swACLIpRulePermit
ACLMGMT-MIB ·
.1.3.6.1.4.1.171.12.9.3.2.1.20
Object
column
r/w
Enumeration
This object indicates if the result of the packet examination is 'permit' or 'deny'.
The default is 'permit'.
permit - Specifies that packets matching the access profile are
permitted to be forwarded by the switch.
deny - Specifies that packets matching the access profile
are not permitted to be forwarded by the switch and will be filtered.
mirror - Specifies the packets matching the access profile are copied
to the mirror port.
Note : The ACL mirror function will work after the mirror is enabled and the mirror port has
been configured.
set-drop-precedence - Specifies the packets that match the access profile are set
to drop precedence.
Context
- MIB
- ACLMGMT-MIB
- OID
.1.3.6.1.4.1.171.12.9.3.2.1.20- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- swACLIpRuleEntry
- Table
- swACLIpRuleTable
- Siblings
- 33
Syntax
Enumeration
Values & Constraints
Enumerated Values
1 | deny |
2 | permit |
3 | mirror |
5 | set-drop-precedence |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| swACLIpRuleProfileID The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.1 |
| swACLIpRuleSrcPort Specifies that the rule applies to the range of the TCP/UDP source ports.
A value of -1 indicates that this node is not actively used. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.10 |
| swACLIpRuleDstPort Specifies the TCP/UDP destination port range.
A value of -1 indicates that this node is not actively used. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.11 |
| swACLIpRuleFlagBits A value which indicates the set of TCP flags that this
entity may potentially offer. The value is a sum of flag bits.
This sum initially takes the value zero. Then, for each flag,… | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.12 |
| swACLIpRuleProtoID Specifies that the rule applies to the value of IP protocol ID traffic.
A value of -1 indicates that this node is not actively used. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.13 |
| swACLIpRuleUserMask Specifies that the rule applies to the IP protocol ID and the range of
options behind the IP header. | column | OctetString | .1.3.6.1.4.1.171.12.9.3.2.1.14 |
| swACLIpRuleEnablePriority Specifies that the access rule will apply only to packets with this
priority value. | column | Enumeration | .1.3.6.1.4.1.171.12.9.3.2.1.15 |
| swACLIpRulePriority Specifies the priority will change in packets while the swACLIpRuleEnablePriority
is enabled. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.16 |
| swACLIpRuleReplacePriority Specifies whether the packets that match the access profile will change the
802.1p priority tag field by the switch or not. | column | Enumeration | .1.3.6.1.4.1.171.12.9.3.2.1.17 |
| swACLIpRuleEnableReplaceDscp Specifies if the switch will change priorities of packets that match the access profile
DSCP field or not.
Replace DSCP and replace ToS precedence can not both be supported. | column | Enumeration | .1.3.6.1.4.1.171.12.9.3.2.1.18 |
| swACLIpRuleRepDscp Specifies a value to be written to the DSCP field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write the value in… | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.19 |
| swACLIpRuleAccessID The ID of the ACL rule entry relates to swACLIPRuleProfileID.
Row creation set to 0 indicates automatic assignment of the Access ID
for the ports in the swACLIpRulePort to create … | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.2 |
| swACLIpRulePort Specifies that the access rule will only apply to port(s).
This object and swACLIpRuleVID can not be set together. | column | PortList | .1.3.6.1.4.1.171.12.9.3.2.1.21 |
| swACLIpRuleRowStatus This object indicates the status of this entry. | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.171.12.9.3.2.1.22 |
| swACLIpRuleOwner The owner of the ACL rule entry. Only owners can modify this entry. | column | Enumeration | .1.3.6.1.4.1.171.12.9.3.2.1.23 |
| swACLIpRuleRxRate Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.24 |
| swACLIpRuleSrcMacAddress Specifies that the access will only apply to packets with
this source MAC address. | column | SNMPv2-TCMacAddress | .1.3.6.1.4.1.171.12.9.3.2.1.25 |
| swACLIpRuleEnableReplaceTosPrecedence Specifies if the switch will change priorities of packets that match the access profile
ToS precedence field or not.
Replace DSCP and replace ToS precedence can not both be suppor… | column | Enumeration | .1.3.6.1.4.1.171.12.9.3.2.1.26 |
| swACLIpRuleRepTosPrecedence Specifies a value to be written to the ToS precedence field of an incoming packet
that meets the criteria specified in the first part of the command.
This value will over-write th… | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.27 |
| swACLIpRuleVID Specifies the VLAN-based rule. There are two conditions:
1. this rule will apply to all the ports;
2. packets must belong to this VLAN.
This object and swACLIpRuleP… | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.28 |
| swACLIpRuleMatchVID Specifies that the access rule will apply only to packets with
this VLAN ID. It is applied to the specified ports configured by swACLIpRulePort. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.29 |
| swACLIpRuleVlan Specifies that the access rule will only apply to packets with the VLAN ID indexed by this VLAN name. | column | OctetString | .1.3.6.1.4.1.171.12.9.3.2.1.3 |
| swACLIpRuleMaskVlan Specifies the per rule mask for the VLAN as defined in swACLIpRuleVlan object.
The value of this object when not in use is the corresponding mask in the profile mask.
Once the va… | column | OctetString | .1.3.6.1.4.1.171.12.9.3.2.1.30 |
| swACLIpRuleMaskSrcIpaddress Specifies the per rule mask for the source IP address as defined in swACLIpRuleSrcIpaddress object.
The value of this object when not in use is the corresponding mask in the profi… | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.171.12.9.3.2.1.31 |
| swACLIpRuleMaskDstIpaddress Specifies the per rule mask for the destination IP address as defined in swACLIpRuleMaskDstIpaddress object.
The value of this object when not in use is the corresponding mask in … | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.171.12.9.3.2.1.32 |
| swACLIpRuleMaskSrcPort Specifies the per rule mask for the L4 source port as defined in swACLIpRuleSrcPort object.
The value of this object when not in use is the corresponding mask in the profile mask.… | column | OctetString | .1.3.6.1.4.1.171.12.9.3.2.1.33 |
| swACLIpRuleMaskDstPort Specifies the per rule mask for the L4 destination port as defined in swACLIpRuleDstPort object.
The value of this object when not in use is the corresponding mask in the profile … | column | OctetString | .1.3.6.1.4.1.171.12.9.3.2.1.34 |
| swACLIpRuleSrcIpaddress Specifies an IP source address. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.171.12.9.3.2.1.4 |
| swACLIpRuleDstIpaddress Specifies an IP destination address. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.171.12.9.3.2.1.5 |
| swACLIpRuleDscp Specifies the value of DSCP. The value can be configured from 0 to 63.
A value of -1 indicates that this node is not actively used. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.6 |
| swACLIpRuleProtocol Specifies the IP protocol.
For some older chips, this object can not be set. When getting this object,
it always returns the type which has been configured in swACLIpEntry.
… | column | Enumeration | .1.3.6.1.4.1.171.12.9.3.2.1.7 |
| swACLIpRuleType Specifies that the rule applies to the value of ICMP type traffic.
A value of -1 denotes that this object is not active. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.8 |
| swACLIpRuleCode Specifies that the rule applies to the value of ICMP code traffic.
A value of -1 denotes that this object is not active. | column | Integer32 | .1.3.6.1.4.1.171.12.9.3.2.1.9 |