"Fossies" - the Fresh Open Source Software Archive

Member "netxms-3.4.178/contrib/mibs/ACLMGMT-MIB.txt" (16 Jun 2020, 238042 Bytes) of package /linux/misc/netxms-3.4.178.tar.gz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. For more information about "ACLMGMT-MIB.txt" see the Fossies "Dox" file reference documentation.

    1 -- -----------------------------------------------------------------------------
    2 -- MIB NAME : Access Control List(ACL) Common mib
    3 -- FILE NAME: ACL.mib
    4 -- DATE     : 2010/12/21
    5 -- VERSION  : 2.15
    6 -- PURPOSE  : To construct the MIB structure of Access Control List
    7 --            for proprietary enterprise
    8 -- -----------------------------------------------------------------------------
    9 -- MODIFICTION HISTORY:
   10 -- -----------------------------------------------------------------------------
   11 -- Version, Date, Author
   12 -- Description:
   13 --  [New Object]
   14 --  [Modification]
   15 -- Notes: (Requested by who and which project)
   16 --
   17 -- Version 2.15, 2010/12/21, Marco Visaya
   18 -- Description
   19 -- 1. remove value range of swACLPktContMaskOption2OffsetsValue
   20 -- Requested by Marco Visaya for project DES3200
   21 --
   22 -- Version 2.14, 2009/03/18, Marco Visaya
   23 -- Description
   24 -- 1. add swACLPktContMaskOption2
   25 -- 2. add swACLPktContRuleOption2
   26 -- 3. add swACLEthernetVlanMask
   27 -- 4. add swACLIpVlanMask
   28 -- Requested by Marco Visaya for project DES3200
   29 --
   30 -- Version 2.13, 2009/01/05, Oran Tang
   31 -- Description:
   32 -- 1.add swACLEtherRuleMatchVID in swACLEtherRuleTable
   33 -- 2.add swACLIpRuleMatchVID in swACLIpRuleTable
   34 -- 3.add swCpuAclEtherRuleMatchVID in swCpuAclEtherRuleTable
   35 -- 4.add swCpuAclIpRuleMatchVID in swCpuAclIpRuleTable
   36 --   for config the VLAN-ID which has the access rule.
   37 -- 5.modify the description of swACLEtherRuleVlan
   38 -- 6.modify the description of swACLEtherRuleVID
   39 -- 7.modify the description of swACLIpRuleVlan
   40 -- 8.modify the description of swACLIpRuleVID
   41 -- 9.modify the description of swCpuAclEtherRuleVlan
   42 -- 10.modify the description of swCpuAclIpRuleVlan
   43 -- Requested by Oran Tang for project DGS3700.
   44 --
   45 -- Revision 2.12 2008/12/26 by Ronald Hsu, Yedda Liao
   46 -- Description:
   47 -- 1.Add 'arp-spoofing(11)' and 'bpdu-tunnel(12)' in the value list of objects swACLEthernetOwner,
   48 --   swACLIpOwner, swACLPktContMaskOwner, swACLIpv6MaskOwner, swACLEtherRuleOwner, swACLIpRuleOwner,
   49 --   swACLPktContRuleOwner and swACLIpv6RuleOwner.
   50 --   For arp spoofing and bpdu tunnel function, we need to add the two types of the owner on these objects. 
   51 -- 2.Add 'pppoe(10)','arp-spoofing(11)' and 'bpdu-tunnel(12)' in the value list of objects
   52 --   swACLPktContMaskOptionOwner,swACLPktContRuleOptionOwner.
   53 --   For PPPoE circuit ID insertion, ARP spoofing and BPDU tunnel functions, we need to add the three types 
   54 --   of the owner on these objects. 
   55 --
   56 -- Revision 2.11 2008/11/21 by Ronald Hsu
   57 -- 1.Add 'set-drop-precedence(5)' in the value list of object swACLEtherRulePermit,
   58 --   swACLIpRulePermit, swACLPktContRulePermit, swACLIpv6RulePermit.
   59 --
   60 -- Revision 2.10 2008/10/16 by Ronald Hsu
   61 -- Description:
   62 -- 1.Add pppoe(10) in the value list of objects swACLEthernetOwner, swACLIpOwner, swACLPktContMaskOwner,
   63 -- swACLIpv6MaskOwner, swACLEtherRuleOwner, swACLIpRuleOwner, swACLPktContRuleOwner and swACLIpv6RuleOwner.
   64 -- Requested by project DES3500.
   65 --
   66 -- Version 2.09, 2008/05/05, Bonnnie
   67 -- Description:
   68 -- 1.add ismvlan(8) and dhcp-relay(9) in the value list of objects swACLEthernetOwner,swACLIpOwner,swACLPktContMaskOwner,
   69 -- swACLIpv6MaskOwner, swACLPktContMaskOptionOwner,swACLEtherRuleOwner,swACLIpRuleOwner,swACLPktContRuleOwner,
   70 -- swACLIpv6RuleOwner and swACLPktContRuleOptionOwner.
   71 -- Requested by Bonnnie cheng for project DHS3628.
   72 --
   73 -- Version 2.08, 2008/04/18, Marco
   74 -- Description:
   75 -- [New Object]
   76 -- [Modification]
   77 -- 1. change range of the ff nodes to include case node is not active:
   78 --      swACLEtherRule8021P
   79 --      swACLIpRuleDscp
   80 --      swAclIpRuleType
   81 --      swAclIpRuleCode
   82 --      swACLIpRuleSrcPort
   83 --      swACLIpRuleDstPort
   84 --      swACLIpRuleProtoID
   85 --      swCpuAclEtherRule8021P
   86 --      swCpuAclIpRuleDscp
   87 --      swCpuAclIpRuleType
   88 --      swCpuAclIpRuleCode
   89 --      swCpuAclIpRuleSrcPort
   90 --      swCpuAclIpRuleDstPort
   91 --      swCpuAclIpRuleProtoID
   92 -- removed *replaceprioritywith objects
   93 -- Requested by Marco Visaya for project DES30XXP.
   94 --
   95 -- Version 2.07, 2008/04/11, Marco
   96 -- Description:
   97 -- [New Object]
   98 -- 1. Added swACLEtherRuleReplacePriorityWith
   99 -- 2. Added swACLIPRuleReplacePriorityWith
  100 -- [Modification]
  101 -- 1. Remove the range of xxxProfileID, and xxxRxRate. The maximum value of the objects depend on the device.
  102 -- Requested by Marco Visaya for project DES30XXP.
  103 --
  104 --
  105 -- Version 2.06, 2008/04/02, Kelvin
  106 -- Description:
  107 -- [New Object]
  108 -- 1.add objects swACLIpv6MaskUseProtoType, swACLIpv6MaskTcpOption, swACLIpv6MaskUdpOption
  109 -- swACLIpv6MaskTCPorUDPSrcPortMask, swACLIpv6MaskTCPorUDPDstPortMask in swACLIpv6MaskTable.
  110 -- 2.add objects swACLIpv6RuleProtocol, swACLIpv6RuleSrcPort, swACLIpv6RuleDstPort in swACLIpv6RuleTable.
  111 -- Requested by Kelvin Tao for project DGS3700.
  112 --
  113 -- Version 2.05, 2008/02/20, Kelvin
  114 -- Description:
  115 -- [New Object]
  116 -- 1.add objects swACLEtherRuleVID in swACLEtherRuleTable.
  117 -- 2.add objects swACLIpRuleVID in swACLIpRuleTable.
  118 -- 3.add objects swACLPktContRuleVID in swACLPktContRuleTable.
  119 -- 4.add objects swACLIpv6RuleVID in swACLIpv6RuleTable.
  120 -- 5.add objects swACLPktContRuleOptionVID in swACLPktContRuleOptionTable.
  121 -- Requested by Kelvin Tao for project DGS3700.
  122 --
  123 -- Version 2.04, 2008/01/15, Yan
  124 -- Description:
  125 -- [New Object]
  126 -- 1.add objects swACLEtherRuleEnableReplaceTosPrecedence, swACLEtherRuleRepTosPrecedence in swACLEtherRuleTable.
  127 -- 2.add objects swACLIpRuleEnableReplaceTosPrecedence, swACLIpRuleRepTosPrecedence in swACLIpRuleTable.
  128 -- 3.add objects swACLPktContRuleEnableReplaceTosPrecedence, swACLPktContRuleRepTosPrecedence in swACLPktContRuleTable.
  129 -- 4.add objects swACLIpv6RuleEnableReplaceDscp, swACLIpv6RuleRepDscp, swACLIpv6RuleEnableReplaceTosPrecedence and
  130 -- swACLIpv6RuleRepTosPrecedence in swACLIpv6RuleTable.
  131 -- 5.add objects swACLPktContRuleOptionEnableReplaceTosPrecedence, swACLPktContRuleOptionRepTosPrecedence in
  132 -- swACLPktContRuleOptionTable.
  133 -- Requested by Yan Zhang for project DES35XX.
  134 --
  135 -- Version 2.03, 2007/12/27 by Ronald Hsu
  136 -- 1.Add 'lease-renew(4)' in the value list of object swACLPktContRulePermit.
  137 -- Requested by Ronald Hsu for project DES3828R4.
  138 --
  139 -- Version 2.02, 2007/12/18, Jenny
  140 -- Description:
  141 -- [New Object]
  142 -- 1.add object swACLPktContMaskOptionProfileName in swACLPktContMaskOptionTable.
  143 -- 2.add object swACLIpv6MaskProfileName in swACLIpv6MaskTable.
  144 -- 3.add object swACLIpProfileName in swACLIpTable.
  145 -- 4.add object swACLEthernetProfileName in swACLEthernetTable.
  146 -- 5.add object swACLPktContMaskProfileName in swACLPktContMaskTable.
  147 -- Requested by Jenny for project DES35XX.
  148 --
  149 -- Version 2.01, 2007/05/15, Yan
  150 -- Description:
  151 -- [Modification]
  152 -- 1. add Value List remark-dscp(4) of object swAclMeterActionForRateExceed, change the access
  153 -- of objects swAclMeterRate and swAclMeterActionForRateExceed from read-write to read-create for CLI.
  154 -- 2. change the access of object swACLIpRuleProtocol from read-only to read-write for supporting
  155 -- the new chip of project DGS3600R2.
  156 -- [New Object]
  157 -- 1. add objects swACLIpSrcMacAddrMask, swACLIpRuleSrcMacAddress for supporting the lab-out project DGS3400R2.
  158 -- 2. add tables swACLCounterTable, swACLPktContMaskOptionTable and swACLPktContRuleOptionTable for CLI.
  159 -- 3. add read-only objects swACLTotalUsedRuleEntries, swACLTotalUnusedRuleEntries, swACLEthernetUnusedRuleEntries,
  160 -- swACLIpUnusedRuleEntries, swACLPktContMaskUnusedRuleEntries, swACLIpv6MaskUnusedRuleEntries for CLI.
  161 -- 4. add objects swCpuAclEtherRuleEtherPort, swCpuAclIpRulePort, swCpuAclPktContRulePort, swCpuAclIpv6RulePort for CLI.
  162 -- 5. add object swCpuACLMaskDelAllState for supporting the lab-out project DGS3400R2.
  163 -- 6. add objects swAclMeterRemarkDscp, swAclMeterBurstSize, swAclMeterMode, swAclMeterTrtcmCir, swAclMeterTrtcmCbs,
  164 -- swAclMeterTrtcmPir, swAclMeterTrtcmPbs, swAclMeterTrtcmColorMode, swAclMeterTrtcmConformState, swAclMeterTrtcmConformReplaceDscp,
  165 -- swAclMeterTrtcmConformCounterState, swAclMeterTrtcmExceedState, swAclMeterTrtcmExceedReplaceDscp, swAclMeterTrtcmExceedCounterState,
  166 -- swAclMeterTrtcmViolateState, swAclMeterTrtcmViolateReplaceDscp, swAclMeterTrtcmViolateCounterState, swAclMeterSrtcmCir,
  167 -- swAclMeterSrtcmCbs, swAclMeterSrtcmEbs, swAclMeterSrtcmColorMode, swAclMeterSrtcmConformState, swAclMeterSrtcmConformReplaceDscp,
  168 -- swAclMeterSrtcmConformCounterState, swAclMeterSrtcmExceedState, swAclMeterSrtcmExceedReplaceDscp, swAclMeterSrtcmExceedCounterState,
  169 -- swAclMeterSrtcmViolateState, swAclMeterSrtcmViolateReplaceDscp, swAclMeterSrtcmViolateCounterState, swAclMeterRowStatus for CLI.
  170 -- 7. add objects swACLEtherRuleRxRate, swACLIpRuleRxRate, swACLPktContRuleRxRate, swACLIpv6RuleRxRate for supporting
  171 -- the older CLI Command, and these objects could be used for some projects.
  172 -- 8. add swIBPACLEthernetTable, swIBPACLIpTable, swIBPACLEtherRuleTable, swIBPACLIpRuleTable for keeping the OID
  173 -- of lab-out project DGS3400R2, but these objects can not be used for other project, so the status is obsolete.
  174 -- Requested by Yan for DGS3600R2.
  175 --
  176 -- Version 2.00, 2007/03/27, Yedda
  177 -- This is the first formal version for universal MIB definition.
  178 -- -----------------------------------------------------------------------------
  179 
  180 ACLMGMT-MIB DEFINITIONS ::= BEGIN
  181 
  182     IMPORTS
  183         Counter32,Counter64,TimeTicks,NOTIFICATION-TYPE,
  184         MODULE-IDENTITY,OBJECT-TYPE,IpAddress, Unsigned32
  185                                         FROM SNMPv2-SMI
  186         MacAddress, RowStatus           FROM SNMPv2-TC
  187         DisplayString                   FROM RFC1213-MIB
  188         SnmpAdminString                                 FROM SNMP-FRAMEWORK-MIB
  189         dlink-common-mgmt                               FROM DLINK-ID-REC-MIB;
  190 
  191     swAclMgmtMIB MODULE-IDENTITY
  192             LAST-UPDATED "0903180000Z"
  193             ORGANIZATION "D-Link Corp."
  194             CONTACT-INFO
  195                 "http://support.dlink.com"
  196             DESCRIPTION
  197                     "The structure of Access Control List information for the
  198                     proprietary enterprise."
  199         ::= { dlink-common-mgmt 9 }
  200 
  201     PortList                ::= OCTET STRING(SIZE (0..127))
  202 
  203     swAclCtrl                    OBJECT IDENTIFIER ::= { swAclMgmtMIB 1 }
  204     swAclMaskMgmt                OBJECT IDENTIFIER ::= { swAclMgmtMIB 2 }
  205     swAclRuleMgmt                OBJECT IDENTIFIER ::= { swAclMgmtMIB 3 }
  206     swCpuAclMaskMgmt             OBJECT IDENTIFIER ::= { swAclMgmtMIB 4 }
  207     swCpuAclRuleMgmt             OBJECT IDENTIFIER ::= { swAclMgmtMIB 5 }
  208     swAclMeteringMgmt            OBJECT IDENTIFIER ::= { swAclMgmtMIB 6 }
  209     
  210 -- -----------------------------------------------------------------------------
  211 -- Textual Conventions
  212 -- -----------------------------------------------------------------------------
  213 -- This definition may be excluded if IPv6 Supported
  214 Ipv6Address ::= TEXTUAL-CONVENTION
  215         DISPLAY-HINT "2x:"
  216         STATUS       current
  217         DESCRIPTION
  218                 "This data type is used to model IPv6 addresses.
  219                 This is a binary string of 16 octets in network
  220                 byte-order."
  221         SYNTAX       OCTET STRING (SIZE (16))
  222 
  223 -- -----------------------------------------------------------------------------
  224 -- swAclCtrl
  225 -- -----------------------------------------------------------------------------
  226     swCpuInterfacefilterState OBJECT-TYPE
  227         SYNTAX INTEGER{
  228                 enable(1),
  229                 disable(2)
  230         }
  231         MAX-ACCESS read-write
  232         STATUS current
  233         DESCRIPTION
  234             "Enable or disable CPU Interface Filtering (also called Software ACL).
  235              The default is disabled. If enabled, the filtering entries in the
  236              swAclRuleMgmt tables will be set to active if its RuleSwAclState is
  237              enabled. If disabled, the software ACL function will be disabled."
  238         ::={ swAclCtrl 1}
  239 
  240     swACLTotalUsedRuleEntries OBJECT-TYPE
  241         SYNTAX INTEGER
  242         MAX-ACCESS read-only
  243         STATUS current
  244         DESCRIPTION
  245             "The total number of used ACL rule entries."
  246         ::={ swAclCtrl 2}
  247 
  248     swACLTotalUnusedRuleEntries OBJECT-TYPE
  249         SYNTAX INTEGER
  250         MAX-ACCESS read-only
  251         STATUS current
  252         DESCRIPTION
  253             "The total number of unused ACL rule entries."
  254         ::={ swAclCtrl 3}
  255 
  256 -- -----------------------------------------------------------------------------
  257 -- swACLEthernetTable
  258 -- -----------------------------------------------------------------------------
  259     swACLEthernetTable OBJECT-TYPE
  260         SYNTAX  SEQUENCE OF SwACLEthernetEntry
  261         MAX-ACCESS  not-accessible
  262         STATUS  current
  263         DESCRIPTION
  264             "This table contains ACL mask Ethernet information.
  265              The access profile will be created on the switch to define which
  266              part of each incoming frame's layer 2 header will be examined
  267              by the switch. Masks entered will be combined with the
  268              values the switch finds in the specified frame header fields."
  269         ::= { swAclMaskMgmt 1 }
  270 
  271     swACLEthernetEntry OBJECT-TYPE
  272         SYNTAX  SwACLEthernetEntry
  273         MAX-ACCESS  not-accessible
  274         STATUS  current
  275         DESCRIPTION
  276             "A list of information about the ACL for Ethernet."
  277         INDEX  { swACLEthernetProfileID }
  278         ::= { swACLEthernetTable 1 }
  279 
  280     SwACLEthernetEntry ::=
  281         SEQUENCE {
  282             swACLEthernetProfileID
  283                 INTEGER,
  284 --            swACLEthernetPort
  285 --                PortList,
  286             swACLEthernetUsevlan
  287                 INTEGER,
  288             swACLEthernetMacAddrMaskState
  289                 INTEGER,
  290             swACLEthernetSrcMacAddrMask
  291                 MacAddress,
  292             swACLEthernetDstMacAddrMask
  293                 MacAddress,
  294             swACLEthernetUse8021p
  295                 INTEGER,
  296             swACLEthernetUseEthernetType
  297                 INTEGER,
  298             swACLEthernetRowStatus
  299                 RowStatus,
  300             swACLEthernetOwner
  301                 INTEGER,
  302             swACLEthernetUnusedRuleEntries
  303                 INTEGER,
  304             swACLEthernetProfileName
  305                 DisplayString,
  306             swACLEthernetVlanMask
  307             	OCTET STRING
  308         }
  309 
  310     swACLEthernetProfileID OBJECT-TYPE
  311         SYNTAX  INTEGER
  312         MAX-ACCESS  read-only   --read-create
  313         STATUS  current
  314         DESCRIPTION
  315             "The ID of the ACL mask entry unique to the mask list. The maximum value of this object depends on the device."
  316         ::= { swACLEthernetEntry 1 }
  317 
  318 --    swACLEthernetPort OBJECT-TYPE
  319 --        SYNTAX  PortList
  320 --        MAX-ACCESS  read-create
  321 --        STATUS  current
  322 --        DESCRIPTION
  323 --            "This object indicates which port(s) should be filtered."
  324 --        ::= { swACLEthernetEntry 2 }
  325 
  326     swACLEthernetUsevlan OBJECT-TYPE
  327         SYNTAX  INTEGER {
  328                enabled(1),
  329                disabled(2)
  330                }
  331         MAX-ACCESS  read-create
  332         STATUS  current
  333         DESCRIPTION
  334             "Specifies that the switch will examine the VLAN part of each packet header."
  335         ::= { swACLEthernetEntry 2 }
  336 
  337     swACLEthernetMacAddrMaskState OBJECT-TYPE
  338                 SYNTAX  INTEGER {
  339                other(1),
  340                dst-mac-addr(2),
  341                src-mac-addr(3),
  342                dst-src-mac-addr(4)
  343                }
  344         MAX-ACCESS  read-create
  345         STATUS  current
  346         DESCRIPTION
  347             "This object indicates the status of the MAC address mask.
  348                 other (1) - Neither source MAC address nor destination MAC address are masked.
  349                 dst-mac-addr (2) - Destination MAC addresses within received frames are
  350                     to be filtered when matched with the MAC address entry for the table.
  351                 src-mac-addr (3) - Source MAC addresses within received frames are to
  352                     be filtered when matched with the MAC address entry for the table.
  353                 dst-src-mac-addr (4) - Source or destination MAC addresses within received
  354                     frames are to be filtered when matched with the MAC address entry of the table."
  355         ::= { swACLEthernetEntry 3 }
  356 
  357     swACLEthernetSrcMacAddrMask OBJECT-TYPE
  358         SYNTAX  MacAddress
  359         MAX-ACCESS  read-create
  360         STATUS  current
  361         DESCRIPTION
  362             "This object specifies the MAC address mask for the source MAC address."
  363         ::= { swACLEthernetEntry 4 }
  364 
  365     swACLEthernetDstMacAddrMask OBJECT-TYPE
  366         SYNTAX  MacAddress
  367         MAX-ACCESS  read-create
  368         STATUS  current
  369         DESCRIPTION
  370             "This object specifies the MAC address mask for the destination MAC address."
  371         ::= { swACLEthernetEntry 5 }
  372 
  373     swACLEthernetUse8021p OBJECT-TYPE
  374         SYNTAX  INTEGER {
  375                enabled(1),
  376                disabled(2)
  377                }
  378         MAX-ACCESS  read-create
  379         STATUS  current
  380         DESCRIPTION
  381             "Specifies if the switch will examine the 802.1p priority value in the frame's header
  382               or not."
  383         ::= { swACLEthernetEntry 6 }
  384 
  385     swACLEthernetUseEthernetType OBJECT-TYPE
  386         SYNTAX  INTEGER {
  387                enabled(1),
  388                disabled(2)
  389                }
  390         MAX-ACCESS  read-create
  391         STATUS  current
  392         DESCRIPTION
  393             "Specifies if the switch will examine the Ethernet type value in each frame's header
  394               or not."
  395         ::= { swACLEthernetEntry 7 }
  396 
  397     swACLEthernetRowStatus OBJECT-TYPE --swACLEthernetState
  398         SYNTAX  RowStatus
  399         MAX-ACCESS  read-create
  400         STATUS  current
  401         DESCRIPTION
  402             "This object indicates the status of this entry."
  403         ::= { swACLEthernetEntry 8 }
  404 
  405     swACLEthernetOwner OBJECT-TYPE
  406         SYNTAX  INTEGER {
  407                any(1),
  408                acl(2),
  409                ipbind(3),
  410                other(4),
  411                dhcp(5),
  412                netbios(6),
  413                ext-netbios(7),
  414                ismvlan(8),
  415                dhcp-relay(9),
  416                pppoe(10),
  417                arp-spoofing(11),
  418                bpdu-tunnel(12)
  419                }
  420         MAX-ACCESS  read-only
  421         STATUS  current
  422         DESCRIPTION
  423             "The owner of the ACL mask entry. The type of ACL entry created. ACL type
  424              entries can only be modified when being configured through the same
  425              type command. For example IP-MAC Binding entries can only be modified
  426              or deleted through the IP-MAC Binding configurations or commands."
  427         ::= { swACLEthernetEntry 9 }
  428 
  429     swACLEthernetUnusedRuleEntries OBJECT-TYPE
  430         SYNTAX INTEGER
  431         MAX-ACCESS read-only
  432         STATUS current
  433         DESCRIPTION
  434             "The number of unused rule entries  of this Ethernet profile entry."
  435         ::={ swACLEthernetEntry 10}
  436 
  437     swACLEthernetProfileName OBJECT-TYPE
  438         SYNTAX DisplayString(SIZE(1..32))
  439         MAX-ACCESS read-create
  440         STATUS current
  441         DESCRIPTION
  442             "The name of the ACL mask entry unique to the mask list."
  443         ::= { swACLEthernetEntry 11 }
  444         
  445     swACLEthernetVlanMask OBJECT-TYPE
  446         SYNTAX OCTET STRING(SIZE(2))
  447         MAX-ACCESS read-create
  448         STATUS current
  449         DESCRIPTION
  450             "The mask used for the VLAN ID.
  451              Valid values are from 0x0000 to 0x0FFF.
  452              Default value is 0x0FFF
  453             "
  454         ::= { swACLEthernetEntry 12 }        
  455 
  456 -- -----------------------------------------------------------------------------
  457 -- swACLIpTable
  458 -- -----------------------------------------------------------------------------
  459     swACLIpTable OBJECT-TYPE
  460         SYNTAX  SEQUENCE OF SwACLIpEntry
  461         MAX-ACCESS  not-accessible
  462         STATUS  current
  463         DESCRIPTION
  464             "This table contains the ACL mask for IP information.
  465              Access profiles will be created on the switch to define which
  466              part of the incoming frame's IP layer packet header will be
  467              examined by the switch. Masks entered will be combined
  468              with the values the switch finds in the specified frame
  469              header fields."
  470         ::= { swAclMaskMgmt 2 }
  471 
  472     swACLIpEntry OBJECT-TYPE
  473         SYNTAX  SwACLIpEntry
  474         MAX-ACCESS  not-accessible
  475         STATUS  current
  476         DESCRIPTION
  477             "A list of information about the ACL of the IP Layer."
  478         INDEX  { swACLIpProfileID }
  479         ::= { swACLIpTable 1 }
  480 
  481     SwACLIpEntry ::=
  482         SEQUENCE {
  483             swACLIpProfileID
  484                 INTEGER,
  485 --            swACLIpPort
  486 --                PortList,
  487             swACLIpUsevlan
  488                 INTEGER,
  489             swACLIpIpAddrMaskState
  490                 INTEGER,
  491             swACLIpSrcIpAddrMask
  492                 IpAddress,
  493             swACLIpDstIpAddrMask
  494                 IpAddress,
  495             swACLIpUseDSCP
  496                 INTEGER,
  497             swACLIpUseProtoType
  498                 INTEGER,
  499             swACLIpIcmpOption
  500                 INTEGER,
  501             swACLIpIgmpOption
  502                 INTEGER,
  503             swACLIpTcpOption
  504                 INTEGER,
  505             swACLIpUdpOption
  506                 INTEGER,
  507             swACLIpTCPorUDPSrcPortMask
  508                 OCTET STRING,
  509             swACLIpTCPorUDPDstPortMask
  510                 OCTET STRING,
  511             swACLIpTCPFlagBit
  512                 INTEGER,
  513             swACLIpTCPFlagBitMask
  514                 INTEGER,
  515             swACLIpProtoIDOption
  516                 INTEGER,
  517             swACLIpProtoID
  518                 INTEGER,
  519             swACLIpProtoIDMask
  520                 OCTET STRING,
  521             swACLIpRowStatus
  522                 RowStatus,
  523             swACLIpOwner
  524                 INTEGER,
  525             swACLIpSrcMacAddrMask
  526                 MacAddress,
  527             swACLIpUnusedRuleEntries
  528                 INTEGER,
  529             swACLIpProfileName
  530                 DisplayString,
  531             swACLIpVlanMask
  532                 OCTET STRING
  533         }
  534     swACLIpProfileID OBJECT-TYPE
  535         SYNTAX  INTEGER
  536         MAX-ACCESS  read-only
  537         STATUS  current
  538         DESCRIPTION
  539             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
  540         ::= { swACLIpEntry 1 }
  541 
  542 --    swACLIpPort OBJECT-TYPE
  543 --        SYNTAX  PortList
  544 --        MAX-ACCESS  read-create
  545 --        STATUS  current
  546 --        DESCRIPTION
  547 --            "This object indicates which port(s) should be filtered."
  548 --        ::= { swACLIpEntry 2 }
  549 
  550     swACLIpUsevlan OBJECT-TYPE
  551         SYNTAX  INTEGER {
  552                enabled(1),
  553                disabled(2)
  554                }
  555         MAX-ACCESS  read-create
  556         STATUS  current
  557         DESCRIPTION
  558             "This object indicates if the IP layer VLAN part is examined or not."
  559         ::= { swACLIpEntry 2 }
  560 
  561     swACLIpIpAddrMaskState OBJECT-TYPE
  562                 SYNTAX  INTEGER {
  563                other(1),
  564                dst-ip-addr(2),
  565                src-ip-addr(3),
  566                dst-src-ip-addr(4)
  567                }
  568         MAX-ACCESS  read-create
  569         STATUS  current
  570         DESCRIPTION
  571             "This object indicates the status of IP address mask.
  572 
  573              other (1) - Neither source IP address nor destination IP address are
  574                 masked.
  575              dst-ip-addr (2) - Destination IP addresses within received frames
  576                 are to be filtered when matched with the IP address entry of the table.
  577              src-ip-addr (3) - Source IP addresses within received frames are
  578                 to be filtered when matched with the IP address entry of the table.
  579              dst-src-ip-addr (4) - Destination or source IP addresses within received
  580                 frames are to be filtered when matched with the IP address entry of the
  581                 table."
  582         ::= { swACLIpEntry 3 }
  583 
  584     swACLIpSrcIpAddrMask OBJECT-TYPE
  585         SYNTAX  IpAddress
  586         MAX-ACCESS  read-create
  587         STATUS  current
  588         DESCRIPTION
  589             "This object specifies the IP address mask for the source IP address."
  590         ::= { swACLIpEntry 4 }
  591 
  592     swACLIpDstIpAddrMask OBJECT-TYPE
  593         SYNTAX  IpAddress
  594         MAX-ACCESS  read-create
  595         STATUS  current
  596         DESCRIPTION
  597             "This object specifies the IP address mask for the destination IP address."
  598         ::= { swACLIpEntry 5 }
  599 
  600     swACLIpUseDSCP OBJECT-TYPE
  601         SYNTAX  INTEGER {
  602                enabled(1),
  603                disabled(2)
  604                }
  605         MAX-ACCESS  read-create
  606         STATUS  current
  607         DESCRIPTION
  608             "This object indicates if the DSCP protocol in the packet header
  609              is to be examined or not."
  610         ::= { swACLIpEntry 6 }
  611 
  612     swACLIpUseProtoType OBJECT-TYPE
  613         SYNTAX  INTEGER {
  614                none(1),
  615                icmp(2),
  616                igmp(3),
  617                tcp(4),
  618                udp(5),
  619                protocolId(6)
  620                }
  621         MAX-ACCESS  read-create
  622         STATUS  current
  623         DESCRIPTION
  624             "That object indicates which protocol will be examined."
  625         ::= { swACLIpEntry 7 }
  626 
  627     swACLIpIcmpOption OBJECT-TYPE
  628         SYNTAX  INTEGER {
  629                none(1),
  630                type(2),
  631                code(3),
  632                type-code(4)
  633                }
  634         MAX-ACCESS  read-create
  635         STATUS  current
  636         DESCRIPTION
  637             "This object indicates which fields are defined for ICMP.
  638              none (1)- Both fields are null.
  639              type (2)- Type field identified.
  640              code (3)- Code field identified.
  641              type-code (4)- Both ICMP fields identified.
  642             "
  643         ::= { swACLIpEntry 8 }
  644 
  645     swACLIpIgmpOption OBJECT-TYPE
  646         SYNTAX  INTEGER {
  647                enable(1),
  648                disable(2)
  649               }
  650         MAX-ACCESS  read-create
  651         STATUS  current
  652         DESCRIPTION
  653             "Indicates if the IGMP options field is identified or not."
  654         ::= { swACLIpEntry 9 }
  655 
  656     swACLIpTcpOption OBJECT-TYPE
  657         SYNTAX  INTEGER {
  658                other(1),
  659                dst-addr(2),
  660                src-addr(3),
  661                dst-src-addr(4)
  662                }
  663         MAX-ACCESS  read-create
  664         STATUS  current
  665         DESCRIPTION
  666             "This object indicates the status of the filtered address of TCP.
  667 
  668              other (1) - Neither source port nor destination port are
  669                 masked.
  670              dst-addr (2) - Packets will be filtered if this destination port
  671                 is identified in received frames.
  672              src-addr (3) - Packets will be filtered if this source port is
  673                 identified in received frames.
  674              dst-src-addr (4) - Packets will be filtered if this destination
  675                 or source port is identified in received frames."
  676         ::= { swACLIpEntry 10 }
  677 
  678     swACLIpUdpOption OBJECT-TYPE
  679         SYNTAX  INTEGER {
  680                other(1),
  681                dst-addr(2),
  682                src-addr(3),
  683                dst-src-addr(4)
  684                }
  685         MAX-ACCESS  read-create
  686         STATUS  current
  687         DESCRIPTION
  688             "This object indicates the status of the filtered address of UDP .
  689 
  690              other (1) - Neither source port nor destination port are
  691                 masked.
  692              dst-addr (2) - Packets will be filtered if this destination port
  693                 is identified in received frames.
  694              src-addr (3) - Packets will be filtered if this source port is
  695                 identified in received frames.
  696              dst-src-addr (4) - Packets will be filtered if this destination
  697                 or source port is identified in received frames."
  698 
  699         ::= { swACLIpEntry 11 }
  700 
  701     swACLIpTCPorUDPSrcPortMask OBJECT-TYPE
  702         SYNTAX  OCTET STRING (SIZE(2))
  703         MAX-ACCESS  read-create
  704         STATUS  current
  705         DESCRIPTION
  706             "Specifies a TCP port mask for the source port if swACLIpUseProtoType is TCP
  707              Specifies a UDP port mask for the source port if swACLIpUseProtoType is UDP.
  708              "
  709         ::= { swACLIpEntry 12 }
  710 
  711     swACLIpTCPorUDPDstPortMask OBJECT-TYPE
  712         SYNTAX  OCTET STRING (SIZE(2))
  713         MAX-ACCESS  read-create
  714         STATUS  current
  715         DESCRIPTION
  716             "Specifies a TCP port mask for the destination port if swACLIpUseProtoType is TCP
  717              Specifies a UDP port mask for the destination port if swACLIpUseProtoType is UDP."
  718         ::= { swACLIpEntry 13 }
  719 
  720     swACLIpTCPFlagBit OBJECT-TYPE
  721                 SYNTAX  INTEGER {
  722                enable(1),
  723                disable(2)
  724                }
  725         MAX-ACCESS  read-create
  726         STATUS  current
  727         DESCRIPTION
  728             "Specifies a TCP connection flag mask."
  729         ::= { swACLIpEntry 14 }
  730 
  731     swACLIpTCPFlagBitMask OBJECT-TYPE
  732         SYNTAX  INTEGER(0..63)
  733         MAX-ACCESS  read-create
  734         STATUS  current
  735         DESCRIPTION
  736             "A value which indicates the set of TCP flags that this
  737              entity may potentially offer. The value is a sum of flag bits.
  738              This sum initially takes the value zero. Then, for each flag, L,
  739              is added in the range 1 through 6, for which this node performs
  740              transactions where 2^(L-1) is added to the sum.
  741              Note that values should be calculated accordingly:
  742 
  743                  Flag      functionality
  744                    6        urg bit
  745                    5        ack bit
  746                    4        psh bit
  747                    3        rst bit
  748                    2        syn bit
  749                    1        fin bit
  750              For example, if you want to enable urg bit and ack bit, you
  751              should set value 48{2^(5-1) + 2^(6-1)}."
  752         ::= { swACLIpEntry 15 }
  753 
  754     swACLIpProtoIDOption OBJECT-TYPE
  755         SYNTAX  INTEGER {
  756                enable(1),
  757                disable(2)
  758                }
  759         MAX-ACCESS  read-create
  760         STATUS  current
  761         DESCRIPTION
  762             "Specifies if the switch will examine each frame's protocol ID field or not."
  763         ::= { swACLIpEntry 16 }
  764 
  765     swACLIpProtoID OBJECT-TYPE
  766         SYNTAX  INTEGER(0..255)
  767         MAX-ACCESS  read-create
  768         STATUS  current
  769         DESCRIPTION
  770             "Specifies that the rule applies to the IP protocol ID behind the IP header."
  771         ::= { swACLIpEntry 17 }
  772 
  773     swACLIpProtoIDMask OBJECT-TYPE
  774         SYNTAX  OCTET STRING (SIZE(20))
  775         MAX-ACCESS  read-create
  776         STATUS  current
  777         DESCRIPTION
  778             "Specifies that the rule applies to the IP protocol ID and the mask options
  779              behind the IP header."
  780         ::= { swACLIpEntry 18 }
  781 
  782     swACLIpRowStatus OBJECT-TYPE
  783         SYNTAX  RowStatus
  784         MAX-ACCESS  read-create
  785         STATUS  current
  786         DESCRIPTION
  787             "This object indicates the status of this entry."
  788         ::= { swACLIpEntry 19 }
  789 
  790     swACLIpOwner OBJECT-TYPE
  791         SYNTAX  INTEGER {
  792                any(1),
  793                acl(2),
  794                ipbind(3),
  795                other(4),
  796                dhcp(5),
  797                netbios(6),
  798                ext-netbios(7),
  799                ismvlan(8),
  800                dhcp-relay(9),
  801                pppoe(10),
  802                arp-spoofing(11),
  803                bpdu-tunnel(12)
  804                }
  805         MAX-ACCESS  read-only
  806         STATUS  current
  807         DESCRIPTION
  808             "The owner of the ACL mask entry. The type of ACL entry created. ACL type
  809              entries can only be modified when being configured through the same
  810              type command. For example, IP-MAC Binding entries can only be modified
  811              or deleted through the IP-MAC Binding configurations or commands."
  812         ::= { swACLIpEntry 20 }
  813 
  814     swACLIpSrcMacAddrMask OBJECT-TYPE
  815         SYNTAX  MacAddress
  816         MAX-ACCESS  read-only
  817         STATUS  current
  818         DESCRIPTION
  819             "This object specifies the MAC address mask for the source MAC address."
  820         ::= { swACLIpEntry 21 }
  821 
  822     swACLIpUnusedRuleEntries OBJECT-TYPE
  823         SYNTAX INTEGER
  824         MAX-ACCESS read-only
  825         STATUS current
  826         DESCRIPTION
  827             "The number of unused rule entries this IP profile entry."
  828         ::={ swACLIpEntry 22}
  829 
  830     swACLIpProfileName OBJECT-TYPE
  831         SYNTAX DisplayString(SIZE(1..32))
  832         MAX-ACCESS read-create
  833         STATUS current
  834         DESCRIPTION
  835             "The name of the ACL mask entry unique to the mask list."
  836         ::= { swACLIpEntry 23 }
  837         
  838     swACLIpVlanMask OBJECT-TYPE
  839         SYNTAX OCTET STRING(SIZE(2))
  840         MAX-ACCESS read-create
  841         STATUS current
  842         DESCRIPTION
  843             "The mask used for the VLAN ID.
  844              Valid values are from 0x0000 to 0x0FFF.
  845              Default value is 0x0FFF.
  846             "
  847         ::= { swACLIpEntry 24 }           
  848 
  849 -- -----------------------------------------------------------------------------
  850 -- swACLPktContMaskTable
  851 -- -----------------------------------------------------------------------------
  852     swACLPktContMaskTable OBJECT-TYPE
  853         SYNTAX  SEQUENCE OF SwACLPktContMaskEntry
  854         MAX-ACCESS  not-accessible
  855         STATUS  current
  856         DESCRIPTION
  857             "This table contains the ACL mask for user-defined information.
  858              An access profile will be created on the switch to define which part
  859              of each incoming frame's user-defined part of the packet header
  860              will be examined by switch. Masks entered will be combined
  861               with the values the switch finds in the specified frame header fields."
  862         ::= { swAclMaskMgmt 3 }
  863 
  864     swACLPktContMaskEntry OBJECT-TYPE
  865         SYNTAX  SwACLPktContMaskEntry
  866         MAX-ACCESS  not-accessible
  867         STATUS  current
  868         DESCRIPTION
  869             "A list of information about user-defined ACLs."
  870         INDEX  { swACLPktContMaskProfileID }
  871         ::= { swACLPktContMaskTable 1 }
  872 
  873     SwACLPktContMaskEntry ::=
  874         SEQUENCE {
  875             swACLPktContMaskProfileID
  876                 INTEGER,
  877 --            swACLPktContMaskPort
  878 --                PortList,
  879             swACLPktContMaskOffset0to15
  880                 OCTET STRING,
  881             swACLPktContMaskOffset16to31
  882                 OCTET STRING,
  883             swACLPktContMaskOffset32to47
  884                 OCTET STRING,
  885             swACLPktContMaskOffset48to63
  886                 OCTET STRING,
  887             swACLPktContMaskOffset64to79
  888                 OCTET STRING,
  889             swACLPktContMaskRowStatus
  890                 RowStatus,
  891             swACLPktContMaskOwner
  892                 INTEGER,
  893             swACLPktContMaskUnusedRuleEntries
  894                 INTEGER,
  895             swACLPktContMaskProfileName
  896                 DisplayString
  897         }
  898     swACLPktContMaskProfileID OBJECT-TYPE
  899         SYNTAX  INTEGER
  900         MAX-ACCESS  read-only   --read-create
  901         STATUS  current
  902         DESCRIPTION
  903             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
  904         ::= { swACLPktContMaskEntry 1 }
  905 
  906 --    swACLPktContMaskPort OBJECT-TYPE
  907 --        SYNTAX  PortList
  908 --        MAX-ACCESS  read-create
  909 --        STATUS  current
  910 --        DESCRIPTION
  911 --            "This object indicates which port(s) should be filtered."
  912 --        ::= { swACLPktContMaskEntry 2 }
  913 
  914     swACLPktContMaskOffset0to15 OBJECT-TYPE
  915         SYNTAX  OCTET STRING (SIZE(16))
  916         MAX-ACCESS  read-create
  917         STATUS  current
  918         DESCRIPTION
  919             "Specifies that the rule applies to the packet content (Offset0to15) and
  920              the mask options."
  921         ::= { swACLPktContMaskEntry 2 }
  922 
  923     swACLPktContMaskOffset16to31 OBJECT-TYPE
  924         SYNTAX  OCTET STRING (SIZE(16))
  925         MAX-ACCESS  read-create
  926         STATUS  current
  927         DESCRIPTION
  928             "Specifies that the rule applies to the packet content (Offset16to31) and
  929              the mask options."
  930          ::= { swACLPktContMaskEntry 3 }
  931 
  932     swACLPktContMaskOffset32to47 OBJECT-TYPE
  933         SYNTAX  OCTET STRING (SIZE(16))
  934         MAX-ACCESS  read-create
  935         STATUS  current
  936         DESCRIPTION
  937             "Specifies that the rule applies to the packet content (Offset32to47) and
  938              the mask options."
  939         ::= { swACLPktContMaskEntry 4 }
  940 
  941     swACLPktContMaskOffset48to63 OBJECT-TYPE
  942         SYNTAX  OCTET STRING (SIZE(16))
  943         MAX-ACCESS  read-create
  944         STATUS  current
  945         DESCRIPTION
  946             "Specifies that the rule applies to the packet content (Offset48to63) and
  947              the mask options."
  948         ::= { swACLPktContMaskEntry 5 }
  949 
  950     swACLPktContMaskOffset64to79 OBJECT-TYPE
  951         SYNTAX  OCTET STRING (SIZE(16))
  952         MAX-ACCESS  read-create
  953         STATUS  current
  954         DESCRIPTION
  955             "Specifies that the rule applies to the packet content (Offset64to79) and
  956              the mask options."
  957         ::= { swACLPktContMaskEntry 6 }
  958 
  959     swACLPktContMaskRowStatus OBJECT-TYPE --swACLEthernetState
  960         SYNTAX  RowStatus
  961         MAX-ACCESS  read-create
  962         STATUS  current
  963         DESCRIPTION
  964             "This object indicates the status of this entry."
  965         ::= { swACLPktContMaskEntry 7 }
  966 
  967     swACLPktContMaskOwner OBJECT-TYPE
  968         SYNTAX  INTEGER {
  969                any(1),
  970                acl(2),
  971                ipbind(3),
  972                other(4),
  973                dhcp(5),
  974                netbios(6),
  975                ext-netbios(7),
  976                ismvlan(8),
  977                dhcp-relay(9),
  978                pppoe(10),
  979                arp-spoofing(11),
  980                bpdu-tunnel(12)
  981                }
  982         MAX-ACCESS  read-only
  983         STATUS  current
  984         DESCRIPTION
  985              "The owner of the ACL mask entry. The type of ACL entry created. ACL type
  986              entries can only be modified when being configured through the same
  987              type command. For example, IP-MAC Binding entries can only be modified
  988              or deleted through the IP-MAC Binding configurations or commands."
  989         ::= { swACLPktContMaskEntry 8 }
  990 
  991     swACLPktContMaskUnusedRuleEntries OBJECT-TYPE
  992         SYNTAX INTEGER
  993         MAX-ACCESS read-only
  994         STATUS current
  995         DESCRIPTION
  996             "The number of unused rule entries of this IP profile entry."
  997         ::={ swACLPktContMaskEntry 9}
  998 
  999     swACLPktContMaskProfileName OBJECT-TYPE
 1000         SYNTAX DisplayString(SIZE(1..32))
 1001         MAX-ACCESS read-create
 1002         STATUS current
 1003         DESCRIPTION
 1004             "The name of the ACL mask entry unique to the mask list."
 1005         ::= { swACLPktContMaskEntry 10 }
 1006 
 1007 -- -----------------------------------------------------------------------------
 1008 -- swACLIpv6MaskTable
 1009 -- -----------------------------------------------------------------------------
 1010     swACLIpv6MaskTable OBJECT-TYPE
 1011         SYNTAX  SEQUENCE OF SwACLIpv6MaskEntry
 1012         MAX-ACCESS  not-accessible
 1013         STATUS  current
 1014         DESCRIPTION
 1015           "This table contains user-defined ACL mask information.
 1016            An access profile will be created on the switch to define which
 1017            parts of each incoming frame's IPv6 part of the packet header will
 1018            be examined by the switch. Masks entered will be combined
 1019            with the values the switch finds in the specified frame header fields."
 1020         ::= { swAclMaskMgmt 4 }
 1021 
 1022     swACLIpv6MaskEntry OBJECT-TYPE
 1023         SYNTAX  SwACLIpv6MaskEntry
 1024         MAX-ACCESS  not-accessible
 1025         STATUS  current
 1026         DESCRIPTION
 1027           "A list of information about user-defined ACLs."
 1028         INDEX  { swACLIpv6MaskProfileID }
 1029         ::= { swACLIpv6MaskTable 1 }
 1030 
 1031     SwACLIpv6MaskEntry ::=
 1032         SEQUENCE {
 1033             swACLIpv6MaskProfileID
 1034                 INTEGER,
 1035 --            swACLIpv6MaskPort
 1036 --                PortList,
 1037             swACLIpv6MaskClass
 1038                 INTEGER,
 1039             swACLIpv6MaskFlowlabel
 1040                 INTEGER,
 1041             swACLIpv6IpAddrMaskState
 1042                 INTEGER,
 1043             swACLIpv6MaskSrcIpv6Mask
 1044                 Ipv6Address,
 1045             swACLIpv6MaskDstIpv6Mask
 1046                 Ipv6Address,
 1047             swACLIpv6MaskRowStatus
 1048                 RowStatus,
 1049             swACLIpv6MaskOwner
 1050                 INTEGER,
 1051             swACLIpv6MaskUnusedRuleEntries
 1052                 INTEGER,
 1053             swACLIpv6MaskProfileName
 1054                 DisplayString,
 1055             swACLIpv6MaskUseProtoType
 1056                 INTEGER,
 1057             swACLIpv6MaskTcpOption
 1058                 INTEGER,
 1059             swACLIpv6MaskUdpOption
 1060                 INTEGER,
 1061             swACLIpv6MaskTCPorUDPSrcPortMask
 1062                 OCTET STRING,
 1063             swACLIpv6MaskTCPorUDPDstPortMask
 1064                 OCTET STRING
 1065         }
 1066     swACLIpv6MaskProfileID OBJECT-TYPE
 1067         SYNTAX  INTEGER
 1068         MAX-ACCESS  read-only   --read-create
 1069         STATUS  current
 1070         DESCRIPTION
 1071             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 1072         ::= { swACLIpv6MaskEntry 1 }
 1073 
 1074 --    swACLIpv6MaskPort OBJECT-TYPE
 1075 --        SYNTAX  PortList
 1076 --        MAX-ACCESS  read-create
 1077 --        STATUS  current
 1078 --        DESCRIPTION
 1079 --            "This object indicates which port(s) should be filtered."
 1080 --        ::= { swACLIpv6MaskEntry 2 }
 1081 
 1082     swACLIpv6MaskClass OBJECT-TYPE
 1083         SYNTAX  INTEGER {
 1084                enable(1),
 1085                disable(2)
 1086                }
 1087         MAX-ACCESS  read-create
 1088         STATUS  current
 1089         DESCRIPTION
 1090             "Specifies that the rule applies to the IPv6 class field and the mask options."
 1091         ::= { swACLIpv6MaskEntry 2 }
 1092 
 1093     swACLIpv6MaskFlowlabel OBJECT-TYPE
 1094         SYNTAX  INTEGER {
 1095                enable(1),
 1096                disable(2)
 1097                }
 1098         MAX-ACCESS  read-create
 1099         STATUS  current
 1100         DESCRIPTION
 1101             "Specifies that the rule applies to the IPv6 flowlabel field and the mask options."
 1102         ::= { swACLIpv6MaskEntry 3 }
 1103 
 1104     swACLIpv6IpAddrMaskState OBJECT-TYPE
 1105                 SYNTAX  INTEGER {
 1106                other(1),
 1107                dst-ipv6-addr(2),
 1108                src-ipv6-addr(3),
 1109                dst-src-ipv6-addr(4)
 1110                }
 1111         MAX-ACCESS  read-create
 1112         STATUS  current
 1113         DESCRIPTION
 1114             "This object indicates the status of the IPv6 address mask.
 1115 
 1116             other (1) - Neither source IPv6 address nor destination IPv6 address are
 1117                 masked.
 1118             dst-ipv6-addr (2) - Received frame destination IPv6 address is
 1119                 currently used to be filtered as it meets with the IPv6
 1120                 address entry of the table.
 1121             src-ipv6-addr (3) - Received frame source IPv6 address is currently
 1122                 used to be filtered as it meets with the IPv6 address entry of
 1123                 the table.
 1124             dst-src-ipv6-addr (4) - Received frame destination IPv6 address or
 1125                 source IPv6 address is currently used to be filtered as it meets
 1126                 with the IPv6 address entry of the table."
 1127         ::= { swACLIpv6MaskEntry 4 }
 1128 
 1129     swACLIpv6MaskSrcIpv6Mask OBJECT-TYPE
 1130         SYNTAX  Ipv6Address
 1131         MAX-ACCESS  read-create
 1132         STATUS  current
 1133         DESCRIPTION
 1134             "Specifies that the rule applies to the Source IPv6 address and the mask options.
 1135             This should be a 16 byte octet string."
 1136         ::= { swACLIpv6MaskEntry 5 }
 1137 
 1138     swACLIpv6MaskDstIpv6Mask OBJECT-TYPE
 1139         SYNTAX  Ipv6Address
 1140         MAX-ACCESS  read-create
 1141         STATUS  current
 1142         DESCRIPTION
 1143             "Specifies that the rule applies to the Destination IPv6 address and the mask options.
 1144             This should be a 16 byte octet string."
 1145         ::= { swACLIpv6MaskEntry 6 }
 1146 
 1147     swACLIpv6MaskRowStatus OBJECT-TYPE
 1148         SYNTAX  RowStatus
 1149         MAX-ACCESS  read-create
 1150         STATUS  current
 1151         DESCRIPTION
 1152             "This object indicates the status of this entry."
 1153         ::= { swACLIpv6MaskEntry 7 }
 1154 
 1155     swACLIpv6MaskOwner OBJECT-TYPE
 1156         SYNTAX  INTEGER {
 1157                any(1),
 1158                acl(2),
 1159                ipbind(3),
 1160                other(4),
 1161                dhcp(5),
 1162                netbios(6),
 1163                ext-netbios(7),
 1164                ismvlan(8),
 1165                dhcp-relay(9),
 1166                pppoe(10),
 1167                arp-spoofing(11),
 1168                bpdu-tunnel(12)
 1169                }
 1170         MAX-ACCESS  read-only
 1171         STATUS  current
 1172         DESCRIPTION
 1173            "The owner of the ACL mask entry. The type of ACL entry created. ACL type
 1174             entries can only be modified when being configured through the same
 1175             type command. For example, IP-MAC Binding entries can only be modified
 1176             or deleted through the IP-MAC Binding configurations or commands."
 1177         ::= { swACLIpv6MaskEntry 8 }
 1178 
 1179     swACLIpv6MaskUnusedRuleEntries OBJECT-TYPE
 1180         SYNTAX INTEGER
 1181         MAX-ACCESS read-only
 1182         STATUS current
 1183         DESCRIPTION
 1184             "The number of unused rule entries of this IP profile entry."
 1185         ::={ swACLIpv6MaskEntry 9}
 1186 
 1187     swACLIpv6MaskProfileName OBJECT-TYPE
 1188         SYNTAX DisplayString(SIZE(1..32))
 1189         MAX-ACCESS read-create
 1190         STATUS current
 1191         DESCRIPTION
 1192             "The name of the ACL mask entry unique to the mask list."
 1193         ::= { swACLIpv6MaskEntry 10 }
 1194 
 1195     swACLIpv6MaskUseProtoType OBJECT-TYPE
 1196         SYNTAX  INTEGER {
 1197                none(1),
 1198                tcp(2),
 1199                udp(3)
 1200                }
 1201         MAX-ACCESS  read-create
 1202         STATUS  current
 1203         DESCRIPTION
 1204             "That object indicates which protocol will be examined."
 1205         ::= { swACLIpv6MaskEntry 11 }
 1206 
 1207     swACLIpv6MaskTcpOption OBJECT-TYPE
 1208         SYNTAX  INTEGER {
 1209                other(1),
 1210                dst-addr(2),
 1211                src-addr(3),
 1212                dst-src-addr(4)
 1213                }
 1214         MAX-ACCESS  read-create
 1215         STATUS  current
 1216         DESCRIPTION
 1217             "This object indicates the status of the filtered address of TCP.
 1218 
 1219              other (1) - Neither source port nor destination port are
 1220                 masked.
 1221              dst-addr (2) - Packets will be filtered if this destination port
 1222                 is identified in received frames.
 1223              src-addr (3) - Packets will be filtered if this source port is
 1224                 identified in received frames.
 1225              dst-src-addr (4) - Packets will be filtered if this destination
 1226                 or source port is identified in received frames."
 1227         ::= { swACLIpv6MaskEntry 12 }
 1228 
 1229     swACLIpv6MaskUdpOption OBJECT-TYPE
 1230         SYNTAX  INTEGER {
 1231                other(1),
 1232                dst-addr(2),
 1233                src-addr(3),
 1234                dst-src-addr(4)
 1235                }
 1236         MAX-ACCESS  read-create
 1237         STATUS  current
 1238         DESCRIPTION
 1239             "This object indicates the status of the filtered address of UDP.
 1240 
 1241              other (1) - Neither source port nor destination port is
 1242                 masked.
 1243              dst-addr (2) - Packets will be filtered if this destination port
 1244                 is identified in received frames.
 1245              src-addr (3) - Packets will be filtered if this source port is
 1246                 identified in received frames.
 1247              dst-src-addr (4) - Packets will be filtered if this destination
 1248                 or source port is identified in received frames."
 1249 
 1250         ::= { swACLIpv6MaskEntry 13 }
 1251 
 1252     swACLIpv6MaskTCPorUDPSrcPortMask OBJECT-TYPE
 1253         SYNTAX  OCTET STRING (SIZE(2))
 1254         MAX-ACCESS  read-create
 1255         STATUS  current
 1256         DESCRIPTION
 1257             "Specifies a TCP port mask for the source port if swACLIpv6MaskUseProtoType is TCP
 1258              Specifies a UDP port mask for the source port if swACLIpv6MaskUseProtoType is UDP.
 1259              "
 1260         ::= { swACLIpv6MaskEntry 14 }
 1261 
 1262     swACLIpv6MaskTCPorUDPDstPortMask OBJECT-TYPE
 1263         SYNTAX  OCTET STRING (SIZE(2))
 1264         MAX-ACCESS  read-create
 1265         STATUS  current
 1266         DESCRIPTION
 1267             "Specifies a TCP port mask for the destination port if swACLIpv6MaskUseProtoType is TCP
 1268              Specifies a UDP port mask for the destination port if swACLIpv6MaskUseProtoType is UDP."
 1269         ::= { swACLIpv6MaskEntry 15 }
 1270 
 1271 -- -----------------------------------------------------------------------------
 1272 -- swACLMaskDelAllState
 1273 -- -----------------------------------------------------------------------------
 1274     swACLMaskDelAllState OBJECT-TYPE
 1275         SYNTAX      INTEGER{
 1276                 none(1),
 1277                 start(2)
 1278                 }
 1279         MAX-ACCESS  read-write
 1280         STATUS      current
 1281         DESCRIPTION
 1282             "Used to delete all ACL masks."
 1283         ::= { swAclMaskMgmt 5 }
 1284 
 1285 -- -----------------------------------------------------------------------------
 1286 --swIBPACLEthernetTable
 1287 -- -----------------------------------------------------------------------------
 1288     swIBPACLEthernetTable OBJECT-TYPE
 1289         SYNTAX  SEQUENCE OF SwIBPACLEthernetEntry
 1290         MAX-ACCESS  not-accessible
 1291         STATUS  obsolete
 1292         DESCRIPTION
 1293             "This table contains IP-MAC-Binding ACL mask Ethernet information.
 1294              Access profiles will be created on the switch by row creation and to
 1295              define which parts of each incoming frame's layer 2 header part
 1296              the switch will examine. Masks can be entered that will be combined
 1297              with the values the switch finds in the specified frame header fields."
 1298         ::= { swAclMaskMgmt 6 }
 1299 
 1300     swIBPACLEthernetEntry OBJECT-TYPE
 1301         SYNTAX  SwIBPACLEthernetEntry
 1302         MAX-ACCESS  not-accessible
 1303         STATUS  obsolete
 1304         DESCRIPTION
 1305             "A list of information about the Ethernet ACL."
 1306         INDEX  { swIBPACLEthernetProfileID }
 1307         ::= { swIBPACLEthernetTable 1 }
 1308 
 1309     SwIBPACLEthernetEntry ::=
 1310         SEQUENCE {
 1311             swIBPACLEthernetProfileID
 1312                 INTEGER,
 1313             swIBPACLEthernetUseEthernetType
 1314                 INTEGER
 1315         }
 1316     swIBPACLEthernetProfileID OBJECT-TYPE
 1317         SYNTAX  INTEGER
 1318         MAX-ACCESS  read-only
 1319         STATUS  obsolete
 1320         DESCRIPTION
 1321             "The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device."
 1322         ::= { swIBPACLEthernetEntry 1 }
 1323 
 1324     swIBPACLEthernetUseEthernetType OBJECT-TYPE
 1325         SYNTAX  INTEGER {
 1326                enabled(1),
 1327                disabled(2)
 1328                }
 1329         MAX-ACCESS  read-only
 1330         STATUS  obsolete
 1331         DESCRIPTION
 1332             "Specifies if the switch will examine the Ethernet type value in each frame's header
 1333               or not."
 1334         ::= { swIBPACLEthernetEntry 2 }
 1335 
 1336 -- -----------------------------------------------------------------------------
 1337 --swIBPACLIpTable
 1338 -- -----------------------------------------------------------------------------
 1339     swIBPACLIpTable OBJECT-TYPE
 1340         SYNTAX  SEQUENCE OF SwIBPACLIpEntry
 1341         MAX-ACCESS  not-accessible
 1342         STATUS  obsolete
 1343         DESCRIPTION
 1344             "This table contains IP-MAC-Binding IP ACL mask information.
 1345              Access profiles will be created on the switch by row creation and to
 1346              define which parts of each incoming frame's IP layer part of the header
 1347              the switch will examine. Masks can be entered that will be combined
 1348              with the values the switch finds in the specified frame header fields."
 1349         ::= { swAclMaskMgmt 7 }
 1350 
 1351     swIBPACLIpEntry OBJECT-TYPE
 1352         SYNTAX  SwIBPACLIpEntry
 1353         MAX-ACCESS  not-accessible
 1354         STATUS  obsolete
 1355         DESCRIPTION
 1356             "A list of information about the IP layer of the ACL."
 1357         INDEX  { swIBPACLIpProfileID }
 1358         ::= { swIBPACLIpTable 1 }
 1359 
 1360     SwIBPACLIpEntry ::=
 1361         SEQUENCE {
 1362             swIBPACLIpProfileID
 1363                 INTEGER,
 1364             swIBPACLIpSrcMacAddrMask
 1365                 MacAddress,
 1366             swIBPACLIpSrcIpAddrMask
 1367                 IpAddress
 1368         }
 1369     swIBPACLIpProfileID OBJECT-TYPE
 1370         SYNTAX  INTEGER
 1371         MAX-ACCESS  read-only
 1372         STATUS  obsolete
 1373         DESCRIPTION
 1374             "The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device."
 1375         ::= { swIBPACLIpEntry 1 }
 1376 
 1377     swIBPACLIpSrcMacAddrMask OBJECT-TYPE
 1378         SYNTAX  MacAddress
 1379         MAX-ACCESS  read-only
 1380         STATUS  obsolete
 1381         DESCRIPTION
 1382             "This object specifies the MAC address mask for the source MAC address."
 1383         ::= { swIBPACLIpEntry 2 }
 1384 
 1385     swIBPACLIpSrcIpAddrMask OBJECT-TYPE
 1386         SYNTAX  IpAddress
 1387         MAX-ACCESS  read-only
 1388         STATUS  obsolete
 1389         DESCRIPTION
 1390             "This object specifies IP address masks for the source IP address."
 1391         ::= { swIBPACLIpEntry 3 }
 1392 
 1393 
 1394 -- -----------------------------------------------------------------------------
 1395 -- swACLPktContMaskOptionTable
 1396 -- -----------------------------------------------------------------------------
 1397     swACLPktContMaskOptionTable OBJECT-TYPE
 1398         SYNTAX  SEQUENCE OF SwACLPktContMaskOptionEntry
 1399         MAX-ACCESS  not-accessible
 1400         STATUS  current
 1401         DESCRIPTION
 1402             "This table contains the ACL mask for user-defined option information.
 1403              An access profile will be created on the switch to define which part
 1404              of each incoming frame's user-defined part of the packet header
 1405              will be examined by switch. Masks entered will be combined
 1406              with the values the switch finds in the specified frame header fields."
 1407         ::= { swAclMaskMgmt 8 }
 1408 
 1409     swACLPktContMaskOptionEntry OBJECT-TYPE
 1410         SYNTAX  SwACLPktContMaskOptionEntry
 1411         MAX-ACCESS  not-accessible
 1412         STATUS  current
 1413         DESCRIPTION
 1414             "A list of information about the user-defined ACL."
 1415         INDEX  { swACLPktContMaskOptionProfileID }
 1416         ::= { swACLPktContMaskOptionTable 1 }
 1417 
 1418     SwACLPktContMaskOptionEntry ::=
 1419         SEQUENCE {
 1420             swACLPktContMaskOptionProfileID
 1421                 INTEGER,
 1422             swACLPktContMaskOffsetChunk1State
 1423                 INTEGER,
 1424             swACLPktContMaskOffsetChunk1OffsetValue
 1425                 INTEGER,
 1426             swACLPktContMaskOffsetChunk1Mask
 1427                 OCTET STRING,
 1428             swACLPktContMaskOffsetChunk2State
 1429                 INTEGER,
 1430             swACLPktContMaskOffsetChunk2OffsetValue
 1431                 INTEGER,
 1432             swACLPktContMaskOffsetChunk2Mask
 1433                 OCTET STRING,
 1434             swACLPktContMaskOffsetChunk3State
 1435                 INTEGER,
 1436             swACLPktContMaskOffsetChunk3OffsetValue
 1437                 INTEGER,
 1438             swACLPktContMaskOffsetChunk3Mask
 1439                 OCTET STRING,
 1440             swACLPktContMaskOffsetChunk4State
 1441                 INTEGER,
 1442             swACLPktContMaskOffsetChunk4OffsetValue
 1443                 INTEGER,
 1444             swACLPktContMaskOffsetChunk4Mask
 1445                 OCTET STRING,
 1446             swACLPktContMaskOptionRowStatus
 1447                 RowStatus,
 1448             swACLPktContMaskOptionOwner
 1449                 INTEGER,
 1450             swACLPktContMaskOptionUnusedRuleEntries
 1451                 INTEGER,
 1452             swACLPktContMaskOptionProfileName
 1453                 DisplayString
 1454         }
 1455     swACLPktContMaskOptionProfileID OBJECT-TYPE
 1456         SYNTAX  INTEGER
 1457         MAX-ACCESS  read-only
 1458         STATUS  current
 1459         DESCRIPTION
 1460             "The ID of the ACL mask entry, unique to the mask list. The maximum value of this object depends on the device."
 1461         ::= { swACLPktContMaskOptionEntry 1 }
 1462 
 1463    swACLPktContMaskOffsetChunk1State OBJECT-TYPE
 1464         SYNTAX  INTEGER {
 1465                 enabled(1),
 1466                 disabled(2)
 1467                 }
 1468         MAX-ACCESS  read-create
 1469         STATUS  current
 1470         DESCRIPTION
 1471             "Specifies the state of chunk1."
 1472         ::= { swACLPktContMaskOptionEntry 2 }
 1473 
 1474    swACLPktContMaskOffsetChunk1OffsetValue OBJECT-TYPE
 1475         SYNTAX  INTEGER (0..31)
 1476         MAX-ACCESS  read-create
 1477         STATUS  current
 1478         DESCRIPTION
 1479             "Specifies the frame content offset of chunk1."
 1480         ::= { swACLPktContMaskOptionEntry 3 }
 1481 
 1482    swACLPktContMaskOffsetChunk1Mask OBJECT-TYPE
 1483         SYNTAX  OCTET STRING (SIZE(4))
 1484         MAX-ACCESS  read-create
 1485         STATUS  current
 1486         DESCRIPTION
 1487             "Specifies the frame content mask of chunk1."
 1488         ::= { swACLPktContMaskOptionEntry 4 }
 1489 
 1490    swACLPktContMaskOffsetChunk2State OBJECT-TYPE
 1491         SYNTAX  INTEGER {
 1492                 enabled(1),
 1493                 disabled(2)
 1494                 }
 1495         MAX-ACCESS  read-create
 1496         STATUS  current
 1497         DESCRIPTION
 1498             "Specifies the state of chunk2."
 1499         ::= { swACLPktContMaskOptionEntry 5 }
 1500 
 1501    swACLPktContMaskOffsetChunk2OffsetValue OBJECT-TYPE
 1502         SYNTAX  INTEGER (0..31)
 1503         MAX-ACCESS  read-create
 1504         STATUS  current
 1505         DESCRIPTION
 1506             "Specifies the frame content offset of chunk2."
 1507         ::= { swACLPktContMaskOptionEntry 6 }
 1508 
 1509    swACLPktContMaskOffsetChunk2Mask OBJECT-TYPE
 1510         SYNTAX  OCTET STRING (SIZE(4))
 1511         MAX-ACCESS  read-create
 1512         STATUS  current
 1513         DESCRIPTION
 1514             "Specifies the frame content mask of chunk2."
 1515         ::= { swACLPktContMaskOptionEntry 7 }
 1516 
 1517    swACLPktContMaskOffsetChunk3State OBJECT-TYPE
 1518         SYNTAX  INTEGER {
 1519                 enabled(1),
 1520                 disabled(2)
 1521                 }
 1522         MAX-ACCESS  read-create
 1523         STATUS  current
 1524         DESCRIPTION
 1525             "Specifies the state of chunk3."
 1526         ::= { swACLPktContMaskOptionEntry 8 }
 1527 
 1528    swACLPktContMaskOffsetChunk3OffsetValue OBJECT-TYPE
 1529         SYNTAX  INTEGER (0..31)
 1530         MAX-ACCESS  read-create
 1531         STATUS  current
 1532         DESCRIPTION
 1533             "Specifies the frame content offset of chunk3."
 1534         ::= { swACLPktContMaskOptionEntry 9 }
 1535 
 1536    swACLPktContMaskOffsetChunk3Mask OBJECT-TYPE
 1537         SYNTAX  OCTET STRING (SIZE(4))
 1538         MAX-ACCESS  read-create
 1539         STATUS  current
 1540         DESCRIPTION
 1541             "Specifies the frame content mask of chunk3."
 1542         ::= { swACLPktContMaskOptionEntry 10 }
 1543 
 1544    swACLPktContMaskOffsetChunk4State OBJECT-TYPE
 1545         SYNTAX  INTEGER {
 1546                 enabled(1),
 1547                 disabled(2)
 1548                 }
 1549         MAX-ACCESS  read-create
 1550         STATUS  current
 1551         DESCRIPTION
 1552             "Specifies the state of chunk4."
 1553         ::= { swACLPktContMaskOptionEntry 11 }
 1554 
 1555    swACLPktContMaskOffsetChunk4OffsetValue OBJECT-TYPE
 1556         SYNTAX  INTEGER (0..31)
 1557         MAX-ACCESS  read-create
 1558         STATUS  current
 1559         DESCRIPTION
 1560             "Specifies the frame content offset of chunk4."
 1561         ::= { swACLPktContMaskOptionEntry 12 }
 1562 
 1563    swACLPktContMaskOffsetChunk4Mask OBJECT-TYPE
 1564         SYNTAX  OCTET STRING (SIZE(4))
 1565         MAX-ACCESS  read-create
 1566         STATUS  current
 1567         DESCRIPTION
 1568             "Specifies the frame content mask of chunk4."
 1569         ::= { swACLPktContMaskOptionEntry 13 }
 1570 
 1571     swACLPktContMaskOptionRowStatus OBJECT-TYPE
 1572         SYNTAX  RowStatus
 1573         MAX-ACCESS  read-create
 1574         STATUS  current
 1575         DESCRIPTION
 1576             "This object indicates the status of this entry."
 1577         ::= { swACLPktContMaskOptionEntry 14 }
 1578 
 1579     swACLPktContMaskOptionOwner OBJECT-TYPE
 1580         SYNTAX  INTEGER {
 1581                any(1),
 1582                acl(2),
 1583                ipbind(3),
 1584                other(4),
 1585                dhcp(5),
 1586                netbios(6),
 1587                ext-netbios(7),
 1588                ismvlan(8),
 1589                dhcp-relay(9),
 1590                pppoe(10),
 1591                arp-spoofing(11),
 1592                bpdu-tunnel(12)
 1593                }
 1594         MAX-ACCESS  read-only
 1595         STATUS  current
 1596         DESCRIPTION
 1597              "The owner of the ACL mask entry. The type of ACL entry created. ACL type
 1598              entries can only be modified when being configured through the same
 1599              type command. For example, IP-MAC Binding entries can only be modified
 1600              or deleted through the IP-MAC Binding configurations or commands."
 1601         ::= { swACLPktContMaskOptionEntry 15 }
 1602 
 1603     swACLPktContMaskOptionUnusedRuleEntries OBJECT-TYPE
 1604         SYNTAX INTEGER
 1605         MAX-ACCESS read-only
 1606         STATUS current
 1607         DESCRIPTION
 1608             "The number of unused rule entries of this IP profile entry."
 1609         ::={ swACLPktContMaskOptionEntry 16}
 1610 
 1611     swACLPktContMaskOptionProfileName OBJECT-TYPE
 1612         SYNTAX DisplayString(SIZE(1..32))
 1613         MAX-ACCESS read-create
 1614         STATUS current
 1615         DESCRIPTION
 1616             "The name of the ACL mask entry unique to the mask list."
 1617         ::= { swACLPktContMaskOptionEntry 17 }
 1618         
 1619 
 1620 
 1621 -- -----------------------------------------------------------------------------
 1622 -- swACLPktContMaskOption2
 1623 -- -----------------------------------------------------------------------------
 1624                 
 1625 swACLPktContMaskOption2              OBJECT IDENTIFIER ::= { swAclMaskMgmt 10 }        
 1626                 
 1627 -- -----------------------------------------------------------------------------
 1628 -- swACLPktContMaskOption2Table
 1629 -- -----------------------------------------------------------------------------
 1630     swACLPktContMaskOption2Table OBJECT-TYPE
 1631         SYNTAX  SEQUENCE OF SwACLPktContMaskOption2Entry
 1632         MAX-ACCESS  not-accessible
 1633         STATUS  current
 1634         DESCRIPTION
 1635             "This table contains the ACL mask for user-defined option 2 information.
 1636              An access profile will be created on the switch to define which part
 1637              of each incoming frame's user-defined part of the packet header
 1638              will be examined by switch. Masks entered will be combined
 1639              with the values the switch finds in the specified frame header fields.
 1640              
 1641              To create a packet content field with respect to an offset, an entry in the
 1642              swACLPktContMaskOption2OffsetsTable must be created first. 
 1643              
 1644              On row creation, all entries in the corresponding profile defined in the
 1645              swACLPktContMaskOption2OffsetsTable will be associated to the profile mask.
 1646              
 1647 	         If any rule is using the profile mask the entries cannot be modified.
 1648 	                      
 1649              "
 1650         ::= { swACLPktContMaskOption2 1 }
 1651 
 1652     swACLPktContMaskOption2Entry OBJECT-TYPE
 1653         SYNTAX  SwACLPktContMaskOption2Entry
 1654         MAX-ACCESS  not-accessible
 1655         STATUS  current
 1656         DESCRIPTION
 1657             "A list of information about the user-defined ACL."
 1658         INDEX  { swACLPktContMaskOption2ProfileID }
 1659         ::= { swACLPktContMaskOption2Table 1 }
 1660 
 1661     SwACLPktContMaskOption2Entry ::=
 1662         SEQUENCE {
 1663             swACLPktContMaskOption2ProfileID
 1664                 INTEGER,
 1665             swACLPktContMaskOption2SrcMac
 1666                 MacAddress,
 1667             swACLPktContMaskOption2DstMac
 1668                 MacAddress,
 1669             swACLPktContMaskOption2CTag
 1670                 OCTET STRING,
 1671             swACLPktContMaskOption2STag
 1672                 OCTET STRING,
 1673             swACLPktContMaskOption2Owner
 1674                 INTEGER,
 1675             swACLPktContMaskOption2UnusedRuleEntries
 1676                 INTEGER,
 1677             swACLPktContMaskOption2ProfileName
 1678                 DisplayString,
 1679             swACLPktContMaskOption2RowStatus
 1680             	RowStatus
 1681         }
 1682     swACLPktContMaskOption2ProfileID OBJECT-TYPE
 1683         SYNTAX  INTEGER
 1684         MAX-ACCESS  read-only
 1685         STATUS  current
 1686         DESCRIPTION
 1687             "The ID of the ACL mask entry, unique to the mask list. The maximum value of this object depends on the device."
 1688         ::= { swACLPktContMaskOption2Entry 1 }
 1689 
 1690         
 1691     swACLPktContMaskOption2SrcMac OBJECT-TYPE
 1692         SYNTAX  MacAddress
 1693         MAX-ACCESS  read-create
 1694         STATUS  current
 1695         DESCRIPTION
 1696             "Specifies the mask for source MAC address"
 1697         ::= { swACLPktContMaskOption2Entry 2 }        
 1698         
 1699         
 1700     swACLPktContMaskOption2DstMac OBJECT-TYPE
 1701         SYNTAX  MacAddress
 1702         MAX-ACCESS  read-create
 1703         STATUS  current
 1704         DESCRIPTION
 1705             "Specifies the mask for destination MAC address"
 1706         ::= { swACLPktContMaskOption2Entry 3 }   
 1707         
 1708    swACLPktContMaskOption2CTag  OBJECT-TYPE
 1709        SYNTAX  OCTET STRING (SIZE(2))
 1710        MAX-ACCESS  read-create
 1711        STATUS  current
 1712        DESCRIPTION
 1713            "Specifies the mask for customer VLAN tag, valid values are only from 0x0000 to 0xFFFF."
 1714        ::= { swACLPktContMaskOption2Entry 4 }        
 1715         
 1716    swACLPktContMaskOption2STag  OBJECT-TYPE
 1717        SYNTAX  OCTET STRING (SIZE(2))
 1718        MAX-ACCESS  read-create
 1719        STATUS  current
 1720        DESCRIPTION
 1721            "Specifies the mask for service VLAN tag, valid values are only from 0x0000 to 0xFFFF."
 1722        ::= { swACLPktContMaskOption2Entry 5 }     
 1723        
 1724     swACLPktContMaskOption2Owner OBJECT-TYPE
 1725         SYNTAX  INTEGER {
 1726                any(1),
 1727                acl(2),
 1728                ipbind(3),
 1729                other(4),
 1730                dhcp(5),
 1731                netbios(6),
 1732                ext-netbios(7),
 1733                ismvlan(8),
 1734                dhcp-relay(9),
 1735                pppoe(10),
 1736                arp-spoofing(11),
 1737                bpdu-tunnel(12)
 1738                }
 1739         MAX-ACCESS  read-only
 1740         STATUS  current
 1741         DESCRIPTION
 1742              "The owner of the ACL mask entry. The type of ACL entry created. ACL type
 1743              entries can only be modified when being configured through the same
 1744              type command. For example, IP-MAC Binding entries can only be modified
 1745              or deleted through the IP-MAC Binding configurations or commands."
 1746         ::= { swACLPktContMaskOption2Entry 6 }
 1747 
 1748     swACLPktContMaskOption2UnusedRuleEntries OBJECT-TYPE
 1749         SYNTAX INTEGER
 1750         MAX-ACCESS read-only
 1751         STATUS current
 1752         DESCRIPTION
 1753             "The number of unused rule entries of this IP profile entry."
 1754         ::={ swACLPktContMaskOption2Entry 7 }
 1755 
 1756     swACLPktContMaskOption2ProfileName OBJECT-TYPE
 1757         SYNTAX DisplayString(SIZE(1..32))
 1758         MAX-ACCESS read-create
 1759         STATUS current
 1760         DESCRIPTION
 1761             "The name of the ACL mask entry unique to the mask list."
 1762         ::= { swACLPktContMaskOption2Entry 8 } 
 1763         
 1764     swACLPktContMaskOption2RowStatus OBJECT-TYPE
 1765         SYNTAX  RowStatus
 1766         MAX-ACCESS  read-create
 1767         STATUS  current
 1768         DESCRIPTION
 1769             "This object indicates the status of this entry."
 1770         ::= { swACLPktContMaskOption2Entry 9 }
 1771        
 1772 -- -----------------------------------------------------------------------------
 1773 -- swACLPktContMaskOption2OffsetsTable
 1774 -- -----------------------------------------------------------------------------
 1775 
 1776     	
 1777 	swACLPktContMaskOption2OffsetsTable OBJECT-TYPE
 1778 	    SYNTAX  SEQUENCE OF SwACLPktContMaskOption2OffsetsEntry
 1779 	    MAX-ACCESS  not-accessible
 1780 	    STATUS  current
 1781 	    DESCRIPTION
 1782 	        "This table contains the ACL masks for the individual packet content offset user-defined option 2 information.
 1783 	         Entries created in this table will not set into the TCAM until a valid entry in the swACLPktContMaskOption2Table
 1784 	         is created.
 1785 	         
 1786 	         If any rule is using the profile mask the entries cannot be modified.
 1787 	        ."
 1788 	    ::= { swACLPktContMaskOption2 2 }
 1789 	
 1790 	swACLPktContMaskOption2OffsetsEntry OBJECT-TYPE
 1791 	    SYNTAX  SwACLPktContMaskOption2OffsetsEntry
 1792 	    MAX-ACCESS  not-accessible
 1793 	    STATUS  current
 1794 	    DESCRIPTION
 1795 	        "A list of information about the individual offsets for user-defined ACL."
 1796 	    INDEX  { swACLPktContMaskOption2OffsetsProfileID,swACLPktContMaskOption2OffsetsNum }
 1797 	    ::= { swACLPktContMaskOption2OffsetsTable 1 }
 1798 	
 1799 	SwACLPktContMaskOption2OffsetsEntry ::=
 1800 	    SEQUENCE {
 1801 	    	swACLPktContMaskOption2OffsetsProfileID
 1802 	    		INTEGER,
 1803 	    	swACLPktContMaskOption2OffsetsNum
 1804 	    		INTEGER,
 1805 			swACLPktContMaskOption2OffsetsReference
 1806 				INTEGER,
 1807 			swACLPktContMaskOption2OffsetsValue
 1808 				INTEGER,
 1809 			swACLPktContMaskOption2OffsetsMask
 1810 				OCTET STRING,
 1811 			swACLPktContMaskOption2OffsetsRowStatus
 1812 				RowStatus			
 1813 	    }
 1814 	       
 1815 	swACLPktContMaskOption2OffsetsProfileID OBJECT-TYPE
 1816         SYNTAX  INTEGER
 1817         MAX-ACCESS  read-only
 1818         STATUS  current
 1819         DESCRIPTION
 1820             "The ID of the ACL mask entry, unique to the mask list. 
 1821              This is the profile id to which this packet content field entry will be associated to.
 1822             "
 1823         ::= { swACLPktContMaskOption2OffsetsEntry 1 }		              
 1824 	        
 1825 		swACLPktContMaskOption2OffsetsNum OBJECT-TYPE
 1826 			SYNTAX      INTEGER (1..11)
 1827 			MAX-ACCESS  read-only
 1828 			STATUS      current
 1829 			DESCRIPTION
 1830 				"Specifies the offset number with respect to the profile."
 1831 			::= { swACLPktContMaskOption2OffsetsEntry 2 }
 1832 	        
 1833 		swACLPktContMaskOption2OffsetsReference OBJECT-TYPE
 1834 			SYNTAX      INTEGER{
 1835 			    l2(1),
 1836 			    l3(2),
 1837 			    l4(3)
 1838 			    }
 1839 			MAX-ACCESS  read-create
 1840 			STATUS      current
 1841 			DESCRIPTION
 1842 				"Specifies the reference of the offset.
 1843 						L2 - The offset will start counting from the byte 
 1844 						     after the end of the VLAN tags (start of ether type)
 1845 		                L3 - The offset will start counting right after the ether type field. 
 1846 		                     The packet must have a valid L2 header and a recognizeable ether type in 
 1847 		                     order to be recognized.
 1848 		                L4 - The offset will start counting right after the end of ip header. 
 1849 		                     The packet must have a valid IP header in order to be recognized.
 1850 				"
 1851 			::= { swACLPktContMaskOption2OffsetsEntry 3 }           
 1852 	
 1853 	               
 1854 		swACLPktContMaskOption2OffsetsValue OBJECT-TYPE
 1855 			SYNTAX      INTEGER
 1856 			MAX-ACCESS  read-create
 1857 			STATUS      current
 1858 			DESCRIPTION
 1859 				"Specifies the amount of bytes from the reference to the packet content field"
 1860 			::= { swACLPktContMaskOption2OffsetsEntry 4 }        		
 1861 			 
 1862 	
 1863 		swACLPktContMaskOption2OffsetsMask OBJECT-TYPE
 1864 			SYNTAX      OCTET STRING (SIZE(2))
 1865 			MAX-ACCESS  read-create
 1866 			STATUS      current
 1867 			DESCRIPTION
 1868 				"Specifies the mask for the packet content field"
 1869 			::= { swACLPktContMaskOption2OffsetsEntry 5 }        				
 1870 	
 1871 	    swACLPktContMaskOption2OffsetsRowStatus OBJECT-TYPE
 1872 	        SYNTAX  RowStatus
 1873 	        MAX-ACCESS  read-create
 1874 	        STATUS  current
 1875 	        DESCRIPTION
 1876 	            "This object indicates the status of this entry."
 1877 	        ::= { swACLPktContMaskOption2OffsetsEntry 6 }		
 1878 		
 1879 
 1880 -- -----------------------------------------------------------------------------
 1881 -- swACLEtherRuleTable
 1882 -- -----------------------------------------------------------------------------
 1883     swACLEtherRuleTable OBJECT-TYPE
 1884         SYNTAX  SEQUENCE OF SwACLEtherRuleEntry
 1885         MAX-ACCESS  not-accessible
 1886         STATUS  current
 1887         DESCRIPTION
 1888             "This table contains Ethernet ACL information."
 1889         ::= { swAclRuleMgmt 1 }
 1890 
 1891     swACLEtherRuleEntry OBJECT-TYPE
 1892         SYNTAX  SwACLEtherRuleEntry
 1893         MAX-ACCESS  not-accessible
 1894         STATUS  current
 1895         DESCRIPTION
 1896             "A list of information about the ACL rule of the layer 2 part of each packet."
 1897         INDEX  { swACLEtherRuleProfileID,swACLEtherRuleAccessID }
 1898         ::= { swACLEtherRuleTable 1 }
 1899 
 1900     SwACLEtherRuleEntry ::=
 1901         SEQUENCE {
 1902             swACLEtherRuleProfileID
 1903                 INTEGER,
 1904             swACLEtherRuleAccessID
 1905                 INTEGER,
 1906             swACLEtherRuleVlan
 1907                 SnmpAdminString,
 1908             swACLEtherRuleSrcMacAddress
 1909                 MacAddress,
 1910             swACLEtherRuleDstMacAddress
 1911                 MacAddress,
 1912             swACLEtherRule8021P
 1913                 INTEGER,
 1914             swACLEtherRuleEtherType
 1915                 OCTET STRING,
 1916             swACLEtherRuleEnablePriority
 1917                 INTEGER,
 1918             swACLEtherRulePriority
 1919                 INTEGER,
 1920             swACLEtherRuleReplacePriority
 1921                 INTEGER,
 1922             swACLEtherRuleEnableReplaceDscp
 1923                 INTEGER,
 1924             swACLEtherRuleRepDscp
 1925                 INTEGER,
 1926             swACLEtherRulePermit
 1927                 INTEGER,
 1928             swACLEtherRulePort
 1929 --                INTEGER,
 1930                 PortList,
 1931 --            swACLEtherRuleSwAclState
 1932 --                INTEGER,
 1933             swACLEtherRuleRowStatus
 1934                 RowStatus,
 1935             swACLEtherRuleOwner
 1936                 INTEGER,
 1937             swACLEtherRuleRxRate
 1938                 INTEGER,
 1939             swACLEtherRuleEnableReplaceTosPrecedence
 1940                 INTEGER,
 1941             swACLEtherRuleRepTosPrecedence
 1942                 INTEGER,
 1943             swACLEtherRuleVID
 1944                 INTEGER,
 1945             swACLEtherRuleMatchVID
 1946                 INTEGER,
 1947             swACLEtherRuleMaskVlan
 1948                 OCTET STRING,
 1949             swACLEtherRuleMaskSrcMacAddress
 1950                 MacAddress,
 1951             swACLEtherRuleMaskDstMacAddress
 1952                 MacAddress                
 1953       }
 1954     swACLEtherRuleProfileID OBJECT-TYPE
 1955         SYNTAX  INTEGER
 1956         MAX-ACCESS  read-only
 1957         STATUS  current
 1958         DESCRIPTION
 1959             "The ID of the ACL rule entry, which is unique to the mask list.
 1960              The maximum value of this object depends on the device."
 1961         ::= { swACLEtherRuleEntry 1 }
 1962 
 1963     swACLEtherRuleAccessID OBJECT-TYPE
 1964         SYNTAX  INTEGER (0..65535)
 1965         MAX-ACCESS  read-only
 1966         STATUS  current
 1967         DESCRIPTION
 1968             "The ID of the the ACL rule entry relates to the swACLEtherRuleProfileID.
 1969              When row creation is set to 0, assignment of an Access ID for ports is automatic
 1970              and the swACLEtherRulePort creates Rule entries for the swACLEtherRulePort accordingly.
 1971              When set from 1 to 65535, an access ID will be created for the swACLEtherRulePort.
 1972              The swACLEtherRulePort must be set to one port only otherwise the row creation will fail.
 1973             "
 1974         ::= { swACLEtherRuleEntry 2 }
 1975 
 1976     swACLEtherRuleVlan OBJECT-TYPE
 1977         SYNTAX  SnmpAdminString (SIZE (1..32))
 1978         MAX-ACCESS  read-create
 1979         STATUS  current
 1980         DESCRIPTION
 1981             "Specifies that the access rule will only apply to the packet with the VLAN ID indexed by this VLAN name."
 1982         ::= { swACLEtherRuleEntry 3 }
 1983 
 1984     swACLEtherRuleSrcMacAddress OBJECT-TYPE
 1985         SYNTAX  MacAddress
 1986         MAX-ACCESS  read-create
 1987         STATUS  current
 1988         DESCRIPTION
 1989             "Specifies that the access rule will apply to only packets with
 1990              this source MAC address."
 1991         ::= { swACLEtherRuleEntry 4 }
 1992 
 1993     swACLEtherRuleDstMacAddress OBJECT-TYPE
 1994         SYNTAX  MacAddress
 1995         MAX-ACCESS  read-create
 1996         STATUS  current
 1997         DESCRIPTION
 1998             "Specifies that the access rule will apply to only packets
 1999               with this destination MAC address."
 2000         ::= { swACLEtherRuleEntry 5 }
 2001 
 2002     swACLEtherRule8021P OBJECT-TYPE
 2003         SYNTAX  INTEGER(-1..7)
 2004         MAX-ACCESS  read-create
 2005         STATUS  current
 2006         DESCRIPTION
 2007             "Specifies that the access rule will apply only to packets with
 2008               this 802.1p priority value. A value of -1 indicates that this node
 2009               is not actively used."
 2010         ::= { swACLEtherRuleEntry 6 }
 2011 
 2012     swACLEtherRuleEtherType OBJECT-TYPE
 2013         SYNTAX  OCTET STRING (SIZE (2))
 2014         MAX-ACCESS  read-create
 2015         STATUS  current
 2016         DESCRIPTION
 2017             "Specifies that the access rule will apply only to packets with this
 2018              hexadecimal 802.1Q Ethernet type value in the packet header."
 2019         ::= { swACLEtherRuleEntry 7 }
 2020 
 2021     swACLEtherRuleEnablePriority OBJECT-TYPE
 2022         SYNTAX  INTEGER {
 2023                enabled(1),
 2024                disabled(2)
 2025                }
 2026         MAX-ACCESS  read-create
 2027         STATUS  current
 2028         DESCRIPTION
 2029             "Specifies that the access rule will apply only to packets with
 2030              priority value."
 2031         ::= { swACLEtherRuleEntry 8 }
 2032 
 2033     swACLEtherRulePriority OBJECT-TYPE
 2034         SYNTAX  INTEGER(0..7)
 2035         MAX-ACCESS  read-create
 2036         STATUS  current
 2037         DESCRIPTION
 2038             "Specifies that the priority will be changed in packets while the swACLEtherRuleEnablePriority
 2039              is enabled ."
 2040         ::= { swACLEtherRuleEntry 9 }
 2041 
 2042     swACLEtherRuleReplacePriority OBJECT-TYPE
 2043         SYNTAX  INTEGER {
 2044                enabled(1),
 2045                disabled(2)
 2046                }
 2047         MAX-ACCESS  read-create
 2048         STATUS  current
 2049         DESCRIPTION
 2050             "Specifies if the switch will change priorities of packets that match the access profile
 2051              802.1p priority tag field or not ."
 2052         ::= { swACLEtherRuleEntry 10 }
 2053 
 2054     swACLEtherRuleEnableReplaceDscp OBJECT-TYPE
 2055         SYNTAX  INTEGER {
 2056                enabled(1),
 2057                disabled(2)
 2058                }
 2059         MAX-ACCESS  read-create
 2060         STATUS  current
 2061         DESCRIPTION
 2062             "Specifies if the switch will change priorities of packets that match the access profile
 2063              DSCP field or not.
 2064              Replace DSCP and replace ToS precedence can not both be supported.
 2065             "
 2066         ::= { swACLEtherRuleEntry 11 }
 2067 
 2068     swACLEtherRuleRepDscp OBJECT-TYPE
 2069         SYNTAX  INTEGER(0..63)
 2070         MAX-ACCESS  read-create
 2071         STATUS  current
 2072         DESCRIPTION
 2073             "Specifies a value to be written to the DSCP field of an incoming packet
 2074              that meets the criteria specified in the first part of the command.
 2075              This value will over-write the value in the DSCP field of the packet."
 2076         ::= { swACLEtherRuleEntry 12 }
 2077 
 2078     swACLEtherRulePermit OBJECT-TYPE
 2079         SYNTAX  INTEGER {
 2080                deny(1),
 2081                permit(2),
 2082                mirror(3),
 2083                set-drop-precedence(5)
 2084                }
 2085         MAX-ACCESS  read-create
 2086         STATUS  current
 2087         DESCRIPTION
 2088             "This object indicates if the result of the packet examination is 'permit' or 'deny'.
 2089              The default is 'permit'.
 2090              permit - Specifies that packets matching the access profile are
 2091                       permitted to be forwarded by the switch.
 2092              deny - Specifies that packets matching the access profile
 2093                     are not permitted to be forwarded by the switch and will be filtered.
 2094              mirror - Specifies that packets matching the access profile are copied to the mirror port.
 2095                       Note : The ACL mirror function will start functioning after mirror has been enabled
 2096                              and the mirror port has been configured.
 2097              set-drop-precedence - Specifies that packets that matching the access profile are set
 2098                                    to drop precedence."
 2099         ::= { swACLEtherRuleEntry 13 }
 2100 
 2101     swACLEtherRulePort OBJECT-TYPE
 2102 --        SYNTAX  INTEGER (1..65535)
 2103         SYNTAX  PortList
 2104         MAX-ACCESS  read-create
 2105         STATUS  current
 2106         DESCRIPTION
 2107             "Specifies that the access rule will only apply to port(s).
 2108              This object and swACLEtherRuleVID can not be set together."
 2109         ::= { swACLEtherRuleEntry 14 }
 2110 
 2111 --    swACLEtherRuleSwAclState OBJECT-TYPE
 2112 --        SYNTAX  INTEGER {
 2113 --               enable(1),
 2114 --               disable(2)
 2115 --               }
 2116 --        MAX-ACCESS  read-create
 2117 --        STATUS  current
 2118 --        DESCRIPTION
 2119 --            "Specifies that the access rule will only apply to the software ACL state."
 2120 --        ::= { swACLEtherRuleEntry 15 }
 2121 
 2122     swACLEtherRuleRowStatus OBJECT-TYPE --swACLEtherRuleState
 2123         SYNTAX  RowStatus
 2124         MAX-ACCESS  read-create
 2125         STATUS  current
 2126         DESCRIPTION
 2127             "This object indicates the status of this entry."
 2128         ::= { swACLEtherRuleEntry 15 }
 2129 
 2130     swACLEtherRuleOwner OBJECT-TYPE
 2131         SYNTAX  INTEGER {
 2132                any(1),
 2133                acl(2),
 2134                ipbind(3),
 2135                other(4),
 2136                dhcp(5),
 2137                netbios(6),
 2138                ext-netbios(7),
 2139                ismvlan(8),
 2140                dhcp-relay(9),
 2141                pppoe(10),
 2142                arp-spoofing(11),
 2143                bpdu-tunnel(12)
 2144                }
 2145         MAX-ACCESS  read-only
 2146         STATUS  current
 2147         DESCRIPTION
 2148             "The owner of the ACL rule entry. Only owners can modify this entry."
 2149         ::= { swACLEtherRuleEntry 16 }
 2150 
 2151     swACLEtherRuleRxRate  OBJECT-TYPE
 2152         SYNTAX  INTEGER
 2153         MAX-ACCESS  read-create
 2154         STATUS  current
 2155         DESCRIPTION
 2156             "Specifies the rx rate, 0 denotes no_limit. The maximum value of this object depends on the device."
 2157         ::= { swACLEtherRuleEntry 17 }
 2158 
 2159     swACLEtherRuleEnableReplaceTosPrecedence OBJECT-TYPE
 2160         SYNTAX  INTEGER {
 2161                enabled(1),
 2162                disabled(2)
 2163                }
 2164         MAX-ACCESS  read-create
 2165         STATUS  current
 2166         DESCRIPTION
 2167             "Specifies if the switch will change priorities of packets that match the access profile
 2168              ToS precedence field or not.
 2169              Replace DSCP and replace ToS precedence can not both be supported.
 2170             "
 2171         ::= { swACLEtherRuleEntry 18 }
 2172 
 2173     swACLEtherRuleRepTosPrecedence OBJECT-TYPE
 2174         SYNTAX  INTEGER(0..7)
 2175         MAX-ACCESS  read-create
 2176         STATUS  current
 2177         DESCRIPTION
 2178             "Specifies a value to be written to the ToS precedence field of an incoming packet
 2179              that meets the criteria specified in the first part of the command.
 2180              This value will over-write the value in the ToS precedence field of the packet."
 2181         ::= { swACLEtherRuleEntry 19 }
 2182 
 2183     swACLEtherRuleVID OBJECT-TYPE
 2184         SYNTAX  INTEGER (0..4094)
 2185         MAX-ACCESS  read-create
 2186         STATUS  current
 2187         DESCRIPTION
 2188             "Specifies the VLAN-based ACL rule. There are two conditions:
 2189              1. this rule will apply to all the ports;
 2190              2. packets must belong to this VLAN.
 2191 
 2192              This object and swACLEtherRulePort can not be set together.
 2193              When you set swACLEtherRulePort, the value of this object will automatically change to 0.
 2194              And this object can not be set to 0."
 2195         ::= { swACLEtherRuleEntry 20 }
 2196         
 2197    swACLEtherRuleMatchVID OBJECT-TYPE
 2198         SYNTAX  INTEGER (0..4094)
 2199         MAX-ACCESS  read-create
 2200         STATUS  current
 2201         DESCRIPTION
 2202             "Specifies that the access rule will apply only to packets with
 2203              this VLAN ID. It is applied to the specified ports configured by swACLEtherRulePort."
 2204         ::= { swACLEtherRuleEntry 21 }
 2205 
 2206         
 2207     swACLEtherRuleMaskVlan OBJECT-TYPE
 2208         SYNTAX  OCTET STRING(SIZE(2))
 2209         MAX-ACCESS  read-create
 2210         STATUS  current
 2211         DESCRIPTION
 2212             "Specifies the per rule mask for the VLAN field as defined in swACLEtherRuleVlan object.
 2213              The value of this object when not in use is the corresponding mask in the profile mask.
 2214              Once the value of this object is modified, the per rule mask will take effect.
 2215             "
 2216         ::= { swACLEtherRuleEntry 22 }
 2217 
 2218     swACLEtherRuleMaskSrcMacAddress OBJECT-TYPE
 2219         SYNTAX  MacAddress
 2220         MAX-ACCESS  read-create
 2221         STATUS  current
 2222         DESCRIPTION
 2223             "Specifies the per rule mask for the source MAC addres field as defined in swACLEtherRuleSrcMacAddress object.
 2224              The value of this object when not in use is the corresponding mask in the profile mask.            
 2225              Once the value of this object is modified, the per rule mask will take effect.
 2226             "
 2227         ::= { swACLEtherRuleEntry 23 }
 2228 
 2229     swACLEtherRuleMaskDstMacAddress OBJECT-TYPE
 2230         SYNTAX  MacAddress
 2231         MAX-ACCESS  read-create
 2232         STATUS  current
 2233         DESCRIPTION
 2234             "Specifies the per rule mask for the destination MAC addres field as defined in swACLEtherRuleDstMacAddress object.
 2235              The value of this object when not in use is the corresponding mask in the profile mask.            
 2236              Once the value of this object is modified, the per rule mask will take effect.
 2237             "
 2238         ::= { swACLEtherRuleEntry 24 }        
 2239 
 2240 -- -----------------------------------------------------------------------------
 2241 -- swACLIpRuleTable
 2242 -- -----------------------------------------------------------------------------
 2243     swACLIpRuleTable OBJECT-TYPE
 2244         SYNTAX  SEQUENCE OF SwACLIpRuleEntry
 2245         MAX-ACCESS  not-accessible
 2246         STATUS  current
 2247         DESCRIPTION
 2248             ""
 2249         ::= { swAclRuleMgmt 2 }
 2250 
 2251     swACLIpRuleEntry OBJECT-TYPE
 2252         SYNTAX  SwACLIpRuleEntry
 2253         MAX-ACCESS  not-accessible
 2254         STATUS  current
 2255         DESCRIPTION
 2256             ""
 2257         INDEX  { swACLIpRuleProfileID , swACLIpRuleAccessID }
 2258         ::= { swACLIpRuleTable 1 }
 2259 
 2260     SwACLIpRuleEntry ::=
 2261         SEQUENCE {
 2262             swACLIpRuleProfileID
 2263                 INTEGER,
 2264             swACLIpRuleAccessID
 2265                 INTEGER,
 2266             swACLIpRuleVlan
 2267                 SnmpAdminString,
 2268             swACLIpRuleSrcIpaddress
 2269                 IpAddress,
 2270             swACLIpRuleDstIpaddress
 2271                 IpAddress,
 2272             swACLIpRuleDscp
 2273                 INTEGER,
 2274             swACLIpRuleProtocol
 2275                 INTEGER,
 2276             swACLIpRuleType
 2277                 INTEGER,
 2278             swACLIpRuleCode
 2279                 INTEGER,
 2280             swACLIpRuleSrcPort
 2281                 INTEGER,
 2282             swACLIpRuleDstPort
 2283                 INTEGER,
 2284             swACLIpRuleFlagBits
 2285                 INTEGER,
 2286             swACLIpRuleProtoID
 2287                 INTEGER,
 2288             swACLIpRuleUserMask
 2289                 OCTET STRING,
 2290             swACLIpRuleEnablePriority
 2291                 INTEGER,
 2292             swACLIpRulePriority
 2293                 INTEGER,
 2294             swACLIpRuleReplacePriority
 2295                 INTEGER,
 2296             swACLIpRuleEnableReplaceDscp
 2297                 INTEGER,
 2298             swACLIpRuleRepDscp
 2299                 INTEGER,
 2300             swACLIpRulePermit
 2301                 INTEGER,
 2302             swACLIpRulePort
 2303 --              INTEGER,
 2304                 PortList,
 2305 --            swACLIpRuleSwAclState
 2306 --                INTEGER,
 2307             swACLIpRuleRowStatus
 2308                 RowStatus,
 2309             swACLIpRuleOwner
 2310                 INTEGER,
 2311             swACLIpRuleRxRate
 2312                 INTEGER,
 2313             swACLIpRuleSrcMacAddress
 2314                 MacAddress,
 2315             swACLIpRuleEnableReplaceTosPrecedence
 2316                 INTEGER,
 2317             swACLIpRuleRepTosPrecedence
 2318                 INTEGER,
 2319             swACLIpRuleVID
 2320                 INTEGER,
 2321             swACLIpRuleMatchVID
 2322                 INTEGER,
 2323             swACLIpRuleMaskVlan
 2324                 OCTET STRING,
 2325             swACLIpRuleMaskSrcIpaddress
 2326                 IpAddress,
 2327             swACLIpRuleMaskDstIpaddress
 2328                 IpAddress,
 2329             swACLIpRuleMaskSrcPort
 2330                 OCTET STRING,
 2331             swACLIpRuleMaskDstPort
 2332                 OCTET STRING                
 2333         }
 2334 
 2335     swACLIpRuleProfileID OBJECT-TYPE
 2336         SYNTAX  INTEGER
 2337         MAX-ACCESS  read-only
 2338         STATUS  current
 2339         DESCRIPTION
 2340             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 2341         ::= { swACLIpRuleEntry 1 }
 2342 
 2343     swACLIpRuleAccessID OBJECT-TYPE
 2344         SYNTAX  INTEGER (0..65535)
 2345         MAX-ACCESS  read-only   --read-create
 2346         STATUS  current
 2347         DESCRIPTION
 2348             "The ID of the ACL rule entry relates to swACLIPRuleProfileID.
 2349              Row creation set to 0 indicates automatic assignment of the Access ID
 2350              for the ports in the swACLIpRulePort to create Rule entries
 2351              for swACLIpRulePort accordingly.
 2352              Set to 1-65535 causes creation of an access ID for the swACLIpRulePort.
 2353              The swACLIpRulePort must be set to one port only otherwise the row
 2354              creation will fail."
 2355         ::= { swACLIpRuleEntry 2 }
 2356 
 2357     swACLIpRuleVlan OBJECT-TYPE
 2358         SYNTAX  SnmpAdminString (SIZE (1..32))
 2359         MAX-ACCESS  read-create
 2360         STATUS  current
 2361         DESCRIPTION
 2362             "Specifies that the access rule will only apply to packets with the VLAN ID indexed by this VLAN name."
 2363         ::= { swACLIpRuleEntry 3 }
 2364 
 2365     swACLIpRuleSrcIpaddress OBJECT-TYPE
 2366         SYNTAX  IpAddress
 2367         MAX-ACCESS  read-create
 2368         STATUS  current
 2369         DESCRIPTION
 2370             "Specifies an IP source address."
 2371         ::= { swACLIpRuleEntry 4 }
 2372 
 2373     swACLIpRuleDstIpaddress OBJECT-TYPE
 2374         SYNTAX  IpAddress
 2375         MAX-ACCESS  read-create
 2376         STATUS  current
 2377         DESCRIPTION
 2378             "Specifies an IP destination address."
 2379         ::= { swACLIpRuleEntry 5 }
 2380 
 2381     swACLIpRuleDscp OBJECT-TYPE
 2382         SYNTAX  INTEGER(-1..63)
 2383         MAX-ACCESS  read-create
 2384         STATUS  current
 2385         DESCRIPTION
 2386             "Specifies the value of DSCP. The value can be configured from 0 to 63.
 2387             A value of -1 indicates that this node is not actively used."
 2388         ::= { swACLIpRuleEntry 6 }
 2389 
 2390     swACLIpRuleProtocol OBJECT-TYPE
 2391         SYNTAX  INTEGER {
 2392                none(1),
 2393                icmp(2),
 2394                igmp(3),
 2395                tcp(4),
 2396                udp(5),
 2397                protocolId(6)
 2398                }
 2399         MAX-ACCESS  read-write
 2400         STATUS  current
 2401         DESCRIPTION
 2402             "Specifies the IP protocol.
 2403              For some older chips, this object can not be set. When getting this object,
 2404              it always returns the type which has been configured in swACLIpEntry.
 2405 
 2406              For some newer chips, this object can only set the type which
 2407              has been configured in swACLIpEntry. The default value is none (1).
 2408             "
 2409         ::= { swACLIpRuleEntry 7 }
 2410 
 2411     swACLIpRuleType OBJECT-TYPE
 2412         SYNTAX  INTEGER(-1..255)
 2413         MAX-ACCESS  read-create
 2414         STATUS  current
 2415         DESCRIPTION
 2416             "Specifies that the rule applies to the value of ICMP type traffic.
 2417             A value of -1 denotes that this object is not active."
 2418         ::= { swACLIpRuleEntry 8 }
 2419 
 2420     swACLIpRuleCode OBJECT-TYPE
 2421         SYNTAX  INTEGER(-1..255)
 2422         MAX-ACCESS  read-create
 2423         STATUS  current
 2424         DESCRIPTION
 2425             "Specifies that the rule applies to the value of ICMP code traffic.
 2426             A value of -1 denotes that this object is not active."
 2427         ::= { swACLIpRuleEntry 9 }
 2428 
 2429     swACLIpRuleSrcPort OBJECT-TYPE
 2430         SYNTAX  INTEGER(-1..65535)
 2431         MAX-ACCESS  read-create
 2432         STATUS  current
 2433         DESCRIPTION
 2434             "Specifies that the rule applies to the range of the TCP/UDP source ports.
 2435             A value of -1 indicates that this node is not actively used."
 2436         ::= { swACLIpRuleEntry 10 }
 2437 
 2438     swACLIpRuleDstPort OBJECT-TYPE
 2439         SYNTAX  INTEGER(-1..65535)
 2440         MAX-ACCESS  read-create
 2441         STATUS  current
 2442         DESCRIPTION
 2443             "Specifies the TCP/UDP destination port range.
 2444             A value of -1 indicates that this node is not actively used."
 2445         ::= { swACLIpRuleEntry 11 }
 2446 
 2447     swACLIpRuleFlagBits OBJECT-TYPE
 2448         SYNTAX  INTEGER(0..63)
 2449         MAX-ACCESS  read-create
 2450         STATUS  current
 2451         DESCRIPTION
 2452             "A value which indicates the set of TCP flags that this
 2453              entity may potentially offer. The value is a sum of flag bits.
 2454              This sum initially takes the value zero. Then, for each flag, L
 2455              is added in the range 1 through 6, for which this node performs
 2456              transactions, where 2^(L - 1) is added to the sum.
 2457              Note that values should be calculated accordingly:
 2458 
 2459                  Flag      functionality
 2460                    6        urg bit
 2461                    5        ack bit
 2462                    4        psh bit
 2463                    3        rst bit
 2464                    2        syn bit
 2465                    1        fin bit
 2466              For example, it you want to enable urg bit and ack bit, you
 2467              should set value 48{2^(5-1) + 2^(6-1)}."
 2468         ::= { swACLIpRuleEntry 12 }
 2469 
 2470     swACLIpRuleProtoID OBJECT-TYPE
 2471         SYNTAX  INTEGER(-1..255)
 2472         MAX-ACCESS  read-create
 2473         STATUS  current
 2474         DESCRIPTION
 2475             "Specifies that the rule applies to the value of IP protocol ID traffic.
 2476             A value of -1 indicates that this node is not actively used."
 2477         ::= { swACLIpRuleEntry 13 }
 2478 
 2479     swACLIpRuleUserMask OBJECT-TYPE
 2480         SYNTAX  OCTET STRING (SIZE(20))
 2481         MAX-ACCESS  read-create
 2482         STATUS  current
 2483         DESCRIPTION
 2484             "Specifies that the rule applies to the IP protocol ID and the range of
 2485              options behind the IP header."
 2486         ::= { swACLIpRuleEntry 14 }
 2487 
 2488     swACLIpRuleEnablePriority OBJECT-TYPE
 2489         SYNTAX  INTEGER {
 2490                enabled(1),
 2491                disabled(2)
 2492                }
 2493         MAX-ACCESS  read-create
 2494         STATUS  current
 2495         DESCRIPTION
 2496             "Specifies that the access rule will apply only to packets with this
 2497              priority value."
 2498         ::= { swACLIpRuleEntry 15 }
 2499 
 2500     swACLIpRulePriority OBJECT-TYPE
 2501         SYNTAX  INTEGER(0..7)
 2502         MAX-ACCESS  read-create
 2503         STATUS  current
 2504         DESCRIPTION
 2505             "Specifies the priority will change in packets while the swACLIpRuleEnablePriority
 2506              is enabled."
 2507         ::= { swACLIpRuleEntry 16 }
 2508 
 2509     swACLIpRuleReplacePriority OBJECT-TYPE
 2510         SYNTAX  INTEGER {
 2511                enabled(1),
 2512                disabled(2)
 2513                }
 2514         MAX-ACCESS  read-create
 2515         STATUS  current
 2516         DESCRIPTION
 2517             "Specifies whether the packets that match the access profile will change the
 2518              802.1p priority tag field by the switch or not."
 2519         ::= { swACLIpRuleEntry 17 }
 2520 
 2521     swACLIpRuleEnableReplaceDscp OBJECT-TYPE
 2522         SYNTAX  INTEGER {
 2523                enabled(1),
 2524                disabled(2)
 2525                }
 2526         MAX-ACCESS  read-create
 2527         STATUS  current
 2528         DESCRIPTION
 2529             "Specifies if the switch will change priorities of packets that match the access profile
 2530              DSCP field or not.
 2531              Replace DSCP and replace ToS precedence can not both be supported.
 2532             "
 2533         ::= { swACLIpRuleEntry 18 }
 2534 
 2535     swACLIpRuleRepDscp OBJECT-TYPE
 2536         SYNTAX  INTEGER(0..63)
 2537         MAX-ACCESS  read-create
 2538         STATUS  current
 2539         DESCRIPTION
 2540             "Specifies a value to be written to the DSCP field of an incoming packet
 2541              that meets the criteria specified in the first part of the command.
 2542              This value will over-write the value in the DSCP field of the packet."
 2543         ::= { swACLIpRuleEntry 19 }
 2544 
 2545     swACLIpRulePermit OBJECT-TYPE
 2546         SYNTAX  INTEGER {
 2547                deny(1),
 2548                permit(2),
 2549                mirror(3),
 2550                set-drop-precedence(5)
 2551                }
 2552         MAX-ACCESS  read-create
 2553         STATUS  current
 2554         DESCRIPTION
 2555             "This object indicates if the result of the packet examination is 'permit' or 'deny'.
 2556              The default is 'permit'.
 2557              permit - Specifies that packets matching the access profile are
 2558                       permitted to be forwarded by the switch.
 2559              deny - Specifies that packets matching the access profile
 2560                     are not permitted to be forwarded by the switch and will be filtered.
 2561              mirror - Specifies the packets matching the access profile are copied
 2562                       to the mirror port.
 2563                       Note : The ACL mirror function will work after the mirror is enabled and the mirror port has
 2564                              been configured.
 2565              set-drop-precedence - Specifies the packets that match the access profile are set
 2566                                to drop precedence."
 2567         ::= { swACLIpRuleEntry 20 }
 2568 
 2569     swACLIpRulePort OBJECT-TYPE
 2570 --        SYNTAX  INTEGER (1..65535)
 2571         SYNTAX  PortList
 2572         MAX-ACCESS  read-create
 2573         STATUS  current
 2574         DESCRIPTION
 2575             "Specifies that the access rule will only apply to port(s).
 2576              This object and swACLIpRuleVID can not be set together. "
 2577         ::= { swACLIpRuleEntry 21 }
 2578 
 2579 --    swACLIpRuleSwAclState OBJECT-TYPE
 2580 --        SYNTAX  INTEGER {
 2581 --               enable(1),
 2582 --               disable(2)
 2583 --               }
 2584 --        MAX-ACCESS  read-create
 2585 --        STATUS  current
 2586 --        DESCRIPTION
 2587 --            "Specifies that the access rule will only apply to the software ACL state."
 2588 --        ::= { swACLIpRuleEntry 22 }
 2589 
 2590     swACLIpRuleRowStatus OBJECT-TYPE
 2591         SYNTAX  RowStatus
 2592         MAX-ACCESS  read-create
 2593         STATUS  current
 2594         DESCRIPTION
 2595             "This object indicates the status of this entry."
 2596         ::= { swACLIpRuleEntry 22 }
 2597 
 2598     swACLIpRuleOwner OBJECT-TYPE
 2599         SYNTAX  INTEGER {
 2600                any(1),
 2601                acl(2),
 2602                ipbind(3),
 2603                other(4),
 2604                dhcp(5),
 2605                netbios(6),
 2606                ext-netbios(7),
 2607                ismvlan(8),
 2608                dhcp-relay(9),
 2609                pppoe(10),
 2610                arp-spoofing(11),
 2611                bpdu-tunnel(12)
 2612                }
 2613         MAX-ACCESS  read-only
 2614         STATUS  current
 2615         DESCRIPTION
 2616             "The owner of the ACL rule entry. Only owners can modify this entry."
 2617         ::= { swACLIpRuleEntry 23 }
 2618 
 2619     swACLIpRuleRxRate  OBJECT-TYPE
 2620         SYNTAX  INTEGER
 2621         MAX-ACCESS  read-create
 2622         STATUS  current
 2623         DESCRIPTION
 2624             "Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device."
 2625         ::= { swACLIpRuleEntry 24 }
 2626 
 2627    swACLIpRuleSrcMacAddress OBJECT-TYPE
 2628         SYNTAX  MacAddress
 2629         MAX-ACCESS  read-only
 2630         STATUS  current
 2631         DESCRIPTION
 2632             "Specifies that the access will only apply to packets with
 2633              this source MAC address."
 2634         ::= { swACLIpRuleEntry 25 }
 2635 
 2636     swACLIpRuleEnableReplaceTosPrecedence OBJECT-TYPE
 2637         SYNTAX  INTEGER {
 2638                enabled(1),
 2639                disabled(2)
 2640                }
 2641         MAX-ACCESS  read-create
 2642         STATUS  current
 2643         DESCRIPTION
 2644             "Specifies if the switch will change priorities of packets that match the access profile
 2645              ToS precedence field or not.
 2646              Replace DSCP and replace ToS precedence can not both be supported.
 2647             "
 2648         ::= { swACLIpRuleEntry 26 }
 2649 
 2650     swACLIpRuleRepTosPrecedence OBJECT-TYPE
 2651         SYNTAX  INTEGER(0..7)
 2652         MAX-ACCESS  read-create
 2653         STATUS  current
 2654         DESCRIPTION
 2655              "Specifies a value to be written to the ToS precedence field of an incoming packet
 2656               that meets the criteria specified in the first part of the command.
 2657               This value will over-write the value in the ToS precedence field of the packet."
 2658         ::= { swACLIpRuleEntry 27 }
 2659 
 2660     swACLIpRuleVID OBJECT-TYPE
 2661         SYNTAX  INTEGER (0..4094)
 2662         MAX-ACCESS  read-create
 2663         STATUS  current
 2664         DESCRIPTION
 2665             "Specifies the VLAN-based rule. There are two conditions:
 2666              1. this rule will apply to all the ports;
 2667              2. packets must belong to this VLAN.
 2668 
 2669              This object and swACLIpRulePort can not be set together.
 2670              When you set swACLIpRulePort, the value of this object will automatically change to 0.
 2671              And this object can not be set 0."
 2672         ::= { swACLIpRuleEntry 28 }
 2673         
 2674     swACLIpRuleMatchVID OBJECT-TYPE
 2675         SYNTAX  INTEGER (0..4094)
 2676         MAX-ACCESS  read-create
 2677         STATUS  current
 2678         DESCRIPTION
 2679             "Specifies that the access rule will apply only to packets with
 2680              this VLAN ID. It is applied to the specified ports configured by swACLIpRulePort."
 2681         ::= { swACLIpRuleEntry 29 }
 2682 
 2683     swACLIpRuleMaskVlan OBJECT-TYPE
 2684         SYNTAX  OCTET STRING(SIZE(2))
 2685         MAX-ACCESS  read-create
 2686         STATUS  current
 2687         DESCRIPTION
 2688             "Specifies the per rule mask for the VLAN as defined in swACLIpRuleVlan object. 
 2689             The value of this object when not in use is the corresponding mask in the profile mask.
 2690             Once the value of this object is modified, the per rule mask will take effect.
 2691             This object is writeable only once.            
 2692             "
 2693         ::= { swACLIpRuleEntry 30 }
 2694 
 2695     swACLIpRuleMaskSrcIpaddress OBJECT-TYPE
 2696         SYNTAX  IpAddress
 2697         MAX-ACCESS  read-create
 2698         STATUS  current
 2699         DESCRIPTION
 2700 			"Specifies the per rule mask for the source IP address as defined in swACLIpRuleSrcIpaddress object.
 2701 			The value of this object when not in use is the corresponding mask in the profile mask.
 2702             Once the value of this object is modified, the per rule mask will take effect.
 2703             This object is writeable only once.            
 2704 			"
 2705         ::= { swACLIpRuleEntry 31 }
 2706 
 2707     swACLIpRuleMaskDstIpaddress OBJECT-TYPE
 2708         SYNTAX  IpAddress
 2709         MAX-ACCESS  read-create
 2710         STATUS  current
 2711         DESCRIPTION
 2712 			"Specifies the per rule mask for the destination IP address as defined in swACLIpRuleMaskDstIpaddress object.
 2713 			The value of this object when not in use is the corresponding mask in the profile mask.
 2714             Once the value of this object is modified, the per rule mask will take effect.
 2715             This object is writeable only once.            
 2716 			"
 2717         ::= { swACLIpRuleEntry 32 }
 2718 
 2719 
 2720     swACLIpRuleMaskSrcPort OBJECT-TYPE
 2721         SYNTAX  OCTET STRING(SIZE(2))
 2722         MAX-ACCESS  read-create
 2723         STATUS  current
 2724         DESCRIPTION
 2725 			"Specifies the per rule mask for the L4 source port as defined in swACLIpRuleSrcPort object.
 2726 			The value of this object when not in use is the corresponding mask in the profile mask.
 2727             Once the value of this object is modified, the per rule mask will take effect.
 2728             This object is writeable only once.            
 2729 			"
 2730         ::= { swACLIpRuleEntry 33 }
 2731 
 2732     swACLIpRuleMaskDstPort OBJECT-TYPE
 2733         SYNTAX  OCTET STRING(SIZE(2))
 2734         MAX-ACCESS  read-create
 2735         STATUS  current
 2736         DESCRIPTION
 2737 			"Specifies the per rule mask for the L4 destination port as defined in swACLIpRuleDstPort object.
 2738             The value of this object when not in use is the corresponding mask in the profile mask.
 2739             Once the value of this object is modified, the per rule mask will take effect.
 2740             This object is writeable only once.            
 2741             "
 2742         ::= { swACLIpRuleEntry 34 }
 2743         
 2744 -- -----------------------------------------------------------------------------
 2745 -- swACLPktContRuleTable
 2746 -- -----------------------------------------------------------------------------
 2747     swACLPktContRuleTable OBJECT-TYPE
 2748         SYNTAX  SEQUENCE OF SwACLPktContRuleEntry
 2749         MAX-ACCESS  not-accessible
 2750         STATUS  current
 2751         DESCRIPTION
 2752             "This table contains ACL rules regarding user-defined information."
 2753         ::= { swAclRuleMgmt 3 }
 2754 
 2755     swACLPktContRuleEntry OBJECT-TYPE
 2756         SYNTAX  SwACLPktContRuleEntry
 2757         MAX-ACCESS  not-accessible
 2758         STATUS  current
 2759         DESCRIPTION
 2760             "A list of information about the ACL rule of the user-defined part of each packet."
 2761         INDEX  { swACLPktContRuleProfileID,swACLPktContRuleAccessID }
 2762         ::= { swACLPktContRuleTable 1 }
 2763 
 2764     SwACLPktContRuleEntry ::=
 2765         SEQUENCE {
 2766             swACLPktContRuleProfileID
 2767                 INTEGER,
 2768             swACLPktContRuleAccessID
 2769                 INTEGER,
 2770             swACLPktContRuleOffset0to15
 2771                 OCTET STRING,
 2772             swACLPktContRuleOffset16to31
 2773                 OCTET STRING,
 2774             swACLPktContRuleOffset32to47
 2775                 OCTET STRING,
 2776             swACLPktContRuleOffset48to63
 2777                 OCTET STRING,
 2778             swACLPktContRuleOffset64to79
 2779                 OCTET STRING,
 2780             swACLPktContRuleEnablePriority
 2781                 INTEGER,
 2782             swACLPktContRulePriority
 2783                 INTEGER,
 2784             swACLPktContRuleReplacePriority
 2785                 INTEGER,
 2786             swACLPktContRuleEnableReplaceDscp
 2787                 INTEGER,
 2788             swACLPktContRuleRepDscp
 2789                 INTEGER,
 2790             swACLPktContRulePermit
 2791                 INTEGER,
 2792             swACLPktContRulePort
 2793 --                INTEGER,
 2794                 PortList,
 2795 --            swACLPktContRuleSwAclState
 2796 --                INTEGER,
 2797             swACLPktContRuleRowStatus
 2798                 RowStatus,
 2799             swACLPktContRuleOwner
 2800                 INTEGER,
 2801             swACLPktContRuleRxRate
 2802                 INTEGER,
 2803             swACLPktContRuleEnableReplaceTosPrecedence
 2804                 INTEGER,
 2805             swACLPktContRuleRepTosPrecedence
 2806                 INTEGER,
 2807             swACLPktContRuleVID
 2808                 INTEGER
 2809         }
 2810     swACLPktContRuleProfileID OBJECT-TYPE
 2811         SYNTAX  INTEGER
 2812         MAX-ACCESS  read-only
 2813         STATUS  current
 2814         DESCRIPTION
 2815             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 2816         ::= { swACLPktContRuleEntry 1 }
 2817 
 2818     swACLPktContRuleAccessID OBJECT-TYPE
 2819         SYNTAX  INTEGER (0..65535)
 2820         MAX-ACCESS  read-only
 2821         STATUS  current
 2822         DESCRIPTION
 2823             "The ID of the ACL rule entry in relation to the swACLPktContRuleProfileID.
 2824              When row creation is set to 0, an access ID is automatically created
 2825              for the ports in the swACLPktContRulePort to create rule entries
 2826              for swACLPktContRulePort accordingly.
 2827              Set to 1-65535 indicates to creswACLPktContRuleRepDscpate the exact access ID
 2828              for the swACLPktContRulePort. The swACLPktContRulePort must be set to
 2829              one port only, otherwise the row creation will fail."
 2830         ::= { swACLPktContRuleEntry 2 }
 2831 
 2832     swACLPktContRuleOffset0to15 OBJECT-TYPE
 2833         SYNTAX  OCTET STRING (SIZE(16))
 2834         MAX-ACCESS  read-create
 2835         STATUS  current
 2836         DESCRIPTION
 2837             "Specifies that the rule applies to the user-defined packet."
 2838         ::= { swACLPktContRuleEntry 3 }
 2839 
 2840     swACLPktContRuleOffset16to31 OBJECT-TYPE
 2841         SYNTAX  OCTET STRING (SIZE(16))
 2842         MAX-ACCESS  read-create
 2843         STATUS  current
 2844         DESCRIPTION
 2845             "Specifies that the rule applies to the user-defined packet."
 2846         ::= { swACLPktContRuleEntry 4 }
 2847 
 2848     swACLPktContRuleOffset32to47 OBJECT-TYPE
 2849         SYNTAX  OCTET STRING (SIZE(16))
 2850         MAX-ACCESS  read-create
 2851         STATUS  current
 2852         DESCRIPTION
 2853             "Specifies that the rule applies to the user-defined packet."
 2854         ::= { swACLPktContRuleEntry 5 }
 2855 
 2856     swACLPktContRuleOffset48to63 OBJECT-TYPE
 2857         SYNTAX  OCTET STRING (SIZE(16))
 2858         MAX-ACCESS  read-create
 2859         STATUS  current
 2860         DESCRIPTION
 2861             "Specifies that the rule applies to the user-defined packet."
 2862         ::= { swACLPktContRuleEntry 6 }
 2863 
 2864     swACLPktContRuleOffset64to79 OBJECT-TYPE
 2865         SYNTAX  OCTET STRING (SIZE(16))
 2866         MAX-ACCESS  read-create
 2867         STATUS  current
 2868         DESCRIPTION
 2869             "Specifies that the rule applies to the user-defined packet."
 2870         ::= { swACLPktContRuleEntry 7 }
 2871 
 2872     swACLPktContRuleEnablePriority OBJECT-TYPE
 2873         SYNTAX  INTEGER {
 2874                enabled(1),
 2875                disabled(2)
 2876                }
 2877         MAX-ACCESS  read-create
 2878         STATUS  current
 2879         DESCRIPTION
 2880             "Specifies that the access rule will apply only to packets with this
 2881              priority value."
 2882         ::= { swACLPktContRuleEntry 8 }
 2883 
 2884     swACLPktContRulePriority OBJECT-TYPE
 2885         SYNTAX  INTEGER(0..7)
 2886         MAX-ACCESS  read-create
 2887         STATUS  current
 2888         DESCRIPTION
 2889             "Specifies the priority will change for the packets while the swACLPktContRuleReplacePriority
 2890              is enabled ."
 2891         ::= { swACLPktContRuleEntry 9 }
 2892 
 2893     swACLPktContRuleReplacePriority OBJECT-TYPE
 2894         SYNTAX  INTEGER {
 2895                enabled(1),
 2896                disabled(2)
 2897                }
 2898         MAX-ACCESS  read-create
 2899         STATUS  current
 2900         DESCRIPTION
 2901             "Specifies if the switch will change priorities of packets that match the access profile
 2902             802.1p priority tag or not."
 2903         ::= { swACLPktContRuleEntry 10 }
 2904 
 2905     swACLPktContRuleEnableReplaceDscp OBJECT-TYPE
 2906         SYNTAX  INTEGER {
 2907                enabled(1),
 2908                disabled(2)
 2909                }
 2910         MAX-ACCESS  read-create
 2911         STATUS  current
 2912         DESCRIPTION
 2913             "Specifies if the switch will change priorities of packets that match the access profile
 2914              DSCP field or not.
 2915              Replace DSCP and replace ToS precedence can not both be supported.             "
 2916         ::= { swACLPktContRuleEntry 11 }
 2917 
 2918     swACLPktContRuleRepDscp OBJECT-TYPE
 2919         SYNTAX  INTEGER(0..63)
 2920         MAX-ACCESS  read-create
 2921         STATUS  current
 2922         DESCRIPTION
 2923             "Specifies a value to be written to the DSCP field of an incoming packet
 2924              that meets the criteria specified in the first part of the command.
 2925              This value will over-write the value in the DSCP field of the packet."
 2926         ::= { swACLPktContRuleEntry 12 }
 2927 
 2928     swACLPktContRulePermit OBJECT-TYPE
 2929         SYNTAX  INTEGER {
 2930                deny(1),
 2931                permit(2),
 2932                mirror(3),
 2933                lease-renew(4),
 2934                set-drop-precedence(5)
 2935                }
 2936         MAX-ACCESS  read-create
 2937         STATUS  current
 2938         DESCRIPTION
 2939         "This object indicates if the result of the packet examination is 'permit' or 'deny'.
 2940          The default is 'permit'.
 2941              permit - Specifies that packets matching the access profile are
 2942                       permitted to be forwarded by the switch.
 2943              deny - Specifies that packets matching the access profile
 2944                     are not permitted to be forwarded by the switch and will be filtered.
 2945              mirror - Specifies that the packets matching the access profile are copied to
 2946                       the mirror port.
 2947                       Note : The ACL mirror function will function after mirror is enabled
 2948                       and a mirror port has been configured.
 2949              lease-renew - Specifies the packets matching the access profile are copied to
 2950                            the CPU.
 2951                            Note : After a user enables the port's lease-renew state, all kinds of DHCP packets
 2952                                   (including unicast and broadcast DHCP packets) will be copied to the CPU
 2953                                   (using user ACL mask and rule).
 2954              set-drop-precedence - Specifies that packets matching the access profile are set
 2955                                to drop precedence."
 2956         ::= { swACLPktContRuleEntry 13 }
 2957 
 2958     swACLPktContRulePort OBJECT-TYPE
 2959 --        SYNTAX  INTEGER (1..65535)
 2960         SYNTAX  PortList
 2961         MAX-ACCESS  read-create
 2962         STATUS  current
 2963         DESCRIPTION
 2964              "Specifies that the access rule will only apply to port(s).
 2965               This object and swACLPktContRuleVID can not be set together. "
 2966          ::= { swACLPktContRuleEntry 14 }
 2967 
 2968  --   swACLPktContRuleSwAclState OBJECT-TYPE
 2969  --       SYNTAX  INTEGER {
 2970  --              enable(1),
 2971  --              disable(2)
 2972 --              }
 2973 --       MAX-ACCESS  read-create
 2974 --       STATUS  current
 2975 --       DESCRIPTION
 2976 --           "Specifies that the access rule will only apply to the software ACL state."
 2977 --       ::= { swACLPktContRuleEntry 15 }
 2978 
 2979     swACLPktContRuleRowStatus OBJECT-TYPE
 2980         SYNTAX  RowStatus
 2981         MAX-ACCESS  read-create
 2982         STATUS  current
 2983         DESCRIPTION
 2984             "This object indicates the status of this entry."
 2985         ::= { swACLPktContRuleEntry 15 }
 2986 
 2987     swACLPktContRuleOwner OBJECT-TYPE
 2988         SYNTAX  INTEGER {
 2989                any(1),
 2990                acl(2),
 2991                ipbind(3),
 2992                other(4),
 2993                dhcp(5),
 2994                netbios(6),
 2995                ext-netbios(7),
 2996                ismvlan(8),
 2997                dhcp-relay(9),
 2998                pppoe(10),
 2999                arp-spoofing(11),
 3000                bpdu-tunnel(12)
 3001                }
 3002         MAX-ACCESS  read-only
 3003         STATUS  current
 3004         DESCRIPTION
 3005             "The owner of the ACL rule entry. Only owners can modify this entry."
 3006         ::= { swACLPktContRuleEntry 16 }
 3007 
 3008    swACLPktContRuleRxRate  OBJECT-TYPE
 3009         SYNTAX  INTEGER
 3010         MAX-ACCESS  read-create
 3011         STATUS  current
 3012         DESCRIPTION
 3013             "Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device."
 3014         ::= { swACLPktContRuleEntry 17 }
 3015 
 3016     swACLPktContRuleEnableReplaceTosPrecedence OBJECT-TYPE
 3017         SYNTAX  INTEGER {
 3018                enabled(1),
 3019                disabled(2)
 3020                }
 3021         MAX-ACCESS  read-create
 3022         STATUS  current
 3023         DESCRIPTION
 3024             "Specifies if the switch will change priorities of packets that match the access profile
 3025              ToS precedence field or not.
 3026              Replace DSCP and replace ToS precedence can not both be supported.
 3027             "
 3028         ::= { swACLPktContRuleEntry 18 }
 3029 
 3030     swACLPktContRuleRepTosPrecedence OBJECT-TYPE
 3031         SYNTAX  INTEGER(0..7)
 3032         MAX-ACCESS  read-create
 3033         STATUS  current
 3034         DESCRIPTION
 3035             "Specifies a value to be written to the ToS precedence field of an incoming packet
 3036              that meets the criteria specified in the first part of the command.
 3037              This value will over-write the value in the ToS precedence field of the packet."
 3038         ::= { swACLPktContRuleEntry 19 }
 3039 
 3040     swACLPktContRuleVID OBJECT-TYPE
 3041         SYNTAX  INTEGER (0..4094)
 3042         MAX-ACCESS  read-create
 3043         STATUS  current
 3044         DESCRIPTION
 3045             "Specifies this rule only applies to the specified VLAN. There are two conditions:
 3046              1.only the portlist that belongs to this VLAN will be included;
 3047              2.packets must belong to this VLAN.
 3048 
 3049              This object and swACLPktContRulePort can not be set together.
 3050              When you set swACLPktContRulePort, the value of this object will automatically change to 0.
 3051              And this object can not be set 0."
 3052         ::= { swACLPktContRuleEntry 20 }
 3053 
 3054 -- -----------------------------------------------------------------------------
 3055 -- swACLIpv6RuleTable
 3056 -- -----------------------------------------------------------------------------
 3057     swACLIpv6RuleTable OBJECT-TYPE
 3058         SYNTAX  SEQUENCE OF SwACLIpv6RuleEntry
 3059         MAX-ACCESS  not-accessible
 3060         STATUS  current
 3061         DESCRIPTION
 3062             "This table contains the IPv6 ACL rule information."
 3063         ::= { swAclRuleMgmt 4 }
 3064 
 3065     swACLIpv6RuleEntry OBJECT-TYPE
 3066         SYNTAX  SwACLIpv6RuleEntry
 3067         MAX-ACCESS  not-accessible
 3068         STATUS  current
 3069         DESCRIPTION
 3070             "A list of information about ACL rules regarding the IPv6 part of each packet."
 3071         INDEX  { swACLIpv6RuleProfileID,swACLIpv6RuleAccessID }
 3072         ::= { swACLIpv6RuleTable 1 }
 3073 
 3074     SwACLIpv6RuleEntry ::=
 3075         SEQUENCE {
 3076             swACLIpv6RuleProfileID
 3077                 INTEGER,
 3078             swACLIpv6RuleAccessID
 3079                 INTEGER,
 3080             swACLIpv6RuleClass
 3081                 INTEGER,
 3082             swACLIpv6RuleFlowlabel
 3083                 OCTET STRING,
 3084             swACLIpv6RuleSrcIpv6Addr
 3085                 Ipv6Address,
 3086             swACLIpv6RuleDstIpv6Addr
 3087                 Ipv6Address,
 3088             swACLIpv6RuleEnablePriority
 3089                 INTEGER,
 3090             swACLIpv6RulePriority
 3091                 INTEGER,
 3092             swACLIpv6RuleReplacePriority
 3093                 INTEGER,
 3094             swACLIpv6RulePermit
 3095                 INTEGER,
 3096             swACLIpv6RulePort
 3097 --                INTEGER,
 3098                 PortList,
 3099 --            swACLIpv6RuleSwAclState
 3100 --                INTEGER,
 3101             swACLIpv6RuleRowStatus
 3102                 RowStatus,
 3103             swACLIpv6RuleOwner
 3104                 INTEGER,
 3105             swACLIpv6RuleRxRate
 3106                 INTEGER,
 3107             swACLIpv6RuleEnableReplaceDscp
 3108                 INTEGER,
 3109             swACLIpv6RuleRepDscp
 3110                 INTEGER,
 3111             swACLIpv6RuleEnableReplaceTosPrecedence
 3112                 INTEGER,
 3113             swACLIpv6RuleRepTosPrecedence
 3114                 INTEGER,
 3115             swACLIpv6RuleVID
 3116                 INTEGER,
 3117             swACLIpv6RuleProtocol
 3118                 INTEGER,
 3119             swACLIpv6RuleSrcPort
 3120                 INTEGER,
 3121             swACLIpv6RuleDstPort
 3122                 INTEGER,
 3123             swACLIpv6RuleMaskSrcIpv6Addr
 3124                 Ipv6Address,
 3125              swACLIpv6RuleMaskDstIpv6Addr
 3126                  Ipv6Address,
 3127             swACLIpv6RuleMaskSrcPort
 3128                 OCTET STRING,
 3129             swACLIpv6RuleMaskDstPort
 3130                 OCTET STRING                
 3131         }
 3132     swACLIpv6RuleProfileID OBJECT-TYPE
 3133         SYNTAX  INTEGER
 3134         MAX-ACCESS  read-only
 3135         STATUS  current
 3136         DESCRIPTION
 3137             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 3138         ::= { swACLIpv6RuleEntry 1 }
 3139 
 3140     swACLIpv6RuleAccessID OBJECT-TYPE
 3141         SYNTAX  INTEGER (0..65535)
 3142         MAX-ACCESS  read-only
 3143         STATUS  current
 3144         DESCRIPTION
 3145             "The ID of the ACL rule entry relates to swACLIpv6RuleProfileID.
 3146              When row creation is set to 0, this indicates the access ID
 3147              will be assigned automatically for the ports in the swACLIpv6RulePort
 3148              to create rule entries for swACLIpv6RulePort accordingly.
 3149              Set to 1-65535 indicates creation of an access ID for the swACLIpv6RulePort.
 3150              The swACLIpv6RulePort must be set to one port only, otherwise
 3151              the row creation will fail."
 3152         ::= { swACLIpv6RuleEntry 2 }
 3153 
 3154     swACLIpv6RuleClass OBJECT-TYPE
 3155         SYNTAX  INTEGER (0..255)
 3156         MAX-ACCESS  read-create
 3157         STATUS  current
 3158         DESCRIPTION
 3159             "Specifies that the rule applies to the IPv6 class field."
 3160         ::= { swACLIpv6RuleEntry 3 }
 3161 
 3162     swACLIpv6RuleFlowlabel OBJECT-TYPE
 3163         SYNTAX  OCTET STRING (SIZE(4))
 3164         MAX-ACCESS  read-create
 3165         STATUS  current
 3166         DESCRIPTION
 3167             "Specifies that the rule applies to the IPv6 flow label field."
 3168         ::= { swACLIpv6RuleEntry 4 }
 3169 
 3170     swACLIpv6RuleSrcIpv6Addr OBJECT-TYPE
 3171         SYNTAX  Ipv6Address
 3172         MAX-ACCESS  read-create
 3173         STATUS  current
 3174         DESCRIPTION
 3175             "Specifies that the rule applies to the source IPv6 address.
 3176             This should be a 16 byte octet string."
 3177         ::= { swACLIpv6RuleEntry 5 }
 3178 
 3179     swACLIpv6RuleDstIpv6Addr OBJECT-TYPE
 3180         SYNTAX  Ipv6Address
 3181         MAX-ACCESS  read-create
 3182         STATUS  current
 3183         DESCRIPTION
 3184             "Specifies that the rule applies to the destination IPv6 address.
 3185             This should be a 16 byte octet string."
 3186         ::= { swACLIpv6RuleEntry 6 }
 3187 
 3188     swACLIpv6RuleEnablePriority OBJECT-TYPE
 3189         SYNTAX  INTEGER {
 3190                enabled(1),
 3191                disabled(2)
 3192                }
 3193         MAX-ACCESS  read-create
 3194         STATUS  current
 3195         DESCRIPTION
 3196             "Specifies that the access rule will apply only to packets with
 3197              priority value."
 3198         ::= { swACLIpv6RuleEntry 7 }
 3199 
 3200     swACLIpv6RulePriority OBJECT-TYPE
 3201         SYNTAX  INTEGER(0..7)
 3202         MAX-ACCESS  read-create
 3203         STATUS  current
 3204         DESCRIPTION
 3205             "Specifies the priority will change in packets while the swACLIpv6RuleReplacePriority
 3206              is enabled."
 3207         ::= { swACLIpv6RuleEntry 8 }
 3208 
 3209     swACLIpv6RuleReplacePriority OBJECT-TYPE
 3210         SYNTAX  INTEGER {
 3211                enabled(1),
 3212                disabled(2)
 3213                }
 3214         MAX-ACCESS  read-create
 3215         STATUS  current
 3216         DESCRIPTION
 3217             "Specifies if the switch will change priorities of packets that match the access profile
 3218              802.1p priority tag or not."
 3219         ::= { swACLIpv6RuleEntry 9 }
 3220 
 3221     swACLIpv6RulePermit OBJECT-TYPE
 3222         SYNTAX  INTEGER {
 3223                deny(1),
 3224                permit(2),
 3225                mirror(3),
 3226                set-drop-precedence(5)
 3227                }
 3228         MAX-ACCESS  read-create
 3229         STATUS  current
 3230         DESCRIPTION
 3231         "This object indicates if the result of the packet examination is 'permit' or 'deny'.
 3232          The default is 'permit'.
 3233              permit - Specifies that packets matching the access profile are
 3234                       permitted to be forwarded by the switch.
 3235              deny - Specifies that packets matching the access profile
 3236                     are not permitted to be forwarded by the switch and will be filtered.
 3237              mirror - Specifies that the packets matching the access profile are copied to
 3238                       the mirror port.
 3239                       Note : The ACL mirror function will function after mirror has been enabled
 3240                       and a mirror port has been configured.
 3241              set-drop-precedence - Specifies the packets matching the access profile are set
 3242                                to drop precedence."
 3243         ::= { swACLIpv6RuleEntry 10 }
 3244 
 3245     swACLIpv6RulePort OBJECT-TYPE
 3246 --        SYNTAX  INTEGER (1..65535)
 3247         SYNTAX  PortList
 3248         MAX-ACCESS  read-create
 3249         STATUS  current
 3250         DESCRIPTION
 3251             "Specifies that the access rule will apply only to port(s).
 3252              This object and swACLIpv6RuleVID can not be set together. "
 3253         ::= { swACLIpv6RuleEntry 11 }
 3254 
 3255 --    swACLIpv6RuleSwAclState OBJECT-TYPE
 3256 --        SYNTAX  INTEGER {
 3257 --               enable(1),
 3258 --               disable(2)
 3259 --               }
 3260 --        MAX-ACCESS  read-create
 3261 --        STATUS  current
 3262 --        DESCRIPTION
 3263 --            "Specifies that the access rule will only apply to the software ACL state."
 3264 --        ::= { swACLIpv6RuleEntry 13 }
 3265 
 3266     swACLIpv6RuleRowStatus OBJECT-TYPE
 3267         SYNTAX  RowStatus
 3268         MAX-ACCESS  read-create
 3269         STATUS  current
 3270         DESCRIPTION
 3271             "This object indicates the status of this entry."
 3272         ::= { swACLIpv6RuleEntry 12 }
 3273 
 3274     swACLIpv6RuleOwner OBJECT-TYPE
 3275         SYNTAX  INTEGER {
 3276                any(1),
 3277                acl(2),
 3278                ipbind(3),
 3279                other(4),
 3280                dhcp(5),
 3281                netbios(6),
 3282                ext-netbios(7),
 3283                ismvlan(8),
 3284                dhcp-relay(9),
 3285                pppoe(10),
 3286                arp-spoofing(11),
 3287                bpdu-tunnel(12)
 3288                }
 3289         MAX-ACCESS  read-only
 3290         STATUS  current
 3291         DESCRIPTION
 3292             "The owner of the ACL rule entry. Only owners can modify this entry."
 3293         ::= { swACLIpv6RuleEntry 13 }
 3294 
 3295    swACLIpv6RuleRxRate  OBJECT-TYPE
 3296         SYNTAX  INTEGER
 3297         MAX-ACCESS  read-create
 3298         STATUS  current
 3299         DESCRIPTION
 3300             "Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device."
 3301         ::= { swACLIpv6RuleEntry 14 }
 3302 
 3303     swACLIpv6RuleEnableReplaceDscp OBJECT-TYPE
 3304         SYNTAX  INTEGER {
 3305                enabled(1),
 3306                disabled(2)
 3307                }
 3308         MAX-ACCESS  read-create
 3309         STATUS  current
 3310         DESCRIPTION
 3311             "Specifies if the switch will change priorities of packets that match the access profile
 3312              DSCP field or not.
 3313              Replace DSCP and replace ToS precedence can not both be supported.
 3314             "
 3315         ::= { swACLIpv6RuleEntry 15 }
 3316 
 3317     swACLIpv6RuleRepDscp OBJECT-TYPE
 3318         SYNTAX  INTEGER(0..63)
 3319         MAX-ACCESS  read-create
 3320         STATUS  current
 3321         DESCRIPTION
 3322             "Specifies a value to be written to the DSCP field of an incoming packet
 3323              that meets the criteria specified in the first part of the command.
 3324              This value will over-write the value in the DSCP field of the packet."
 3325         ::= { swACLIpv6RuleEntry 16 }
 3326 
 3327     swACLIpv6RuleEnableReplaceTosPrecedence OBJECT-TYPE
 3328         SYNTAX  INTEGER {
 3329                enabled(1),
 3330                disabled(2)
 3331                }
 3332         MAX-ACCESS  read-create
 3333         STATUS  current
 3334         DESCRIPTION
 3335             "Specifies if the switch will change priorities of packets that match the access profile
 3336              ToS precedence field or not.
 3337              Replace DSCP and replace ToS precedence can not both be supported.
 3338             "
 3339         ::= { swACLIpv6RuleEntry 17 }
 3340 
 3341     swACLIpv6RuleRepTosPrecedence OBJECT-TYPE
 3342         SYNTAX  INTEGER(0..7)
 3343         MAX-ACCESS  read-create
 3344         STATUS  current
 3345         DESCRIPTION
 3346             "Specifies a value to be written to the ToS precedence field of an incoming packet
 3347              that meets the criteria specified in the first part of the command.
 3348              This value will over-write the value in the ToS precedence field of the packet."
 3349         ::= { swACLIpv6RuleEntry 18 }
 3350 
 3351      swACLIpv6RuleVID OBJECT-TYPE
 3352         SYNTAX  INTEGER (0..4094)
 3353         MAX-ACCESS  read-create
 3354         STATUS  current
 3355         DESCRIPTION
 3356             "Specifies this rule only applies to the specified VLAN. There are two conditions:
 3357              1.only the portlist that belongs to this VLAN will be included;
 3358              2.packets must belong to this VLAN.
 3359 
 3360              This object and swACLIpv6RulePort can not be set together.
 3361              When you set swACLIpv6RulePort, the value of this object will automatically change to 0.
 3362              And this object can not be set 0."
 3363         ::= { swACLIpv6RuleEntry 19 }
 3364 
 3365     swACLIpv6RuleProtocol OBJECT-TYPE
 3366         SYNTAX  INTEGER {
 3367                none(1),
 3368                tcp(2),
 3369                udp(3)
 3370                }
 3371         MAX-ACCESS  read-create
 3372         STATUS  current
 3373         DESCRIPTION
 3374             "Specifies the IPv6 protocol.
 3375              For some older chips, this object can not be set. When getting this object,
 3376              it always returns the type which has been configured in swACLIpv6Entry.
 3377 
 3378              For some newer chips, this object can only set the type which
 3379              has been configured in swACLIpv6Entry. The default value is none (1).
 3380             "
 3381         ::= { swACLIpv6RuleEntry 20 }
 3382 
 3383     swACLIpv6RuleSrcPort OBJECT-TYPE
 3384         SYNTAX  INTEGER(0..65535)
 3385         MAX-ACCESS  read-create
 3386         STATUS  current
 3387         DESCRIPTION
 3388             "Specifies that the rule applies to the range of the TCP/UDP source ports."
 3389         ::= { swACLIpv6RuleEntry 21 }
 3390 
 3391     swACLIpv6RuleDstPort OBJECT-TYPE
 3392         SYNTAX  INTEGER(0..65535)
 3393         MAX-ACCESS  read-create
 3394         STATUS  current
 3395         DESCRIPTION
 3396             "Specifies the TCP/UDP destination ports range."
 3397         ::= { swACLIpv6RuleEntry 22 }
 3398         
 3399     swACLIpv6RuleMaskSrcIpv6Addr OBJECT-TYPE
 3400         SYNTAX  Ipv6Address
 3401         MAX-ACCESS  read-create
 3402         STATUS  current
 3403         DESCRIPTION
 3404             "Specifies that the per rule mask of swACLIpv6RuleSrcIpv6Addr.
 3405             This should be a 16 byte octet string.
 3406             The value of this object when not in use is the corresponding mask in the profile mask.
 3407             Once the value of this object is modified, the per rule mask will take effect.
 3408             This object is writeable only once.            
 3409             "
 3410         ::= { swACLIpv6RuleEntry 23 }
 3411 
 3412      swACLIpv6RuleMaskDstIpv6Addr OBJECT-TYPE
 3413          SYNTAX  Ipv6Address
 3414          MAX-ACCESS  read-create
 3415          STATUS  current
 3416          DESCRIPTION
 3417              "Specifies that the rule applies to the destination IPv6 address.
 3418              This should be a 16 byte octet string."
 3419          ::= { swACLIpv6RuleEntry 24 }
 3420 
 3421     swACLIpv6RuleMaskSrcPort OBJECT-TYPE
 3422         SYNTAX  OCTET STRING(SIZE(2))
 3423         MAX-ACCESS  read-create
 3424         STATUS  current
 3425         DESCRIPTION
 3426             "Specifies that the per rule mask of swACLIpv6RuleSrcPort.
 3427             The value of this object when not in use is the corresponding mask in the profile mask.
 3428             Once the value of this object is modified, the per rule mask will take effect.
 3429             This object is writeable only once.            
 3430             "
 3431         ::= { swACLIpv6RuleEntry 25 }
 3432 
 3433     swACLIpv6RuleMaskDstPort OBJECT-TYPE
 3434         SYNTAX  OCTET STRING(SIZE(2))
 3435         MAX-ACCESS  read-create
 3436         STATUS  current
 3437         DESCRIPTION
 3438             "Specifies the per rule mask of swACLIpv6RuleDstPort.
 3439             The value of this object when not in use is the corresponding mask in the profile mask.
 3440             Once the value of this object is modified, the per rule mask will take effect.
 3441             This object is writeable only once.            
 3442             "
 3443         ::= { swACLIpv6RuleEntry 26 }        
 3444 
 3445 -- -----------------------------------------------------------------------------
 3446 --swIBPACLEtherRuleTable
 3447 -- -----------------------------------------------------------------------------
 3448     swIBPACLEtherRuleTable OBJECT-TYPE
 3449         SYNTAX  SEQUENCE OF SwIBPACLEtherRuleEntry
 3450         MAX-ACCESS  not-accessible
 3451         STATUS  obsolete
 3452         DESCRIPTION
 3453             "This table contains IP-MAC-Binding Ethernet ACL Rule information."
 3454         ::= { swAclRuleMgmt 5 }
 3455 
 3456     swIBPACLEtherRuleEntry OBJECT-TYPE
 3457         SYNTAX  SwIBPACLEtherRuleEntry
 3458         MAX-ACCESS  not-accessible
 3459         STATUS  obsolete
 3460         DESCRIPTION
 3461             "A list of information about the ACL rule of the layer 2 part of each packet."
 3462         INDEX  { swIBPACLEtherRuleProfileID,swIBPACLEtherRuleAccessID }
 3463         ::= { swIBPACLEtherRuleTable 1 }
 3464 
 3465     SwIBPACLEtherRuleEntry ::=
 3466         SEQUENCE {
 3467             swIBPACLEtherRuleProfileID
 3468                 INTEGER,
 3469             swIBPACLEtherRuleAccessID
 3470                 INTEGER,
 3471             swIBPACLEtherRuleEtherType
 3472                 OCTET STRING,
 3473             swIBPACLEtherRulePermit
 3474                 INTEGER,
 3475             swIBPACLEtherRulePort
 3476                   PortList
 3477         }
 3478     swIBPACLEtherRuleProfileID OBJECT-TYPE
 3479         SYNTAX  INTEGER
 3480         MAX-ACCESS  read-only
 3481         STATUS  obsolete
 3482         DESCRIPTION
 3483             "The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device."
 3484         ::= { swIBPACLEtherRuleEntry 1 }
 3485 
 3486     swIBPACLEtherRuleAccessID OBJECT-TYPE
 3487         SYNTAX  INTEGER (0..65535)
 3488         MAX-ACCESS  read-only
 3489         STATUS  obsolete
 3490         DESCRIPTION
 3491             "The ID of the ACL rule entry in relation to swACLEtherRuleProfileID.
 3492             When row creation is set to 0, this indicates automatically assigning an Access
 3493             for the ports in the swACLEtherRulePort  to create rule entries for swACLEtherRulePort
 3494             accordingly.
 3495             Set to 1-65535 indicates to create the exact access ID for the swACLEtherRulePort
 3496             and the swACLEtherRulePort must set one port only, otherwise the row creation will
 3497             fail."
 3498         ::= { swIBPACLEtherRuleEntry 2 }
 3499 
 3500     swIBPACLEtherRuleEtherType OBJECT-TYPE
 3501         SYNTAX  OCTET STRING (SIZE (2))
 3502         MAX-ACCESS  read-only
 3503         STATUS  obsolete
 3504         DESCRIPTION
 3505             "Specifies that the access rule will apply only to packets with this
 3506              802.1Q Ethernet type value in the packet header."
 3507         ::= { swIBPACLEtherRuleEntry 3 }
 3508 
 3509     swIBPACLEtherRulePermit OBJECT-TYPE
 3510         SYNTAX  INTEGER {
 3511                deny(1),
 3512                permit(2)
 3513                }
 3514         MAX-ACCESS  read-only
 3515         STATUS  obsolete
 3516         DESCRIPTION
 3517             "This object indicates if the result of the examination is 'permit' or 'deny'.
 3518              The default is 'permit' (1).
 3519              permit - Specifies that packets that match the access profile are
 3520                       permitted to be forwarded by the switch.
 3521              deny - Specifies that packets that match the access profile
 3522                     are not permitted to be forwarded by the switch and will be filtered."
 3523         ::= { swIBPACLEtherRuleEntry 4 }
 3524 
 3525     swIBPACLEtherRulePort OBJECT-TYPE
 3526         SYNTAX  PortList
 3527         MAX-ACCESS  read-only
 3528         STATUS  obsolete
 3529         DESCRIPTION
 3530             "Specifies that the access rule will only apply to port(s)."
 3531         ::= { swIBPACLEtherRuleEntry 5 }
 3532 
 3533 -- -----------------------------------------------------------------------------
 3534 --swIBPACLIpRuleTable
 3535 -- -----------------------------------------------------------------------------
 3536     swIBPACLIpRuleTable OBJECT-TYPE
 3537         SYNTAX  SEQUENCE OF SwIBPACLIpRuleEntry
 3538         MAX-ACCESS  not-accessible
 3539         STATUS  obsolete
 3540         DESCRIPTION
 3541             ""
 3542         ::= { swAclRuleMgmt 6 }
 3543 
 3544     swIBPACLIpRuleEntry OBJECT-TYPE
 3545         SYNTAX  SwIBPACLIpRuleEntry
 3546         MAX-ACCESS  not-accessible
 3547         STATUS  obsolete
 3548         DESCRIPTION
 3549             ""
 3550         INDEX  { swIBPACLIpRuleProfileID , swIBPACLIpRuleAccessID }
 3551         ::= { swIBPACLIpRuleTable 1 }
 3552 
 3553     SwIBPACLIpRuleEntry ::=
 3554         SEQUENCE {
 3555             swIBPACLIpRuleProfileID
 3556                 INTEGER,
 3557             swIBPACLIpRuleAccessID
 3558                 INTEGER,
 3559             swIBPACLIpRuleSrcMacAddress
 3560                 MacAddress,
 3561             swIBPACLIpRuleSrcIpaddress
 3562                 IpAddress,
 3563             swIBPACLIpRulePermit
 3564                 INTEGER,
 3565             swIBPACLIpRulePort
 3566                 PortList
 3567         }
 3568     swIBPACLIpRuleProfileID OBJECT-TYPE
 3569         SYNTAX  INTEGER
 3570         MAX-ACCESS  read-only
 3571         STATUS  obsolete
 3572         DESCRIPTION
 3573             "The ID of the ACL mask entry, unique in the mask list. The maximum value of this object depends on the device."
 3574         ::= { swIBPACLIpRuleEntry 1 }
 3575 
 3576     swIBPACLIpRuleAccessID OBJECT-TYPE
 3577         SYNTAX  INTEGER (0..65535)
 3578         MAX-ACCESS  read-only   --read-create
 3579         STATUS  obsolete
 3580         DESCRIPTION
 3581             "The ID of the ACL rule entry in relation to swACLIPRuleProfileID.
 3582             When the row creation is set to 0, this indicates assigning an access ID automatically
 3583             for the ports in the swACLIpRulePort  to create rule entries for swACLIpRulePort
 3584             accordingly.
 3585             Set to 1-65535 indicates to create the exact access ID for the swACLIpRulePort
 3586             and the swACLIpRulePort must be set for one port only, otherwise the row creation will
 3587             fail."
 3588         ::= { swIBPACLIpRuleEntry 2 }
 3589 
 3590    swIBPACLIpRuleSrcMacAddress OBJECT-TYPE
 3591         SYNTAX  MacAddress
 3592         MAX-ACCESS  read-only
 3593         STATUS  obsolete
 3594         DESCRIPTION
 3595             "Specifies that the access rule will apply to only packets with
 3596              this source MAC address."
 3597         ::= { swIBPACLIpRuleEntry 3 }
 3598 
 3599     swIBPACLIpRuleSrcIpaddress OBJECT-TYPE
 3600         SYNTAX  IpAddress
 3601         MAX-ACCESS  read-only
 3602         STATUS  obsolete
 3603         DESCRIPTION
 3604             "Specifies an IP source address."
 3605         ::= { swIBPACLIpRuleEntry 4 }
 3606 
 3607     swIBPACLIpRulePermit OBJECT-TYPE
 3608         SYNTAX  INTEGER {
 3609                deny(1),
 3610                permit(2)
 3611                }
 3612         MAX-ACCESS  read-only
 3613         STATUS  obsolete
 3614         DESCRIPTION
 3615             "This object indicates if the result of the examination is 'permit' or 'deny'; the default is 'permit' (1)
 3616              permit - Specifies that packets that match the access profile are
 3617                       permitted to be forwarded by the switch.
 3618              deny - Specifies that packets that match the access profile
 3619                     are not permitted to be forwarded by the switch and will be filtered."
 3620         ::= { swIBPACLIpRuleEntry 5 }
 3621 
 3622     swIBPACLIpRulePort OBJECT-TYPE
 3623         SYNTAX  PortList
 3624         MAX-ACCESS  read-only
 3625         STATUS  obsolete
 3626         DESCRIPTION
 3627             "Specifies that the access rule will only apply to port(s)."
 3628         ::= { swIBPACLIpRuleEntry 6 }
 3629 
 3630 -- -----------------------------------------------------------------------------
 3631 --swACLPktContRuleOptionTable
 3632 -- -----------------------------------------------------------------------------
 3633     swACLPktContRuleOptionTable OBJECT-TYPE
 3634         SYNTAX  SEQUENCE OF SwACLPktContRuleOptionEntry
 3635         MAX-ACCESS  not-accessible
 3636         STATUS  current
 3637         DESCRIPTION
 3638             "This table contains user-defined ACL information."
 3639         ::= { swAclRuleMgmt 7 }
 3640 
 3641     swACLPktContRuleOptionEntry OBJECT-TYPE
 3642         SYNTAX  SwACLPktContRuleOptionEntry
 3643         MAX-ACCESS  not-accessible
 3644         STATUS  current
 3645         DESCRIPTION
 3646             "A list of information about the ACL rule regarding the user-defined part of each packet."
 3647         INDEX  { swACLPktContRuleOptionProfileID,swACLPktContRuleOptionAccessID }
 3648         ::= { swACLPktContRuleOptionTable 1 }
 3649 
 3650     SwACLPktContRuleOptionEntry ::=
 3651         SEQUENCE {
 3652             swACLPktContRuleOptionProfileID
 3653                 INTEGER,
 3654             swACLPktContRuleOptionAccessID
 3655                 INTEGER,
 3656            swACLPktContRuleOffsetChunk1OffsetValue
 3657                INTEGER,
 3658            swACLPktContRuleOffsetChunk1Content
 3659                OCTET STRING,
 3660            swACLPktContRuleOffsetChunk2OffsetValue
 3661                INTEGER,
 3662            swACLPktContRuleOffsetChunk2Content
 3663                OCTET STRING,
 3664            swACLPktContRuleOffsetChunk3OffsetValue
 3665                INTEGER,
 3666            swACLPktContRuleOffsetChunk3Content
 3667                OCTET STRING,
 3668            swACLPktContRuleOffsetChunk4OffsetValue
 3669                INTEGER,
 3670            swACLPktContRuleOffsetChunk4Content
 3671                OCTET STRING,
 3672             swACLPktContRuleOptionEnablePriority
 3673                 INTEGER,
 3674             swACLPktContRuleOptionPriority
 3675                 INTEGER,
 3676             swACLPktContRuleOptionReplacePriority
 3677                 INTEGER,
 3678             swACLPktContRuleOptionEnableReplaceDscp
 3679                 INTEGER,
 3680             swACLPktContRuleOptionRepDscp
 3681                 INTEGER,
 3682             swACLPktContRuleOptionPermit
 3683                 INTEGER,
 3684             swACLPktContRuleOptionPort
 3685                 PortList,
 3686             swACLPktContRuleOptionRowStatus
 3687                 RowStatus,
 3688             swACLPktContRuleOptionOwner
 3689                 INTEGER,
 3690             swACLPktContRuleOptionRxRate
 3691                 INTEGER,
 3692             swACLPktContRuleOptionEnableReplaceTosPrecedence
 3693                 INTEGER,
 3694             swACLPktContRuleOptionRepTosPrecedence
 3695                 INTEGER,
 3696             swACLPktContRuleOptionVID
 3697                 INTEGER
 3698         }
 3699     swACLPktContRuleOptionProfileID OBJECT-TYPE
 3700         SYNTAX  INTEGER
 3701         MAX-ACCESS  read-only
 3702         STATUS  current
 3703         DESCRIPTION
 3704             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 3705         ::= { swACLPktContRuleOptionEntry 1 }
 3706 
 3707     swACLPktContRuleOptionAccessID OBJECT-TYPE
 3708         SYNTAX  INTEGER (0..65535)
 3709         MAX-ACCESS  read-only
 3710         STATUS  current
 3711         DESCRIPTION
 3712             "The ID of the ACL rule entry in relation to the swACLPktContRuleProfileID.
 3713              When row creation is set to 0, access ID is automatically created
 3714              for the ports in the swACLPktContRulePort to create rule entries
 3715              for swACLPktContRulePort accordingly.
 3716              Set to 1-65535 indicates to creswACLPktContRuleRepDscpate the exact access ID
 3717              for the swACLPktContRulePort. The swACLPktContRulePort must be set to
 3718              one port only, otherwise the row creation will fail."
 3719         ::= { swACLPktContRuleOptionEntry 2 }
 3720 
 3721    swACLPktContRuleOffsetChunk1OffsetValue  OBJECT-TYPE
 3722         SYNTAX  INTEGER (0..31)
 3723         MAX-ACCESS  read-only
 3724         STATUS  current
 3725         DESCRIPTION
 3726             "Displays the frame content offset of chunk1."
 3727         ::= { swACLPktContRuleOptionEntry 3 }
 3728 
 3729    swACLPktContRuleOffsetChunk1Content  OBJECT-TYPE
 3730        SYNTAX  OCTET STRING (SIZE(4))
 3731        MAX-ACCESS  read-create
 3732        STATUS  current
 3733        DESCRIPTION
 3734            "Specifies the frame content of chunk1."
 3735        ::= { swACLPktContRuleOptionEntry 4 }
 3736 
 3737    swACLPktContRuleOffsetChunk2OffsetValue  OBJECT-TYPE
 3738         SYNTAX  INTEGER (0..31)
 3739         MAX-ACCESS  read-only
 3740         STATUS  current
 3741         DESCRIPTION
 3742             "Displays the frame content offset of chunk2."
 3743         ::= { swACLPktContRuleOptionEntry 5 }
 3744 
 3745     swACLPktContRuleOffsetChunk2Content  OBJECT-TYPE
 3746        SYNTAX  OCTET STRING (SIZE(4))
 3747        MAX-ACCESS  read-create
 3748        STATUS  current
 3749        DESCRIPTION
 3750            "Specifies the frame content of chunk2."
 3751        ::= { swACLPktContRuleOptionEntry 6 }
 3752 
 3753     swACLPktContRuleOffsetChunk3OffsetValue  OBJECT-TYPE
 3754         SYNTAX  INTEGER (0..31)
 3755         MAX-ACCESS  read-only
 3756         STATUS  current
 3757         DESCRIPTION
 3758             "Displays the frame content offset of chunk3."
 3759         ::= { swACLPktContRuleOptionEntry 7 }
 3760 
 3761     swACLPktContRuleOffsetChunk3Content  OBJECT-TYPE
 3762        SYNTAX  OCTET STRING (SIZE(4))
 3763        MAX-ACCESS  read-create
 3764        STATUS  current
 3765        DESCRIPTION
 3766            "Specifies the frame content of chunk3."
 3767        ::= { swACLPktContRuleOptionEntry 8 }
 3768 
 3769      swACLPktContRuleOffsetChunk4OffsetValue  OBJECT-TYPE
 3770         SYNTAX  INTEGER (0..31)
 3771         MAX-ACCESS  read-only
 3772         STATUS  current
 3773         DESCRIPTION
 3774             "Displays the frame content offset of chunk4."
 3775         ::= { swACLPktContRuleOptionEntry 9 }
 3776 
 3777      swACLPktContRuleOffsetChunk4Content  OBJECT-TYPE
 3778        SYNTAX  OCTET STRING (SIZE(4))
 3779        MAX-ACCESS  read-create
 3780        STATUS  current
 3781        DESCRIPTION
 3782            "Specifies the frame content of chunk4."
 3783        ::= { swACLPktContRuleOptionEntry 10 }
 3784 
 3785     swACLPktContRuleOptionEnablePriority OBJECT-TYPE
 3786         SYNTAX  INTEGER {
 3787                enabled(1),
 3788                disabled(2)
 3789                }
 3790         MAX-ACCESS  read-create
 3791         STATUS  current
 3792         DESCRIPTION
 3793             "Specifies that the access rule will only apply to packets with this
 3794              priority value."
 3795         ::= { swACLPktContRuleOptionEntry 11 }
 3796 
 3797     swACLPktContRuleOptionPriority OBJECT-TYPE
 3798         SYNTAX  INTEGER(0..7)
 3799         MAX-ACCESS  read-create
 3800         STATUS  current
 3801         DESCRIPTION
 3802             "Specifies that the priority will change for the packets while the swACLPktContRuleReplacePriority
 3803          is enabled ."
 3804         ::= { swACLPktContRuleOptionEntry 12 }
 3805 
 3806     swACLPktContRuleOptionReplacePriority OBJECT-TYPE
 3807         SYNTAX  INTEGER {
 3808                enabled(1),
 3809                disabled(2)
 3810                }
 3811         MAX-ACCESS  read-create
 3812         STATUS  current
 3813         DESCRIPTION
 3814             "Specifies if the switch will change priorities of packets that match the access profile
 3815             802.1p priority tag or not."
 3816         ::= { swACLPktContRuleOptionEntry 13 }
 3817 
 3818     swACLPktContRuleOptionEnableReplaceDscp OBJECT-TYPE
 3819         SYNTAX  INTEGER {
 3820                enabled(1),
 3821                disabled(2)
 3822                }
 3823         MAX-ACCESS  read-create
 3824         STATUS  current
 3825         DESCRIPTION
 3826             "Specifies if the switch will change priorities of packets that match the access profile
 3827              DSCP field or not.
 3828              Replace DSCP and replace ToS precedence can not both be supported.                 "
 3829         ::= { swACLPktContRuleOptionEntry 14 }
 3830 
 3831     swACLPktContRuleOptionRepDscp OBJECT-TYPE
 3832         SYNTAX  INTEGER(0..63)
 3833         MAX-ACCESS  read-create
 3834         STATUS  current
 3835         DESCRIPTION
 3836             "Specifies a value to be written to the DSCP field of an incoming packet
 3837              that meets the criteria specified in the first part of the command.
 3838              This value will over-write the value in the DSCP field of the packet."
 3839         ::= { swACLPktContRuleOptionEntry 15 }
 3840 
 3841     swACLPktContRuleOptionPermit OBJECT-TYPE
 3842         SYNTAX  INTEGER {
 3843                deny(1),
 3844                permit(2),
 3845                mirror(3)
 3846                }
 3847         MAX-ACCESS  read-create
 3848         STATUS  current
 3849         DESCRIPTION
 3850             "This object indicates if the result of the packet examination is 'permit' or 'deny'.
 3851              The default is 'permit'.
 3852              permit - Specifies that packets that match the access profile are
 3853                       permitted to be forwarded by the switch.
 3854              deny - Specifies that packets that match the access profile
 3855                     are not permitted to be forwarded by the switch and will be filtered.
 3856              mirror - Specifies that the packets that match the access profile are copied to
 3857                       the mirror port.
 3858                       Note: The ACL mirror function will function after mirror is enabled
 3859                       and a mirror port has been configured."
 3860         ::= { swACLPktContRuleOptionEntry 16 }
 3861 
 3862     swACLPktContRuleOptionPort OBJECT-TYPE
 3863         SYNTAX  PortList
 3864         MAX-ACCESS  read-create
 3865         STATUS  current
 3866         DESCRIPTION
 3867              "Specifies that the access rule will only apply to port(s).
 3868               This object and swACLPktContRuleOptionVID can not be set together. "
 3869          ::= { swACLPktContRuleOptionEntry 17 }
 3870 
 3871     swACLPktContRuleOptionRowStatus OBJECT-TYPE
 3872         SYNTAX  RowStatus
 3873         MAX-ACCESS  read-create
 3874         STATUS  current
 3875         DESCRIPTION
 3876             "This object indicates the status of this entry."
 3877         ::= { swACLPktContRuleOptionEntry 18 }
 3878 
 3879     swACLPktContRuleOptionOwner OBJECT-TYPE
 3880         SYNTAX  INTEGER {
 3881                any(1),
 3882                acl(2),
 3883                ipbind(3),
 3884                other(4),
 3885                dhcp(5),
 3886                netbios(6),
 3887                ext-netbios(7),
 3888                ismvlan(8),
 3889                dhcp-relay(9),
 3890                pppoe(10),
 3891                arp-spoofing(11),
 3892                bpdu-tunnel(12)
 3893                }
 3894         MAX-ACCESS  read-only
 3895         STATUS  current
 3896         DESCRIPTION
 3897             "The owner of the ACL rule entry. Only owners can modify this entry."
 3898         ::= { swACLPktContRuleOptionEntry 19 }
 3899 
 3900    swACLPktContRuleOptionRxRate  OBJECT-TYPE
 3901         SYNTAX  INTEGER
 3902         MAX-ACCESS  read-create
 3903         STATUS  current
 3904         DESCRIPTION
 3905             "Specifies the rx-rate, 0 denotes no_limit. The maximum value of this object depends on the device."
 3906         ::= { swACLPktContRuleOptionEntry 20 }
 3907 
 3908     swACLPktContRuleOptionEnableReplaceTosPrecedence OBJECT-TYPE
 3909         SYNTAX  INTEGER {
 3910                enabled(1),
 3911                disabled(2)
 3912                }
 3913         MAX-ACCESS  read-create
 3914         STATUS  current
 3915         DESCRIPTION
 3916             "Specifies if the switch will change priorities of packets that match the access profile
 3917              ToS precedence field or not.
 3918              Replace DSCP and replace ToS precedence can not both be supported.
 3919             "
 3920         ::= { swACLPktContRuleOptionEntry 21 }
 3921 
 3922     swACLPktContRuleOptionRepTosPrecedence OBJECT-TYPE
 3923         SYNTAX  INTEGER(0..7)
 3924         MAX-ACCESS  read-create
 3925         STATUS  current
 3926         DESCRIPTION
 3927             "Specifies a value to be written to the ToS precedence field of an incoming packet
 3928              that meets the criteria specified in the first part of the command.
 3929              This value will over-write the value in the ToS precedence field of the packet."
 3930         ::= { swACLPktContRuleOptionEntry 22 }
 3931 
 3932     swACLPktContRuleOptionVID OBJECT-TYPE
 3933         SYNTAX  INTEGER (0..4094)
 3934         MAX-ACCESS  read-create
 3935         STATUS  current
 3936         DESCRIPTION
 3937             "Specifies this rule only applies to the specified VLAN. There are two conditions:
 3938              1.only the portlist that belongs to this VLAN will be included;
 3939              2.packets must belong to this VLAN.
 3940 
 3941              This object and swACLPktContRuleOptionPort can not be set together.
 3942              When you set swACLPktContRuleOptionPort, the value of this object will automatically change to 0.
 3943              And this object can not be set 0."
 3944         ::= { swACLPktContRuleOptionEntry 23 }
 3945         
 3946         
 3947         
 3948 
 3949 -- -----------------------------------------------------------------------------
 3950 -- swACLCounterTable
 3951 -- -----------------------------------------------------------------------------
 3952        swACLCounterTable OBJECT-TYPE
 3953            SYNTAX      SEQUENCE OF SwACLCounterEntry
 3954            MAX-ACCESS  not-accessible
 3955            STATUS      current
 3956            DESCRIPTION
 3957                "This table maintains counter information associated with a specific
 3958                 rule in the ACL rule table. Please refer to the swACLEtherRuleTable,
 3959                 swACLIpRuleTable, swACLIpv6RuleTable and swACLPktContRuleTable
 3960                 for detailed ACL rule information."
 3961            ::= { swAclRuleMgmt 8 }
 3962 
 3963        swACLCounterEntry OBJECT-TYPE
 3964            SYNTAX      SwACLCounterEntry
 3965            MAX-ACCESS  not-accessible
 3966            STATUS      current
 3967            DESCRIPTION
 3968                "The entry maintains counter information associated with the ACL
 3969                 rule table."
 3970            INDEX { swACLCounterProfileID, swACLCounterAccessID}
 3971            ::= { swACLCounterTable 1 }
 3972 
 3973        SwACLCounterEntry ::=
 3974            SEQUENCE {
 3975                swACLCounterProfileID
 3976                    INTEGER,
 3977                swACLCounterAccessID
 3978                    INTEGER,
 3979                swACLCounterState
 3980                    INTEGER,
 3981                swACLCounterTotalCounter
 3982                    Counter64,
 3983                swACLCounterGreenCounter
 3984                    Counter64,
 3985                swACLCounterYellowCounter
 3986                    Counter64,
 3987                swACLCounterRedCounter
 3988                    Counter64
 3989            }
 3990 
 3991     swACLCounterProfileID OBJECT-TYPE
 3992         SYNTAX      INTEGER
 3993         MAX-ACCESS  read-only
 3994         STATUS      current
 3995         DESCRIPTION
 3996             "The ID of the ACL mask entry, which is unique in the mask
 3997              list."
 3998         ::= { swACLCounterEntry 1 }
 3999 
 4000     swACLCounterAccessID OBJECT-TYPE
 4001         SYNTAX      INTEGER(1..65535)
 4002         MAX-ACCESS  read-only
 4003         STATUS      current
 4004         DESCRIPTION
 4005             "The ID of the ACL rule entry as related to the
 4006              swACLCounterProfileID."
 4007         ::= { swACLCounterEntry 2 }
 4008 
 4009     swACLCounterState OBJECT-TYPE
 4010         SYNTAX  INTEGER {
 4011                enabled(1),
 4012                disabled(2)
 4013                }
 4014         MAX-ACCESS  read-write
 4015         STATUS  current
 4016         DESCRIPTION
 4017             "Specifies whether the counter feature will be enabled/disabled.
 4018              1. This is optional. The default is disable.
 4019              2. If the rule is not bound with flow_meter, then all packets that match will be counted.
 4020              If the rule is bound with flow_meter, then the 'counter' will be overridden.
 4021              "
 4022         ::= { swACLCounterEntry 3 }
 4023 
 4024     swACLCounterTotalCounter OBJECT-TYPE
 4025         SYNTAX  Counter64
 4026         MAX-ACCESS  read-only
 4027         STATUS  current
 4028         DESCRIPTION
 4029             "The number of matched packets."
 4030         ::= { swACLCounterEntry 4 }
 4031 
 4032     swACLCounterGreenCounter OBJECT-TYPE
 4033         SYNTAX  Counter64
 4034         MAX-ACCESS  read-only
 4035         STATUS  current
 4036         DESCRIPTION
 4037             "The number of matched green packets."
 4038         ::= { swACLCounterEntry 5 }
 4039 
 4040     swACLCounterYellowCounter OBJECT-TYPE
 4041         SYNTAX  Counter64
 4042         MAX-ACCESS  read-only
 4043         STATUS  current
 4044         DESCRIPTION
 4045             "The number of matched yellow packets."
 4046         ::= { swACLCounterEntry 6 }
 4047 
 4048     swACLCounterRedCounter OBJECT-TYPE
 4049         SYNTAX  Counter64
 4050         MAX-ACCESS  read-only
 4051         STATUS  current
 4052         DESCRIPTION
 4053             "The number of matched red packets."
 4054         ::= { swACLCounterEntry 7 }
 4055         
 4056 
 4057 -- -----------------------------------------------------------------------------
 4058 -- swACLPktContRuleOption2
 4059 -- -----------------------------------------------------------------------------
 4060                 
 4061 swACLPktContRuleOption2              OBJECT IDENTIFIER ::= { swAclRuleMgmt 10 }            
 4062                 
 4063 -- -----------------------------------------------------------------------------
 4064 --swACLPktContRuleOption2Table
 4065 -- -----------------------------------------------------------------------------
 4066     swACLPktContRuleOption2Table OBJECT-TYPE
 4067         SYNTAX  SEQUENCE OF SwACLPktContRuleOption2Entry
 4068         MAX-ACCESS  not-accessible
 4069         STATUS  current
 4070         DESCRIPTION
 4071             "This table contains user-defined ACL information for option 2 type
 4072             of packet contnet syntax.
 4073             
 4074 		 	To qualify the data of a packet content field with respect to an offset, an entry in the
 4075 		 	swACLPktContRuleOption2OffsetsTable must be created first. 
 4076 		 	
 4077 		 	On row creation, all entries in the corresponding profile defined in the
 4078 		 	swACLPktContRuleOption2OffsetsTable will be associated to the ACL rule.            
 4079             "
 4080         ::= { swACLPktContRuleOption2 1 }
 4081 
 4082     swACLPktContRuleOption2Entry OBJECT-TYPE
 4083         SYNTAX  SwACLPktContRuleOption2Entry
 4084         MAX-ACCESS  not-accessible
 4085         STATUS  current
 4086         DESCRIPTION
 4087             "A list of information about the ACL rule regarding the user-defined part of each packet."
 4088         INDEX  { swACLPktContRuleOption2ProfileID,swACLPktContRuleOption2AccessID }
 4089         ::= { swACLPktContRuleOption2Table 1 }
 4090 
 4091     SwACLPktContRuleOption2Entry ::=
 4092         SEQUENCE {
 4093             swACLPktContRuleOption2ProfileID
 4094                 INTEGER,
 4095             swACLPktContRuleOption2AccessID
 4096                 INTEGER,
 4097             swACLPktContRuleOption2SrcMac
 4098                 MacAddress,
 4099             swACLPktContRuleOption2DstMac
 4100                 MacAddress,
 4101             swACLPktContRuleOption2CTag
 4102                 OCTET STRING,
 4103             swACLPktContRuleOption2STag
 4104                 OCTET STRING,
 4105             swACLPktContRuleOption2EnablePriority
 4106                 INTEGER,
 4107             swACLPktContRuleOption2Priority
 4108                 INTEGER,
 4109             swACLPktContRuleOption2ReplacePriority
 4110                 INTEGER,
 4111             swACLPktContRuleOption2EnableReplaceDscp
 4112                 INTEGER,
 4113             swACLPktContRuleOption2RepDscp
 4114                 INTEGER,
 4115             swACLPktContRuleOption2Permit
 4116                 INTEGER,
 4117             swACLPktContRuleOption2Port
 4118                 PortList,
 4119             swACLPktContRuleOption2Owner
 4120                 INTEGER,
 4121             swACLPktContRuleOption2EnableReplaceTosPrecedence
 4122                 INTEGER,
 4123             swACLPktContRuleOption2RepTosPrecedence
 4124                 INTEGER,
 4125             swACLPktContRuleOption2VID
 4126                 INTEGER,
 4127             swACLPktContRuleOption2RowStatus
 4128                 RowStatus,
 4129             swACLPktContRuleOption2MaskSrcMac
 4130                 MacAddress,
 4131             swACLPktContRuleOption2MaskDstMac
 4132                 MacAddress,
 4133             swACLPktContRuleOption2MaskCTag
 4134                 OCTET STRING,
 4135             swACLPktContRuleOption2MaskSTag
 4136                 OCTET STRING                                
 4137         }
 4138         
 4139     swACLPktContRuleOption2ProfileID OBJECT-TYPE
 4140         SYNTAX  INTEGER
 4141         MAX-ACCESS  read-only
 4142         STATUS  current
 4143         DESCRIPTION
 4144             "The ID of the ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 4145         ::= { swACLPktContRuleOption2Entry 1 }
 4146 
 4147     swACLPktContRuleOption2AccessID OBJECT-TYPE
 4148         SYNTAX  INTEGER (0..65535)
 4149         MAX-ACCESS  read-only
 4150         STATUS  current
 4151         DESCRIPTION
 4152             "The ID of the ACL rule entry in relation to the swACLPktContRuleOption2ProfileID.
 4153              When row creation is set to 0, access ID is automatically assigned.
 4154 			"
 4155         ::= { swACLPktContRuleOption2Entry 2 }
 4156         
 4157         
 4158     swACLPktContRuleOption2SrcMac OBJECT-TYPE
 4159         SYNTAX  MacAddress
 4160         MAX-ACCESS  read-create
 4161         STATUS  current
 4162         DESCRIPTION
 4163             "Specifies that the access rule will apply to only packets with
 4164              this source MAC address."
 4165         ::= { swACLPktContRuleOption2Entry 3 }        
 4166         
 4167         
 4168     swACLPktContRuleOption2DstMac OBJECT-TYPE
 4169         SYNTAX  MacAddress
 4170         MAX-ACCESS  read-create
 4171         STATUS  current
 4172         DESCRIPTION
 4173             "Specifies that the access rule will apply to only packets with
 4174              this destination MAC address."
 4175         ::= { swACLPktContRuleOption2Entry 4 }   
 4176         
 4177    swACLPktContRuleOption2CTag  OBJECT-TYPE
 4178        SYNTAX  OCTET STRING (SIZE(2))
 4179        MAX-ACCESS  read-create
 4180        STATUS  current
 4181        DESCRIPTION
 4182            "Specifies the frame content of the customer VLAN tag, valid values are only from 0x0000 to 0xFFFF."
 4183        ::= { swACLPktContRuleOption2Entry 5 }        
 4184         
 4185    swACLPktContRuleOption2STag  OBJECT-TYPE
 4186        SYNTAX  OCTET STRING (SIZE(2))
 4187        MAX-ACCESS  read-create
 4188        STATUS  current
 4189        DESCRIPTION
 4190            "Specifies the frame content of the service VLAN tag, valid values are only from 0x0000 to 0xFFFF."
 4191        ::= { swACLPktContRuleOption2Entry 6 }                             
 4192 
 4193    
 4194     swACLPktContRuleOption2EnablePriority OBJECT-TYPE
 4195         SYNTAX  INTEGER {
 4196                enabled(1),
 4197                disabled(2)
 4198                }
 4199         MAX-ACCESS  read-create
 4200         STATUS  current
 4201         DESCRIPTION
 4202             "Specifies that the access rule will only apply to packets with this
 4203              priority value."
 4204         ::= { swACLPktContRuleOption2Entry 7 }
 4205 
 4206     swACLPktContRuleOption2Priority OBJECT-TYPE
 4207         SYNTAX  INTEGER(0..7)
 4208         MAX-ACCESS  read-create
 4209         STATUS  current
 4210         DESCRIPTION
 4211             "Specifies that the priority will change for the packets while the swACLPktContRuleOption2ReplacePriority
 4212          is enabled ."
 4213         ::= { swACLPktContRuleOption2Entry 8 }
 4214 
 4215     swACLPktContRuleOption2ReplacePriority OBJECT-TYPE
 4216         SYNTAX  INTEGER {
 4217                enabled(1),
 4218                disabled(2)
 4219                }
 4220         MAX-ACCESS  read-create
 4221         STATUS  current
 4222         DESCRIPTION
 4223             "Specifies if the switch will change priorities of packets that match the access profile
 4224             802.1p priority tag or not."
 4225         ::= { swACLPktContRuleOption2Entry 9 }
 4226 
 4227     swACLPktContRuleOption2EnableReplaceDscp OBJECT-TYPE
 4228         SYNTAX  INTEGER {
 4229                enabled(1),
 4230                disabled(2)
 4231                }
 4232         MAX-ACCESS  read-create
 4233         STATUS  current
 4234         DESCRIPTION
 4235             "Specifies if the switch will change priorities of packets that match the access profile
 4236              DSCP field or not.
 4237              Replace DSCP and replace ToS precedence can not both be supported.                 "
 4238         ::= { swACLPktContRuleOption2Entry 10 }
 4239 
 4240     swACLPktContRuleOption2RepDscp OBJECT-TYPE
 4241         SYNTAX  INTEGER(0..63)
 4242         MAX-ACCESS  read-create
 4243         STATUS  current
 4244         DESCRIPTION
 4245             "Specifies a value to be written to the DSCP field of an incoming packet
 4246              that meets the criteria specified in the first part of the command.
 4247              This value will over-write the value in the DSCP field of the packet."
 4248         ::= { swACLPktContRuleOption2Entry 11 }
 4249 
 4250     swACLPktContRuleOption2Permit OBJECT-TYPE
 4251         SYNTAX  INTEGER {
 4252                deny(1),
 4253                permit(2),
 4254                mirror(3)
 4255                }
 4256         MAX-ACCESS  read-create
 4257         STATUS  current
 4258         DESCRIPTION
 4259             "This object indicates if the result of the packet examination is 'permit' or 'deny'.
 4260              The default is 'permit'.
 4261              permit - Specifies that packets that match the access profile are
 4262                       permitted to be forwarded by the switch.
 4263              deny - Specifies that packets that match the access profile
 4264                     are not permitted to be forwarded by the switch and will be filtered.
 4265              mirror - Specifies that the packets that match the access profile are copied to
 4266                       the mirror port.
 4267                       Note: The ACL mirror function will function after mirror is enabled
 4268                       and a mirror port has been configured."
 4269         ::= { swACLPktContRuleOption2Entry 12 }
 4270 
 4271     swACLPktContRuleOption2Port OBJECT-TYPE
 4272         SYNTAX  PortList
 4273         MAX-ACCESS  read-create
 4274         STATUS  current
 4275         DESCRIPTION
 4276              "Specifies that the access rule will only apply to port(s).
 4277               This object and swACLPktContRuleOption2VID can not be set together. "
 4278          ::= { swACLPktContRuleOption2Entry 13 }
 4279 
 4280 
 4281 
 4282     swACLPktContRuleOption2Owner OBJECT-TYPE
 4283         SYNTAX  INTEGER {
 4284                any(1),
 4285                acl(2),
 4286                ipbind(3),
 4287                other(4),
 4288                dhcp(5),
 4289                netbios(6),
 4290                ext-netbios(7),
 4291                ismvlan(8),
 4292                dhcp-relay(9),
 4293                pppoe(10),
 4294                arp-spoofing(11),
 4295                bpdu-tunnel(12)
 4296                }
 4297         MAX-ACCESS  read-only
 4298         STATUS  current
 4299         DESCRIPTION
 4300             "The owner of the ACL rule entry. Only owners can modify this entry."
 4301         ::= { swACLPktContRuleOption2Entry 17}
 4302 
 4303     swACLPktContRuleOption2EnableReplaceTosPrecedence OBJECT-TYPE
 4304         SYNTAX  INTEGER {
 4305                enabled(1),
 4306                disabled(2)
 4307                }
 4308         MAX-ACCESS  read-create
 4309         STATUS  current
 4310         DESCRIPTION
 4311             "Specifies if the switch will change priorities of packets that match the access profile
 4312              ToS precedence field or not.
 4313              Replace DSCP and replace ToS precedence can not both be supported.
 4314             "
 4315         ::= { swACLPktContRuleOption2Entry 18 }
 4316 
 4317     swACLPktContRuleOption2RepTosPrecedence OBJECT-TYPE
 4318         SYNTAX  INTEGER(0..7)
 4319         MAX-ACCESS  read-create
 4320         STATUS  current
 4321         DESCRIPTION
 4322             "Specifies a value to be written to the ToS precedence field of an incoming packet
 4323              that meets the criteria specified in the first part of the command.
 4324              This value will over-write the value in the ToS precedence field of the packet."
 4325         ::= { swACLPktContRuleOption2Entry 19 }
 4326 
 4327     swACLPktContRuleOption2VID OBJECT-TYPE
 4328         SYNTAX  INTEGER (0..4094)
 4329         MAX-ACCESS  read-create
 4330         STATUS  current
 4331         DESCRIPTION
 4332             "Specifies this rule only applies to the specified VLAN. There are two conditions:
 4333              1.only the portlist that belongs to this VLAN will be included;
 4334              2.packets must belong to this VLAN.
 4335 
 4336              This object and swACLPktContRuleOption2Port can not be set together.
 4337              When you set swACLPktContRuleOption2Port, the value of this object will automatically change to 0.
 4338              And this object can not be set 0."
 4339         ::= { swACLPktContRuleOption2Entry 20 }      
 4340         
 4341     swACLPktContRuleOption2RowStatus OBJECT-TYPE
 4342         SYNTAX  RowStatus
 4343         MAX-ACCESS  read-create
 4344         STATUS  current
 4345         DESCRIPTION
 4346             "This object indicates the status of this entry."
 4347         ::= { swACLPktContRuleOption2Entry 21 }      
 4348         
 4349     swACLPktContRuleOption2MaskSrcMac OBJECT-TYPE
 4350         SYNTAX  MacAddress
 4351         MAX-ACCESS  read-create
 4352         STATUS  current
 4353         DESCRIPTION
 4354             "Specifies the per rule mask of source MAC address field as defined in swACLPktContRuleOption2SrcMac object
 4355             The value of this object when not in use is the corresponding mask in the profile mask.
 4356             Once the value of this object is modified, the per rule mask will take effect.
 4357             "
 4358         ::= { swACLPktContRuleOption2Entry 22 }        
 4359         
 4360         
 4361     swACLPktContRuleOption2MaskDstMac OBJECT-TYPE
 4362         SYNTAX  MacAddress
 4363         MAX-ACCESS  read-create
 4364         STATUS  current
 4365         DESCRIPTION
 4366             "Specifies the per rule mask of source MAC address field as defined in swACLPktContRuleOption2DstMac object
 4367             The value of this object when not in use is the corresponding mask in the profile mask.
 4368             Once the value of this object is modified, the per rule mask will take effect.
 4369             "
 4370         ::= { swACLPktContRuleOption2Entry 23 }   
 4371         
 4372    swACLPktContRuleOption2MaskCTag  OBJECT-TYPE
 4373        SYNTAX  OCTET STRING (SIZE(2))
 4374        MAX-ACCESS  read-create
 4375        STATUS  current
 4376        DESCRIPTION
 4377             "Specifies the per rule mask of the customer VLAN tag field as defined in swACLPktContRuleOption2CTag object
 4378             The value of this object when not in use is the corresponding mask in the profile mask.
 4379             Once the value of this object is modified, the per rule mask will take effect.
 4380             "
 4381        ::= { swACLPktContRuleOption2Entry 24 }        
 4382         
 4383    swACLPktContRuleOption2MaskSTag  OBJECT-TYPE
 4384        SYNTAX  OCTET STRING (SIZE(2))
 4385        MAX-ACCESS  read-create
 4386        STATUS  current
 4387        DESCRIPTION
 4388             "Specifies the per rule mask of the service VLAN tag field as defined in swACLPktContRuleOption2STag object
 4389             The value of this object when not in use is the corresponding mask in the profile mask.
 4390             Once the value of this object is modified, the per rule mask will take effect.
 4391             "
 4392        ::= { swACLPktContRuleOption2Entry 25 }       
 4393 
 4394 
 4395 
 4396         
 4397 -- -----------------------------------------------------------------------------
 4398 --swACLPktContRuleOption2OffsetsTable
 4399 -- -----------------------------------------------------------------------------
 4400     swACLPktContRuleOption2OffsetsTable OBJECT-TYPE
 4401         SYNTAX  SEQUENCE OF SwACLPktContRuleOption2OffsetsEntry
 4402         MAX-ACCESS  not-accessible
 4403         STATUS  current
 4404         DESCRIPTION
 4405             "This table contains the ACL rules for the individual packet 
 4406             content offset user-defined option 2 information. 
 4407             
 4408 			Entries created in this table will not set into the TCAM until a 
 4409 			valid entry in the swACLPktContMaskOption2Table is created.            
 4410 			"
 4411         ::= { swACLPktContRuleOption2 2 }
 4412 
 4413     swACLPktContRuleOption2OffsetsEntry OBJECT-TYPE
 4414         SYNTAX  SwACLPktContRuleOption2OffsetsEntry
 4415         MAX-ACCESS  not-accessible
 4416         STATUS  current
 4417         DESCRIPTION
 4418             "A list of information about the ACL rule regarding the user-defined part of each packet."
 4419         INDEX  { swACLPktContRuleOption2OffsetsProfileID,swACLPktContRuleOption2OffsetsAccessID,swACLPktContRuleOption2OffsetsNum }
 4420         ::= { swACLPktContRuleOption2OffsetsTable 1 }
 4421 
 4422     SwACLPktContRuleOption2OffsetsEntry ::=
 4423         SEQUENCE {
 4424             swACLPktContRuleOption2OffsetsProfileID
 4425                 INTEGER,
 4426             swACLPktContRuleOption2OffsetsAccessID
 4427                 INTEGER,
 4428 			swACLPktContRuleOption2OffsetsNum
 4429 				INTEGER,
 4430 			swACLPktContRuleOption2OffsetsData
 4431 				OCTET STRING,
 4432             swACLPktContRuleOption2OffsetsRowStatus
 4433                 RowStatus,
 4434       		swACLPktContRuleOption2OffsetsMask
 4435       			OCTET STRING                      
 4436         }
 4437         
 4438     swACLPktContRuleOption2OffsetsProfileID OBJECT-TYPE
 4439         SYNTAX  INTEGER
 4440         MAX-ACCESS  read-only
 4441         STATUS  current
 4442         DESCRIPTION
 4443             "The ACL profile id to which this packet content field entry will be associated."
 4444         ::= { swACLPktContRuleOption2OffsetsEntry 1 }
 4445 
 4446     swACLPktContRuleOption2OffsetsAccessID OBJECT-TYPE
 4447         SYNTAX  INTEGER (0..65535)
 4448         MAX-ACCESS  read-only
 4449         STATUS  current
 4450         DESCRIPTION
 4451             "The ACL access id to which this packet content field entry will be associated."
 4452         ::= { swACLPktContRuleOption2OffsetsEntry 2 }        
 4453             
 4454     swACLPktContRuleOption2OffsetsNum OBJECT-TYPE
 4455         SYNTAX  INTEGER (1..11)
 4456         MAX-ACCESS  read-only
 4457         STATUS  current
 4458         DESCRIPTION
 4459             "The sequence number of the packet content field to qualify the packet content."
 4460         ::= { swACLPktContRuleOption2OffsetsEntry 3 } 
 4461         
 4462     swACLPktContRuleOption2OffsetsData OBJECT-TYPE
 4463         SYNTAX  OCTET STRING(SIZE(2))
 4464         MAX-ACCESS  read-create
 4465         STATUS  current
 4466         DESCRIPTION
 4467             "The data of the packet content field."
 4468         ::= { swACLPktContRuleOption2OffsetsEntry 4 }         
 4469         
 4470         
 4471     swACLPktContRuleOption2OffsetsRowStatus OBJECT-TYPE
 4472         SYNTAX  RowStatus
 4473         MAX-ACCESS  read-create
 4474         STATUS  current
 4475         DESCRIPTION
 4476             "This object indicates the status of this entry."
 4477         ::= { swACLPktContRuleOption2OffsetsEntry 5 }         
 4478         
 4479    swACLPktContRuleOption2OffsetsMask  OBJECT-TYPE
 4480        SYNTAX  OCTET STRING (SIZE(2))
 4481        MAX-ACCESS  read-create
 4482        STATUS  current
 4483        DESCRIPTION
 4484            "Specifies the per rule mask of the frame content of each packet content offset field.
 4485            The value of this object when not in use is the corresponding mask in the profile mask.
 4486            Once the value of this object is modified, the per rule mask will take effect.
 4487            "
 4488        ::= { swACLPktContRuleOption2OffsetsEntry 6 }        
 4489 
 4490 -- -----------------------------------------------------------------------------
 4491 -- swCpuAclEthernetTable
 4492 -- -----------------------------------------------------------------------------
 4493     swCpuAclEthernetTable OBJECT-TYPE
 4494         SYNTAX  SEQUENCE OF SwCpuAclEthernetEntry
 4495         MAX-ACCESS  not-accessible
 4496         STATUS  current
 4497         DESCRIPTION
 4498             "This table contains software ACL mask Ethernet information.
 4499              Access profiles will be created on the switch to define which
 4500              part of each incoming frame's layer 2 header will be examined by
 4501              the switch. Masks entered will be combined with the values
 4502              the switch finds in the specified frame header fields."
 4503         ::= { swCpuAclMaskMgmt 1 }
 4504 
 4505     swCpuAclEthernetEntry OBJECT-TYPE
 4506         SYNTAX  SwCpuAclEthernetEntry
 4507         MAX-ACCESS  not-accessible
 4508         STATUS  current
 4509         DESCRIPTION
 4510             "A list of information about Ethernet ACL masks."
 4511         INDEX  { swCpuAclEthernetProfileID }
 4512         ::= { swCpuAclEthernetTable 1 }
 4513 
 4514     SwCpuAclEthernetEntry ::=
 4515         SEQUENCE {
 4516             swCpuAclEthernetProfileID
 4517                 INTEGER,
 4518             swCpuAclEthernetUsevlan
 4519                 INTEGER,
 4520             swCpuAclEthernetMacAddrMaskState
 4521                 INTEGER,
 4522             swCpuAclEthernetSrcMacAddrMask
 4523                 MacAddress,
 4524             swCpuAclEthernetDstMacAddrMask
 4525                 MacAddress,
 4526             swCpuAclEthernetUse8021p
 4527                 INTEGER,
 4528             swCpuAclEthernetUseEthernetType
 4529                 INTEGER,
 4530             swCpuAclEthernetRowStatus
 4531                 RowStatus
 4532         }
 4533     swCpuAclEthernetProfileID OBJECT-TYPE
 4534         SYNTAX  INTEGER
 4535         MAX-ACCESS  read-only   --read-create
 4536         STATUS  current
 4537         DESCRIPTION
 4538             "The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 4539         ::= { swCpuAclEthernetEntry 1 }
 4540 
 4541     swCpuAclEthernetUsevlan OBJECT-TYPE
 4542         SYNTAX  INTEGER {
 4543                enabled(1),
 4544                disabled(2)
 4545                }
 4546         MAX-ACCESS  read-create
 4547         STATUS  current
 4548         DESCRIPTION
 4549             "Specifies that the switch will examine the VLAN part of each packet header."
 4550         ::= { swCpuAclEthernetEntry 2 }
 4551 
 4552     swCpuAclEthernetMacAddrMaskState OBJECT-TYPE
 4553         SYNTAX  INTEGER {
 4554                other(1),
 4555                dst-mac-addr(2),
 4556                src-mac-addr(3),
 4557                dst-src-mac-addr(4)
 4558                }
 4559         MAX-ACCESS  read-create
 4560         STATUS  current
 4561         DESCRIPTION
 4562             "This object indicates the status of the MAC address mask.
 4563 
 4564             other (1) - Neither source MAC addresses nor destination MAC addresses are
 4565                 masked.
 4566             dst-mac-addr (2) - Destination MAC addresses within received frames are
 4567                 to be filtered when matched with the MAC address entry of the table.
 4568             src-mac-addr (3) - Source MAC address within received frames are to
 4569                 be filtered when matched with the MAC address entry of the table.
 4570             dst-src-mac-addr (4) - Source or destination MAC addresses within received
 4571                 frames are to be filtered when matched with the MAC address entry of this table."
 4572         ::= { swCpuAclEthernetEntry 3 }
 4573 
 4574     swCpuAclEthernetSrcMacAddrMask OBJECT-TYPE
 4575         SYNTAX  MacAddress
 4576         MAX-ACCESS  read-create
 4577         STATUS  current
 4578         DESCRIPTION
 4579             "This object specifies the MAC address mask for the source MAC address."
 4580         ::= { swCpuAclEthernetEntry 4 }
 4581 
 4582     swCpuAclEthernetDstMacAddrMask OBJECT-TYPE
 4583         SYNTAX  MacAddress
 4584         MAX-ACCESS  read-create
 4585         STATUS  current
 4586         DESCRIPTION
 4587             "This object specifies the MAC address mask for the destination MAC address."
 4588         ::= { swCpuAclEthernetEntry 5 }
 4589 
 4590     swCpuAclEthernetUse8021p OBJECT-TYPE
 4591         SYNTAX  INTEGER {
 4592                enabled(1),
 4593                disabled(2)
 4594                }
 4595         MAX-ACCESS  read-create
 4596         STATUS  current
 4597         DESCRIPTION
 4598             "Specifies if the switch will examine the 802.1p priority value in the frame's header
 4599               or not."
 4600         ::= { swCpuAclEthernetEntry 6 }
 4601 
 4602     swCpuAclEthernetUseEthernetType OBJECT-TYPE
 4603         SYNTAX  INTEGER {
 4604                enabled(1),
 4605                disabled(2)
 4606                }
 4607         MAX-ACCESS  read-create
 4608         STATUS  current
 4609         DESCRIPTION
 4610             "Specifies if the switch will examine the Ethernet type value in each frame's header
 4611               or not."
 4612         ::= { swCpuAclEthernetEntry 7 }
 4613 
 4614     swCpuAclEthernetRowStatus OBJECT-TYPE --swCpuAclEthernetState
 4615         SYNTAX  RowStatus
 4616         MAX-ACCESS  read-create
 4617         STATUS  current
 4618         DESCRIPTION
 4619             "This object indicates the status of this entry."
 4620         ::= { swCpuAclEthernetEntry 8 }
 4621 
 4622 -- -----------------------------------------------------------------------------
 4623 -- swCpuAclIpTable
 4624 -- -----------------------------------------------------------------------------
 4625     swCpuAclIpTable OBJECT-TYPE
 4626         SYNTAX  SEQUENCE OF SwCpuAclIpEntry
 4627         MAX-ACCESS  not-accessible
 4628         STATUS  current
 4629         DESCRIPTION
 4630             "This table contains software ACL mask IP information.
 4631              Access profiles will be created on the switch to define which
 4632              parts of each incoming frame's IP layer 2 header will be examined
 4633              by the switch. Masks entered will be combined with the
 4634              values the switch finds in the specified frame header fields."
 4635         ::= { swCpuAclMaskMgmt 2 }
 4636 
 4637     swCpuAclIpEntry OBJECT-TYPE
 4638         SYNTAX  SwCpuAclIpEntry
 4639         MAX-ACCESS  not-accessible
 4640         STATUS  current
 4641         DESCRIPTION
 4642             "A list of information about the software ACL of the IP Layer."
 4643         INDEX  { swCpuAclIpProfileID }
 4644         ::= { swCpuAclIpTable 1 }
 4645 
 4646     SwCpuAclIpEntry ::=
 4647         SEQUENCE {
 4648             swCpuAclIpProfileID
 4649                 INTEGER,
 4650             swCpuAclIpUsevlan
 4651                 INTEGER,
 4652             swCpuAclIpIpAddrMaskState
 4653                 INTEGER,
 4654             swCpuAclIpSrcIpAddrMask
 4655                 IpAddress,
 4656             swCpuAclIpDstIpAddrMask
 4657                 IpAddress,
 4658             swCpuAclIpUseDSCP
 4659                 INTEGER,
 4660             swCpuAclIpUseProtoType
 4661                 INTEGER,
 4662             swCpuAclIpIcmpOption
 4663                 INTEGER,
 4664             swCpuAclIpIgmpOption
 4665                 INTEGER,
 4666             swCpuAclIpTcpOption
 4667                 INTEGER,
 4668             swCpuAclIpUdpOption
 4669                 INTEGER,
 4670             swCpuAclIpTCPorUDPSrcPortMask
 4671                 OCTET STRING,
 4672             swCpuAclIpTCPorUDPDstPortMask
 4673                 OCTET STRING,
 4674             swCpuAclIpTCPFlagBit
 4675                 INTEGER,
 4676             swCpuAclIpTCPFlagBitMask
 4677                 INTEGER,
 4678             swCpuAclIpProtoIDOption
 4679                 INTEGER,
 4680             swCpuAclIpProtoID
 4681                 INTEGER,
 4682             swCpuAclIpProtoIDMask
 4683                 OCTET STRING,
 4684             swCpuAclIpRowStatus
 4685                 RowStatus
 4686         }
 4687 
 4688     swCpuAclIpProfileID OBJECT-TYPE
 4689         SYNTAX  INTEGER
 4690         MAX-ACCESS  read-only
 4691         STATUS  current
 4692         DESCRIPTION
 4693             "The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 4694         ::= { swCpuAclIpEntry 1 }
 4695 
 4696     swCpuAclIpUsevlan OBJECT-TYPE
 4697         SYNTAX  INTEGER {
 4698                enabled(1),
 4699                disabled(2)
 4700                }
 4701         MAX-ACCESS  read-create
 4702         STATUS  current
 4703         DESCRIPTION
 4704             "This object indicates if the IP layer VLAN part is examined or not."
 4705         ::= { swCpuAclIpEntry 2 }
 4706 
 4707     swCpuAclIpIpAddrMaskState OBJECT-TYPE
 4708                 SYNTAX  INTEGER {
 4709                other(1),
 4710                dst-ip-addr(2),
 4711                src-ip-addr(3),
 4712                dst-src-ip-addr(4)
 4713                }
 4714         MAX-ACCESS  read-create
 4715         STATUS  current
 4716         DESCRIPTION
 4717             "This object indicates the status of IP address mask.
 4718 
 4719             other (1) - Neither source IP addresses nor destination IP address are
 4720                 masked.
 4721             dst-ip-addr (2) - Destination IP addresses within received frames are
 4722                 to be filtered when matched with the IP address entry of this table.
 4723             src-ip-addr (3) - Source IP addresses within received frames are to
 4724                 be filtered when matched with the IP address entry of this table.
 4725             dst-src-ip-addr (4) - Destination or source IP addresses within received
 4726                 frames are to be filtered when matched with the IP address entry of the
 4727                 table."
 4728         ::= { swCpuAclIpEntry 3 }
 4729 
 4730     swCpuAclIpSrcIpAddrMask OBJECT-TYPE
 4731         SYNTAX  IpAddress
 4732         MAX-ACCESS  read-create
 4733         STATUS  current
 4734         DESCRIPTION
 4735             "This object specifies the IP address mask for the source IP address."
 4736         ::= { swCpuAclIpEntry 4 }
 4737 
 4738     swCpuAclIpDstIpAddrMask OBJECT-TYPE
 4739         SYNTAX  IpAddress
 4740         MAX-ACCESS  read-create
 4741         STATUS  current
 4742         DESCRIPTION
 4743             "This object specifies the IP address mask for the destination IP address."
 4744         ::= { swCpuAclIpEntry 5 }
 4745 
 4746     swCpuAclIpUseDSCP OBJECT-TYPE
 4747         SYNTAX  INTEGER {
 4748                enabled(1),
 4749                disabled(2)
 4750                }
 4751         MAX-ACCESS  read-create
 4752         STATUS  current
 4753         DESCRIPTION
 4754             "This object indicates if the DSCP protocol in the packet header is to be examined or not."
 4755         ::= { swCpuAclIpEntry 6 }
 4756 
 4757     swCpuAclIpUseProtoType OBJECT-TYPE
 4758         SYNTAX  INTEGER {
 4759                none(1),
 4760                icmp(2),
 4761                igmp(3),
 4762                tcp(4),
 4763                udp(5),
 4764                protocolId(6)
 4765                }
 4766         MAX-ACCESS  read-create
 4767         STATUS  current
 4768         DESCRIPTION
 4769             "This object indicates which protocol will be examined."
 4770         ::= { swCpuAclIpEntry 7 }
 4771 
 4772     swCpuAclIpIcmpOption OBJECT-TYPE
 4773         SYNTAX  INTEGER {
 4774                none(1),
 4775                type(2),
 4776                code(3),
 4777                type-code(4)
 4778                }
 4779         MAX-ACCESS  read-create
 4780         STATUS  current
 4781         DESCRIPTION
 4782             "This object indicates which fields are identified for ICMP.
 4783             none (1)- Both fields are null.
 4784             type (2)- Type field identified.
 4785             code (3)- Code field identified.
 4786             type-code (4)- Both ICMP fields identified.
 4787             "
 4788         ::= { swCpuAclIpEntry 8 }
 4789 
 4790     swCpuAclIpIgmpOption OBJECT-TYPE
 4791         SYNTAX  INTEGER {
 4792                enable(1),
 4793                disable(2)
 4794               }
 4795         MAX-ACCESS  read-create
 4796         STATUS  current
 4797         DESCRIPTION
 4798             "This object indicates if the IGMP options field is identified or not."
 4799         ::= { swCpuAclIpEntry 9 }
 4800 
 4801     swCpuAclIpTcpOption OBJECT-TYPE
 4802         SYNTAX  INTEGER {
 4803                other(1),
 4804                dst-addr(2),
 4805                src-addr(3),
 4806                dst-src-addr(4)
 4807                }
 4808         MAX-ACCESS  read-create
 4809         STATUS  current
 4810         DESCRIPTION
 4811             "This object indicates the status of filtered addresses of TCP.
 4812 
 4813                 other (1) - Neither source port nor destination port are
 4814                 masked.
 4815              dst-addr (2) - Packets will be filtered if this destination port is
 4816                 identified in received frames.
 4817              src-addr (3) - Packets will be filtered if this source port is
 4818                 identified in received frames.
 4819              dst-src-addr (4) - Packets will be filtered is this destination or
 4820                 source port is identified in received frames."
 4821         ::= { swCpuAclIpEntry 10 }
 4822 
 4823     swCpuAclIpUdpOption OBJECT-TYPE
 4824         SYNTAX  INTEGER {
 4825                other(1),
 4826                dst-addr(2),
 4827                src-addr(3),
 4828                dst-src-addr(4)
 4829                }
 4830         MAX-ACCESS  read-create
 4831         STATUS  current
 4832         DESCRIPTION
 4833             "This object indicates the status of filtered addresses of UDP.
 4834 
 4835             other (1) - Neither source port nor destination port are
 4836                 masked.
 4837             dst-addr (2) - Packets will be filtered if this destination port
 4838                 is identified in received frames.
 4839             src-addr (3) - Packets will be filtered if this source port
 4840                 is identified in received frames.
 4841             dst-src-addr (4) - Packets will be filtered if this destination
 4842                 or source port is identified in received frames."
 4843 
 4844         ::= { swCpuAclIpEntry 11 }
 4845 
 4846     swCpuAclIpTCPorUDPSrcPortMask OBJECT-TYPE
 4847         SYNTAX  OCTET STRING (SIZE(2))
 4848         MAX-ACCESS  read-create
 4849         STATUS  current
 4850         DESCRIPTION
 4851             "Specifies a TCP port mask for the source port if swCpuAclIpUseProtoType is TCP.
 4852              Specifies a UDP port mask for the source port if swCpuAclIpUseProtoType is UDP.
 4853              "
 4854         ::= { swCpuAclIpEntry 12 }
 4855 
 4856     swCpuAclIpTCPorUDPDstPortMask OBJECT-TYPE
 4857         SYNTAX  OCTET STRING (SIZE(2))
 4858         MAX-ACCESS  read-create
 4859         STATUS  current
 4860         DESCRIPTION
 4861             "Specifies a TCP port mask for the destination port if swCpuAclIpUseProtoType is TCP.
 4862              Specifies a UDP port mask for the destination port if swCpuAclIpUseProtoType is UDP."
 4863         ::= { swCpuAclIpEntry 13 }
 4864 
 4865     swCpuAclIpTCPFlagBit OBJECT-TYPE
 4866                 SYNTAX  INTEGER {
 4867                enable(1),
 4868                disable(2)
 4869                }
 4870         MAX-ACCESS  read-create
 4871         STATUS  current
 4872         DESCRIPTION
 4873             "Specifies a TCP connection flag mask."
 4874         ::= { swCpuAclIpEntry 14 }
 4875 
 4876     swCpuAclIpTCPFlagBitMask OBJECT-TYPE
 4877         SYNTAX  INTEGER(0..63)
 4878         MAX-ACCESS  read-create
 4879         STATUS  current
 4880         DESCRIPTION
 4881             "A value which indicates the set of TCP flags that this
 4882              entity may potentially offer. The value is a sum of flag bits.
 4883              This sum initially takes the value zero. Then, for each flag, L
 4884              is added in the range 1 through 6, for which this node performs
 4885              transactions where 2^(L - 1) is added to the sum.
 4886              Note that values should be calculated accordingly:
 4887 
 4888                  Flag      functionality
 4889                    6        urg bit
 4890                    5        ack bit
 4891                    4        psh bit
 4892                    3        rst bit
 4893                    2        syn bit
 4894                    1        fin bit
 4895              For example, if you want to enable urg bit and ack bit, you
 4896              should set value 48{2^(5-1) + 2^(6-1)}."
 4897         ::= { swCpuAclIpEntry 15 }
 4898 
 4899     swCpuAclIpProtoIDOption OBJECT-TYPE
 4900         SYNTAX  INTEGER {
 4901                enable(1),
 4902                disable(2)
 4903                }
 4904         MAX-ACCESS  read-create
 4905         STATUS  current
 4906         DESCRIPTION
 4907             "Specifies if the switch will examine each frame's Protocol ID field or not."
 4908         ::= { swCpuAclIpEntry 16 }
 4909 
 4910     swCpuAclIpProtoID OBJECT-TYPE
 4911         SYNTAX  INTEGER(0..255)
 4912         MAX-ACCESS  read-create
 4913         STATUS  current
 4914         DESCRIPTION
 4915             ""
 4916         ::= { swCpuAclIpEntry 17 }
 4917 
 4918 
 4919     swCpuAclIpProtoIDMask OBJECT-TYPE
 4920         SYNTAX  OCTET STRING (SIZE(20))
 4921         MAX-ACCESS  read-create
 4922         STATUS  current
 4923         DESCRIPTION
 4924             "Specifies that the rule applies to the IP protocol ID and the mask options
 4925              behind the IP header."
 4926         ::= { swCpuAclIpEntry 18 }
 4927 
 4928     swCpuAclIpRowStatus OBJECT-TYPE
 4929         SYNTAX  RowStatus
 4930         MAX-ACCESS  read-create
 4931         STATUS  current
 4932         DESCRIPTION
 4933             "This object indicates the status of this entry."
 4934         ::= { swCpuAclIpEntry 19 }
 4935 
 4936 -- -----------------------------------------------------------------------------
 4937 -- swCpuAclPktContMaskTable
 4938 -- -----------------------------------------------------------------------------
 4939     swCpuAclPktContMaskTable OBJECT-TYPE
 4940         SYNTAX  SEQUENCE OF SwCpuAclPktContMaskEntry
 4941         MAX-ACCESS  not-accessible
 4942         STATUS  current
 4943         DESCRIPTION
 4944             "This table contains user-defined software ACL information.
 4945              Access profiles will be created on the switch to define which
 4946              part of each incoming frame's user-defined part of the packet header
 4947              will be examined by the switch. Masks entered will be combined
 4948               with the values the switch finds in the specified frame header fields."
 4949         ::= { swCpuAclMaskMgmt 3 }
 4950 
 4951     swCpuAclPktContMaskEntry OBJECT-TYPE
 4952         SYNTAX  SwCpuAclPktContMaskEntry
 4953         MAX-ACCESS  not-accessible
 4954         STATUS  current
 4955         DESCRIPTION
 4956             "A list of information about user-defined software ACLs."
 4957         INDEX  { swCpuAclPktContMaskProfileID }
 4958         ::= { swCpuAclPktContMaskTable 1 }
 4959 
 4960     SwCpuAclPktContMaskEntry ::=
 4961         SEQUENCE {
 4962             swCpuAclPktContMaskProfileID
 4963                 INTEGER,
 4964             swCpuAclPktContMaskOffset0to15
 4965                 OCTET STRING,
 4966             swCpuAclPktContMaskOffset16to31
 4967                 OCTET STRING,
 4968             swCpuAclPktContMaskOffset32to47
 4969                 OCTET STRING,
 4970             swCpuAclPktContMaskOffset48to63
 4971                 OCTET STRING,
 4972             swCpuAclPktContMaskOffset64to79
 4973                 OCTET STRING,
 4974             swCpuAclPktContMaskRowStatus
 4975                 RowStatus
 4976         }
 4977     swCpuAclPktContMaskProfileID OBJECT-TYPE
 4978         SYNTAX  INTEGER
 4979         MAX-ACCESS  read-only   --read-create
 4980         STATUS  current
 4981         DESCRIPTION
 4982             "The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 4983         ::= { swCpuAclPktContMaskEntry 1 }
 4984 
 4985     swCpuAclPktContMaskOffset0to15 OBJECT-TYPE
 4986         SYNTAX  OCTET STRING (SIZE(16))
 4987         MAX-ACCESS  read-create
 4988         STATUS  current
 4989         DESCRIPTION
 4990             "Specifies that the rule applies to the packet content (Offset0to15) and
 4991              the mask options."
 4992         ::= { swCpuAclPktContMaskEntry 2 }
 4993 
 4994     swCpuAclPktContMaskOffset16to31 OBJECT-TYPE
 4995         SYNTAX  OCTET STRING (SIZE(16))
 4996         MAX-ACCESS  read-create
 4997         STATUS  current
 4998         DESCRIPTION
 4999             "Specifies that the rule applies to the packet content (Offset16to31) and
 5000              the mask options."
 5001          ::= { swCpuAclPktContMaskEntry 3 }
 5002 
 5003     swCpuAclPktContMaskOffset32to47 OBJECT-TYPE
 5004         SYNTAX  OCTET STRING (SIZE(16))
 5005         MAX-ACCESS  read-create
 5006         STATUS  current
 5007         DESCRIPTION
 5008             "Specifies that the rule applies to the packet content (Offset32to47) and
 5009              the mask options."
 5010         ::= { swCpuAclPktContMaskEntry 4 }
 5011 
 5012     swCpuAclPktContMaskOffset48to63 OBJECT-TYPE
 5013         SYNTAX  OCTET STRING (SIZE(16))
 5014         MAX-ACCESS  read-create
 5015         STATUS  current
 5016         DESCRIPTION
 5017             "Specifies that the rule applies to the packet content (Offset48to63) and
 5018              the mask options."
 5019         ::= { swCpuAclPktContMaskEntry 5 }
 5020 
 5021     swCpuAclPktContMaskOffset64to79 OBJECT-TYPE
 5022         SYNTAX  OCTET STRING (SIZE(16))
 5023         MAX-ACCESS  read-create
 5024         STATUS  current
 5025         DESCRIPTION
 5026             "Specifies that the rule applies to the packet content (Offset64to79) and
 5027              the mask options."
 5028         ::= { swCpuAclPktContMaskEntry 6 }
 5029 
 5030     swCpuAclPktContMaskRowStatus OBJECT-TYPE --swCpuAclEthernetState
 5031         SYNTAX  RowStatus
 5032         MAX-ACCESS  read-create
 5033         STATUS  current
 5034         DESCRIPTION
 5035             "This object indicates the status of this entry."
 5036         ::= { swCpuAclPktContMaskEntry 7 }
 5037 
 5038 -- -----------------------------------------------------------------------------
 5039 -- swCpuAclIpv6MaskTable
 5040 -- -----------------------------------------------------------------------------
 5041     swCpuAclIpv6MaskTable OBJECT-TYPE
 5042         SYNTAX  SEQUENCE OF SwCpuAclIpv6MaskEntry
 5043         MAX-ACCESS  not-accessible
 5044         STATUS  current
 5045         DESCRIPTION
 5046             "This table contains IPv6 software ACL mask information.
 5047              An access profile will be created on the switch to define which
 5048              part of each incoming frame's IPv6 part of the packet header
 5049              will be examined by switch. Masks entered will be combined
 5050               with the values the switch finds in the specified frame header fields.  "
 5051         ::= { swCpuAclMaskMgmt 4 }
 5052 
 5053     swCpuAclIpv6MaskEntry OBJECT-TYPE
 5054         SYNTAX  SwCpuAclIpv6MaskEntry
 5055         MAX-ACCESS  not-accessible
 5056         STATUS  current
 5057         DESCRIPTION
 5058             "A list of information about user-defined software ACLs."
 5059         INDEX  { swCpuAclIpv6MaskProfileID }
 5060         ::= { swCpuAclIpv6MaskTable 1 }
 5061 
 5062     SwCpuAclIpv6MaskEntry ::=
 5063         SEQUENCE {
 5064             swCpuAclIpv6MaskProfileID
 5065                 INTEGER,
 5066             swCpuAclIpv6MaskClass
 5067                 INTEGER,
 5068             swCpuAclIpv6MaskFlowlabel
 5069                 INTEGER,
 5070             swCpuAclIpv6IpAddrMaskState
 5071                 INTEGER,
 5072             swCpuAclIpv6MaskSrcIpv6Mask
 5073                 Ipv6Address,
 5074             swCpuAclIpv6MaskDstIpv6Mask
 5075                 Ipv6Address,
 5076             swCpuAclIpv6MaskRowStatus
 5077                 RowStatus
 5078         }
 5079     swCpuAclIpv6MaskProfileID OBJECT-TYPE
 5080         SYNTAX  INTEGER
 5081         MAX-ACCESS  read-only   --read-create
 5082         STATUS  current
 5083         DESCRIPTION
 5084             "The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 5085         ::= { swCpuAclIpv6MaskEntry 1 }
 5086 
 5087     swCpuAclIpv6MaskClass OBJECT-TYPE
 5088         SYNTAX  INTEGER {
 5089                enable(1),
 5090                disable(2)
 5091                }
 5092         MAX-ACCESS  read-create
 5093         STATUS  current
 5094         DESCRIPTION
 5095             "Specifies that the rule applies to the IPv6 class field and the mask options."
 5096         ::= { swCpuAclIpv6MaskEntry 2 }
 5097 
 5098     swCpuAclIpv6MaskFlowlabel OBJECT-TYPE
 5099         SYNTAX  INTEGER {
 5100                enable(1),
 5101                disable(2)
 5102                }
 5103         MAX-ACCESS  read-create
 5104         STATUS  current
 5105         DESCRIPTION
 5106             "Specifies that the rule applies to the IPv6 flowlabel field and the mask options."
 5107         ::= { swCpuAclIpv6MaskEntry 3 }
 5108 
 5109     swCpuAclIpv6IpAddrMaskState OBJECT-TYPE
 5110         SYNTAX  INTEGER {
 5111                other(1),
 5112                dst-ipv6-addr(2),
 5113                src-ipv6-addr(3),
 5114                dst-src-ipv6-addr(4)
 5115                }
 5116         MAX-ACCESS  read-create
 5117         STATUS  current
 5118         DESCRIPTION
 5119             "This object indicates the status of IPv6 address mask.
 5120 
 5121             other (1) - Neither source IPv6 address nor destination IPv6 address are
 5122                 masked.
 5123              dst-ipv6-addr (2) - Packets will be filtered if this destination IPv6 address
 5124                 is identified as a match in received frames.
 5125              src-ipv6-addr (3) - Packets will be filtered if this source IPv6 address
 5126                 is identified as a match in received frames.
 5127              dst-src-ipv6-addr (4) - Packets will be filtered if this destination or source
 5128                 IPv6 address is identified as a match in received frames."
 5129         ::= { swCpuAclIpv6MaskEntry 4 }
 5130 
 5131     swCpuAclIpv6MaskSrcIpv6Mask OBJECT-TYPE
 5132         SYNTAX  Ipv6Address
 5133         MAX-ACCESS  read-create
 5134         STATUS  current
 5135         DESCRIPTION
 5136             "Specifies that the rule applies to the source IPv6 address and the mask options.
 5137             This should be a 16 byte octet string."
 5138         ::= { swCpuAclIpv6MaskEntry 5 }
 5139 
 5140     swCpuAclIpv6MaskDstIpv6Mask OBJECT-TYPE
 5141         SYNTAX  Ipv6Address
 5142         MAX-ACCESS  read-create
 5143         STATUS  current
 5144         DESCRIPTION
 5145             "Specifies that the rule applies to the destination IPv6 address and the mask options.
 5146             This should be a 16 byte octet string."
 5147         ::= { swCpuAclIpv6MaskEntry 6 }
 5148 
 5149     swCpuAclIpv6MaskRowStatus OBJECT-TYPE
 5150         SYNTAX  RowStatus
 5151         MAX-ACCESS  read-create
 5152         STATUS  current
 5153         DESCRIPTION
 5154             "This object indicates the status of this entry."
 5155         ::= { swCpuAclIpv6MaskEntry 7 }
 5156 
 5157 -- -----------------------------------------------------------------------------
 5158 --swCpuACLMaskDelAllState
 5159 -- -----------------------------------------------------------------------------
 5160     swCpuACLMaskDelAllState OBJECT-TYPE
 5161         SYNTAX      INTEGER{
 5162                 none(1),
 5163                 start(2)
 5164                 }
 5165         MAX-ACCESS  read-write
 5166         STATUS      current
 5167         DESCRIPTION
 5168             "Used to delete all software ACL masks."
 5169         ::= { swCpuAclMaskMgmt 5 }
 5170 
 5171 -- -----------------------------------------------------------------------------
 5172 -- swCpuAclEtherRuleTable
 5173 -- -----------------------------------------------------------------------------
 5174     swCpuAclEtherRuleTable OBJECT-TYPE
 5175         SYNTAX  SEQUENCE OF SwCpuAclEtherRuleEntry
 5176         MAX-ACCESS  not-accessible
 5177         STATUS  current
 5178         DESCRIPTION
 5179             "This table contains Ethernet software ACL rule information."
 5180         ::= { swCpuAclRuleMgmt 1 }
 5181 
 5182     swCpuAclEtherRuleEntry OBJECT-TYPE
 5183         SYNTAX  SwCpuAclEtherRuleEntry
 5184         MAX-ACCESS  not-accessible
 5185         STATUS  current
 5186         DESCRIPTION
 5187             "A list of information about the software ACL rule of the layer 2 part of each packet."
 5188         INDEX  { swCpuAclEtherRuleProfileID,swCpuAclEtherRuleAccessID }
 5189         ::= { swCpuAclEtherRuleTable 1 }
 5190 
 5191     SwCpuAclEtherRuleEntry ::=
 5192         SEQUENCE {
 5193             swCpuAclEtherRuleProfileID
 5194                 INTEGER,
 5195             swCpuAclEtherRuleAccessID
 5196                 INTEGER,
 5197             swCpuAclEtherRuleVlan
 5198                 SnmpAdminString,
 5199             swCpuAclEtherRuleSrcMacAddress
 5200                 MacAddress,
 5201             swCpuAclEtherRuleDstMacAddress
 5202                 MacAddress,
 5203             swCpuAclEtherRule8021P
 5204                 INTEGER,
 5205             swCpuAclEtherRuleEtherType
 5206                 OCTET STRING,
 5207             swCpuAclEtherRulePermit
 5208                 INTEGER,
 5209             swCpuAclEtherRuleRowStatus
 5210                 RowStatus,
 5211             swCpuAclEtherRulePort
 5212                 PortList,
 5213                         swCpuAclEtherRuleMatchVID
 5214                                 INTEGER
 5215         }
 5216 
 5217     swCpuAclEtherRuleProfileID OBJECT-TYPE
 5218         SYNTAX  INTEGER
 5219         MAX-ACCESS  read-only
 5220         STATUS  current
 5221         DESCRIPTION
 5222             "The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 5223         ::= { swCpuAclEtherRuleEntry 1 }
 5224 
 5225     swCpuAclEtherRuleAccessID OBJECT-TYPE
 5226         SYNTAX  INTEGER (1..65535)
 5227         MAX-ACCESS  read-only
 5228         STATUS  current
 5229         DESCRIPTION
 5230             "The ID of the software ACL rule entry as it relates to swCpuAclEtherRuleProfileID."
 5231         ::= { swCpuAclEtherRuleEntry 2 }
 5232 
 5233     swCpuAclEtherRuleVlan OBJECT-TYPE
 5234         SYNTAX  SnmpAdminString (SIZE (1..32))
 5235         MAX-ACCESS  read-create
 5236         STATUS  current
 5237         DESCRIPTION
 5238             "Specifies that the access rule will only apply to packets with the VLAN ID indexed by this VLAN name."
 5239         ::= { swCpuAclEtherRuleEntry 3 }
 5240 
 5241     swCpuAclEtherRuleSrcMacAddress OBJECT-TYPE
 5242         SYNTAX  MacAddress
 5243         MAX-ACCESS  read-create
 5244         STATUS  current
 5245         DESCRIPTION
 5246             "Specifies that the access rule will only apply to the packets with
 5247              this source MAC address."
 5248         ::= { swCpuAclEtherRuleEntry 4 }
 5249 
 5250     swCpuAclEtherRuleDstMacAddress OBJECT-TYPE
 5251         SYNTAX  MacAddress
 5252         MAX-ACCESS  read-create
 5253         STATUS  current
 5254         DESCRIPTION
 5255             "Specifies that the access rule will only apply to the packets               with this destination MAC address."
 5256         ::= { swCpuAclEtherRuleEntry 5 }
 5257 
 5258     swCpuAclEtherRule8021P OBJECT-TYPE
 5259         SYNTAX  INTEGER(-1..7)
 5260         MAX-ACCESS  read-create
 5261         STATUS  current
 5262         DESCRIPTION
 5263             "Specifies that the access rule will only apply to packets with
 5264               this 802.1p priority value. A value of -1 indicates that this node is not actively used."
 5265         ::= { swCpuAclEtherRuleEntry 6 }
 5266 
 5267     swCpuAclEtherRuleEtherType OBJECT-TYPE
 5268         SYNTAX  OCTET STRING (SIZE (2))
 5269         MAX-ACCESS  read-create
 5270         STATUS  current
 5271         DESCRIPTION
 5272             "Specifies that the access rule will only apply to packets with this
 5273              802.1Q Ethernet type value in the packet header."
 5274         ::= { swCpuAclEtherRuleEntry 7 }
 5275 
 5276     swCpuAclEtherRulePermit OBJECT-TYPE
 5277         SYNTAX  INTEGER {
 5278                deny(1),
 5279                permit(2)
 5280                }
 5281         MAX-ACCESS  read-create
 5282         STATUS  current
 5283         DESCRIPTION
 5284             "This object indicates if the result of the packet examination is to 'permit' or 'deny'.
 5285              The default is 'permit'.
 5286              permit - Specifies that packets that match the access profile are
 5287                       permitted to be forwarded by the switch.
 5288              deny - Specifies that packets that match the access profile
 5289                     are not permitted to be forwarded by the switch and will be filtered."
 5290         ::= { swCpuAclEtherRuleEntry 8 }
 5291 
 5292     swCpuAclEtherRuleRowStatus OBJECT-TYPE      --swCpuAclEtherRuleState
 5293         SYNTAX  RowStatus
 5294         MAX-ACCESS  read-create
 5295         STATUS  current
 5296         DESCRIPTION
 5297             "This object indicates the status of this entry."
 5298         ::= { swCpuAclEtherRuleEntry 9 }
 5299 
 5300      swCpuAclEtherRulePort OBJECT-TYPE
 5301         SYNTAX  PortList
 5302         MAX-ACCESS  read-create
 5303         STATUS  current
 5304         DESCRIPTION
 5305             "Specifies that the access rule will only apply to port(s)."
 5306         ::= { swCpuAclEtherRuleEntry 10 }
 5307 
 5308     swCpuAclEtherRuleMatchVID OBJECT-TYPE
 5309         SYNTAX  INTEGER (0..4094)
 5310         MAX-ACCESS  read-create
 5311         STATUS  current
 5312         DESCRIPTION
 5313             "Specifies that the access rule will apply only to packets with
 5314              this VLAN ID."
 5315         ::= { swCpuAclEtherRuleEntry 11 }
 5316 -- -----------------------------------------------------------------------------
 5317 -- swCpuAclIpRuleTable
 5318 -- -----------------------------------------------------------------------------
 5319     swCpuAclIpRuleTable OBJECT-TYPE
 5320         SYNTAX  SEQUENCE OF SwCpuAclIpRuleEntry
 5321         MAX-ACCESS  not-accessible
 5322         STATUS  current
 5323         DESCRIPTION
 5324             "This table contains IPv4 software ACL rule information."
 5325         ::= { swCpuAclRuleMgmt 2 }
 5326 
 5327     swCpuAclIpRuleEntry OBJECT-TYPE
 5328         SYNTAX  SwCpuAclIpRuleEntry
 5329         MAX-ACCESS  not-accessible
 5330         STATUS  current
 5331         DESCRIPTION
 5332             "A list of information about this software ACL rule."
 5333         INDEX  { swCpuAclIpRuleProfileID , swCpuAclIpRuleAccessID }
 5334         ::= { swCpuAclIpRuleTable 1 }
 5335 
 5336     SwCpuAclIpRuleEntry ::=
 5337         SEQUENCE {
 5338             swCpuAclIpRuleProfileID
 5339                 INTEGER,
 5340             swCpuAclIpRuleAccessID
 5341                 INTEGER,
 5342             swCpuAclIpRuleVlan
 5343                 SnmpAdminString,
 5344             swCpuAclIpRuleSrcIpaddress
 5345                 IpAddress,
 5346             swCpuAclIpRuleDstIpaddress
 5347                 IpAddress,
 5348             swCpuAclIpRuleDscp
 5349                 INTEGER,
 5350             swCpuAclIpRuleProtocol
 5351                 INTEGER,
 5352             swCpuAclIpRuleType
 5353                 INTEGER,
 5354             swCpuAclIpRuleCode
 5355                 INTEGER,
 5356             swCpuAclIpRuleSrcPort
 5357                 INTEGER,
 5358             swCpuAclIpRuleDstPort
 5359                 INTEGER,
 5360             swCpuAclIpRuleFlagBits
 5361                 INTEGER,
 5362             swCpuAclIpRuleProtoID
 5363                 INTEGER,
 5364             swCpuAclIpRuleUserMask
 5365                 OCTET STRING,
 5366             swCpuAclIpRulePermit
 5367                 INTEGER,
 5368             swCpuAclIpRuleRowStatus
 5369                 RowStatus,
 5370             swCpuAclIpRulePort
 5371                 PortList,
 5372                         swCpuAclIpRuleMatchVID
 5373                                 INTEGER
 5374         }
 5375 
 5376     swCpuAclIpRuleProfileID OBJECT-TYPE
 5377         SYNTAX  INTEGER
 5378         MAX-ACCESS  read-only
 5379         STATUS  current
 5380         DESCRIPTION
 5381             "The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 5382         ::= { swCpuAclIpRuleEntry 1 }
 5383 
 5384     swCpuAclIpRuleAccessID OBJECT-TYPE
 5385         SYNTAX  INTEGER (1..65535)
 5386         MAX-ACCESS  read-only   --read-create
 5387         STATUS  current
 5388         DESCRIPTION
 5389             "The ID of the software ACL for the IPv4 rule entry."
 5390         ::= { swCpuAclIpRuleEntry 2 }
 5391 
 5392     swCpuAclIpRuleVlan OBJECT-TYPE
 5393         SYNTAX  SnmpAdminString (SIZE (1..32))
 5394         MAX-ACCESS  read-create
 5395         STATUS  current
 5396         DESCRIPTION
 5397             "Specifies that the access rule will apply only to packets with the VLAN ID indexed by this VLAN name."
 5398         ::= { swCpuAclIpRuleEntry 3 }
 5399 
 5400     swCpuAclIpRuleSrcIpaddress OBJECT-TYPE
 5401         SYNTAX  IpAddress
 5402         MAX-ACCESS  read-create
 5403         STATUS  current
 5404         DESCRIPTION
 5405             "Specifies an IP source address."
 5406         ::= { swCpuAclIpRuleEntry 4 }
 5407 
 5408     swCpuAclIpRuleDstIpaddress OBJECT-TYPE
 5409         SYNTAX  IpAddress
 5410         MAX-ACCESS  read-create
 5411         STATUS  current
 5412         DESCRIPTION
 5413             "Specifies an IP destination address."
 5414         ::= { swCpuAclIpRuleEntry 5 }
 5415 
 5416     swCpuAclIpRuleDscp OBJECT-TYPE
 5417         SYNTAX  INTEGER(-1..63)
 5418         MAX-ACCESS  read-create
 5419         STATUS  current
 5420         DESCRIPTION
 5421             "Specifies the value of DSCP. The value can be configured from 0 to 63.
 5422             A value of -1 indicates that this node is not actively used."
 5423         ::= { swCpuAclIpRuleEntry 6 }
 5424 
 5425     swCpuAclIpRuleProtocol OBJECT-TYPE
 5426         SYNTAX  INTEGER {
 5427                none(1),
 5428                icmp(2),
 5429                igmp(3),
 5430                tcp(4),
 5431                udp(5),
 5432                protocolId(6)
 5433                }
 5434         MAX-ACCESS  read-only
 5435         STATUS  current
 5436         DESCRIPTION
 5437             "Specifies the IP protocol which has been configured in swCpuAclIpEntry."
 5438         ::= { swCpuAclIpRuleEntry 7 }
 5439 
 5440     swCpuAclIpRuleType OBJECT-TYPE
 5441         SYNTAX  INTEGER(-1..255)
 5442         MAX-ACCESS  read-create
 5443         STATUS  current
 5444         DESCRIPTION
 5445             "Specifies the rule applies to the value of ICMP type traffic.
 5446             A value of -1 indicates that this node is not actively used."
 5447         ::= { swCpuAclIpRuleEntry 8 }
 5448 
 5449     swCpuAclIpRuleCode OBJECT-TYPE
 5450         SYNTAX  INTEGER(-1..255)
 5451         MAX-ACCESS  read-create
 5452         STATUS  current
 5453         DESCRIPTION
 5454             "Specifies the rule applies to the value of ICMP code traffic.
 5455             A value of -1 indicates that this node is not actively used."
 5456         ::= { swCpuAclIpRuleEntry 9 }
 5457 
 5458     swCpuAclIpRuleSrcPort OBJECT-TYPE
 5459         SYNTAX  INTEGER(-1..65535)
 5460         MAX-ACCESS  read-create
 5461         STATUS  current
 5462         DESCRIPTION
 5463             "Specifies the rule applies to the range of TCP/UDP source ports.
 5464             A value of -1 indicates that this node is not actively used."
 5465         ::= { swCpuAclIpRuleEntry 10 }
 5466 
 5467     swCpuAclIpRuleDstPort OBJECT-TYPE
 5468         SYNTAX  INTEGER(-1..65535)
 5469         MAX-ACCESS  read-create
 5470         STATUS  current
 5471         DESCRIPTION
 5472             "Specifies the range of TCP/UDP destination ports.
 5473             A value of -1 indicates that this node is not actively used."
 5474         ::= { swCpuAclIpRuleEntry 11 }
 5475 
 5476     swCpuAclIpRuleFlagBits OBJECT-TYPE
 5477         SYNTAX  INTEGER(0..63)
 5478         MAX-ACCESS  read-create
 5479         STATUS  current
 5480         DESCRIPTION
 5481             "A value which indicates the set of TCP flags that this
 5482              entity may potentially offer. The value is a sum of flag bits.
 5483              This sum initially takes the value zero. Then, for each flag, L
 5484              is added in the range 1 through 6, for which this node performs
 5485              transactions where, 2^(L - 1) is added to the sum.
 5486              Note that values should be calculated accordingly:
 5487 
 5488                  Flag      functionality
 5489                    6        urg bit
 5490                    5        ack bit
 5491                    4        psh bit
 5492                    3        rst bit
 5493                    2        syn bit
 5494                    1        fin bit
 5495              For example, it you want to enable urg bit and ack bit, you
 5496              should set the value 48{2^(5-1) + 2^(6-1)}."
 5497         ::= { swCpuAclIpRuleEntry 12 }
 5498 
 5499     swCpuAclIpRuleProtoID OBJECT-TYPE
 5500         SYNTAX  INTEGER(-1..255)
 5501         MAX-ACCESS  read-create
 5502         STATUS  current
 5503         DESCRIPTION
 5504             "Specifies the rule applies to the value of IP protocol ID traffic.
 5505             A value of -1 indicates that this node is not actively used."
 5506         ::= { swCpuAclIpRuleEntry 13 }
 5507 
 5508     swCpuAclIpRuleUserMask OBJECT-TYPE
 5509         SYNTAX  OCTET STRING (SIZE(20))
 5510         MAX-ACCESS  read-create
 5511         STATUS  current
 5512         DESCRIPTION
 5513             "Specifies that the rule applies to the IP protocol ID and the range of
 5514              options behind the IP header."
 5515         ::= { swCpuAclIpRuleEntry 14 }
 5516 
 5517     swCpuAclIpRulePermit OBJECT-TYPE
 5518         SYNTAX  INTEGER {
 5519                deny(1),
 5520                permit(2)
 5521                }
 5522         MAX-ACCESS  read-create
 5523         STATUS  current
 5524         DESCRIPTION
 5525             "This object indicates if the result of the packet examination is to 'permit' or 'deny'.
 5526              The default is 'permit'.
 5527              permit - Specifies that packets that match the access profile are
 5528                       permitted to be forwarded by the switch.
 5529              deny - Specifies that packets that match the access profile
 5530                     are not permitted to be forwarded by the switch and will be filtered."
 5531         ::= { swCpuAclIpRuleEntry 15 }
 5532 
 5533     swCpuAclIpRuleRowStatus OBJECT-TYPE
 5534         SYNTAX  RowStatus
 5535         MAX-ACCESS  read-create
 5536         STATUS  current
 5537         DESCRIPTION
 5538             "This object indicates the status of this entry."
 5539         ::= { swCpuAclIpRuleEntry 16 }
 5540 
 5541      swCpuAclIpRulePort OBJECT-TYPE
 5542         SYNTAX  PortList
 5543         MAX-ACCESS  read-create
 5544         STATUS  current
 5545         DESCRIPTION
 5546             "Specifies that the access rule will only apply to port(s)."
 5547         ::= { swCpuAclIpRuleEntry 17 }
 5548 
 5549      swCpuAclIpRuleMatchVID OBJECT-TYPE
 5550         SYNTAX  INTEGER (0..4094)
 5551         MAX-ACCESS  read-create
 5552         STATUS  current
 5553         DESCRIPTION
 5554             "Specifies that the access rule will apply only to packets with
 5555              this VLAN ID."
 5556         ::= { swCpuAclIpRuleEntry 18 }
 5557 -- -----------------------------------------------------------------------------
 5558 -- swCpuAclPktContRuleTable
 5559 -- -----------------------------------------------------------------------------
 5560     swCpuAclPktContRuleTable OBJECT-TYPE
 5561         SYNTAX  SEQUENCE OF SwCpuAclPktContRuleEntry
 5562         MAX-ACCESS  not-accessible
 5563         STATUS  current
 5564         DESCRIPTION
 5565             "This table contains user-defined software ACL rule information."
 5566         ::= { swCpuAclRuleMgmt 3 }
 5567 
 5568     swCpuAclPktContRuleEntry OBJECT-TYPE
 5569         SYNTAX  SwCpuAclPktContRuleEntry
 5570         MAX-ACCESS  not-accessible
 5571         STATUS  current
 5572         DESCRIPTION
 5573             "A list of information about the software ACL rule of the user-defined part of each packet."
 5574         INDEX  { swCpuAclPktContRuleProfileID,swCpuAclPktContRuleAccessID }
 5575         ::= { swCpuAclPktContRuleTable 1 }
 5576 
 5577     SwCpuAclPktContRuleEntry ::=
 5578         SEQUENCE {
 5579             swCpuAclPktContRuleProfileID
 5580                 INTEGER,
 5581             swCpuAclPktContRuleAccessID
 5582                 INTEGER,
 5583             swCpuAclPktContRuleOffset0to15
 5584                 OCTET STRING,
 5585             swCpuAclPktContRuleOffset16to31
 5586                 OCTET STRING,
 5587             swCpuAclPktContRuleOffset32to47
 5588                 OCTET STRING,
 5589             swCpuAclPktContRuleOffset48to63
 5590                 OCTET STRING,
 5591             swCpuAclPktContRuleOffset64to79
 5592                 OCTET STRING,
 5593             swCpuAclPktContRulePermit
 5594                 INTEGER,
 5595             swCpuAclPktContRuleRowStatus
 5596                 RowStatus,
 5597             swCpuAclPktContRulePort
 5598                 PortList
 5599         }
 5600     swCpuAclPktContRuleProfileID OBJECT-TYPE
 5601         SYNTAX  INTEGER
 5602         MAX-ACCESS  read-only
 5603         STATUS  current
 5604         DESCRIPTION
 5605             "The ID of the software ACL mask entry, which is unique to the mask list. The maximum value of this object depends on the device."
 5606         ::= { swCpuAclPktContRuleEntry 1 }
 5607 
 5608     swCpuAclPktContRuleAccessID OBJECT-TYPE
 5609         SYNTAX  INTEGER (1..65535)
 5610         MAX-ACCESS  read-only
 5611         STATUS  current
 5612         DESCRIPTION
 5613             "The ID of the software ACL rule entry related to swCpuAclPktContRuleProfileID."
 5614         ::= { swCpuAclPktContRuleEntry 2 }
 5615 
 5616     swCpuAclPktContRuleOffset0to15 OBJECT-TYPE
 5617         SYNTAX  OCTET STRING (SIZE(16))
 5618         MAX-ACCESS  read-create
 5619         STATUS  current
 5620         DESCRIPTION
 5621             "Specifies that the rule applies to the user-defined packet."
 5622         ::= { swCpuAclPktContRuleEntry 3 }
 5623 
 5624     swCpuAclPktContRuleOffset16to31 OBJECT-TYPE
 5625         SYNTAX  OCTET STRING (SIZE(16))
 5626         MAX-ACCESS  read-create
 5627         STATUS  current
 5628         DESCRIPTION
 5629             "Specifies that the rule applies to the user-defined packet."
 5630         ::= { swCpuAclPktContRuleEntry 4 }
 5631 
 5632     swCpuAclPktContRuleOffset32to47 OBJECT-TYPE
 5633         SYNTAX  OCTET STRING (SIZE(16))
 5634         MAX-ACCESS  read-create
 5635         STATUS  current
 5636         DESCRIPTION
 5637             "Specifies that the rule applies to the user-defined packet."
 5638         ::= { swCpuAclPktContRuleEntry 5 }
 5639 
 5640     swCpuAclPktContRuleOffset48to63 OBJECT-TYPE
 5641         SYNTAX  OCTET STRING (SIZE(16))
 5642         MAX-ACCESS  read-create
 5643         STATUS  current
 5644         DESCRIPTION
 5645             "Specifies that the rule applies to the user-defined packet."
 5646         ::= { swCpuAclPktContRuleEntry 6 }
 5647 
 5648     swCpuAclPktContRuleOffset64to79 OBJECT-TYPE
 5649         SYNTAX  OCTET STRING (SIZE(16))
 5650         MAX-ACCESS  read-create
 5651         STATUS  current
 5652         DESCRIPTION
 5653             "Specifies that the rule applies to the user-defined packet."
 5654         ::= { swCpuAclPktContRuleEntry 7 }
 5655 
 5656     swCpuAclPktContRulePermit OBJECT-TYPE
 5657         SYNTAX  INTEGER {
 5658                deny(1),
 5659                permit(2)
 5660                }
 5661         MAX-ACCESS  read-create
 5662         STATUS  current
 5663         DESCRIPTION
 5664             "This object indicates if the result of the packet examination is to 'permit' or 'deny'.
 5665              The default is 'permit'.
 5666              permit - Specifies that packets that match the access profile are
 5667                       permitted to be forwarded by the switch.
 5668              deny - Specifies that packets that match the access profile
 5669                     are not permitted to be forwarded by the switch and will be filtered."
 5670         ::= { swCpuAclPktContRuleEntry 8 }
 5671 
 5672     swCpuAclPktContRuleRowStatus OBJECT-TYPE
 5673         SYNTAX  RowStatus
 5674         MAX-ACCESS  read-create
 5675         STATUS  current
 5676         DESCRIPTION
 5677             "This object indicates the status of this entry."
 5678         ::= { swCpuAclPktContRuleEntry 9 }
 5679 
 5680     swCpuAclPktContRulePort OBJECT-TYPE
 5681         SYNTAX  PortList
 5682         MAX-ACCESS  read-create
 5683         STATUS  current
 5684         DESCRIPTION
 5685             "Specifies that the access rule will only apply to port(s)."
 5686        ::= { swCpuAclPktContRuleEntry 10 }
 5687 
 5688 -- -----------------------------------------------------------------------------
 5689 -- swCpuAclIpv6RuleTable
 5690 -- -----------------------------------------------------------------------------
 5691     swCpuAclIpv6RuleTable OBJECT-TYPE
 5692         SYNTAX  SEQUENCE OF SwCpuAclIpv6RuleEntry
 5693         MAX-ACCESS  not-accessible
 5694         STATUS  current
 5695         DESCRIPTION
 5696             "This table contains user-defined ACL rule information."
 5697         ::= { swCpuAclRuleMgmt 4 }
 5698 
 5699     swCpuAclIpv6RuleEntry OBJECT-TYPE
 5700         SYNTAX  SwCpuAclIpv6RuleEntry
 5701         MAX-ACCESS  not-accessible
 5702         STATUS  current
 5703         DESCRIPTION
 5704             "A list of information about the ACL rule of the user-defined part of each packet."
 5705         INDEX  { swCpuAclIpv6RuleProfileID,swCpuAclIpv6RuleAccessID }
 5706         ::= { swCpuAclIpv6RuleTable 1 }
 5707 
 5708     SwCpuAclIpv6RuleEntry ::=
 5709         SEQUENCE {
 5710             swCpuAclIpv6RuleProfileID
 5711                 INTEGER,
 5712             swCpuAclIpv6RuleAccessID
 5713                 INTEGER,
 5714             swCpuAclIpv6RuleClass
 5715                 INTEGER,
 5716             swCpuAclIpv6RuleFlowlabel
 5717                 OCTET STRING,
 5718             swCpuAclIpv6RuleSrcIpv6Addr
 5719                 Ipv6Address,
 5720             swCpuAclIpv6RuleDstIpv6Addr
 5721                 Ipv6Address,
 5722             swCpuAclIpv6RulePermit
 5723                 INTEGER,
 5724             swCpuAclIpv6RuleRowStatus
 5725                 RowStatus,
 5726             swCpuAclIpv6RulePort
 5727                 PortList
 5728         }
 5729     swCpuAclIpv6RuleProfileID OBJECT-TYPE
 5730         SYNTAX  INTEGER
 5731         MAX-ACCESS  read-only
 5732         STATUS  current
 5733         DESCRIPTION
 5734             "The ID of the ACL mask entry. This is unique in the mask list. The maximum value of this object depends on the device."
 5735         ::= { swCpuAclIpv6RuleEntry 1 }
 5736 
 5737     swCpuAclIpv6RuleAccessID OBJECT-TYPE
 5738         SYNTAX  INTEGER (1..65535)
 5739         MAX-ACCESS  read-only
 5740         STATUS  current
 5741         DESCRIPTION
 5742             "The ID of the ACL rule entry in relation to swCpuAclIpv6RuleProfileID."
 5743         ::= { swCpuAclIpv6RuleEntry 2 }
 5744 
 5745     swCpuAclIpv6RuleClass OBJECT-TYPE
 5746         SYNTAX  INTEGER (0..255)
 5747         MAX-ACCESS  read-create
 5748         STATUS  current
 5749         DESCRIPTION
 5750             "Specifies that the rule applies to the IPv6 class field."
 5751         ::= { swCpuAclIpv6RuleEntry 3 }
 5752 
 5753     swCpuAclIpv6RuleFlowlabel OBJECT-TYPE
 5754         SYNTAX  OCTET STRING (SIZE(4))
 5755         MAX-ACCESS  read-create
 5756         STATUS  current
 5757         DESCRIPTION
 5758             "Specifies that the rule applies to the IPv6 flowlabel field."
 5759         ::= { swCpuAclIpv6RuleEntry 4 }
 5760 
 5761     swCpuAclIpv6RuleSrcIpv6Addr OBJECT-TYPE
 5762         SYNTAX  Ipv6Address
 5763         MAX-ACCESS  read-create
 5764         STATUS  current
 5765         DESCRIPTION
 5766             "Specifies that the rule applies to the source IPv6 address.
 5767             This should be a 16 byte octet string."
 5768         ::= { swCpuAclIpv6RuleEntry 5 }
 5769 
 5770     swCpuAclIpv6RuleDstIpv6Addr OBJECT-TYPE
 5771         SYNTAX  Ipv6Address
 5772         MAX-ACCESS  read-create
 5773         STATUS  current
 5774         DESCRIPTION
 5775             "Specifies that the rule applies to the destination IPv6 address.
 5776             This should be a 16 byte octet string."
 5777         ::= { swCpuAclIpv6RuleEntry 6 }
 5778 
 5779     swCpuAclIpv6RulePermit OBJECT-TYPE
 5780         SYNTAX  INTEGER {
 5781                deny(1),
 5782                permit(2)
 5783                }
 5784         MAX-ACCESS  read-create
 5785         STATUS  current
 5786         DESCRIPTION
 5787             "This object indicates if the result of the examination is to 'permit' or 'deny'.
 5788              The default is 'permit' (1).
 5789              permit - Specifies that packets that match the access profile are
 5790                       permitted to be forwarded by the switch.
 5791              deny - Specifies that packets that match the access profile
 5792                     are not permitted to be forwarded by the switch and will be filtered."
 5793         ::= { swCpuAclIpv6RuleEntry 7 }
 5794 
 5795     swCpuAclIpv6RuleRowStatus OBJECT-TYPE
 5796         SYNTAX  RowStatus
 5797         MAX-ACCESS  read-create
 5798         STATUS  current
 5799         DESCRIPTION
 5800             "This object indicates the status of this entry."
 5801         ::= { swCpuAclIpv6RuleEntry 8 }
 5802 
 5803     swCpuAclIpv6RulePort OBJECT-TYPE
 5804         SYNTAX  PortList
 5805         MAX-ACCESS  read-create
 5806         STATUS  current
 5807         DESCRIPTION
 5808             "Specifies that the access rule will apply only to port(s)."
 5809        ::= { swCpuAclIpv6RuleEntry 9 }
 5810 
 5811 -- -----------------------------------------------------------------------------
 5812 -- swAclMeteringMgmt
 5813 -- -----------------------------------------------------------------------------
 5814         swAclMeterTable OBJECT-TYPE
 5815                 SYNTAX      SEQUENCE OF SwAclMeterEntry
 5816                 MAX-ACCESS  not-accessible
 5817                 STATUS      current
 5818                 DESCRIPTION
 5819                    "This table is used to configure the flow-based metering function.
 5820                     The access rule must first be created before the parameters of this
 5821                     function can be applied. Users may set the preferred bandwidth for
 5822                     this rule, in Kbps; once the bandwidth has been exceeded, overflow
 5823                     packets will be either dropped or set for a drop precedence,
 5824                     depending on user configuration."
 5825                 ::= { swAclMeteringMgmt 1 }
 5826 
 5827         swAclMeterEntry OBJECT-TYPE
 5828                 SYNTAX      SwAclMeterEntry
 5829                 MAX-ACCESS  not-accessible
 5830                 STATUS      current
 5831                 DESCRIPTION
 5832                    "This entry displays parameters and configurations set for the flow
 5833                     metering function."
 5834                 INDEX { swAclMeterProfileID, swAclMeterAccessID}
 5835                 ::= { swAclMeterTable 1 }
 5836 
 5837         SwAclMeterEntry ::=
 5838            SEQUENCE {
 5839                swAclMeterProfileID
 5840                    INTEGER,
 5841                swAclMeterAccessID
 5842                    INTEGER,
 5843                swAclMeterRate
 5844                    INTEGER,
 5845                swAclMeterActionForRateExceed
 5846                    INTEGER,
 5847                swAclMeterRemarkDscp
 5848                    INTEGER,
 5849                swAclMeterBurstSize
 5850                    INTEGER,
 5851                swAclMeterMode
 5852                    INTEGER,
 5853                swAclMeterTrtcmCir
 5854                    INTEGER,
 5855                swAclMeterTrtcmCbs
 5856                    INTEGER,
 5857                swAclMeterTrtcmPir
 5858                    INTEGER,
 5859                swAclMeterTrtcmPbs
 5860                    INTEGER,
 5861                swAclMeterTrtcmColorMode
 5862                    INTEGER,
 5863                swAclMeterTrtcmConformState
 5864                    INTEGER,
 5865                swAclMeterTrtcmConformReplaceDscp
 5866                    INTEGER,
 5867                swAclMeterTrtcmConformCounterState
 5868                    INTEGER,
 5869                swAclMeterTrtcmExceedState
 5870                    INTEGER,
 5871                swAclMeterTrtcmExceedReplaceDscp
 5872                    INTEGER,
 5873                swAclMeterTrtcmExceedCounterState
 5874                    INTEGER,
 5875                swAclMeterTrtcmViolateState
 5876                    INTEGER,
 5877                swAclMeterTrtcmViolateReplaceDscp
 5878                    INTEGER,
 5879                swAclMeterTrtcmViolateCounterState
 5880                    INTEGER,
 5881                swAclMeterSrtcmCir
 5882                    INTEGER,
 5883                swAclMeterSrtcmCbs
 5884                    INTEGER,
 5885                swAclMeterSrtcmEbs
 5886                    INTEGER,
 5887                swAclMeterSrtcmColorMode
 5888                    INTEGER,
 5889                swAclMeterSrtcmConformState
 5890                    INTEGER,
 5891                swAclMeterSrtcmConformReplaceDscp
 5892                    INTEGER,
 5893                swAclMeterSrtcmConformCounterState
 5894                    INTEGER,
 5895                swAclMeterSrtcmExceedState
 5896                    INTEGER,
 5897                swAclMeterSrtcmExceedReplaceDscp
 5898                    INTEGER,
 5899                swAclMeterSrtcmExceedCounterState
 5900                    INTEGER,
 5901                swAclMeterSrtcmViolateState
 5902                    INTEGER,
 5903                swAclMeterSrtcmViolateReplaceDscp
 5904                    INTEGER,
 5905                swAclMeterSrtcmViolateCounterState
 5906                    INTEGER,
 5907                swAclMeterRowStatus
 5908                    RowStatus
 5909            }
 5910 
 5911         swAclMeterProfileID OBJECT-TYPE
 5912                 SYNTAX      INTEGER
 5913                 MAX-ACCESS  read-only
 5914                 STATUS      current
 5915                 DESCRIPTION
 5916                    "The ID of the ACL mask entry is unique in the mask list. The maximum value of this object depends on the device."
 5917                 ::= { swAclMeterEntry 1 }
 5918 
 5919         swAclMeterAccessID OBJECT-TYPE
 5920                 SYNTAX      INTEGER(1..65535)
 5921                 MAX-ACCESS  read-only
 5922                 STATUS      current
 5923                 DESCRIPTION
 5924                    "The ID of the ACL rule entry as related to the swAclMeterProfileID."
 5925                 ::= { swAclMeterEntry 2 }
 5926 
 5927         swAclMeterRate OBJECT-TYPE
 5928                 SYNTAX INTEGER
 5929                 MAX-ACCESS  read-create
 5930                 STATUS      current
 5931                 DESCRIPTION
 5932                    "Specifies the committed bandwidth in Kbps for the flow.
 5933                     NOTE:
 5934                         1. Specifying 0 will disable this flow meter setting.
 5935                         2. Users must set the swAclMeterActionForRateExceed object to activate this entry."
 5936                 ::= { swAclMeterEntry 3 }
 5937 
 5938         swAclMeterActionForRateExceed OBJECT-TYPE
 5939                 SYNTAX INTEGER {
 5940                            other(1),
 5941                drop-packet(2),
 5942                 set-drop-precedence(3),
 5943                 remark-dscp(4)
 5944                }
 5945                 MAX-ACCESS  read-create
 5946                 STATUS      current
 5947                 DESCRIPTION
 5948                    "Specifies the action to take for those packets exceeding the committed rate.
 5949                     NOTE:
 5950                         Users must also set the swAclMeterRate to activate this entry."
 5951                 ::= { swAclMeterEntry 4 }
 5952 
 5953         swAclMeterRemarkDscp OBJECT-TYPE
 5954             SYNTAX  INTEGER (0..63)
 5955             MAX-ACCESS  read-create
 5956             STATUS  current
 5957             DESCRIPTION
 5958                 "Mark the packet with a specified DSCP.
 5959                  It can be set when swAclMeterActionForRateExceed sets remark-dscp (3)."
 5960             ::= { swAclMeterEntry 5 }
 5961 
 5962        swAclMeterBurstSize OBJECT-TYPE
 5963             SYNTAX  INTEGER
 5964             MAX-ACCESS  read-create
 5965             STATUS  current
 5966             DESCRIPTION
 5967                 "This specifies the burst size for the single rate two color mode.
 5968                  The unit is Kbytes. That is to say, 1 means 1kbytes.
 5969                  The set value range is 0..n, the value n is determined by project,
 5970                  the value of 0 means to delete this flow_meter setting."
 5971             ::= { swAclMeterEntry 6 }
 5972 
 5973         swAclMeterMode OBJECT-TYPE
 5974             SYNTAX  INTEGER {
 5975                    other(1),
 5976                    tr-tcm(2),
 5977                    sr-tcm(3)
 5978                    }
 5979             MAX-ACCESS  read-create
 5980             STATUS  current
 5981             DESCRIPTION
 5982                 "tr-tcm: two rate three color mode;
 5983                  sr-tcm: single rate three color mode.
 5984                 "
 5985             ::= { swAclMeterEntry 7 }
 5986 
 5987         swAclMeterTrtcmCir OBJECT-TYPE
 5988             SYNTAX  INTEGER (1..156249)
 5989             MAX-ACCESS  read-create
 5990             STATUS  current
 5991             DESCRIPTION
 5992                 "Specifies the 'committed information rate' of 'two rate three color mode'.
 5993                  The unit is Kbps."
 5994             ::= { swAclMeterEntry 8 }
 5995 
 5996         swAclMeterTrtcmCbs OBJECT-TYPE
 5997             SYNTAX  INTEGER (1..16384)
 5998             MAX-ACCESS  read-create
 5999             STATUS  current
 6000             DESCRIPTION
 6001                 "Specifies the 'committed burst size' of 'two rate three color mode'.
 6002                  1.     The unit is Kbytes. That is to say, 1 means 1Kbytes.
 6003                  2. This parameter is an optional parameter. The default value is 4*1024.
 6004                  3. The max set value is 16*1024.
 6005                 "
 6006             ::= { swAclMeterEntry 9 }
 6007 
 6008         swAclMeterTrtcmPir OBJECT-TYPE
 6009             SYNTAX  INTEGER (1..156249)
 6010             MAX-ACCESS  read-create
 6011             STATUS  current
 6012             DESCRIPTION
 6013                 "Specifies the 'Peak Information Rate' of 'two rate three color mode'.
 6014                  The unit is Kbps."
 6015             ::= { swAclMeterEntry 10 }
 6016 
 6017         swAclMeterTrtcmPbs OBJECT-TYPE
 6018             SYNTAX  INTEGER (1..16384)
 6019             MAX-ACCESS  read-create
 6020             STATUS  current
 6021             DESCRIPTION
 6022                 "Specifies the 'peak burst size' of 'two rate three color mode'.
 6023                  1.     The unit is Kbytes. That is to say, 1 means 1kbytes.
 6024                  2. This parameter is an optional parameter. The default value is 4*1024.
 6025                  3. The max set value is 16*1024.
 6026                 "
 6027             ::= { swAclMeterEntry 11 }
 6028 
 6029         swAclMeterTrtcmColorMode OBJECT-TYPE
 6030             SYNTAX  INTEGER {
 6031                    color-blind(1),
 6032                    color-aware(2)
 6033                    }
 6034             MAX-ACCESS  read-create
 6035             STATUS  current
 6036             DESCRIPTION
 6037                 "Specifies the meter mode.
 6038                  The default is color-blind mode. The final color of the packet is determined
 6039                  by the initial color of the packet and the metering result."
 6040             ::= { swAclMeterEntry 12 }
 6041 
 6042         swAclMeterTrtcmConformState OBJECT-TYPE
 6043             SYNTAX  INTEGER {
 6044                    other(1),
 6045                    permit(2),
 6046                    replace-dscp(3)
 6047                    }
 6048             MAX-ACCESS  read-create
 6049             STATUS  current
 6050             DESCRIPTION
 6051                 "Specifies the action state when packet is in 'green color'.
 6052                  permit: permit the packet.
 6053                  replace-dscp:  change the DSCP value of packet.
 6054                 "
 6055             ::= { swAclMeterEntry 13 }
 6056 
 6057         swAclMeterTrtcmConformReplaceDscp OBJECT-TYPE
 6058             SYNTAX  INTEGER (0..63)
 6059             MAX-ACCESS  read-create
 6060             STATUS  current
 6061             DESCRIPTION
 6062                 "Specifies the DSCP value of the packet when the packet is in 'green color'."
 6063             ::= { swAclMeterEntry 14 }
 6064 
 6065         swAclMeterTrtcmConformCounterState OBJECT-TYPE
 6066             SYNTAX  INTEGER {
 6067                    enabled(1),
 6068                    disabled(2)
 6069                    }
 6070             MAX-ACCESS  read-create
 6071             STATUS  current
 6072             DESCRIPTION
 6073                 "Specifies the counter state when the packet is in 'green color'.
 6074                  1.     This is optional. The default is 'disable'.
 6075                  2.     The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
 6076                  3.     counter will be cleared when the function is disabled.
 6077                 "
 6078             ::= { swAclMeterEntry 15 }
 6079 
 6080         swAclMeterTrtcmExceedState OBJECT-TYPE
 6081             SYNTAX  INTEGER {
 6082                    other(1),
 6083                    permit(2),
 6084                    replace-dscp(3),
 6085                    drop(4)
 6086                    }
 6087             MAX-ACCESS  read-create
 6088             STATUS  current
 6089             DESCRIPTION
 6090                 "Specifies the action state when packet is in 'yellow color'.
 6091                  permit: permit the packet.
 6092                  replace-dscp: change the DSCP value of the packet.
 6093                  drop: drop the packet.
 6094                 "
 6095             ::= { swAclMeterEntry 16 }
 6096 
 6097         swAclMeterTrtcmExceedReplaceDscp OBJECT-TYPE
 6098             SYNTAX  INTEGER (0..63)
 6099             MAX-ACCESS  read-create
 6100             STATUS  current
 6101             DESCRIPTION
 6102                 "Specifies the DSCP value of packet when packet is in 'yellow color'."
 6103             ::= { swAclMeterEntry 17 }
 6104 
 6105         swAclMeterTrtcmExceedCounterState OBJECT-TYPE
 6106             SYNTAX  INTEGER {
 6107                    enabled(1),
 6108                    disabled(2)
 6109                    }
 6110             MAX-ACCESS  read-create
 6111             STATUS  current
 6112             DESCRIPTION
 6113                 "Specifies the counter state when packet is in 'yellow color'.
 6114                  1.     This is optional. The default is 'disable'.
 6115                  2.     The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
 6116                  3.     counter will be cleared when the function is disabled.
 6117                 "
 6118             ::= { swAclMeterEntry 18 }
 6119 
 6120         swAclMeterTrtcmViolateState OBJECT-TYPE
 6121             SYNTAX  INTEGER {
 6122                    other(1),
 6123                    permit(2),
 6124                    replace-dscp(3),
 6125                    drop(4)
 6126                    }
 6127             MAX-ACCESS  read-create
 6128             STATUS  current
 6129             DESCRIPTION
 6130                 "Specifies the action state when packet is in 'red color'.
 6131                  permit: permit the packet.
 6132                  replace-dscp: change the DSCP value of packet.
 6133                  drop: drop the packet.
 6134                 "
 6135             ::= { swAclMeterEntry 19 }
 6136 
 6137         swAclMeterTrtcmViolateReplaceDscp OBJECT-TYPE
 6138             SYNTAX  INTEGER (0..63)
 6139             MAX-ACCESS  read-create
 6140             STATUS  current
 6141             DESCRIPTION
 6142                 "Specifies the DSCP value of the packet when packet is in 'red color'."
 6143             ::= { swAclMeterEntry 20 }
 6144 
 6145         swAclMeterTrtcmViolateCounterState OBJECT-TYPE
 6146             SYNTAX  INTEGER {
 6147                    enabled(1),
 6148                    disabled(2)
 6149                    }
 6150             MAX-ACCESS  read-create
 6151             STATUS  current
 6152             DESCRIPTION
 6153                 "Specifies the counter state when packet is in 'red color'.
 6154                  1.     This is optional. The default is 'disable'.
 6155                  2.     The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
 6156                  3.     counter will be cleared when the function is disabled.
 6157                 "
 6158             ::= { swAclMeterEntry 21 }
 6159 
 6160         swAclMeterSrtcmCir OBJECT-TYPE
 6161             SYNTAX  INTEGER (1..156249)
 6162             MAX-ACCESS  read-create
 6163             STATUS  current
 6164             DESCRIPTION
 6165                 "Specifies the 'committed information rate' of 'single rate three color mode'.
 6166                  The unit is Kbps."
 6167             ::= { swAclMeterEntry 22 }
 6168 
 6169         swAclMeterSrtcmCbs OBJECT-TYPE
 6170             SYNTAX  INTEGER (1..16384)
 6171             MAX-ACCESS  read-create
 6172             STATUS  current
 6173             DESCRIPTION
 6174                 "Specifies the 'committed burst size' of 'single rate three color mode'.
 6175                  1.     The unit is Kbytes. That is to say, 1 means 1Kbytes.
 6176                  2. The max set value is 16*1024.
 6177                 "
 6178             ::= { swAclMeterEntry 23 }
 6179 
 6180         swAclMeterSrtcmEbs OBJECT-TYPE
 6181             SYNTAX  INTEGER (1..16384)
 6182             MAX-ACCESS  read-create
 6183             STATUS  current
 6184             DESCRIPTION
 6185                 "Specifies the 'Excess burst size' of 'single rate three color mode'.
 6186                  1.     The unit is Kbytes. That is to say, 1 means 1kbytes.
 6187                  2. The max set value is 16*1024.
 6188                 "
 6189             ::= { swAclMeterEntry 24 }
 6190 
 6191         swAclMeterSrtcmColorMode OBJECT-TYPE
 6192             SYNTAX  INTEGER {
 6193                    color-blind(1),
 6194                    color-aware(2)
 6195                    }
 6196             MAX-ACCESS  read-create
 6197             STATUS  current
 6198             DESCRIPTION
 6199                 "Specifies the meter mode.
 6200                  The default is color-blind mode. The final color of packet is determined
 6201                  by the initial color of the packet and the metering result."
 6202             ::= { swAclMeterEntry 25 }
 6203 
 6204         swAclMeterSrtcmConformState OBJECT-TYPE
 6205             SYNTAX  INTEGER {
 6206                    other(1),
 6207                    permit(2),
 6208                    replace-dscp(3)
 6209                    }
 6210             MAX-ACCESS  read-create
 6211             STATUS  current
 6212             DESCRIPTION
 6213                 "Specifies the action state when the packet is in 'green color'.
 6214                  permit: permit the packet.
 6215                  replace-dscp: change the DSCP value of packet.
 6216                 "
 6217             ::= { swAclMeterEntry 26 }
 6218 
 6219         swAclMeterSrtcmConformReplaceDscp OBJECT-TYPE
 6220             SYNTAX  INTEGER (0..63)
 6221             MAX-ACCESS  read-create
 6222             STATUS  current
 6223             DESCRIPTION
 6224                 "Specifies the DSCP value of the packet when packet is in 'green color'."
 6225             ::= { swAclMeterEntry 27 }
 6226 
 6227         swAclMeterSrtcmConformCounterState OBJECT-TYPE
 6228             SYNTAX  INTEGER {
 6229                    enabled(1),
 6230                    disabled(2)
 6231                    }
 6232             MAX-ACCESS  read-create
 6233             STATUS  current
 6234             DESCRIPTION
 6235                 "Specifies the counter state when the packet is in 'green color'.
 6236                  1.     This is optional. The default is 'disable'.
 6237                  2.     The resource may be limited such that counter can not be turned on. The limitation is project dependent.
 6238                  3.     counter will be cleared when the function is disabled.
 6239                 "
 6240             ::= { swAclMeterEntry 28 }
 6241 
 6242         swAclMeterSrtcmExceedState OBJECT-TYPE
 6243             SYNTAX  INTEGER {
 6244                    other(1),
 6245                    permit(2),
 6246                    replace-dscp(3),
 6247                    drop(4)
 6248                    }
 6249             MAX-ACCESS  read-create
 6250             STATUS  current
 6251             DESCRIPTION
 6252                 "Specifies the action state when the packet is in 'yellow color'.
 6253                  permit: permit the packet.
 6254                  replace-dscp: change the DSCP value of packet.
 6255                  drop: drop the packet.
 6256                 "
 6257             ::= { swAclMeterEntry 29 }
 6258 
 6259         swAclMeterSrtcmExceedReplaceDscp OBJECT-TYPE
 6260             SYNTAX  INTEGER (0..63)
 6261             MAX-ACCESS  read-create
 6262             STATUS  current
 6263             DESCRIPTION
 6264                 "Specifies the DSCP value of the packet when packet is in 'yellow color'."
 6265             ::= { swAclMeterEntry 30 }
 6266 
 6267         swAclMeterSrtcmExceedCounterState OBJECT-TYPE
 6268             SYNTAX  INTEGER {
 6269                    enabled(1),
 6270                    disabled(2)
 6271                    }
 6272             MAX-ACCESS  read-create
 6273             STATUS  current
 6274             DESCRIPTION
 6275                 "Specifies the counter state when the packet is in 'yellow color'.
 6276                  1.     This is optional. The default is 'disable'.
 6277                  2.     The resource may be limited such that counter can not be turned on. The limitation is project dependent.
 6278                  3.     counter will be cleared when the function is disabled.
 6279                 "
 6280             ::= { swAclMeterEntry 31 }
 6281 
 6282         swAclMeterSrtcmViolateState OBJECT-TYPE
 6283             SYNTAX  INTEGER {
 6284                    other(1),
 6285                    permit(2),
 6286                    replace-dscp(3),
 6287                    drop(4)
 6288                    }
 6289             MAX-ACCESS  read-create
 6290             STATUS  current
 6291             DESCRIPTION
 6292                 "Specifies the action state when the packet is in 'red color'.
 6293                  permit: permit the packet.
 6294                  replace-dscp: change the DSCP value of packet.
 6295                  drop: drop the packet.
 6296                 "
 6297             ::= { swAclMeterEntry 32 }
 6298 
 6299         swAclMeterSrtcmViolateReplaceDscp OBJECT-TYPE
 6300             SYNTAX  INTEGER (0..63)
 6301             MAX-ACCESS  read-create
 6302             STATUS  current
 6303             DESCRIPTION
 6304                 "Specifies the DSCP value of the packet when packet is in 'red color'."
 6305             ::= { swAclMeterEntry 33 }
 6306 
 6307         swAclMeterSrtcmViolateCounterState OBJECT-TYPE
 6308             SYNTAX  INTEGER {
 6309                    enabled(1),
 6310                    disabled(2)
 6311                    }
 6312             MAX-ACCESS  read-create
 6313             STATUS  current
 6314             DESCRIPTION
 6315                 "Specifies the counter state when the packet is in 'red color'.
 6316                  1.     This is optional. The default is 'disable'.
 6317                  2.     The resource may be limited so that the counter can not be turned on. The limitation is project dependent.
 6318                  3.     counter will be cleared when the function is disabled.
 6319                 "
 6320             ::= { swAclMeterEntry 34 }
 6321 
 6322         swAclMeterRowStatus OBJECT-TYPE
 6323             SYNTAX  RowStatus
 6324             MAX-ACCESS  read-create
 6325             STATUS  current
 6326             DESCRIPTION
 6327                 "This object indicates the status of this entry."
 6328             ::= { swAclMeterEntry 35 }
 6329 
 6330         swAclMeteringNumOfEntryInUse OBJECT-TYPE
 6331                 SYNTAX      INTEGER
 6332                 MAX-ACCESS  read-only
 6333                 STATUS      current
 6334                 DESCRIPTION
 6335                    "Used to display total entries of the flow metering."
 6336                 ::= { swAclMeteringMgmt 2 }
 6337                 
 6338                  
 6339                 
 6340                 
 6341 END
 6342 
 6343