ruleGlobalProtocol

Global acl config for protocol.
The format is P:RULE.
P means protocol value,		                 
P is I,known as ip protocol,
  the format of RULE is X-PI-A.B.C.D/N-A.B.C.D/N-D-F-C-V-M-SM-DM;
P is T,known as tcp(6) protocol,
  the format of RULE is X-PI-A.B.C.D/N-S-A.B.C.D/N-DE-D-F-C-V-M-SM-DM;
P is U,known as udp(17) protocol,
  the format of RULE is X-PI-A.B.C.D/N-S-A.B.C.D/N-DE-D-F-C-V-M-SM-DM;
P is A,known as arp protocol,
  the format of RULE is X-PI-A.B.C.D/N-A.B.C.D/N-C-V-M-SM-DM;
P is X,means as any,
 the format of RULE is X-PI-E-C-V-M-SM-DM;
P is 0-255(except 6 and 17),known as protocol id 0-255(except 6 and 17),
  the format of RULE is X-PI-A.B.C.D/N-A.B.C.D/N-D-F-C-V-M-SM-DM;
If P is 6(TCP),the format of RULE is X-PI-A.B.C.D/N-S-A.B.C.D/N-DE-D-F-C-V-M-SM-DM;
If P is 17(UDP),the format of RULE is X-PI-A.B.C.D/N-S-A.B.C.D/N-DE-D-F-C-V-M-SM-DM;
RULE here: 
X is 1:deny;2:permit;
PI takes portid;x means any port;
The first A.B.C.D/N is source ip and mask.if 'x' means any; 
The second A.B.C.D/N is destination ip and mask.if 'x' means any; 
S takes the format of P*Q,P:
0: no source port set,Q is also 0;
1-65536: source port 0-65535 ,same scope for Q.
DE takes the format of P*Q,P:
0: no destination port set,Q is also 0;
1-65536: destination port 0-65535 ,same scope for Q.                         
E takes the ethernet-type of 1501-65535;
0 means no ethernet-type set;
1501-65535 means ethernet-type;
D takes the value of 0-64;
0 means no dscp set; 
1-64 means dscp value (0-63) set ; 
F: 0 means no fragment set;1 means fragment set;
C: 0 means no cos set;1-8 means cos value 0-7;
V: 0 means no vlanID set;1-4094,vlanID;
M: 0 means no vlan mask set;1-65536 means vlan mask value(0x0000-0xffff)set;
SM:x means any;
y(HH.HH.HH.HH.HH.HH*HH.HH.HH.HH.HH.HH) 
means source mac and mask;
DM:x means any;
y(HH.HH.HH.HH.HH.HH*HH.HH.HH.HH.HH.HH) 
means destinatinon mac and mask.

MIB

Es2952-MIB

OID

.1.3.6.1.4.1.3902.15.2.11.17.6.1.4

Type

column

Access

readwrite

Status

current

Parent

globalAclEntry