hwAclUserSubitem
HUAWEI-ACL-MIB ·
.1.3.6.1.4.1.2011.5.1.1.7.1.2
Object
column
SNMPv2-SMIUnsigned32
The object specifies the number of an User ACL rule. If the number specified has been assigned to an ACL rule, the new rule will overwrite the old one, which is equal to editing the old rule. If the number is not assigned, the system will define a rule with the number and insert it to the place corresponding to its number. If no number is specified, the system will define a rule, assign a number to it and add it into the ACL. It will be placed at the end of the ACL when configuration sequence is adopted; otherwise, it will be placed based on the 'Depth-first' principle
Context
- MIB
- HUAWEI-ACL-MIB
- OID
.1.3.6.1.4.1.2011.5.1.1.7.1.2- Type
- column
- Access
- readonly
- Status
- current
- Parent
- hwAclUserRuleEntry
- Table
- hwAclUserRuleTable
- Siblings
- 34
Syntax
SNMPv2-SMIUnsigned32
- Source
- SNMPv2-SMIUnsigned32
- Base type
Unsigned32
Values & Constraints
Type Constraints
range: 0..4294967295
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| hwAclUserAclNum The index of user acl table, the index range is (6000..9999). | column | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.2011.5.1.1.7.1.1 |
| hwAclUserDestIp The object indicates the destination IP-address of an User acl rule. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.2011.5.1.1.7.1.10 |
| hwAclUserDestWild The object indicates the destination IP-address wild of an User acl rule. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.2011.5.1.1.7.1.11 |
| hwAclUserDestOp The object indicates the destination Port operation symbol of an User
acl group. It compares the port operators of destination address.
'lt' means less than,
'eq' means equal to,
… | column | Enumeration | .1.3.6.1.4.1.2011.5.1.1.7.1.12 |
| hwAclUserDestPort1 The object indicates the fourth layer destination port1. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.13 |
| hwAclUserDestPort2 The object indicates the fourth layer destination port2. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.14 |
| hwAclUserPrecedence The object indicates the value of IP-packet's precedence,
It filters packets according to precedence field.The invalid
value is 255. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.15 |
| hwAclUserTos The object indicates the value of IP-packet's TOS,
It filters packets according to type of service.The invalid
value is 255. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.16 |
| hwAclUserDscp The object indicates the value of frame.The invalid
value is 255. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.17 |
| hwAclUserEstablish The object indicates whether or not establishing. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.5.1.1.7.1.18 |
| hwAclUserTimeRangeIndex The object indicates the time range of an User acl rule.
When the current time is in the time range, the rule is valid.
Zero value declares that the acl rule has no time range. T… | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.19 |
| hwAclUserIcmpType The object indicates the type of ICMP packet.
It filters ICMP packets according to the ICMP message type.
The invalid value is 65535. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.20 |
| hwAclUserIcmpCode The object indicates the code of ICMP packet.
It filters ICMP packets according to the message code.
The invalid value is 65535. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.21 |
| hwAclUserFragments The object indicates whether or not matching fragmented packet,
It specifies that this rule is only valid for
the non-first fragment packets. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.5.1.1.7.1.22 |
| hwAclUserLog The object indicates whether to log the matched packets. The log
contents include sequence number of ACL rule,
packets passed or discarded, upper layer protocol type over IP,
s… | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.5.1.1.7.1.23 |
| hwAclUserEnable The object indicates whether the rule is valid or invalid. | column | SNMPv2-TCTruthValue | .1.3.6.1.4.1.2011.5.1.1.7.1.24 |
| hwAclUserCount The object indicates the statistics of matched packets by the rule. | column | SNMPv2-SMICounter32 | .1.3.6.1.4.1.2011.5.1.1.7.1.25 |
| hwAclUserVrfName The object indicates the VRF name of this rule,
It specifies the VPN-instance to which the packet belongs. | column | OctetString | .1.3.6.1.4.1.2011.5.1.1.7.1.26 |
| hwAclUserSrcUserGroupName The object indicates the source user group name of this rule.
if modetype source is user, null sting means any user | column | OctetString | .1.3.6.1.4.1.2011.5.1.1.7.1.27 |
| hwAclUserDestUserGroupName The object indicates the destination user group name of this rule.
if modetype destination is user, null sting means any user | column | OctetString | .1.3.6.1.4.1.2011.5.1.1.7.1.28 |
| hwAclUserSrcModeType The object indicates ACL's mode type,
Now support four state
0 Any match rule from any user group or any ip subnet,
1 NetAny match rule from any ip subnet,
2 UserAny … | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.29 |
| hwAclUserAct The object indicates the action of an User acl rule.
'deny' means discarding the packets that meet the condition,
'permit' means permitting the packets that meet the condition. | column | Enumeration | .1.3.6.1.4.1.2011.5.1.1.7.1.3 |
| hwAclUserDestModeType The object indicates ACL's mode type,
Now support four state
0 Any match rule from any user group or any ip subnet or any doamin name,
1 NetAny match rule from any ip … | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.30 |
| hwAclUserRowStatus RowStatus, Now support three state: CreateAndGo, Active, Destroy. | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.2011.5.1.1.7.1.31 |
| hwAclUserTcpSyncFlag The object indicates the code of TCP Sync flag(0~63),
The invalid value is -1. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.32 |
| hwAclUserSrcUserGroupNum The object indicates the source user group num of this rule.
if modetype source is user, null sting means any user | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.33 |
| hwAclUserDestUserGroupNum The object indicates the destination user group name of this rule.
if modetype destination is user, null sting means any user | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.34 |
| hwAclUserDestDomainName The object indicates the destination domain name of this rule.
if modetype destination is domain, null sting means any domain. | column | OctetString | .1.3.6.1.4.1.2011.5.1.1.7.1.35 |
| hwAclUserProtocol The object indicates the protocol type of the rule.
It specifies the protocol type over IP. The number of IP protocol is 0. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.4 |
| hwAclUserSrcIp The object indicates the source IP-address of an User acl rule. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.2011.5.1.1.7.1.5 |
| hwAclUserSrcWild The object indicates the source IP-address wild of an User acl rule. | column | SNMPv2-SMIIpAddress | .1.3.6.1.4.1.2011.5.1.1.7.1.6 |
| hwAclUserSrcOp The object indicates the source Port operation symbol of an User acl
rule. It compares the port operators of source address.
'lt' means less than,
'eq' means equal to,
'gt' means … | column | Enumeration | .1.3.6.1.4.1.2011.5.1.1.7.1.7 |
| hwAclUserSrcPort1 The object indicates the fourth layer sourec port 1.
It specifies the source port information of UDP or TCP packets. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.8 |
| hwAclUserSrcPort2 The object indicates the fourth layer source port2. | column | Integer32 | .1.3.6.1.4.1.2011.5.1.1.7.1.9 |