl

Column	Syntax	OID
hwAclAppliedOperation The actions taken when packets conforming or exceeding the configured.	Enumeration Enumerated Values: 1 filter 2 limit 3 mirror 4 redirectCpu 5 redirectInterface 6 redirectIpNextHop 7 redirectIpv6NextHop 8 remark8021p 9 remarkDscp 10 remarkIpPrecedence 11 remarkLocalPrecedence 12 remarkVlanId 13 remarkCVlanId 14 remarkDestMac 15 statistic	.1.3.6.1.4.1.2011.5.1.1.15.1.1
hwAclAppliedScopeType The scope that ACL apply on.	Enumeration Enumerated Values: 1 global 2 vlan 3 interface	.1.3.6.1.4.1.2011.5.1.1.15.1.2
hwAclAppliedScopeIndex When the scope is global, this field is invalid; When the scope is vlan, this field is vlan ID; When the scope is interface, this field is interface index.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.15.1.3
hwAclAppliedDirection The direction acl apply on.	Enumeration Enumerated Values: 1 inbound 2 outbound	.1.3.6.1.4.1.2011.5.1.1.15.1.4
hwAclAppliedAclNum The index of ACL group. Basic ACL in range 2000~2999; Advance ACL in range 3000~3999; Link ACL in range 4000~4999;	Integer32 Constraints: range: 2000-4999	.1.3.6.1.4.1.2011.5.1.1.15.1.5
hwAclAppliedSubitem The object specifies the number of an ACL rule.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.15.1.6
hwAclAppliedAclNum2 The index of ACL group. 65535 means this field is valid.	Integer32 Constraints: range: 2000-3999 range: 65535-65535	.1.3.6.1.4.1.2011.5.1.1.15.1.7
hwAclAppliedSubitem2 The object specifies the number of an ACL rule.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.15.1.8
hwAclAppliedStatMode The object specifies the mode of statistics. When action is statistic, this field is valid.	Enumerationr/w Enumerated Values: 1 byPackets 2 byBytes	.1.3.6.1.4.1.2011.5.1.1.15.1.9
hwAclAppliedStatCount The object indicates the statistics of matched packets by the policy. When action is statistic or limit, this field is valid.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.15.1.10
hwAclAppliedLimitCir Committed information rate. Unit: kbps.	Integer32r/w Constraints: range: 0-0 range: 64-10000000	.1.3.6.1.4.1.2011.5.1.1.15.1.11
hwAclAppliedLimitPir Peak information rate. Unit: kbps. 0 is the default value.	Integer32r/w Constraints: range: 0-0 range: 64-10000000	.1.3.6.1.4.1.2011.5.1.1.15.1.12
hwAclAppliedLimitCbs Committed burst size. Unit: byte. 0 is the default value.	Integer32r/w Constraints: range: 0-0 range: 4096-16773120	.1.3.6.1.4.1.2011.5.1.1.15.1.13
hwAclAppliedLimitPbs Peak burst size. Unit: byte. 0 is the default value.	Integer32r/w Constraints: range: 0-0 range: 4096-16773120	.1.3.6.1.4.1.2011.5.1.1.15.1.14
hwAclAppliedLimitGreenAction Green action.	Enumerationr/w Enumerated Values: 1 pass 2 drop 3 passRemarkDscp 4 passRemark8021p	.1.3.6.1.4.1.2011.5.1.1.15.1.15
hwAclAppliedLimitGreenValue The value is to remark When green action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7.	Integer32r/w Constraints: range: 0-63	.1.3.6.1.4.1.2011.5.1.1.15.1.16
hwAclAppliedLimitYellowAction Yellow action.	Enumerationr/w Enumerated Values: 1 pass 2 drop 3 passRemarkDscp 4 passRemark8021p	.1.3.6.1.4.1.2011.5.1.1.15.1.17
hwAclAppliedLimitYellowValue The value is to remark When yellow action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7.	Integer32r/w Constraints: range: 0-63	.1.3.6.1.4.1.2011.5.1.1.15.1.18
hwAclAppliedLimitRedAction Red action.	Enumerationr/w Enumerated Values: 1 pass 2 drop 3 passRemarkDscp 4 passRemark8021p	.1.3.6.1.4.1.2011.5.1.1.15.1.19
hwAclAppliedLimitRedValue The value is to remark When red action is remarking. For remarking DSCP, the range is 0~63; For remarking 8021p, the range is 0~7.	Integer32r/w Constraints: range: 0-63	.1.3.6.1.4.1.2011.5.1.1.15.1.20
hwAclAppliedMirrObservedPort The mirror observe port number.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.15.1.21
hwAclAppliedMirrRspanVlan The object specifies the RSPAN vlan. 0 means mirror to local port.	Integer32r/w Constraints: range: 0-4094	.1.3.6.1.4.1.2011.5.1.1.15.1.22
hwAclAppliedRedirectIfIndex The redirect output interface.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.15.1.23
hwAclAppliedRedirectIpAddr The redirect IP next hop address.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.15.1.24
hwAclAppliedRedirectIpv6Addr The redirect IPv6 next hop address.	IPV6-TCIpv6Addressr/w Type Constraints: range: 16	.1.3.6.1.4.1.2011.5.1.1.15.1.25
hwAclAppliedRemarkVlan The remarked vlan ID.	Integer32r/w Constraints: range: 0-4094	.1.3.6.1.4.1.2011.5.1.1.15.1.26
hwAclAppliedRemarkCVlan The remarked ce-vlan ID.	Integer32r/w Constraints: range: 0-4094	.1.3.6.1.4.1.2011.5.1.1.15.1.27
hwAclAppliedRemark8021p The remarked 8021p value.	Integer32r/w Constraints: range: 0-7	.1.3.6.1.4.1.2011.5.1.1.15.1.28
hwAclAppliedRemarkDscp The remarked DSCP value.	Integer32r/w Constraints: range: 0-63	.1.3.6.1.4.1.2011.5.1.1.15.1.29
hwAclAppliedRemarkIpPre The remarked IP precedence value.	Integer32r/w Constraints: range: 0-7	.1.3.6.1.4.1.2011.5.1.1.15.1.30
hwAclAppliedRemarkLocalPre The remarked local precedence value.	Integer32r/w Constraints: range: 0-7	.1.3.6.1.4.1.2011.5.1.1.15.1.31
hwAclAppliedRemarkMacAddr The remarked MAC address.	SNMPv2-TCMacAddressr/w Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.2011.5.1.1.15.1.32
hwAclAppliedIsIPv6Acl The object indicates whether is IPv6 ACL.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.15.1.33
hwAclAppliedRowStatus RowStatus,Now support three state:CreateAndGo,Active,Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.15.1.51

This table is used to query information about an ACL rule group, including the ACL configuration order, step length, and description.

hwAclIpv6NumGroupEntry row .1.3.6.1.4.1.2011.5.1.1.16.1

An entry containing characters of an IPv6 ACL group.

Indexes

hwAclIpv6NumGroupAclNum

Column	Syntax	OID
hwAclIpv6NumGroupAclNum The value of this object identifies a table index, representing the number of an IPv6 ACL rule group. The value range is as follows: Interface-based ACL6: 1000 to 1999 Basic ACL6: 2000 to 2999 Advanced ACL6: 3000 to 39…	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.16.1.1
hwAclIpv6NumGroupMatchOrder The object indicates the match order of rules. 'config' means matching ACL rules in the configuration sequence, 'auto' means the ACL6 rules are matched following the 'Depth-first' principle.	Enumerationr/w Enumerated Values: 1 config 2 auto 3 default	.1.3.6.1.4.1.2011.5.1.1.16.1.2
hwAclIpv6NumGroupSubitemNum The total number of the rules in the ACL6 group.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.16.1.3
hwAclIpv6NumGroupCountClear This object indicates whether to clear the statistics of an ACL6 rule group. cleared(1): clear notUsed(2): not clear This object is valid only when the Set operation is performed for this object.	Enumerationr/w Enumerated Values: 1 cleared 2 notUsed	.1.3.6.1.4.1.2011.5.1.1.16.1.4
hwAclIpv6NumGroupAclName The object indicates the name of an acl6 group, The first character must be start with a to z or A to Z, and the length cannot exceed 64 character.	OctetStringr/w Constraints: range: 0-64	.1.3.6.1.4.1.2011.5.1.1.16.1.5
hwAclIpv6NumGroupDescription This object indicates the description of an ACL6 rule group. The description length cannot exceed 127 characters.	OctetStringr/w Constraints: range: 0-127	.1.3.6.1.4.1.2011.5.1.1.16.1.6
hwAclIpv6NumGroupAclType The type of IPv6 ACL group.	Enumerationr/w Enumerated Values: 1 basic 2 advanced 3 interface 4 ucl	.1.3.6.1.4.1.2011.5.1.1.16.1.7
hwAclIpv6NumGroupRowStatus RowStatus, Now support three value: CreateAndGo, Active, Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.16.1.51
hwAclIpv6NumGroupStep The object indicates the step value of number IPv6 ACL. Step here refers to the difference between each ID. For instance, given the step is set to 5, the IDs are the multiples of 5 beginning with 5. The IPv6 ACL IDs c…	Integer32r/w Constraints: range: 1-20	.1.3.6.1.4.1.2011.5.1.1.16.1.52

Configure the rule for interface-based acl6 group.

hwAclIpv6IfRuleEntry row .1.3.6.1.4.1.2011.5.1.1.17.1

Each entry contains a rule of interface-based acl6 group.

Indexes

hwAclIpv6IfAclNum hwAclIpv6IfSubitem

Column	Syntax	OID
hwAclIpv6IfAclNum The index of interface-based acl6 group, the index range is (1000..1999 | 42768..75535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.17.1.1
hwAclIpv6IfSubitem The object specifies the number of an ACL6 rule. If the number specified has been assigned to an ACL6 rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assign…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.17.1.2
hwAclIpv6IfAct The object indicates the action of an interface-based acl6 rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.17.1.3
hwAclIpv6IfIndex The object indicates the index of an interface. It specifies the interface information of the packets. The invalid interface index is 0.	SNMPv2-SMIInteger32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.17.1.4
hwAclIpv6IfAny The object indicates whether or not matching any interface.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.17.1.5
hwAclIpv6IfTimeRangeIndex The value of this object identifies the index of the time range during which an ACL rule can be applied. When the current time is in the time range, the rule is valid. The value 0 is invalid, indicating that no time r…	Integer32r/w Constraints: range: 0-256	.1.3.6.1.4.1.2011.5.1.1.17.1.6
hwAclIpv6IfLog The object indicates whether to log the matched packets. The log contents include sequence number of ACL6 rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/desti…	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.17.1.7
hwAclIpv6IfEnable The object indicates whether the rule is valid or invalid.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.17.1.8
hwAclIpv6IfCount The object indicates the statistics of matched packets by basic rule.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.17.1.9
hwAclIpv6IfRowStatus RowStatus,Now support three state:CreateAndGo,Active,Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.17.1.11

Configure the rule for mpls acl group.

hwAclMplsRuleEntry row .1.3.6.1.4.1.2011.5.1.1.18.1

Each entry is a rule of mpls acl.

Indexes

hwAclMplsAclNum hwAclMplsSubitem

Column	Syntax	OID
hwAclMplsAclNum The index of mpls acl group, the index range is (10000..10999 | 42768..76535).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.18.1.1
hwAclMplsSubitem The objects specifies the number of an ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigne…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.2011.5.1.1.18.1.2
hwAclMplsAct The object indicates the action of a basic acl rule. 'deny' means discarding the packets that meet the condition, 'permit' means permitting the packets that meet the condition.	Enumerationr/w Enumerated Values: 1 permit 2 deny	.1.3.6.1.4.1.2011.5.1.1.18.1.3
hwAclMplsExp1 The value of this object identifies the EXP value in the first label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.18.1.4
hwAclMplsExp2 The value of this object identifies the EXP value in the second label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.18.1.5
hwAclMplsExp3 The value of this object identifies the EXP value in the third label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.18.1.6
hwAclMplsExp4 The value of this object identifies the EXP value in the fourth label of an MPLS packet. The value ranges from 0 to 7. The default value is 255.	Integer32r/w Constraints: range: 0-7 range: 255-255	.1.3.6.1.4.1.2011.5.1.1.18.1.7
hwAclMplsLabel1 The value of this object identifies the Label value in the first label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.	Integer32r/w Constraints: range: -1-1048575	.1.3.6.1.4.1.2011.5.1.1.18.1.8
hwAclMplsLabel2 The value of this object identifies the Label value in the second label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.	Integer32r/w Constraints: range: -1-1048575	.1.3.6.1.4.1.2011.5.1.1.18.1.9
hwAclMplsLabel3 The value of this object identifies the Label value in the third label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.	Integer32r/w Constraints: range: -1-1048575	.1.3.6.1.4.1.2011.5.1.1.18.1.10
hwAclMplsLabel4 The value of this object identifies the Label value in the fourth label of an MPLS packet. The value ranges from 0 to 1048575. The default value is -1.	Integer32r/w Constraints: range: -1-1048575	.1.3.6.1.4.1.2011.5.1.1.18.1.11
hwAclMplsTTLOP1 The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this o…	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 5 range 255 any	.1.3.6.1.4.1.2011.5.1.1.18.1.12
hwAclMplsTTL1Begin The object indicates the begin value of a mpls ttl.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.18.1.13
hwAclMplsTTL1End The object indicates the end value of a mpls ttl.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.18.1.14
hwAclMplsTTLOP2 The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this o…	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 5 range 255 any	.1.3.6.1.4.1.2011.5.1.1.18.1.15
hwAclMplsTTL2Begin The object indicates the begin value of a mpls ttl.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.18.1.16
hwAclMplsTTL2End The object indicates the end value of a mpls ttl.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.18.1.17
hwAclMplsTTLOP3 The object indicates the ttl operation symbol of a mpls acl rule. It compares the operators of ttl value. 'lt' means less than, 'eq' means equal to, 'gt' means greater than, 'range' means between, 'invalid' means this o…	Enumerationr/w Enumerated Values: 0 invalid 1 lt 2 eq 3 gt 5 range 255 any	.1.3.6.1.4.1.2011.5.1.1.18.1.18
hwAclMplsTTL3Begin The object indicates the begin value of a mpls ttl.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.18.1.19
hwAclMplsTTL3End The object indicates the end value of a mpls ttl.	Integer32r/w Constraints: range: 0-255	.1.3.6.1.4.1.2011.5.1.1.18.1.20
hwAclMplsRowStatus RowStatus, Now support three value: CreateAndGo, Active and Destroy.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.18.1.21
hwAclMplsCount The object indicates the statistics of matched packets by the rule.	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.2011.5.1.1.18.1.22

Configure the domain name.

hwAclDomainNameConfigEntry row .1.3.6.1.4.1.2011.5.1.1.19.1

Each entry is a domain name.

Indexes

hwAclDomainID

Column	Syntax	OID
hwAclDomainID The index of DomianName table, the index range is (0..31).	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.19.1.1
hwAclDomainName The domian name.	OctetStringr/w Constraints: range: 3-127	.1.3.6.1.4.1.2011.5.1.1.19.1.2
hwAclDomainNameConfigRowStatus Row status,Two actions are used: createAndGo(4), destroy(6).	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.19.1.3

Configure the IP pool name.

hwAclIPPoolEntry row .1.3.6.1.4.1.2011.5.1.1.20.1

Each entry is a IP pool name.

Indexes

hwAclIPPoolIndex

Column	Syntax	OID
hwAclIPPoolIndex The index of ACL IP pool table.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.20.1.1
hwAclIPPoolName The IP pool name.	OctetStringr/w Constraints: range: 0-32	.1.3.6.1.4.1.2011.5.1.1.20.1.2
hwAclIPPoolRowStatus Row status.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.20.1.3
hwAclIPPoolApplyBGPPeer The object indicates whether or not BGP peers are applied.	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.2011.5.1.1.20.1.4

Configure the IP address of IP pool.

hwAclIPPoolIPEntry row .1.3.6.1.4.1.2011.5.1.1.21.1

Each entry is a IP address of IP pool.

Indexes

hwAclIPPoolIPPoolIndex hwAclIPPoolIPIndex

Column	Syntax	OID
hwAclIPPoolIPPoolIndex This object indicates the level 1 index, that is, the index of an IP address pool used by an ACL.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.21.1.1
hwAclIPPoolIPIndex This object indicates the level 2 index, that is, the index of an IPv4 address in an IP address pool used by an ACL.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.2011.5.1.1.21.1.2
hwAclIPPoolIPIpAdd The object indicates the IP-address.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.21.1.3
hwAclIPPoolIPIpWild The object indicates the IP-address wild.	SNMPv2-SMIIpAddressr/w Type Constraints: range: 4	.1.3.6.1.4.1.2011.5.1.1.21.1.4
hwAclIPPoolIPRowStatus Row status.	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.2011.5.1.1.21.1.5