HUAWEI-IPDSLAM-SECURITY-MIB Table View

Table-centric layout grouping table, row, and column objects.

Tables
24
Rows
24
Columns
118
.1.3.6.1.4.1.2011.6.47.6 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamSrcMacAddrFilteringTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamSrcMacAddrFilteringTable'
Describes the MAC address filtering function. With this function, the system checks the source
MAC address of the user packet based on the configured MAC address entry.
If the source MAC address of the user packet is the same as the MAC address configured in this
table, the packet is discarded.
The index of this table is hwIpDslamSrcMacFilteringIndex, which uniquely identifies the MAC address
entry to be filtered by the system.
hwIpDslamSrcMacAddrFilteringEntry row .1.3.6.1.4.1.2011.6.47.6.1
Describes the MAC address filtering function. With this function, the system checks the source
MAC address of the user packet based on the configured MAC address entry.
If the source MAC address of the user packet is th…
Column Syntax OID
Indicates the index, which uniquely identifies the
MAC address entry to be filtered by the system.
Integer32
Constraints:
range: 1-4
.1.3.6.1.4.1.2011.6.47.6.1.1
Indicates the MAC address to be filtered.
SNMPv2-TCMacAddressr/w
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.6.1.2
Indicates the row status. Creating, deleting, and querying MAC address filtering are supported.
In the creation, reserve hwIpDslamSrcMacFilteringIndex, hwIpDslamSrcMacFilteringSrcMac,
and hwIpDslamSrcMacFilteringRowStat…
SNMPv2-TCRowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
Description:
The RowStatus textual convention is used to manage the
creation and deletion of conceptual rows, and is used as the
value of the SYNTAX clause for the status column of a
conceptual row (as described in Section 7.7.1 of …
.1.3.6.1.4.1.2011.6.47.6.1.3
.1.3.6.1.4.1.2011.6.47.7 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamMacAddrDynamicBindingTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamMacAddrDynamicBindingTable'
It is the table for the dynamic binding between the MAC address and the service port and is used
for querying the entry of the dynamic binding between the MAC address and the service port.
After anti-MAC-spoofing is enabled, the MAC address of the user is bound to the corresponding
service port. If the MAC address of the user packet is not the MAC address bound to the service port,
the packet is discarded.
The indexes of this table are hwIpDslamMacAddrDynamicBindingFlowId and hwIpDslamMacAddrDynamicBindingMacIndex.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
hwIpDslamMacAddrDynamicBindingMacIndex is the index of the MAC address bound to the service port.
hwIpDslamMacAddrDynamicBindingEntry row .1.3.6.1.4.1.2011.6.47.7.1
It is the table for the dynamic binding between the MAC address and the service port and is used
for querying the entry of the dynamic binding between the MAC address and the service port.
After anti-MAC-spoofing is ena…
Column Syntax OID
Indicates the index of the service port bound to a specified MAC address.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
Range: Begin with 1
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.7.1.1
Indicates the index of the MAC address bound to the service port.
Range: 0-31
Integer32
Constraints:
range: 0-31
.1.3.6.1.4.1.2011.6.47.7.1.2
Indicates the MAC address bound to a specified service port.
SNMPv2-TCMacAddress
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.7.1.3
.1.3.6.1.4.1.2011.6.47.8 · 1 row entry · 9 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamIpAddrDynamicBindingTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamIpAddrDynamicBindingTable'
It is the table for the dynamic binding between the IP address and the service port
and is used for querying the entry of the dynamic binding between the IP address and
the service port.
After anti-IP-spoofing is enabled and the user goes online, the IP address obtained
by the user is bound to the corresponding service port. The packet can be transmitted
upstream through the device only when the source IP address of the packet is the same
as the bound IP address. Otherwise, the packet is discarded.
The indexes of this table are hwIpDslamIpAddrDynamicBindingFlowId and
hwIpDslamIpAddrDynamicBindingIpIndex.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
hwIpDslamIpAddrDynamicBindingIpIndex is the index of the IP address bound to the service
port.
hwIpDslamIpAddrDynamicBindingEntry row .1.3.6.1.4.1.2011.6.47.8.1
It is the table for the dynamic binding between the IP address and the service port
and is used for querying the entry of the dynamic binding between the IP address and
the service port.
After anti-IP-spoofing is enable…
Column Syntax OID
Indicates the index of the service port bound to a specified IP address.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
Range: Begin with 1
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.8.1.1
Indicates the index of the IP address bound to the service port.
Range: 0-31
Integer32
Constraints:
range: 0-31
.1.3.6.1.4.1.2011.6.47.8.1.2
Indicates the IP address bound to a specified service port.
SNMPv2-SMIIpAddress
Type Constraints:
range: 4
.1.3.6.1.4.1.2011.6.47.8.1.3
Indicates the remaining lease time of the
DHCP user bound to a specified service port.
Unit: second
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.8.1.4
Indicates the Mac address of the
DHCP user bound to a specified service port.
SNMPv2-TCMacAddress
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.8.1.5
Indicates the Subnet Mask of the
DHCP user bound to a specified service port.
SNMPv2-SMIIpAddress
Type Constraints:
range: 4
.1.3.6.1.4.1.2011.6.47.8.1.6
Indicates the Gateway IP Address of the
DHCP user bound to a specified service port.
SNMPv2-SMIIpAddress
Type Constraints:
range: 4
.1.3.6.1.4.1.2011.6.47.8.1.7
Indicates the initialized lease time of the
DHCP user bound to a specified service port.
Unit: second
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.8.1.8
Indicates the IP address of the DHCP Server allocated
the IP address to the DHCP user bound to a specified service port.
SNMPv2-SMIIpAddress
Type Constraints:
range: 4
.1.3.6.1.4.1.2011.6.47.8.1.9
.1.3.6.1.4.1.2011.6.47.9 · 1 row entry · 10 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamDosBlackListTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamDosBlackListTable'
Used for querying or deleting the entry of the current blacklist in the system.
The index of this table is hwIpDslamDosBlackListIndex, which uniquely identifies
an entry of the blacklist.
hwIpDslamDosBlackListEntry row .1.3.6.1.4.1.2011.6.47.9.1
Used for querying or deleting the entry of the current blacklist in the system.
The index of this entry is hwIpDslamDosBlackListIndex, which uniquely identifies
an entry of the blacklist.
Column Syntax OID
Indicates the index, which uniquely identifies an entry of the blacklist.
Range: 1-4096
Integer32
Constraints:
range: 1-4096
.1.3.6.1.4.1.2011.6.47.9.1.1
Indicates the Ifindex of the port that generates the DoS attack blacklist.
You can query IfTable by Ifindex to obtain the port type, shelf ID, slot ID,
and port ID.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.9.1.2
Indicates the type of the packet used for the DoS attack.
Currently, judging the packet type is not supported and the
value is fixed to unknown(1).
Options:
1. unknown(1) -indicates the type of the packet used for the D…
Enumeration
Enumerated Values:
1unknown
2pppoe
3dhcp
4icmp
5arp
6pppoa
.1.3.6.1.4.1.2011.6.47.9.1.3
Indicates whether the blacklist is dynamically generated based
on the DoS attack or manually and statically configured by the
user.
Options:
1. dynamic(1) -The blacklist is dynamically generated based
Enumeration
Enumerated Values:
1dynamic
2static
.1.3.6.1.4.1.2011.6.47.9.1.4
Indicates the DoS attack time.
SNMPv2-TCDateAndTime
Type Constraints:
range: 8
range: 11
Description:
A date-time specification.

field octets contents range
----- ------ -------- -----
1 1-2 year* 0..65536
2 3 month …
.1.3.6.1.4.1.2011.6.47.9.1.5
Indicates the row status. Currently, only the get operation is supported.
In the query operation, the value of this leaf is always active(1).
Options:
1. active(1) -indicates query operation
SNMPv2-TCRowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
Description:
The RowStatus textual convention is used to manage the
creation and deletion of conceptual rows, and is used as the
value of the SYNTAX clause for the status column of a
conceptual row (as described in Section 7.7.1 of …
.1.3.6.1.4.1.2011.6.47.9.1.6
Indicates the ID of the PON port that generates the DoS attack blacklist.
You can query IfTable by ifIndex to obtain the port type, shelf ID, slot ID, and port ID.
The returned value 65535 indicates an invalid value.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.9.1.7
Indicates the CID value of the PVC to which the DoS attack user belongs,
that is, the connection ID of the PVC.The returned value 32 indicates an invalid value.
Range: 1-8092
Integer32
Constraints:
range: 1-8092
.1.3.6.1.4.1.2011.6.47.9.1.8
Indicates the ID of the ONT that generates the DoS attack blacklist in the case of xPON port.
Or indicates the ID of the CNU that generates the DoS attack blacklist in the case of EoC port.
The returned value 65535 indi…
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.9.1.9
Indicates the LLIndex for generating the DoS attack blacklist
in the case of xPON port, indicates gemindex in the case of GPON,
and indicates LLIndex in the case EPON. Currently, the value
is fixed to 0 to facilitate fu…
Integer32
Constraints:
range: 65535-65535
range: 0-1023
.1.3.6.1.4.1.2011.6.47.9.1.10
.1.3.6.1.4.1.2011.6.47.13 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamDesMacAddrFilteringTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamDesMacAddrFilteringTable'
Describes the destination MAC address filtering function. With this function, the system checks
the destination MAC address of the user packet based on the configured MAC address entry.
If the destination MAC address of the user packet is the same as the MAC address configured in
this table, the packet is discarded.
The index of this table is hwIpDslamDesMacFilteringIndex, which uniquely identifies the MAC address
entry to be filtered by the system.
hwIpDslamDesMacAddrFilteringEntry row .1.3.6.1.4.1.2011.6.47.13.1
Describes the destination MAC address filtering function. With this function, the system checks
the destination MAC address of the user packet based on the configured MAC address entry.
If the destination MAC address of…
Column Syntax OID
Indicates the index, which uniquely identifies the MAC address entry to be filtered by the system.
Integer32
Constraints:
range: 1-4
.1.3.6.1.4.1.2011.6.47.13.1.1
Indicates the MAC address to be filtered.
SNMPv2-TCMacAddressr/w
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.13.1.2
Indicates the row status. Creating, deleting, and querying MAC address filtering are supported.
In the creation, reserve hwIpDslamDesMacFilteringIndex, hwIpDslamDesMacFilteringDesMac,
and hwIpDslamDesMacFilteringRowStat…
SNMPv2-TCRowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
Description:
The RowStatus textual convention is used to manage the
creation and deletion of conceptual rows, and is used as the
value of the SYNTAX clause for the status column of a
conceptual row (as described in Section 7.7.1 of …
.1.3.6.1.4.1.2011.6.47.13.1.3
.1.3.6.1.4.1.2011.6.47.14 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamDynSrcMacAddrFilteringTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamDynSrcMacAddrFilteringTable'
Used for querying the dynamically learned MAC address on the network side. The system checks the source
MAC address of the user packet based on this MAC address entry.
If the source MAC address of the user packet is the same as the MAC address in this table, the packet is
discarded.
The index of this table is hwIpDslamDynSrcMacFilteringIndex, which uniquely identifies the MAC address
entry to be filtered by the system.
hwIpDslamDynSrcMacAddrFilteringEntry row .1.3.6.1.4.1.2011.6.47.14.1
Used for querying the dynamically learned MAC address on the network side. The system checks the source
MAC address of the user packet based on this MAC address entry.
If the source MAC address of the user packet is the…
Column Syntax OID
Indicates the index, which uniquely identifies
the MAC address entry to be filtered by the system.
Range: 1-1040
Integer32
Constraints:
range: 1-1040
.1.3.6.1.4.1.2011.6.47.14.1.1
Indicates the MAC address to be filtered.
SNMPv2-TCMacAddress
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.14.1.2
Indicates VLAN ID of the MAC address to be filtered.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.14.1.3
.1.3.6.1.4.1.2011.6.47.17 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamAntiIpServicePortTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamAntiIpServicePortTable'
Used for enabling or disabling anti-IP-spoofing of the service port. Anti-IP-spoofing
on a service port takes effect only when it is enabled globally and is enabled on this
service port.
The index of this table is hwIpDslamAntiIpServicePortIndex, indicating the index of the
service port. The service port corresponding to this index must already be created in
hwExtSrvFlowEntry.
hwIpDslamAntiIpServicePortEntry row .1.3.6.1.4.1.2011.6.47.17.1
Used for enabling or disabling anti-IP-spoofing of the service port. Anti-IP-spoofing
on a service port takes effect only when it is enabled globally and is enabled on this
service port.
The index of this entry is hwIpD…
Column Syntax OID
Indicates the index of the service port bound to a specified IP address.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
Range: Begin with 1
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.17.1.1
Indicates the anti-IP-spoofing status of the service port.
Options:
1. enabled(1) -indicates the anti-IP-spoofing status is enabled
2. disabled(2) -indicates the anti-IP-spoofing status is disabled
Default: enabled(1)
EnabledStatusr/w
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.2011.6.47.17.1.2
Indicates the anti-IPv6-spoofing status of the service port.
Options:
1. enabled(1) -indicates the anti-IPv6-spoofing status is enabled
2. disabled(2) -indicates the anti-IPv6-spoofing status is disabled
Default: enabl…
EnabledStatusr/w
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.2011.6.47.17.1.3
.1.3.6.1.4.1.2011.6.47.22 · 1 row entry · 2 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamSecurityVlanCtrlTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamSecurityVlanCtrlTable'
The table used to configure the IP-spoofing based on VLAN.
The index of this table is hwIpDslamSecurityVlanCtrlIndex.
hwIpDslamSecurityVlanCtrlEntry row .1.3.6.1.4.1.2011.6.47.22.1
The table used to configure the IP-spoofing based on VLAN.
The index of this entry is hwIpDslamSecurityVlanCtrlIndex.
Column Syntax OID
The index of the table, identifier a VLAN ID.
Integer32
Constraints:
range: 1-4093
.1.3.6.1.4.1.2011.6.47.22.1.1
The status of anti-ipspoofing switch.
Options:
1. disable(1) -disable the switch
2. enable(2) -enable the switch
Enumerationr/w
Enumerated Values:
1disable
2enable
.1.3.6.1.4.1.2011.6.47.22.1.2
.1.3.6.1.4.1.2011.6.47.25 · 1 row entry · 9 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamAntiDosPacketLimitTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamAntiDosPacketLimitTable'
Used for setting or querying the threshold for the port-based packet rate in anti-DoS-attack.
The traffic exceeding this threshold is discarded.
The indexes of this table are hwIpDslamAntiDosPacketLimitIfIndex, hwIpDslamAntiDosPacketLimitSecondIndex,
and hwIpDslamAntiDosPacketLimitThirdIndex.
hwIpDslamAntiDosPacketLimitIfIndex is the port index and its meaning is the same as that of
ifIndex in ifTable of rfc1213 IF_MIB.
hwIpDslamAntiDosPacketLimitSecondIndex is the second index of the table. The meaning varies with
the port type. It must be 0xFFFFFFFF for the DSL or ETH port, and is the ONT ID or 0xFFFFFFFF for the xPON port.
hwIpDslamAntiDosPacketLimitThirdIndex is the third index of the table. The meaning varies with
the port type. It must be 0xFFFFFFFF for the DSL, ETH, or EPON port, and its value is gemindex
or gemport ID for the GPON port.
When hwIpDslamAntiDosPacketLimitIfIndex is 0xFFFFFFFD, hwIpDslamAntiDosPacketLimitSecondIndex indicates
the GPON end to end service flow index and hwIpDslamAntiDosPacketLimitThirdIndex is invalid value 0xFFFFFFFF.
hwIpDslamAntiDosPacketLimitEntry row .1.3.6.1.4.1.2011.6.47.25.1
Used for setting or querying the threshold for the port-based packet rate in anti-DoS-attack.
The traffic exceeding this threshold is discarded.
The indexes of this entry are hwIpDslamAntiDosPacketLimitIfIndex, hwIpDsla…
Column Syntax OID
Its meaning is the same as that of ifIndex in ifTable of rfc1213 IF_MIB.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.25.1.1
Indicates the second index. The meaning varies with the port type.
It must be 0xFFFFFFFF for the DSL or ETH port, and is the ONT ID or 0xFFFFFFFF for the xPON port.
When hwIpDslamAntiDosPacketLimitIfIndex is 0xFFFFFFFD,…
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.25.1.2
Indicates the third index. The meaning varies with the port type.
It must be 0xFFFFFFFF for the DSL, ETH, or EPON port and its value is gemindex or gemport ID for the GPON port.
It must be 0xFFFFFFFF When hwIpDslamAntiD…
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.25.1.3
Used for setting or querying the threshold for the packet rate of the port.
The value -1 is returned if the port does not support this operation.
The unit is pps.
Integer32r/w
Constraints:
range: -1-254
.1.3.6.1.4.1.2011.6.47.25.1.4
Indicates the row status and is used for setting or querying the threshold for
the packet rate in anti-DoS-attack. The option createAndGo(4) or destroy(6)
is not supported during setting or query. During query,
active(1…
SNMPv2-TCRowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
Description:
The RowStatus textual convention is used to manage the
creation and deletion of conceptual rows, and is used as the
value of the SYNTAX clause for the status column of a
conceptual row (as described in Section 7.7.1 of …
.1.3.6.1.4.1.2011.6.47.25.1.5
Used for setting or querying the threshold for the IGMP packet rate of the port.
The value -1 is returned if the port does not support this operation.
The value 65535 means that the port does not limit the IGMP packet r…
Integer32r/w
Constraints:
range: 65535-65535
range: -1-63
.1.3.6.1.4.1.2011.6.47.25.1.6
Used for setting or querying the threshold for the DHCP packet rate of the port.
The value -1 is returned if the port does not support this operation.
The value 65535 means that the port does not limit the DHCP packet r…
Integer32r/w
Constraints:
range: 65535-65535
range: -1-63
.1.3.6.1.4.1.2011.6.47.25.1.7
Used for setting or querying the threshold for the ARP packet rate of the port.
The value -1 is returned if the port does not support this operation.
The value 65535 means that the port does not limit the ARP packet rat…
Integer32r/w
Constraints:
range: 65535-65535
range: -1-63
.1.3.6.1.4.1.2011.6.47.25.1.8
Used for setting or querying the threshold for the PPPoE packet rate of the port.
The value -1 is returned if the port does not support this operation.
The value 65535 means that the port does not limit the PPPoE packet…
Integer32r/w
Constraints:
range: 65535-65535
range: -1-63
.1.3.6.1.4.1.2011.6.47.25.1.9
.1.3.6.1.4.1.2011.6.47.28 · 1 row entry · 10 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamSecurityConflictLogTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamSecurityConflictLogTable'
Used for querying the IP/MAC conflict logs of the DHCP, PPPOE, SLAAC and DHCPv6 packets when the
anti-IP-spoofing or anti-MAC-spoofing is enabled.
The index of this table is hwIpDslamSecurityConflictLogIndex, which is the index of the control
module of the system conflict logs.
hwIpDslamSecurityConflictLogEntry row .1.3.6.1.4.1.2011.6.47.28.1
Used for querying the IP/MAC conflict logs of the DHCP, PPPOE, SLAAC and DHCPv6 packets when the
anti-IP-spoofing or anti-MAC-spoofing is enabled.
The index of this entry is hwIpDslamSecurityConflictLogIndex, which is t…
Column Syntax OID
Index of the log.
The range of index is 1 to 256 when get the system conflict logs.
The range of index is 0 to 4294967295 when clear the system conflict logs. The device will ignore the index and clear all the system co…
Unsigned32
Constraints:
range: 0-4294967295
.1.3.6.1.4.1.2011.6.47.28.1.1
VLAN ID of the log, recorded when IP/MAC conflict occurred.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.28.1.2
MAC address of the log, recorded when IP/MAC conflict occurred.
SNMPv2-TCMacAddress
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.28.1.3
IP address of the log, recorded when IP/MAC conflict occurred.
SNMPv2-SMIIpAddress
Type Constraints:
range: 4
.1.3.6.1.4.1.2011.6.47.28.1.4
Service port index of the log, recorded when IP/MAC conflict occurred.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.28.1.5
The date and time of the log generated.
For example, Tuesday May 26, 1992 at 1:30:15 PM EDT would be displayed as:
1992-5-26,13:30:15.0,-4:0
SNMPv2-TCDateAndTime
Type Constraints:
range: 8
range: 11
Description:
A date-time specification.

field octets contents range
----- ------ -------- -----
1 1-2 year* 0..65536
2 3 month …
.1.3.6.1.4.1.2011.6.47.28.1.6
Clear the conflict log.
Options:
1. invalid(1) -indicates query operation
2. clearLog(2) -clear the conflict log
Enumerationr/w
Enumerated Values:
1invalid
2clearLog
.1.3.6.1.4.1.2011.6.47.28.1.7
Indicates IPv6 prefix in the log. It is recorded when IPv6 conflict occurred.
For example, 1111:1111::2232/128.
It is a null string when IPv4 conflict occurred.
INET-ADDRESS-MIBInetAddress
Type Constraints:
range: 0..255
.1.3.6.1.4.1.2011.6.47.28.1.8
the type of conflict log.
Options:
1. macconflict(1) -indicates the Mac conflict log
2. ipconflict(2) -indicates the IPv4 conflict log
3. ipv6conflict(3) -indicates the IPv6 conflict log
Enumeration
Enumerated Values:
1macconflict
2ipconflict
3ipv6conflict
.1.3.6.1.4.1.2011.6.47.28.1.9
CM index of the log, which is recorded when IP/MAC conflict occurrs.
When the conflict user does not belong to any CM, the value of hwIpDslamSecurityConflictLogCmIndex is 0xFFFFFFFF(an invalid value).
Unsigned32
Constraints:
range: 1-4294967295
.1.3.6.1.4.1.2011.6.47.28.1.10
.1.3.6.1.4.1.2011.6.47.29 · 1 row entry · 4 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamSecurityConflictStatisticTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamSecurityConflictStatisticTable'
Used for querying the statistics of the packets with IP/MAC conflict and illegal arp packets.
The index of this table is hwIpDslamSecurityConflictStatIfindex, which is the
index of the port. The meaning of hwIpDslamSecurityConflictStatIfindex is the
same as that of ifIndex in ifTable of rfc1213 IF_MIB.
hwIpDslamSecurityConflictStatisticEntry row .1.3.6.1.4.1.2011.6.47.29.1
Used for querying the statistics of the packets with IP/MAC conflict and illegal arp packets.
The index of this entry is hwIpDslamSecurityConflictStatIfindex, which is the
index of the port. The meaning of hwIpDslamSecu…
Column Syntax OID
The meaning of hwIpDslamSecurityConflictStatIfindex is the same as that of ifindex in standard IF MIB,
which contains frame ID,slot ID and port ID.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.29.1.1
The number of packets which IP or MAC conflicted,
this number is less than 65535.
When the number is 0xffffffff(4294967295),
it means the board is not supported.
SNMPv2-SMICounter32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.29.1.2
Clear the conflict statistic.
If the value of hwIpDslamSecurityConflictStatIfindex is 4294967295, it means clearing all conflict statistics.
Options:
1. invalid(1) -indicates query operation
2. clearStatistic(2) …
Enumerationr/w
Enumerated Values:
1invalid
2clearStatistic
.1.3.6.1.4.1.2011.6.47.29.1.3
The number of illegal arp packet.
When the number is 0xffffffff(4294967295),
it means the board is not supported.
SNMPv2-SMICounter32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.29.1.4
.1.3.6.1.4.1.2011.6.47.35 · 1 row entry · 8 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamIpv6DynamicBindingTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamIpv6DynamicBindingTable'
It is the table for querying the dynamic binding item between the IPv6 address and the service port.
If anti-IPv6-spoofing is enabled, the IPv6 address obtained by the user is bound to the corresponding
service port when a user goes online.
The packet can be transmitted upstream through the device only when the source IPv6 address of the
packet is the same as the bound IPv6 address. Otherwise, the packet is discarded.
At most two IPv6 addresses are supported for one user. If only one IPv6 address is allocated, the results
of nodes hwIpDslamIpv6DynamicBindingIpv6Address2, hwIpDslamIpv6DynamicBindingPrefixLength2 and
hwIpDslamIpv6DynamicBindingLeaseTime2 are invalid.
The indexes of this table are hwIpDslamIpAddrDynamicBindingFlowId and hwIpDslamIpv6DynamicBindingItemIndex.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
The node hwIpDslamIpv6DynamicBindingItemIndex is the index of the IPv6 address bound to the service port.
hwIpDslamIpv6DynamicBindingEntry row .1.3.6.1.4.1.2011.6.47.35.1
It is the table for querying the dynamic binding item between the IPv6 address and the service port.
If anti-IPv6-spoofing is enabled, the IPv6 address obtained by the user is bound to the corresponding
service port whe…
Column Syntax OID
Indicates the index of the service port which a specified IPv6 address bound to.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
Range: Begin with 1
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.35.1.1
Indicates the index of the IPv6 address bound to the service port.
Range: 0-2047
Integer32
Constraints:
range: 0-2047
.1.3.6.1.4.1.2011.6.47.35.1.2
Indicates the IPv6 address or prefix bound to a specified service port.
The returned value :: indicates an invalid value.
INET-ADDRESS-MIBInetAddress
Type Constraints:
range: 0..255
.1.3.6.1.4.1.2011.6.47.35.1.3
Indicates the IPv6 prefix length bound to a specified service port.
Range: 0-128
The returned value 0 indicates an invalid value.
Integer32
Constraints:
range: 0-128
.1.3.6.1.4.1.2011.6.47.35.1.4
Indicates the remaining lease time of the IPv6 address bound to a specified service port.
Unit: second
The returned value 0 indicates an invalid value.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.35.1.5
Indicates the IPv6 address or prefix bound to a specified service port.
The returned value :: indicates an invalid value.
INET-ADDRESS-MIBInetAddress
Type Constraints:
range: 0..255
.1.3.6.1.4.1.2011.6.47.35.1.6
Indicates the IPv6 prefix length bound to a specified service port.
Range: 0-128
The returned value 0 indicates an invalid value.
Integer32
Constraints:
range: 0-128
.1.3.6.1.4.1.2011.6.47.35.1.7
Indicates the remaining lease time of the IPv6 address bound to a specified service port.
Unit: second
The returned value 0 indicates an invalid value.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.35.1.8
.1.3.6.1.4.1.2011.6.47.42 · 1 row entry · 5 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamDynamicBindingTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamDynamicBindingTable'
It is the table for deleting the dynamic binding table.
If anti-IP-spoofing function is enabled, the dynamic binding table can be deleted by the service port
and IP address. If anti-IPv6-spoofing function is enabled, the dynamic binding table can be deleted by
the service port and IPv6 address. If anti-MAC-spoofing function is enabled, the dynamic binding table
can be deleted by the service port and MAC address.
The index of this table is hwIpDslamDynamicBindingFlowId.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
hwIpDslamDynamicBindingEntry row .1.3.6.1.4.1.2011.6.47.42.1
It is the table for deleting the dynamic binding table.
If anti-IP-spoofing function is enabled, the dynamic binding table can be deleted by the service port
and IP address. If anti-IPv6-spoofing function is enabled, th…
Column Syntax OID
Indicates the index of the service port which a specified dynamic binding table is bound to.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
Range: Begin with 1
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.42.1.1
Indicates the type of the IP address bound to a specified service port.
Options:
1. ipv4(1) -indicates that the IP address type is ipv4
2. ipv6(2) -indicates that the IP address type is ipv6
INET-ADDRESS-MIBInetAddressTyper/w
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
.1.3.6.1.4.1.2011.6.47.42.1.2
Indicates the IP address bound to a specified service port.
INET-ADDRESS-MIBInetAddressr/w
Type Constraints:
range: 0..255
.1.3.6.1.4.1.2011.6.47.42.1.3
Indicates the MAC address bound to a specified service port.
SNMPv2-TCMacAddressr/w
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.42.1.4
Indicates the row status and is used for unbinding the specified dynamic
binding table. The option destroy(6) is only supported.
SNMPv2-TCRowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
Description:
The RowStatus textual convention is used to manage the
creation and deletion of conceptual rows, and is used as the
value of the SYNTAX clause for the status column of a
conceptual row (as described in Section 7.7.1 of …
.1.3.6.1.4.1.2011.6.47.42.1.5
.1.3.6.1.4.1.2011.6.47.45 · 1 row entry · 8 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamSecurityExConflictStatisticTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamSecurityExConflictStatisticTable'
Used for querying the statistics of the packets with IP,IPv6,MAC conflict and illegal arp packets.
The indexes of this table are hwIpDslamSecurityExConflictStatIfindex, hwIpDslamSecurityExConflictStatSecondIndex
and hwIpDslamSecurityExConflictStatThirdIndex. hwIpDslamSecurityExConflictStatIfindex is the
index of the port and its meaning is the same as that of ifIndex in ifTable of rfc1213 IF_MIB.
hwIpDslamSecurityExConflictStatSecondIndex is the second index of the table, the meaning varies with the port type.
It must be 0x7FFFFFFF for the DSL or P2P port and the value is ONT ID for the GPON port.
hwIpDslamAntiDosPacketLimitThirdIndex is the third index of the table, the meaning varies with
the port type. It must be 0x7FFFFFFF for the DSL or P2P port, its value is gemindex for
the GPON port.
hwIpDslamSecurityExConflictStatisticEntry row .1.3.6.1.4.1.2011.6.47.45.1
Used for querying the statistics of the packets with IP,IPv6,MAC conflict and illegal arp packets.
The indexes of this entry are hwIpDslamSecurityExConflictStatIfindex, hwIpDslamSecurityExConflictStatSecondIndex
and hwI…
Column Syntax OID
statistic index same as ifindex in standard IF MIB,
which contains frame ID,slot ID and port ID.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.45.1.1
Indicates the second index. The meaning varies with the port type.
It must be 0x7FFFFFFF for the DSL or ETH port and is the ONT ID for the xPON port.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.45.1.2
Indicates the third index. The meaning varies with the port type.
It must be 0x7FFFFFFF for the DSL, ETH, or EPON port and its value is gemindex for the GPON port.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.45.1.3
The number of packets which IP conflicted,
this number is less than 65535.
When the number is 0xffffffff(4294967295),
it means the board is not supported.
SNMPv2-SMICounter32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.45.1.4
The number of packets which IPv6 conflicted,
this number is less than 65535.
When the number is 0xffffffff(4294967295),
it means the board is not supported.
SNMPv2-SMICounter32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.45.1.5
The number of packets which MAC conflicted,
this number is less than 65535.
When the number is 0xffffffff(4294967295),
it means the board is not supported.
SNMPv2-SMICounter32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.45.1.6
The number of illegal arp packets, this number is
less than 65535.
When the number is 0xffffffff(4294967295),
it means the board is not supported.
SNMPv2-SMICounter32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.45.1.7
Clear the conflict Statistic.
Options:
1. invalid(1) -indicates query operation
2. clearStatistic(2) -clear the conflict Statistic
Enumerationr/w
Enumerated Values:
1invalid
2clearStatistic
.1.3.6.1.4.1.2011.6.47.45.1.8
.1.3.6.1.4.1.2011.6.47.48 · 1 row entry · 5 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwFirewallPacketFilterTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwFirewallPacketFilterTable'
It is used to config the ACL rules of appointed interface. The number of ACL rule added or deleted is hwFirewallPacketFilterAclNumber.
There are two directions in one interface, and at most eight ACL rules in every direction. The number of a ACL rule must be different from the others.
The indexes of this table are hwFirewallPacketFilterIfIndex,hwFirewallPacketFilterDirection,hwFirewallPacketFilterAclNumber.
hwFirewallPacketFilterEntry row .1.3.6.1.4.1.2011.6.47.48.1
It is used to config the ACL rules of appointed interface. The number of ACL rule added or deleted is hwFirewallPacketFilterAclNumber.
There are two directions in one interface, and at most eight ACL rules in every dire…
Column Syntax OID
indicates the index of interface,
the type of the interface must be vlanif or meth.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.48.1.1
indicates the direction ,it must be inbound or outbound.
Options:
1. inbound(1) -indicates that the packet is entering the firewall.
2. outbound(2) -indicates that the packet is leaving the firewall.
Enumeration
Enumerated Values:
1inbound
2outbound
.1.3.6.1.4.1.2011.6.47.48.1.2
the number of ACL,the range is 2000-3999,there are two types of the ACL can be used:
basic ACL:the number range is 2000-2999,
advance ACL:the number range is 3000-3999.
Integer32
Constraints:
range: 2000-3999
.1.3.6.1.4.1.2011.6.47.48.1.3
indicates the priority of the ACL rules,
this value is smaller,the priority is higher.
Unsigned32
Constraints:
range: 0-7
.1.3.6.1.4.1.2011.6.47.48.1.4
Indicates the row status. Creating, deleting, and querying ACL number are supported.
Options:
1. active(1) -indicates query operation
2. createAndGo(4) -add ACL number to interface
3. destroy(6) -delete ACL num…
SNMPv2-TCRowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
Description:
The RowStatus textual convention is used to manage the
creation and deletion of conceptual rows, and is used as the
value of the SYNTAX clause for the status column of a
conceptual row (as described in Section 7.7.1 of …
.1.3.6.1.4.1.2011.6.47.48.1.5
.1.3.6.1.4.1.2011.6.47.49 · 1 row entry · 6 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwFirewallPacketFilterStatisticsTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwFirewallPacketFilterStatisticsTable'
It is used to count the number of the packet which is permitted or denied by the ACL rules,
if there are not ACL rules in the interface,it will not be counted and displayed.
The indexes of this table are hwFirewallPacketFilterStatisticsIfIndex,hwFirewallPacketFilterStatisticsDirection,hwFirewallPacketFilterStatisticsAclIndex.
hwFirewallPacketFilterStatisticsEntry row .1.3.6.1.4.1.2011.6.47.49.1
It is used to count the number of the packet which is permitted or denied by the ACL rules,
if there are not ACL rules in the interface,it will not be counted and displayed.
The indexes of this entry are hwFirewallPacke…
Column Syntax OID
indicates the index of interface,
the type of the interface must be vlanif or meth.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.49.1.1
indicates the direction ,it must be inbound or outbound
Options:
1. inbound(1) -indicates that the packet is entering the firewall.
2. outbound(2) -indicates that the packet is leaving the firewall.
Enumeration
Enumerated Values:
1inbound
2outbound
.1.3.6.1.4.1.2011.6.47.49.1.2
the number of ACL,the range is 2000-3999,there are two types of the ACL can be used:
basic ACL:the number range is 2000-2999,
advance ACL:the number range is 3000-3999.
Integer32
Constraints:
range: 2000-3999
.1.3.6.1.4.1.2011.6.47.49.1.3
indicates the statistics of packet which is permitted by
one ACL rule.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.2011.6.47.49.1.4
indicates the statistics of packet which is denied by
one ACL rule.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.2011.6.47.49.1.5
it is used to reset the statistics of the packet that is permitted and denied by ACL rule.
Options:
1. clear(1) -reset the statistics of the packet that is permitted and denied by ACL rule.
Enumerationr/w
Enumerated Values:
1clear
.1.3.6.1.4.1.2011.6.47.49.1.6
.1.3.6.1.4.1.2011.6.47.50 · 1 row entry · 5 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwFirewallPacketFilterDefaultStatisticsTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwFirewallPacketFilterDefaultStatisticsTable'
It is used to count the number of the packet which is permitted or denied by default operation,
if there are not ACL rules in the interface,it will not be counted and displayed.
The indexes of this table are hwFirewallPacketFilterDefaultStatisticsIfIndex,hwFirewallPacketFilterDefaultStatisticsDirection.
hwFirewallPacketFilterDefaultStatisticsEntry row .1.3.6.1.4.1.2011.6.47.50.1
It is used to count the number of the packet which is permitted or denied by default operation,
if there are not ACL rules in the interface,it will not be counted and displayed.
The indexes of this entry are hwFirewallP…
Column Syntax OID
indicates the index of interface,
the type of the interface must be vlanif or meth.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.50.1.1
indicates the direction ,it must be inbound or outbound.
Options:
1. inbound(1) -indicates that the packet is entering the firewall.
2. outbound(2) -indicates that the packet is leaving the firewall.
Enumeration
Enumerated Values:
1inbound
2outbound
.1.3.6.1.4.1.2011.6.47.50.1.2
indicates the statistics of packet which is permitted by
default operation of the firewall.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.2011.6.47.50.1.3
indicates the statistics of packet which is permitted by
default operation of the firewall.
SNMPv2-SMICounter64
Type Constraints:
range: 0..18446744073709551615
.1.3.6.1.4.1.2011.6.47.50.1.4
it is used to reset the statistics of the packet that is
permitted and denied by default operation of the firewall in appointed interface.
Options:
1. clear(1) -reset the statistics of the packet that is permitted and…
Enumerationr/w
Enumerated Values:
1clear
.1.3.6.1.4.1.2011.6.47.50.1.5
.1.3.6.1.4.1.2011.6.47.52 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpv6IfAccessTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpv6IfAccessTable'
It is used to set two access features about Ipv6 on vlanif interface.
The features are denying the packet which target ip is link local address
and limiting the nerghbor entry number that our equipment can learn.
The index of this table is hwIpv6IfAccessIfIndex.
hwIpv6IfAccessEntry row .1.3.6.1.4.1.2011.6.47.52.1
It is used to set two access features about Ipv6 on vlanif interface.
The features are denying the packet which target ip is link local address
and limiting the nerghbor entry number that our equipment can learn.
The in…
Column Syntax OID
indicates the index of interface,
the type of the interface must be vlanif,otherwise you can't set the instance of the index.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.52.1.1
The object is used to set the feature that deny the packet which target ip
is link local address of equipment's interface.
Options:
1.deny(1) -deny the packet which target ip is link local address.
2.permit(2) -permit…
Enumerationr/w
Enumerated Values:
1deny
2permit
.1.3.6.1.4.1.2011.6.47.52.1.2
The object is used to set the max neighbor entry number that our equipment can learn per MAC.
If we want to enable the feature,we can set the value as 1 to 4,otherwise it is set as
the default value -1.
Integer32r/w
Constraints:
range: -1--1
range: 1-4
.1.3.6.1.4.1.2011.6.47.52.1.3
.1.3.6.1.4.1.2011.6.47.58 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamAntiBcAttackOntQueryTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamAntiBcAttackOntQueryTable'
Indicates the information of the ONT, which occurred the broadcast-attack.
The indexes of this table are hwIpDslamAntiBcAttackOntQueryIfIndex and hwIpDslamAntiBcAttackOntQueryOntId.
hwIpDslamAntiBcAttackOntQueryEntry row .1.3.6.1.4.1.2011.6.47.58.1
Indicates the information of the ONT, which occurred the broadcast-attack.
The indexes of this entry are hwIpDslamAntiBcAttackOntQueryIfIndex and hwIpDslamAntiBcAttackOntQueryOntId.
Column Syntax OID
Indicates the index of the port on which the anti-broadcast-attack is configured.
The value and algorithm are the same as those of ifIndex.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.58.1.1
Indicates the ID of the ONT on which the anti-broadcast-attack is configured.
Range: -1, 0-255
when the value is -1 indicates that the anti-broadcast-attack occurred on port.
Integer32
Constraints:
range: -1-255
.1.3.6.1.4.1.2011.6.47.58.1.2
Indicates the resume interval when the ONT was deactive because of anti-broadcast-attack.
Range: 1-1440
Unit: minute
Integer32
Constraints:
range: 1-1440
.1.3.6.1.4.1.2011.6.47.58.1.3
.1.3.6.1.4.1.2011.6.47.59 · 1 row entry · 4 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamCmtsMacAddrDynamicBindingTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamCmtsMacAddrDynamicBindingTable'
This table is used for querying dynamic bound MAC address entries of all service ports on a CM.
After MAC anti-spoofing is enabled, the user's MAC address is bound to a corresponding
service port. Up to eight MAC addresses can be bound to a service port. The table lists all MAC address bound to all service ports
on a CM.
The indexes of this table are hwIpDslamCmtsMacAddrDynamicBindingCmIndex and hwIpDslamCmtsMacAddrDynamicBindingMacIndex.
hwIpDslamCmtsMacAddrDynamicBindingCmIndex is the index of the CM, defined in docsIf3CmtsCmRegStatusId.
hwIpDslamMacAddrDynamicBindingMacIndex is the index of the MAC address bound to all service ports on a CM.
hwIpDslamCmtsMacAddrDynamicBindingEntry row .1.3.6.1.4.1.2011.6.47.59.1
This table is used for querying dynamic bound MAC address entries of all service ports on a CM.
After MAC anti-spoofing is enabled, the user's MAC address is bound to a corresponding
service port. Up to eight MAC addres…
Column Syntax OID
Indicates the index of the CM.
Unsigned32
Constraints:
range: 1-4294967295
.1.3.6.1.4.1.2011.6.47.59.1.1
Indicates the index of the MAC address bound to all service ports on the CM.
Integer32
Constraints:
range: 0-2147483647
.1.3.6.1.4.1.2011.6.47.59.1.2
Indicates the VLAN ID of the MAC address bound to all service ports on the CM.
SNMPv2-SMIUnsigned32
Type Constraints:
range: 0..4294967295
.1.3.6.1.4.1.2011.6.47.59.1.3
Indicates the MAC address bound to a specified service port on the CM.
SNMPv2-TCMacAddress
Type Constraints:
range: 6
Description:
Represents an 802 MAC address represented in the
`canonical' order defined by IEEE 802.1a, i.e., as if it
were transmitted least significant bit first, even though
802.5 (in contrast to other 802.x protocols) requires M…
.1.3.6.1.4.1.2011.6.47.59.1.4
.1.3.6.1.4.1.2011.6.47.63 · 1 row entry · 2 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamAntiBcAttackPortRateTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamAntiBcAttackPortRateTable'
Indicates the broadcast packet rate threshold of the port.
The index of this table is hwIpDslamAntiBcAttackPortRateIfIndex.
hwIpDslamAntiBcAttackPortRateEntry row .1.3.6.1.4.1.2011.6.47.63.1
Indicates the broadcast packet rate threshold of the port.
The index of this entry is hwIpDslamAntiBcAttackPortRateIfIndex.
Column Syntax OID
Indicates the index of the port.
The value and algorithm are the same as those of ifIndex.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.63.1.1
Indicates the broadcast packet rate threshold of the port.
0: The broadcast packet rate is not limited.
-1: The broadcast packet rate is not configured. The globally default rate threshold is used.
2..25000: Valid value…
Integer32r/w
Constraints:
range: -1-0
range: 2-25000
.1.3.6.1.4.1.2011.6.47.63.1.2
.1.3.6.1.4.1.2011.6.47.64 · 1 row entry · 3 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamAntiBcAttackOntRateTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamAntiBcAttackOntRateTable'
Indicates the broadcast packet rate threshold of the ONT.
The indexes of this table are hwIpDslamAntiBcAttackOntRateIfIndex and hwIpDslamAntiBcAttackOntRateOntId.
hwIpDslamAntiBcAttackOntRateEntry row .1.3.6.1.4.1.2011.6.47.64.1
Indicates the broadcast packet rate threshold of the ONT.
The indexes of this entry are hwIpDslamAntiBcAttackOntRateIfIndex and hwIpDslamAntiBcAttackOntRateOntId.
Column Syntax OID
Indicates the index of the port.
The value and algorithm are the same as those of ifIndex.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.64.1.1
Indicates the ID of the ONT.
Range: 0-255
Integer32
Constraints:
range: 0-255
.1.3.6.1.4.1.2011.6.47.64.1.2
Indicates the broadcast packet rate threshold of the ONT.
0: The broadcast packet rate is not limited.
-1: The broadcast packet rate is not configured. The globally default rate threshold is used.
2..25000: Valid values…
Integer32r/w
Constraints:
range: -1-0
range: 2-25000
.1.3.6.1.4.1.2011.6.47.64.1.3
.1.3.6.1.4.1.2011.6.47.69 · 1 row entry · 2 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamAntiMacServicePortTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamAntiMacServicePortTable'
Used for enabling or disabling anti-MAC-spoofing of the service port. Anti-MAC-spoofing
on a service port takes effect only when it is enabled globally and is enabled on the 
VLAN corresponding to this service port and is enabled on this service port.
The index of this table is hwIpDslamAntiMacServicePortIndex, indicating the index of the
service port. The service port corresponding to this index must already be created in
hwExtSrvFlowEntry.
hwIpDslamAntiMacServicePortEntry row .1.3.6.1.4.1.2011.6.47.69.1
Used for enabling or disabling anti-MAC-spoofing of the service port. Anti-MAC-spoofing
on a service port takes effect only when it is enabled globally and is enabled on the
VLAN corresponding to this service port and …
Column Syntax OID
Indicates the index of the service port bound to a specified MAC address.
The service port corresponding to this index must already be created in hwExtSrvFlowEntry.
Range: Begin with 1
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.69.1.1
Indicates the anti-MAC-spoofing status of the service port.
Options:
1. enabled(1) -indicates the anti-MAC-spoofing status is enabled
2. disabled(2) -indicates the anti-MAC-spoofing status is disabled
Default: enabled(…
EnabledStatusr/w
Type Values:
1enabled
2disabled
.1.3.6.1.4.1.2011.6.47.69.1.2
.1.3.6.1.4.1.2011.6.47.77 · 1 row entry · 5 columns
Uses the huawei variant from /opt/observium/mibs/huawei.
Command help
Walk hwIpDslamArpUnicastTable
/usr/bin/snmpbulkwalk -v2c -c '<community>' -Pud -Ir -OQUs -m 'HUAWEI-IPDSLAM-SECURITY-MIB' -M '/opt/observium/mibs/huawei:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'HUAWEI-IPDSLAM-SECURITY-MIB::hwIpDslamArpUnicastTable'
This table is used to create static entries for network-side ARP broadcast-to-unicast conversion. 
To transmit an ARP request packet with a specified target IP address received on the network side to the user on a specified service port, use this table. 
With ARP broadcast-to-unicast conversion enabled on the network side, when static IP address binding entries are created successfully for ARP broadcast-to-unicast conversion, 
the device transmits the ARP request packet with a specified target IP address received on the network side to the user on a specified service port.
The indexes of this table are hwIpDslamArpUnicastIndex and hwIpDslamArpUnicastSubIndex.
hwIpDslamArpUnicastEntry row .1.3.6.1.4.1.2011.6.47.77.1
This table is used to create static entries for network-side ARP broadcast-to-unicast conversion.
To transmit an ARP request packet with a specified target IP address received on the network side to the user on a speci…
Column Syntax OID
Indicates the index of a static entry for network-side ARP broadcast-to-unicast conversion, that is, the service port ID corresponding to entries.
SNMPv2-SMIInteger32
Type Constraints:
range: -2147483648..2147483647
.1.3.6.1.4.1.2011.6.47.77.1.1
Indicates the sub-index of a static entry for network-side ARP broadcast-to-unicast conversion, that is, the entry IDs corresponding to a service port.
Integer32
Constraints:
range: 0-63
.1.3.6.1.4.1.2011.6.47.77.1.2
Indicates the user IP address type in a static entry for network-side ARP broadcast-to-unicast conversion.
INET-ADDRESS-MIBInetAddressTyper/w
Type Values:
0unknown
1ipv4
2ipv6
3ipv4z
4ipv6z
16dns
25l2vpn
.1.3.6.1.4.1.2011.6.47.77.1.3
Indicates the user IP address in a static entry for network-side ARP broadcast-to-unicast conversion.
INET-ADDRESS-MIBInetAddressr/w
Type Constraints:
range: 0..255
.1.3.6.1.4.1.2011.6.47.77.1.4
Indicates the row status of a static entry for network-side ARP broadcast-to-unicast conversion.
Creating, deleting, and querying a static entry for network-side ARP broadcast-to-unicast conversion are supported.
Option…
SNMPv2-TCRowStatusr/w
Type Values:
1active
2notInService
3notReady
4createAndGo
5createAndWait
6destroy
Description:
The RowStatus textual convention is used to manage the
creation and deletion of conceptual rows, and is used as the
value of the SYNTAX clause for the status column of a
conceptual row (as described in Section 7.7.1 of …
.1.3.6.1.4.1.2011.6.47.77.1.5