mibs-downloader/mibs/NETGEAR-QOS-ACL-MIB.mib

901 lines
34 KiB
Plaintext

NETGEAR-QOS-ACL-MIB DEFINITIONS ::= BEGIN
-- LVL7 Quality of Service - ACL Package MIB
-- Copyright LVL7 Systems (2002-2005) All rights reserved.
-- This SNMP Management Information Specification
-- embodies LVL7 System's confidential and proprietary
-- intellectual property. LVL7 Systems retains all title
-- and ownership in the Specification including any revisions.
-- This Specification is supplied "AS IS", LVL7 Systems
-- makes no warranty, either expressed or implied,
-- as to the use, operation, condition, or performance of the
-- Specification.
IMPORTS
TEXTUAL-CONVENTION FROM SNMPv2-TC
MODULE-IDENTITY, OBJECT-TYPE, IpAddress,
Integer32, Unsigned32 FROM SNMPv2-SMI
RowStatus,MacAddress,TruthValue FROM SNMPv2-TC
DisplayString FROM RFC1213-MIB
InterfaceIndexOrZero FROM IF-MIB
agentQOS FROM NETGEAR-QOS-MIB;
agentQOSACL MODULE-IDENTITY
LAST-UPDATED "200409200000Z" -- 09 Sep 2004 12:00:00 GMT
ORGANIZATION "Netgear"
CONTACT-INFO
""
DESCRIPTION
"The MIB definitions for Quality of Service - ACL Flex package."
-- Revision history.
REVISION
"200409200000Z" -- 20 Sep 2004 12:00:00 GMT
DESCRIPTION
"Added L2 MAC ACL support."
REVISION
"200311210000Z" -- 21 Nov 2003 12:00:00 GMT
DESCRIPTION
"Revisions made for new release."
REVISION
"200302062334Z" -- 6 February 2003
DESCRIPTION
"Updated for release"
::= { agentQOS 2 }
EtypeValue ::= TEXTUAL-CONVENTION
DISPLAY-HINT "x"
STATUS current
DESCRIPTION
"Ethertype value of a packet. The allowed value is 0x0600 to 0xFFFF."
SYNTAX Unsigned32 (1536..65535) -- hex value 0x0600 to 0xFFFF
--**************************************************************************************
aclTable OBJECT-TYPE
SYNTAX SEQUENCE OF AclEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of ACL instances."
::= { agentQOSACL 1 }
aclEntry OBJECT-TYPE
SYNTAX AclEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
""
INDEX { aclIndex }
::= { aclTable 1 }
AclEntry ::= SEQUENCE {
aclIndex
Integer32,
aclStatus
RowStatus
}
aclIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The IP ACL table index this instance is associated with."
::= { aclEntry 1 }
aclStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of this instance. Entries can not be deleted until all rows in
the aclIfTable and aclRuleTable with corresponding values of aclIndex
have been deleted.
active(1) - this ACL instance is active
createAndGo(4) - set to this value to create an instance
destroy(6) - set to this value to delete an instance"
::= { aclEntry 3 }
--**************************************************************************************
aclIfTable OBJECT-TYPE
SYNTAX SEQUENCE OF AclIfEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of ACL interface instances per direction."
::= { agentQOSACL 2 }
aclIfEntry OBJECT-TYPE
SYNTAX AclIfEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
""
INDEX { aclIfIndex, aclIfDirection, aclIfSequence, aclIfAclType, aclIfAclId }
::= { aclIfTable 1 }
AclIfEntry ::= SEQUENCE {
aclIfIndex
Integer32,
aclIfDirection
INTEGER,
aclIfSequence
Unsigned32,
aclIfAclType
INTEGER,
aclIfAclId
Integer32,
aclIfStatus
RowStatus
}
aclIfIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The interface to which this ACL instance applies."
::= { aclIfEntry 1 }
aclIfDirection OBJECT-TYPE
SYNTAX INTEGER {
inbound(1),
outbound(2)
}
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The interface direction to which this ACL instance applies."
::= { aclIfEntry 2 }
aclIfSequence OBJECT-TYPE
SYNTAX Unsigned32 (1..4294967295)
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The relative evaluation sequence of this ACL for this
interface and direction. When multiple ACLs are allowed
for a given interface and direction, the sequence number
determines the order in which the list of ACLs are evaluated,
with lower sequence numbers given higher precedence. The
sequence number value is arbitrary, but must be a unique
non-zero value for a given interface and direction.
Setting this object to an existing sequence number
value for a given interface and direction causes the
ACL corresponding to that value to be replaced with
this ACL."
::= { aclIfEntry 3 }
aclIfAclType OBJECT-TYPE
SYNTAX INTEGER {
ip(1),
mac(2)
}
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The type of this ACL, which is used to interpret the
aclIfId object value. Each type of ACL uses its own
numbering scheme for identification (see aclIfId object
for details).
The aclIfId object must be specified along with this
object."
::= { aclIfEntry 4 }
aclIfAclId OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The ACL identifier value, which is interpreted based on
the aclIfType object.
For the IP ACLs, the actual ACL number is its identifier
as follows: IP standard ranges from 1-99, while
IP extended ranges from 100-199. Here, aclIfAclId represents
aclIndex.
The MAC ACLs use an internally-generated index value
that is assigned when the ACL is created.Here, aclIfAclId
represents aclMacIndex.
The aclIfType object must be specified along with
this object."
::= { aclIfEntry 5 }
aclIfStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of this instance.
active(1) - this ACL interface instance is active
createAndGo(4) - set to this value to assign an ACL to an interface and direction
destroy(6) - set to this value to remove an ACL from an interface and direction"
::= { aclIfEntry 6 }
--**************************************************************************************
-- Layer 3 IP Access List Rules
--
--**************************************************************************************
aclRuleTable OBJECT-TYPE
SYNTAX SEQUENCE OF AclRuleEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of IP ACL Rule instances."
::= { agentQOSACL 4 }
aclRuleEntry OBJECT-TYPE
SYNTAX AclRuleEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of IP ACL Classification Rules"
INDEX { aclIndex, aclRuleIndex }
::= { aclRuleTable 1 }
AclRuleEntry ::= SEQUENCE {
aclRuleIndex
Integer32,
aclRuleAction
INTEGER,
aclRuleProtocol
Integer32,
aclRuleSrcIpAddress
IpAddress,
aclRuleSrcIpMask
IpAddress,
aclRuleSrcL4Port
Integer32,
aclRuleSrcL4PortRangeStart
Integer32,
aclRuleSrcL4PortRangeEnd
Integer32,
aclRuleDestIpAddress
IpAddress,
aclRuleDestIpMask
IpAddress,
aclRuleDestL4Port
Integer32,
aclRuleDestL4PortRangeStart
Integer32,
aclRuleDestL4PortRangeEnd
Integer32,
aclRuleIPDSCP
Integer32,
aclRuleIpPrecedence
Integer32,
aclRuleIpTosBits
Integer32,
aclRuleIpTosMask
Integer32,
aclRuleStatus
RowStatus,
aclRuleAssignQueueId
Unsigned32,
aclRuleRedirectIntf
InterfaceIndexOrZero,
aclRuleMatchEvery
TruthValue
}
aclRuleIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this rule instance within an IP ACL."
::= { aclRuleEntry 1 }
aclRuleAction OBJECT-TYPE
SYNTAX INTEGER {
permit(1),
deny(2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The type of action this rule should perform."
DEFVAL { deny }
::= { aclRuleEntry 2 }
aclRuleProtocol OBJECT-TYPE
SYNTAX Integer32 (1..255)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"icmp - 1
igmp - 2
ip - 4
tcp - 6
udp - 17
All values from 1 to 255 are valid."
::= { aclRuleEntry 3 }
aclRuleSrcIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Source IP Address used in the ACL Classification."
::= { aclRuleEntry 4 }
aclRuleSrcIpMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Source IP Mask used in the ACL Classification.
This mask is expressed using wild-card notation,which
is the 1's compliment of traditional Subnet Masks.
Here, the 'Don't care bits' are represented by binary 1's and
'Do care bits' are represented by binary 0's. "
::= { aclRuleEntry 5 }
aclRuleSrcL4Port OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Source Port Number (Layer 4) used in the ACL Classification."
::= { aclRuleEntry 6 }
aclRuleSrcL4PortRangeStart OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Source Port Number(Layer 4) range start."
::= { aclRuleEntry 7 }
aclRuleSrcL4PortRangeEnd OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Source Port Number(Layer 4) range end."
::= { aclRuleEntry 8 }
aclRuleDestIpAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Destination IP Address used in the ACL Classification."
::= { aclRuleEntry 9 }
aclRuleDestIpMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Destination IP Mask used in the ACL Classification.
This mask is expressed using wild-card notation,which
is the 1's compliment of traditional Subnet Masks.
Here, the 'Don't care bits' are represented by binary 1's and
'Do care bits' are represented by binary 0's. "
::= { aclRuleEntry 10 }
aclRuleDestL4Port OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Destination Port (Layer 4) used in ACl classification."
::= { aclRuleEntry 11 }
aclRuleDestL4PortRangeStart OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Destination Port (Layer 4) starting range used in ACL classification."
::= { aclRuleEntry 12 }
aclRuleDestL4PortRangeEnd OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Destination Port (Layer 4) ending range used in ACL classification."
::= { aclRuleEntry 13 }
aclRuleIPDSCP OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Differentiated Services Code Point value."
::= { aclRuleEntry 14 }
aclRuleIpPrecedence OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Type of Service (TOS) IP Precedence value."
::= { aclRuleEntry 15 }
aclRuleIpTosBits OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Type of Service (TOS) Bits value."
::= { aclRuleEntry 16 }
aclRuleIpTosMask OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Type of Service (TOS) Mask value."
::= { aclRuleEntry 17 }
aclRuleStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of this instance.
active(1) - this ACL Rule is active
createAndGo(4) - set to this value to create an instance
destroy(6) - set to this value to delete an instance"
::= { aclRuleEntry 18 }
aclRuleAssignQueueId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Queue identifier to which all inbound packets matching this
ACL rule are directed. This object defaults to the standard
queue assignment for user priority 0 traffic per the IEEE 802.1D
specification based on the number of assignable queues in the
system:
1-3 queues: 0
4-7 queues: 1
8 queues: 2
This default assignment is static and is not influenced by
other system configuration changes."
::= { aclRuleEntry 19 }
aclRuleRedirectIntf OBJECT-TYPE
SYNTAX InterfaceIndexOrZero
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"A non-zero value indicates the external ifIndex to which all
inbound packets matching this ACL rule are directed. A
value of zero means packet redirection is not in effect, which
is the default value of this object."
DEFVAL { 0 }
::= { aclRuleEntry 20 }
aclRuleMatchEvery OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Flag to indicate that the acl rule is defined to match on every IP packet,
regardless of content."
::= { aclRuleEntry 21 }
--**************************************************************************************
-- Layer 2 MAC Access Lists
--
--**************************************************************************************
aclMacGroup OBJECT IDENTIFIER ::= { agentQOSACL 5 }
aclMacIndexNextFree OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object contains an unused value for the aclMacIndex
to be used when creating a new MAC ACL. A value of zero
zero indicates the ACL table is full."
::= { aclMacGroup 1 }
--**************************************************************************************
aclMacTable OBJECT-TYPE
SYNTAX SEQUENCE OF AclMacEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of MAC ACL instances."
::= { aclMacGroup 2 }
aclMacEntry OBJECT-TYPE
SYNTAX AclMacEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
""
INDEX { aclMacIndex }
::= { aclMacTable 1 }
AclMacEntry ::= SEQUENCE {
aclMacIndex
Integer32,
aclMacName
DisplayString,
aclMacStatus
RowStatus
}
aclMacIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The MAC ACL table index this instance is associated with.
When creating a new MAC ACL, refer to the aclMacIndexNextFree
object to determine the next available aclMacIndex to use."
::= { aclMacEntry 1 }
aclMacName OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..31))
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The name of this MAC ACL entry, which must consist of
1 to 31 alphanumeric characters and uniquely identify
this MAC ACL. An existing MAC ACL can be renamed by
setting this object to a new name.
This object must be set to complete a new MAC ACL
row instance."
::= { aclMacEntry 2 }
aclMacStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of this instance. ACL MAC entries can not be deleted until all rows in
the aclIfTable and aclRuleTable with corresponding values of aclMacIndex
have been deleted.
active(1) - this ACL instance is active
createAndGo(4) - set to this value to create an instance
destroy(6) - set to this value to delete an instance
The aclMacName object must be set to complete this row instance."
::= { aclMacEntry 3 }
--**************************************************************************************
aclMacRuleTable OBJECT-TYPE
SYNTAX SEQUENCE OF AclMacRuleEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of layer 2 MAC ACL Rule instances."
::= { aclMacGroup 3 }
aclMacRuleEntry OBJECT-TYPE
SYNTAX AclMacRuleEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table of layer 2 MAC ACL Classification Rules"
INDEX { aclMacIndex, aclMacRuleIndex }
::= { aclMacRuleTable 1 }
AclMacRuleEntry ::= SEQUENCE {
aclMacRuleIndex
Integer32,
aclMacRuleAction
INTEGER,
aclMacRuleCos
Unsigned32,
aclMacRuleCos2
Unsigned32,
aclMacRuleDestMacAddr
MacAddress,
aclMacRuleDestMacMask
MacAddress,
aclMacRuleEtypeKey
INTEGER,
aclMacRuleEtypeValue
EtypeValue,
aclMacRuleSrcMacAddr
MacAddress,
aclMacRuleSrcMacMask
MacAddress,
aclMacRuleVlanId
Unsigned32,
aclMacRuleVlanIdRangeStart
Unsigned32,
aclMacRuleVlanIdRangeEnd
Unsigned32,
aclMacRuleVlanId2
Unsigned32,
aclMacRuleVlanId2RangeStart
Unsigned32,
aclMacRuleVlanId2RangeEnd
Unsigned32,
aclMacRuleStatus
RowStatus,
aclMacRuleAssignQueueId
Unsigned32,
aclMacRuleRedirectIntf
InterfaceIndexOrZero,
aclMacRuleMatchEvery
TruthValue
}
aclMacRuleIndex OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"The index of this rule instance within an MAC ACL."
::= { aclMacRuleEntry 1 }
aclMacRuleAction OBJECT-TYPE
SYNTAX INTEGER {
permit(1),
deny(2)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The type of action this MAC ACL rule should perform."
DEFVAL { deny }
::= { aclMacRuleEntry 2 }
aclMacRuleCos OBJECT-TYPE
SYNTAX Unsigned32 (0..7)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Class of Service (COS) used in the MAC ACL Classification.
This is the three-bit user priority field in the 802.1Q tag
header of a tagged Ethernet frame. For frames containing a
double VLAN tag, this field is located in the first/outer tag."
::= { aclMacRuleEntry 3 }
aclMacRuleCos2 OBJECT-TYPE
SYNTAX Unsigned32 (0..7)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Secondary Class of Service (COS2) used in the MAC ACL Classification.
This is the three-bit user priority field in the second/inner 802.1Q
tag header of a double VLAN tagged Ethernet frame."
::= { aclMacRuleEntry 4 }
aclMacRuleDestMacAddr OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Destination MAC address used in the MAC ACL Classification."
::= { aclMacRuleEntry 5 }
aclMacRuleDestMacMask OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Destination MAC address mask used in the MAC ACL Classification.
This mask value identifies the portion of the aclMacRuleDestMacAddr
that is compared against a packet. A non-contiguous mask value is
permitted."
::= { aclMacRuleEntry 6 }
aclMacRuleEtypeKey OBJECT-TYPE
SYNTAX INTEGER {
custom(1),
appletalk(2),
arp(3),
ibmsna(4),
ipv4(5),
ipv6(6),
ipx(7),
mplsmcast(8),
mplsucast(9),
netbios(10),
novell(11),
pppoe(12),
rarp(13)
}
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Ethertype keyword used in the MAC ACL Classification.
A keyword of custom(1) requires that the aclMacRuleEtypeValue
object also be set."
::= { aclMacRuleEntry 7 }
aclMacRuleEtypeValue OBJECT-TYPE
SYNTAX EtypeValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Ethertype custom value used in the MAC ACL Classification.
This object is only valid if the aclMacRuleEtypeKey is set to
custom(1). The allowed value for this object is 0x0600 to 0xFFFF
(1536 to 65535)."
::= { aclMacRuleEntry 8 }
aclMacRuleSrcMacAddr OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Source MAC address used in the MAC ACL Classification."
::= { aclMacRuleEntry 9 }
aclMacRuleSrcMacMask OBJECT-TYPE
SYNTAX MacAddress
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Source MAC address mask used in the MAC ACL Classification.
This mask value identifies the portion of the aclMacRuleSrcMacAddr
that is compared against a packet. A non-contiguous mask value is
permitted."
::= { aclMacRuleEntry 10 }
aclMacRuleVlanId OBJECT-TYPE
SYNTAX Unsigned32 (0..4095)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The VLAN ID value used in the MAC ACL Classification.
The VLAN ID field is defined as the 12-bit VLAN identifier
in the 802.1Q tag header of a tagged Ethernet frame. This is
contained in the first/outer tag of a double VLAN tagged frame."
::= { aclMacRuleEntry 11 }
aclMacRuleVlanIdRangeStart OBJECT-TYPE
SYNTAX Unsigned32 (0..4095)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The VLAN ID range start value used in the MAC ACL Classification.
Setting this value greater than the current aclMacRuleVlanIdRangeEnd
changes the VLAN ID range end to the same value as the range start.
The VLAN ID field is defined as the 12-bit VLAN identifier
in the 802.1Q tag header of a tagged Ethernet frame. This is
contained in the first/outer tag of a double VLAN tagged frame."
::= { aclMacRuleEntry 12 }
aclMacRuleVlanIdRangeEnd OBJECT-TYPE
SYNTAX Unsigned32 (0..4095)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The VLAN ID range end value used in the MAC ACL Classification.
Setting this value less than the current aclMacRuleVlanIdRangeStart
changes the VLAN ID range start to the same value as the range end.
The VLAN ID field is defined as the 12-bit VLAN identifier
in the 802.1Q tag header of a tagged Ethernet frame. This is
contained in the first/outer tag of a double VLAN tagged frame."
::= { aclMacRuleEntry 13 }
aclMacRuleVlanId2 OBJECT-TYPE
SYNTAX Unsigned32 (0..4095)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Secondary VLAN ID value used in the MAC ACL Classification.
The Secondary VLAN ID field is defined as the 12-bit VLAN identifier
in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet
frame."
::= { aclMacRuleEntry 14 }
aclMacRuleVlanId2RangeStart OBJECT-TYPE
SYNTAX Unsigned32 (0..4095)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Secondary VLAN ID range start value used in the MAC ACL Classification.
Setting this value greater than the current aclMacRuleVlanId2RangeEnd
changes the Secondary VLAN ID range end to the same value as the range start.
The Secondary VLAN ID field is defined as the 12-bit VLAN identifier
in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet
frame."
::= { aclMacRuleEntry 15 }
aclMacRuleVlanId2RangeEnd OBJECT-TYPE
SYNTAX Unsigned32 (0..4095)
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"The Secondary VLAN ID range end value used in the MAC ACL Classification.
Setting this value less than the current aclMacRuleVlanId2RangeStart
changes the Secondary VLAN ID range start to the same value as the range end.
The Secondary VLAN ID field is defined as the 12-bit VLAN identifier
in the second/inner 802.1Q tag header of a double VLAN tagged Ethernet
frame."
::= { aclMacRuleEntry 16 }
aclMacRuleStatus OBJECT-TYPE
SYNTAX RowStatus
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Status of this instance.
active(1) - this ACL Rule is active
createAndGo(4) - set to this value to create an instance
destroy(6) - set to this value to delete an instance"
::= { aclMacRuleEntry 17 }
aclMacRuleAssignQueueId OBJECT-TYPE
SYNTAX Unsigned32
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Queue identifier to which all inbound packets matching this
MAC ACL rule are directed. This object defaults to the standard
queue assignment for user priority 0 traffic per the IEEE 802.1D
specification based on the number of assignable queues in the
system:
1-3 queues: 0
4-7 queues: 1
8 queues: 2
This default assignment is static and is not influenced by
other system configuration changes."
::= { aclMacRuleEntry 18 }
aclMacRuleRedirectIntf OBJECT-TYPE
SYNTAX InterfaceIndexOrZero
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"A non-zero value indicates the external ifIndex to which all
inbound packets matching this MAC ACL rule are directed. A
value of zero means packet redirection is not in effect, which
is the default value of this object."
DEFVAL { 0 }
::= { aclMacRuleEntry 19 }
aclMacRuleMatchEvery OBJECT-TYPE
SYNTAX TruthValue
MAX-ACCESS read-create
STATUS current
DESCRIPTION
"Flag to indicate that the MAC acl rule is defined to match all packets,
regardless of Ethertype."
::= { aclMacRuleEntry 20 }
END